last executing test programs: 3m5.427079258s ago: executing program 32 (id=666): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000004480)={&(0x7f0000004380), 0xc, &(0x7f0000004440)={&(0x7f00000043c0)={0x24, 0x1407, 0x1e6a54407809fc47, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_DEV_NAME={0x4, 0x2, 'syz2\x00'}]}, 0x24}}, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYRESDEC=r0], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='rpc_buf_alloc\x00', r2, 0x0, 0x1}, 0x18) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000080), &(0x7f0000000140)=0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000005000000000000008000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000000000000850000008600000018010000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000050000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000a600000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x2f, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m43.652183032s ago: executing program 1 (id=1162): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) r3 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x1000}, 0x1c) setsockopt$XDP_UMEM_COMPLETION_RING(r3, 0x11b, 0x6, &(0x7f0000000200)=0x1, 0x4) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$XDP_RX_RING(r3, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) setsockopt$XDP_UMEM_FILL_RING(r3, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r4, 0x8933, &(0x7f0000000400)={'wg2\x00', 0x0}) bind$xdp(r3, &(0x7f0000000100)={0x2c, 0x0, r5}, 0x10) bind$xdp(r0, &(0x7f0000000100)={0x2c, 0x0, r2}, 0x10) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x20) r6 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r6, &(0x7f0000000380)={0xa, 0x14e24}, 0x1c) connect$inet6(r6, &(0x7f00000002c0)={0xa, 0x4e24}, 0x1c) r7 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r7, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000200), 0x4) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="980000000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400ff0100000000000000000000000000010c00028005000100000000003c0002802c00018014000300fe8000000000000000000000000000aa14000400fe8800000000000000000000000000010c0002800500010000000000080007"], 0x98}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)=ANY=[], 0x98}, 0x1, 0x0, 0x0, 0x20040800}, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYRESOCT=r1, @ANYRES32, @ANYBLOB="0000000000000000200000000000000000000000557d33401d660235c04548c866e27d8a6ba59fffb46a04383ed9b19555f26b9c9e14412b3c26f4466f2e68fab8a4bd4e70a64e6bde6c9bd537e075af51843160fe55f10147ee8991d5abc266a4a63e68356e594f5d134a247950646c308dc79a93fba2ef13a394b8f18c6c19a1d37085386ab2ebaa3b9a359e225fca9a8b17f367ea37a675dbf91379ee1b26ff3dc9a988382e5515338bea2a6256", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000ef00ba89a3785c845b6e73767006afde5eaedbb21228a031400ad53cb8b25e6eb4bf27466b625129c46e9c11e60c7d1da65d7ce029fd4b92c905ae7f315768c7540ca391b17685ac23058c9fb8b5d7f80b710d77f4fa91fd9b571e684244f6f52dbede062fad576152a1a9e1a63ffea5c4b8b1ee49472debf2b36bcdff72aee30f78e1"], 0x48) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x200000f, 0x10010, r10, 0xd7be6000) 2m43.493296316s ago: executing program 1 (id=1164): r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'aegis128-generic\x00'}}}, 0xe0}}, 0x0) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socket$nl_crypto(0x10, 0x3, 0x15) (async) sendmsg$nl_crypto(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=@getstat={0xe0, 0x15, 0x0, 0x0, 0x0, {{'aegis128-generic\x00'}}}, 0xe0}}, 0x0) (async) sendmsg$nl_crypto(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="e8000000110001"], 0xe8}}, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x1e}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) 2m43.36350481s ago: executing program 1 (id=1168): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) close(r0) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100"}) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000900)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=@newtaction={0x60, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x4c, 0x1, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}]}, {0x1c}, {0xc, 0x3}, {0xc}}}]}]}, 0x60}}, 0x0) ppoll(&(0x7f0000000080)=[{r4, 0x4200}], 0x1, &(0x7f0000000140), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r7}]}}}]}, 0x40}}, 0x0) sendmsg$NFT_MSG_GETSETELEM(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c0000000d0a05080002000008000000070000030900020073797a3000000000040003800900010073797a30000000000900010073797a3000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x4048041}, 0x4) sendmsg$nl_route(r1, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c098ad310001f00000000000000db00000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028008000f0006000000050010008f0000000600180000000000"], 0x4c}}, 0x0) 2m42.391260636s ago: executing program 1 (id=1183): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r0, r0, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) (async) shutdown(r0, 0x0) write(r0, 0x0, 0x0) 2m42.267131799s ago: executing program 1 (id=1184): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x13, 0x8, 0x8, 0x0, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) (async) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r5, 0x0, 0x0}, 0x10) 2m42.118136922s ago: executing program 1 (id=1187): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xb5, 0x0, &(0x7f0000000140)="00cf2852b7bb5ec99c7bba628714f2dfa64ed99544d356947c5317ec121817bfa4c49bbf652c70376e55940ba80365434800000000000000001263dde08fac922083bbb31f5cd4121b4a76b6194ef7f120edc52cb08ee609fa9a97c2383393fd7d4e1c46cbd1ef6bc186897ceef42c2f4790f2c8c694e35fecb6fb670079d1e22125e3a792cf0075e3ccc6a45c4b3de9d41eb7fbfabdf0a4000000000000000000000500"/181, 0x0, 0x0, 0x0, 0x2}, 0x83) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m27.011383097s ago: executing program 33 (id=1187): ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000000)) r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r0, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0xb5, 0x0, &(0x7f0000000140)="00cf2852b7bb5ec99c7bba628714f2dfa64ed99544d356947c5317ec121817bfa4c49bbf652c70376e55940ba80365434800000000000000001263dde08fac922083bbb31f5cd4121b4a76b6194ef7f120edc52cb08ee609fa9a97c2383393fd7d4e1c46cbd1ef6bc186897ceef42c2f4790f2c8c694e35fecb6fb670079d1e22125e3a792cf0075e3ccc6a45c4b3de9d41eb7fbfabdf0a4000000000000000000000500"/181, 0x0, 0x0, 0x0, 0x2}, 0x83) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) setsockopt$bt_BT_POWER(r2, 0x112, 0x9, 0x0, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180000002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m5.696351526s ago: executing program 4 (id=1552): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0f000000040000000400000007"], 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f00000000c0)}, 0x20) r1 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r1, &(0x7f0000000080)=@in6={0x21, 0x4, 0x2, 0x1c, {0xa, 0x4e23, 0xfffffffe, @empty}}, 0x24) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0xffffffffffffffbb, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008003117"], 0x1c}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$sock_int(r6, 0x1, 0x2a, 0x0, &(0x7f0000000140)) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000c00)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000540)={0x48, r3, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {0x10}, @broadcast, @device_a, @initial, {0x0, 0x400}}, @ext_ch_sw={0x4, 0x4, {{0x1, 0x2, 0x64, 0x9}, @val={0x76, 0x6, {0x3, 0x7, 0x2b, 0x1}}}}}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 2m5.490098346s ago: executing program 4 (id=1557): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x101, 0x80000000, 0x0, {0x0, 0x0, 0x0, 0x0, {0x4}, {0xa, 0xfff3}, {0x0, 0x1}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_DQ_RATE_ESTIMATOR={0x8}, @TCA_FQ_PIE_BYTEMODE={0xffffffffffffff1e, 0xb, 0x1}]}}]}, 0x44}}, 0x0) recvmsg(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)=""/122, 0x7a}, {&(0x7f0000000280)=""/220, 0xdc}, {&(0x7f0000000380)=""/106, 0x6a}, {&(0x7f0000000400)=""/147, 0x93}], 0x4, &(0x7f00000004c0)=""/224, 0xe0}, 0x2000) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e00"], 0x50}}, 0x4008840) 2m5.25250052s ago: executing program 4 (id=1561): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000100001ff00000000000000000000000a2c000000050a01020000000000000000020000000900030073797a32000000000900010073797a300000000014000000020a031747d21400000000000000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=ANY=[@ANYBLOB="14000000100001000b000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000045c0000000c0a01020000000000000000010000000900020073797a32000000000900010073797a3000000000300003802c00008028000180230001"], 0xe8}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev}, 0x2}}, 0x2e) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$EBT_SO_SET_ENTRIES(r4, 0x0, 0x80, &(0x7f0000000680)=@broute={'broute\x00', 0x20, 0x0, 0x90, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000080], 0x0, 0x0, &(0x7f0000000080)=[{0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xfffffffffffffffc}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3f}]}, 0x108) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r5, 0x84, 0xa, &(0x7f0000000040)={0xfab3, 0x5, 0x1, 0x1, 0x4, 0x2, 0x6, 0x1ff, r7}, &(0x7f0000000080)=0x20) ioctl$PPPIOCGL2TPSTATS(r2, 0x80487436, &(0x7f0000000a40)="480e23") sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000000)=""/197, 0xc5}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000002b80)=""/4108, 0x100c}, {&(0x7f0000000100)=""/74, 0x4a}, {&(0x7f00000005c0)=""/273, 0x111}], 0x5}, 0x80000000}], 0x4, 0x20, 0x0) 2m5.024153699s ago: executing program 4 (id=1564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x77f1}]}, 0x34}}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xfffd, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "ae8ebd61000033d6", "2607080d7f4fcf00fd4ef2dece6c7c58", "ceb0597e", "faffffffffecffff"}, 0x28) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) close(0x3) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x34, r1, 0x1, 0x70bd2e, 0x0, {}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES={0x8, 0x7, 0x77f1}]}, 0x34}}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) setsockopt$inet6_tcp_int(r2, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) (async) connect$inet6(r2, &(0x7f0000000200)={0xa, 0xfffd, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f0000000040), 0x4) (async) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "ae8ebd61000033d6", "2607080d7f4fcf00fd4ef2dece6c7c58", "ceb0597e", "faffffffffecffff"}, 0x28) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x9, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) sendto$inet6(r2, &(0x7f00000001c0), 0x0, 0x80, 0x0, 0x0) (async) socket$inet_sctp(0x2, 0x5, 0x84) (async) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r0) (async) close(0x3) (async) 2m4.73254809s ago: executing program 4 (id=1568): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = accept4(r0, 0x0, 0x0, 0x80800) setsockopt$sock_int(r1, 0x1, 0x20, &(0x7f0000000940)=0x1000008, 0x4) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11", 0xce}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg$unix(r1, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000680)=""/219, 0xdb}], 0x1}, 0x10000) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="18000000", @ANYRES16=r3, @ANYBLOB="030b00000000000000001300000004000980"], 0x18}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x28) 2m4.57416352s ago: executing program 4 (id=1570): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x5a0000, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000600)={0x6, &(0x7f00000005c0)=[{0xb8, 0x3, 0xc, 0xb}, {0x7, 0x81, 0x4, 0x82}, {0xffff, 0x6, 0xfe, 0x1}, {0xffff, 0x3, 0x5, 0x67611755}, {0xfce5, 0x2, 0x68, 0x100}, {0x5, 0x1, 0x4, 0x4}]}) write(r3, &(0x7f0000000000)="2d000000010001", 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000009000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r7], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r8, &(0x7f0000000040)="8f4e0ac905e0d66dffde4a727d6a90a69dfca541265892e0ad8eb103839d025d58c3756207a9234b34469772b7af626b5709a858bc08caaada3334ca43451fa65d2b0fe7c5e0352a356bcce311fa97cf76625e1dab4f0cac81aea3c5495d", 0x0}, 0x20) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r9, 0x44}, 0x10) write$cgroup_devices(r2, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="580000000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000900fdffffff0800010002000000140035006d6163766c616e300000000000000000"], 0x58}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) syz_init_net_socket$ax25(0x3, 0x5, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r1, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x28, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000800), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r10, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008405}, 0x7) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m49.514319519s ago: executing program 34 (id=1570): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='netlink_extack\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='pmap_register\x00', 0xffffffffffffffff, 0x0, 0x3}, 0x18) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, &(0x7f0000000300)={0x1f, 0xffff, 0x3}, 0x6) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000580), 0x5a0000, 0x0) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000600)={0x6, &(0x7f00000005c0)=[{0xb8, 0x3, 0xc, 0xb}, {0x7, 0x81, 0x4, 0x82}, {0xffff, 0x6, 0xfe, 0x1}, {0xffff, 0x3, 0x5, 0x67611755}, {0xfce5, 0x2, 0x68, 0x100}, {0x5, 0x1, 0x4, 0x4}]}) write(r3, &(0x7f0000000000)="2d000000010001", 0x7) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000001c40)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc6751dfb265a0e3ccae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af9cc9e5ef6bda9df2c3af36effff9af2551ce935b0f327cb3f011a2fd52347125907000000000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7511d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df262ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71d20fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada12f7a1525320e716660000000000b02b001500a710eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d3294000000000000000000000000000000000000000000000000000000000000000000000000c52f4ebd2c893bb97a068bd10738d3c9f7a98eccb26f7e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18a904c0e585a66c3b84b138efc20a546d3d5227e23b03f2a834391ad24fe977076ce7d9b20cf92cb151763d41f5c76e2ff3e93ee296c4082ee73e7e197253a2b66c353312c9d75711ce1623e9c54bdff59d1a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1c77a211bfa02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc084075ad10727522934a87a4ddcdb112754ca5bdec0ead14b6c0f19a4b126bbe0c2b8c9ff68236c8600000000000000000000000066e034c81c3cab4e33fc8dc55ce0ada18dcb1a47a87baf63e4edf11c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f2243471221c158ae8f44bfbfa7c2730302b66a99f66705b71e6205e7cbf36435e1eabb9a63fcd604d5cc27e1317ad94cf438d7187a2fe4e06fa6cbf84ef1efa82cb2c4af6bd1370616cdbe2b98fd89b79824ba089df1f81e6fcef073059f5f1d6a221d791839d7826ed1759c2153532c393fd1bd7be2e7f5abf2f0800000000ea46c07adee10d0f2bc85cf37182256e4fd8f56942726efc07180eaa5421d697665c8bacd39cdb392e6153af80bc1a69e3bfab032e78c9a96eab13be845a0d44ef2a4ab414ac2e4802a3b5d3aa2a4a4fc259206d97d0cc1602d6b45ff414c53fc9f5f68438f0423e168a97923ca0464b40b2f797841fb2bb2e5ad9feff37220ab7c34f4c382c247e7735adb55c209f7c0f8880733dbd3f5a095cc6a2"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000009000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r7], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r8, &(0x7f0000000040)="8f4e0ac905e0d66dffde4a727d6a90a69dfca541265892e0ad8eb103839d025d58c3756207a9234b34469772b7af626b5709a858bc08caaada3334ca43451fa65d2b0fe7c5e0352a356bcce311fa97cf76625e1dab4f0cac81aea3c5495d", 0x0}, 0x20) r9 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r5}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r9, 0x44}, 0x10) write$cgroup_devices(r2, 0x0, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r2) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="580000000400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000900fdffffff0800010002000000140035006d6163766c616e300000000000000000"], 0x58}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r12, 0x8946, &(0x7f0000000340)={'netdevsim0\x00', &(0x7f0000000400)=@ethtool_flash={0x33, 0xea5, '.\x00'}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) syz_init_net_socket$ax25(0x3, 0x5, 0x1) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000009c0)={r1, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6, &(0x7f0000000640)=[0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x28, &(0x7f0000000700)=[{}], 0x8, 0x10, &(0x7f0000000740), &(0x7f0000000800), 0x8, 0xb3, 0x8, 0x8, &(0x7f0000000840)}}, 0x10) sendmsg$NL80211_CMD_GET_KEY(r2, &(0x7f0000000500)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x2c, r10, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_KEY_IDX={0x5}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008405}, 0x7) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r2, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m42.308177386s ago: executing program 5 (id=1745): sendmsg(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], 0x208}, 0x0) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg(r0, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0x208}, 0x0) ioctl$sock_SIOCINQ(r1, 0x541b, &(0x7f0000000800)) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000480)=ANY=[@ANYRES32=r2, @ANYBLOB="f9ffffff3d108a4297699dbc64f95faf68b4f69304ceca986902eec92e8dbf26308344478ee97b55ed05c5bb1d710267eca9591d252d01db3b538a33"]) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @multicast1}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x40080) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x2, 0x4, 0x3b0, 0xffffffff, 0x0, 0x0, 0x0, 0xfeffffff, 0xffffffff, 0x2e0, 0x2e0, 0x2e0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x108, 0x130, 0x0, {}, [@common=@ah={{0x30}, {[0x4d4, 0x4d6], 0x9, 0x7d, 0x2}}, @common=@frag={{0x30}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x8}}}, {{@ipv6={@loopback, @local, [], [0x0, 0x0, 0x0, 0xffffffff], 'veth1_vlan\x00', 'veth0_to_bridge\x00', {0xff}}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff, 0x3, 0x4}, {0xffffffffffffffff, 0x2, 0x4}, {0xffffffffffffffff, 0x3, 0x7}, 0x4, 0x5}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x410) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x13, &(0x7f00000009c0)=ANY=[@ANYBLOB="18020000000000020000000000000000180100002020702500000000002020207baaf8ff00000000bda106000000000027010000f8ffffffb702000008000000b703000000000000850000000500000018010000202070250000000000202020db1af8ff41000000bca100000000000007010000f8ffffffb702000036fcf6d540da6ea923f12611cf08000000b703000000000000850000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1m42.230434279s ago: executing program 5 (id=1746): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_MCAST_MSFILTER(r0, 0x0, 0x30, &(0x7f0000000540)={0x2, {{0x2, 0x4e23, @rand_addr=0x64010100}}, 0x1, 0x1, [{{0x2, 0x4e21, @empty}}]}, 0x110) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x0, @any, 0x0, 0x1}, 0xe) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0xf, &(0x7f0000000080)=0x4, 0x4) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="180000005a00010000000000000000d531000000040005"], 0x18}}, 0x0) setsockopt$bt_BT_RCVMTU(r1, 0x112, 0xd, &(0x7f0000000000), 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8931, &(0x7f0000000100)={'wlan1\x00', @broadcast}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) r6 = accept4(r5, 0x0, 0x0, 0x80000) sendmsg$alg(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b40)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x10}, 0x20044000) read$alg(r6, &(0x7f0000000040)=""/124, 0x7c) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x18, &(0x7f0000000080)=0xd, 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r4, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec) setsockopt$inet_tcp_TCP_REPAIR(r4, 0x6, 0x13, &(0x7f00000001c0), 0x4) getsockopt$inet_pktinfo(r0, 0x0, 0x8, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000000800)=[{{&(0x7f0000000380)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0xfd}}, 0x10, &(0x7f00000016c0)=[{&(0x7f00000003c0)='X;', 0x2}], 0x1}}, {{&(0x7f0000001740)={0x2, 0x0, @multicast2}, 0x10, 0x0}}, {{&(0x7f0000000000)={0x2, 0x4e21, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="5cb4d3db2e2eb08c9d281cfc20e1308ab48c642103d76cadba4894b82ece6f3d1b347b2e03f83a7c5b9d356c71b6cb6d3e5fcbb6c73f575479a445e5fc71c5a1a140be180466b63da5f7fbed80ea9ea81f2a688a017fe41d289d707053ad589883036539166fbeb7ce702d54b9089586e373b282e6b970033696a5ffaf462bf91d16e50914808cf0c003cfa4cc75414f1af93a056c309de82c5c37f34a8b03597030ae7e4a89653fb3ae1d8bfb4d768402cdc107", 0xb4}], 0x1, &(0x7f0000000140)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2aaef009}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xc8}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x200}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7fff}}], 0x78}}], 0x3, 0x80) connect$inet6(r6, &(0x7f0000000200)={0xa, 0x4e22, 0x7ff, @remote, 0xf929}, 0x1c) 1m41.5603252s ago: executing program 5 (id=1751): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) syz_80211_inject_frame(0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r1, 0x84, 0x7c, 0x0, &(0x7f0000000180)=0x2c) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="1400f2ff0f00010000000000000000000000000a64000000060a0b0900000000000200000038000480340001800900010068617368000000002400028008000140000000150800034000000000080002400000000008000440000000090900010073797a30000000001100010000000000000000000000000a00000000000900"/140], 0x8c}}, 0x0) 1m40.915013157s ago: executing program 5 (id=1756): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xe, 0x4, &(0x7f0000000b00)=ANY=[@ANYBLOB="660a00000000000061119d0000000000850000006300000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = socket(0x10, 0x803, 0x0) write(r4, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) setsockopt$sock_int(r4, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r4, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r4, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)=""/122, 0x80}, {&(0x7f0000001fc0)=""/4104, 0x1008}, {&(0x7f0000000600)=""/204, 0xcc}, {&(0x7f0000000840)=""/205, 0xcd}, {&(0x7f0000000080)=""/185, 0xb9}], 0x5}, 0x4702}, {{&(0x7f0000000300)=@x25, 0x80, 0x0}, 0x4}], 0x40000000000011d, 0x40010040, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd010000000000140000006000000001002f00fe88a43de1a400000000000000007d01ff02000000000000000000000000000112"], 0xfdef) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0, 0xffffffffffffffff}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffffffc}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x3}, {0x85, 0x0, 0x0, 0x5}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2, 0xfff0}, {0x6, 0x0, 0xd, 0x9, 0x0, 0x8, 0xffffffff}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x8, 0x2, 0x0, r5}, {}, {0x15, 0x0, 0x0, 0x80000000}}], {{0x7, 0x1, 0xa, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000001c0)='syzkaller\x00', 0x3, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth1_to_hsr\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'veth1_to_hsr\x00'}) r8 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r7, 0x0, 0x0) sendmsg$TIPC_NL_BEARER_SET(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010028bd7000fbdbdf2505000000200001800d0401007564703a73797a32000000000c0002800800010013000000"], 0x34}, 0x1, 0x0, 0x0, 0x40404}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r7, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r10, 0x0) recvmsg$unix(r10, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0x0}}}], 0x20}, 0x0) syz_open_procfs$namespace(r11, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='netfs_sreq_ref\x00', r6, 0x0, 0x6}, 0x18) (async) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000480)='netfs_sreq_ref\x00', r6, 0x0, 0x6}, 0x18) sendmsg$netlink(r7, &(0x7f0000000680)={&(0x7f00000003c0)=@proc={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc, &(0x7f0000000440)=[{&(0x7f0000000e80)={0x127c, 0x1e, 0x1, 0x70bd2c, 0x25dfdbfd, "", [@generic="0b979ca4f1a4c3dd3eb3bd05f015db40b3b293dec14f8b60a92eefe120ea12fc0c9a75952ff91978cbd278f67ac00144dea8a09d39eabaff1b488d07d27f21ddf9a2a442ee0210bab3a17785b984355be45154eda3229480e67a3050d5a65d3f41e8424b9705b2057b3d54e554d6bb9a89f9c293fe360f0fbeac444aedb1af35824c0a91ccc730be848159077053", @nested={0x48, 0xc7, 0x0, 0x1, [@nested={0x4, 0x130}, @generic="64bafab57c02d3fdc8fe22f891153c0e1cbe1d712352d56f7c6f1a11d2bc47142832dee8c2b00bb55f4b5df906b016411175f42c1a291daf", @typed={0x8, 0xbe, 0x0, 0x0, @uid=r12}]}, @generic, @generic="3e64b8fa6271d20cce6b1adc2c21a3ad94815a42666118bcd1e5e0cd5fb6fa535f497b33e93cd5a53c5c2b2009dbc7f5172ff3c45625774dce7c72323a2de6b82f6acfdc9017a046a7c79172713c1b22272581326237ef6c07e674c4c1bb7a1ca369660c3755bb4de38501d8520566d2f3d0cd902882e723dcdceadd3d9021fb855a38780d9120bc34a748c0cfa9c1de9b91a0be44645d4eba926d85f14fce8eb8c81ded7a636c85e44c113baa300e30b158601a421eb058bfd4836897c665", @typed={0x8, 0x44, 0x0, 0x0, @ipv4=@broadcast}, @generic="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", @typed={0x8, 0x150, 0x0, 0x0, @pid}, @generic="8632fd32e1cd4aa85d7c087c7214f8e2c57b7febbf5d26cc94cd1cdf951080106909050ed9df42740b1040643af5b54f5dbf7082ec8c0f8f5bc1a9cadedb0dcf940b5316145fd75f46fd192725315ecb759a042e8af145c78286951f54b4d80fe0262a53fac983b8fff7455a4797399e3bbffeb05e248d06e921684c6a04a315d8a7905c7a9dc06508ad7553afa9c33ace1fe238b546b5017e5c8481cc34e34188e916fd209926b2b8e5a2731a5c1d6330279b5a453b4ab3d36b4d15199ebbd87decbc49cbf235"]}, 0x127c}], 0x1, &(0x7f0000000500)=[@rights={{0x2c, 0x1, 0x1, [r6, r7, r3, r2, r7, r0, r5]}}, @rights={{0x20, 0x1, 0x1, [r5, r0, r13, r3]}}], 0x50, 0x20008805}, 0x4040000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYRESOCT=r9], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', r9, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x2007ff, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x10, 0x4, &(0x7f0000000140)=ANY=[@ANYRESOCT=r9], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x4f, '\x00', r9, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x10, 0x2007ff, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) 1m40.332134386s ago: executing program 5 (id=1759): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711239000000000095e80000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x8, 0xf, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2901}, {0x85, 0x0, 0x0, 0x8}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x60}}}, &(0x7f0000000200)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x80, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @val={0xc, 0x99, {0xa, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x44, 0x33, @mgmt_frame=@action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1}, {0x3}, @device_a, @device_a, @random="975d609ade7b", {0xb, 0xff7}, @value=@ver_80211n={0x0, 0x7, 0x1, 0x3, 0x0, 0x1, 0x1, 0x0, 0x0, 0x1}}, @sp_mp_close={0xf, 0x3, {{0x72, 0x6}, {0x75, 0x18, {0x0, 0x1, @val=0x101, @val=0x3, @val="d1ba3c69436001f9fffcfdd4567e6f5f"}}}}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x17, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="18080000018000000000000005000000851000000500000085000000bb000000a70000000000000018000000000000000000000000000000950000000000a28e474032a61d70eb00"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m40.136395859s ago: executing program 5 (id=1761): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000004400018006000340000000002c00018014000300ff02000000000000000000000000000114000400000000000000000000000000000200010c000280050001"], 0x58}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r3, 0x0, 0xf69}, 0x18) r4 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001300)={r7, 0x6e2}, &(0x7f0000001340)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000380)={r7, 0xd5, "204537937b42866dcc03eacdd1f3238bb34286b96fe73a6f7a5312dfc4bc99bc0f30af8450bfa723d9c8ebf8ceaedec54fd17cbdbd40c406de20c31be1cf51996744eb4247f1298be7a8ff733916431760cf4f0c7ac546c722edd5fe69cdd2ec8da3489c01f9d3b8be0654f871003f8e5ac0660b6b86b218f6735b1cbcc9b792aca3e7b4925772b9f8a12e026eeb4b6d7a2a237ef5e5b20c3a9518fed42a78d212b065698d871f171e252097913a99c49b8316b0e36c20ea2e7a9cadf00cc29c1b0a3d09303d24584f686aa7fb225810f49c9b34ef"}, &(0x7f00000000c0)=0xdd) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m25.020256907s ago: executing program 35 (id=1761): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="580000000102010100000000000000000a0000004400018006000340000000002c00018014000300ff02000000000000000000000000000114000400000000000000000000000000000200010c000280050001"], 0x58}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r1, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="1c00000042000106"], 0x1c}], 0x1}, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r3, 0x0, 0xf69}, 0x18) r4 = socket$inet(0x2, 0x3, 0x30) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000080)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x7, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x7, 0x3}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x22e, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_CONTEXT(r5, 0x84, 0x11, &(0x7f0000001300)={r7, 0x6e2}, &(0x7f0000001340)=0x8) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r4, 0x84, 0x1a, &(0x7f0000000380)={r7, 0xd5, "204537937b42866dcc03eacdd1f3238bb34286b96fe73a6f7a5312dfc4bc99bc0f30af8450bfa723d9c8ebf8ceaedec54fd17cbdbd40c406de20c31be1cf51996744eb4247f1298be7a8ff733916431760cf4f0c7ac546c722edd5fe69cdd2ec8da3489c01f9d3b8be0654f871003f8e5ac0660b6b86b218f6735b1cbcc9b792aca3e7b4925772b9f8a12e026eeb4b6d7a2a237ef5e5b20c3a9518fed42a78d212b065698d871f171e252097913a99c49b8316b0e36c20ea2e7a9cadf00cc29c1b0a3d09303d24584f686aa7fb225810f49c9b34ef"}, &(0x7f00000000c0)=0xdd) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m21.877258279s ago: executing program 7 (id=1885): r0 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$SIOCX25CALLACCPTAPPRV(0xffffffffffffffff, 0x89e8) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384\x00'}, 0x58) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r2, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000020}, 0x40000) r4 = socket(0x1a, 0x6, 0x4) ioctl$SIOCX25SDTEFACILITIES(r4, 0x89eb, &(0x7f0000000200)={0x100, 0xff, 0x9f, 0x7, 0x5d, 0x7, 0x1e, "a8e79a9ddd7a1c5783224bc6a035fd56e2d7505e", "6bfbef710e59ac18ef0f2e833adad7cf64dab046"}) syz_genetlink_get_family_id$fou(&(0x7f0000000240), r4) ioctl$F2FS_IOC_COMPRESS_FILE(r4, 0xf518, 0x0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r4) sendmsg$DEVLINK_CMD_SB_POOL_GET(r4, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000300)={0x184, r5, 0x10, 0x70bd2a, 0x25dfdbfc, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0xb244}, {0x6, 0x11, 0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x6e92}, {0x6, 0x11, 0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x2}, {0x6, 0x11, 0x4}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xbc}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x7ff}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x9}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x3}, {0x6}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xb}, {0x6, 0x11, 0x6}}]}, 0x184}}, 0x20000000) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000540)={r1}) ioctl$BTRFS_IOC_WAIT_SYNC(r6, 0x40089416, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000580)) ioctl$sock_bt_bnep_BNEPGETCONNLIST(r4, 0x800442d2, &(0x7f0000000680)={0x5, &(0x7f00000005c0)=[{0x0, 0x0, 0x0, @dev}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @link_local}, {0x0, 0x0, 0x0, @multicast}, {0x0, 0x0, 0x0, @multicast}]}) sendmsg$BATADV_CMD_SET_MESH(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x1c, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4044004) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r6) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f0000000b40)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000b00)={&(0x7f0000000840)={0x2bc, r7, 0x100, 0x70bd25, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x2, 0x7d}}}}, [@NL80211_ATTR_MAC_HINT={0xa, 0xc8, @from_mac=@device_b}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random=0x97b}, @NL80211_ATTR_BSS_SELECT={0x18, 0xe3, 0x0, 0x1, {0x14, 0x0, [@NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_RSSI={0x4}, @NL80211_BSS_SELECT_ATTR_BAND_PREF={0x8, 0x2, 0x400}]}}, @NL80211_ATTR_IE={0x7a, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x1, 0xf1, @broadcast, 0x0, @value, 0x0, 0x9e4c, @broadcast, 0x8b44}}, @cf={0x4, 0x6, {0xf0, 0x4, 0xfffd, 0x9}}, @mesh_id={0x72, 0x6}, @mic={0x8c, 0x18, {0x15a, "e6ab0e5c4cb3", @long="17ec99437c353e6b08de068780a12e01"}}, @challenge={0x10, 0x1, 0xb}, @mesh_id={0x72, 0x6}, @rann={0x7e, 0x15, {{0x0, 0x7d}, 0x9, 0x40, @device_b, 0x9, 0x8, 0x9}}, @sec_chan_ofs={0x3e, 0x1, 0x2}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x6c, 0xfc, "d5905350d89d2c843eeff614dfc9f09d11733f4e682541fdc6fee0571474fdf4dbfbfddea382211bab47df00cdf02d33653a8bac612e1f4dbfcc0a2b6a27c971535baeb5516d5915d061a1ad55f12ff2414bbcc61cdfb109b8b7fa0e44e65fa08bab7de0bb0fa7a1"}, @NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6, 0xfb, 0x8}, @NL80211_ATTR_FILS_ERP_REALM={0x8f, 0xfa, "f3f7535153ca1d6441b78c24049e7c00e53402390542d368e0d2f9c8ac80e409801eba8ce3b75c2c8563b1e99e5c4ef53b25ca420f2588dd3d206b112f985eeab29ec175a505ef874d00ade76dd404dc0352279463123d9edf2b0c6aea89aed189678f95ca939e785c7e6d6919459791ef3594dd564177e8b7479b2d25b4694100a9d93438c3a677896154"}, @NL80211_ATTR_FILS_ERP_USERNAME={0x11, 0xf9, "db4297147fafa2dd1471a2a1b5"}, @NL80211_ATTR_FILS_ERP_REALM={0xda, 0xfa, "3b37a9fd8d6b60fbd4bb5b7f7f31b5b3b35fd3f4a4c8886375841234514754a710b8a88a02480524c5338896ca09e54a7ea2c49960e2f00ee3b71acc0b14d3126d85ce8fb4b0f01fe928cb6e60eb512d3078c361372a2a7872e8cd50dd77b7488a0f313d1f687a65cdd2617e1c9682513cf5577aa80fd4864483633637922ef3279af9f113dbb9f083a9876e1037ba6a33f7c430a01aac0d8be89b9a8f72f0608d613071c567f75de0f21e1f8dec20a5ed66ebdce3611ab0a4413cc94e3b3e852f0111d41b6c7a525982d95a344bb0718d9b28a94087"}]]}, 0x2bc}, 0x1, 0x0, 0x0, 0x40008001}, 0x4000) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r4) sendmsg$TIPC_CMD_SHOW_PORTS(r4, &(0x7f0000000c80)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x1c, r8, 0x8, 0x70bd25, 0x25dfdbfb, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f0000000cc0)='highspeed\x00', 0xa) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000000d40), r4) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r4, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x1c, r9, 0x300, 0x70bd2c, 0x25dfdbff, {}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x1) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f0000000fc0)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000f80)={&(0x7f0000000e80)={0xfc, r5, 0x800, 0x70bd2c, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffc2e}, {0x6, 0x16, 0x9}, {0x5}, {0x6}, {0x8, 0xb, 0x200}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0xb64d}, {0x6, 0x16, 0x40}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x7}, {0x8, 0xb, 0x6}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x2}, {0x6, 0x16, 0x9}, {0x5}, {0x6, 0x11, 0x5}, {0x8, 0xb, 0x8}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x20008881}, 0x220400c0) r10 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000001000)={0x0, @in6={{0xa, 0x4e22, 0xe0f9, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x81}}, 0xfffffff5, 0xb, 0x5, 0xb, 0x21, 0x3, 0x4}, &(0x7f00000010c0)=0x9c) setsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r10, 0x84, 0x75, &(0x7f0000001100)={r11, 0x100}, 0x8) setsockopt$SO_BINDTODEVICE_wg(r10, 0x1, 0x19, &(0x7f0000001140)='wg1\x00', 0x4) 1m21.728193643s ago: executing program 7 (id=1886): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000240), 0xffffffffffffffff) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMP(r2, 0x8906, 0x0) read(r2, &(0x7f00000001c0)=""/2, 0x2) sendmsg$NLBL_MGMT_C_LISTALL(r0, &(0x7f0000000440)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x1c, r1, 0x100, 0x4, 0x25dfdbfd, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x40180) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000640)=ANY=[@ANYBLOB="1b00000000000000000000000020000000000000", @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000a5d3d066aa24eb9b6b8f9192e5381a3a12d3baacc120077187a9ece73303295e4a2d923d2a32573618258d6319ba6824e65e0698b80c57f2ef1d3254f873b6acd8f412", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000400)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r7, 0x1, 0x0, 0x0, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@ipv4_newrule={0x24, 0x20, 0x704, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f0000000700)='sched_kthread_stop_ret\x00', r4}, 0x18) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1e, 0x13, r3, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071123a000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r9 = socket$kcm(0x10, 0x2, 0x0) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000500), r8) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r6, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)={0x68, r10, 0x2, 0x70bd28, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x3c}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @dev={0xfe, 0x80, '\x00', 0x25}}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x1c, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8004}, 0x20040014) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)="1800000069006bcd8e0300dc6e3640030003010000040000", 0x18}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000215000/0x1000)=nil, 0x1000, 0x0, 0x6011, r12, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCETHTOOL(r13, 0x8946, &(0x7f0000000000)={'veth0_to_batadv\x00', &(0x7f0000000080)=@ethtool_cmd={0x1f, 0x6, 0x762c, 0x6, 0x0, 0x0, 0x6, 0x1, 0xc, 0xba, 0x8, 0x2, 0x3, 0x1, 0xfd, 0x680, [0x0, 0xfffffffc]}}) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x12, r12, 0xd1383000) ioctl$FS_IOC_RESVSP(r12, 0x40305829, &(0x7f0000000040)={0x1100, 0x2, 0x8, 0x10003}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001980)={0x11, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, [@map_idx={0x18, 0x1, 0x5, 0x0, 0x1}]}, &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=[r11, r11], 0x0, 0x10, 0x1, @void, @value}, 0x94) 1m20.80247689s ago: executing program 7 (id=1893): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b703000000090001db020a000000000007000000000000009500000000000a6682f0a61b01e4c027d252f602901b7cbbd5b9097bb8334a5541cf9e345af317e35f0ad53d857708f974879196ac07622b10548ccd2028eaf7610ae297a58e413b22d81494fcb1dbd1e9cb784c590ddd06ee929a27a5dedf301650960d8ae1cf339f6bda65bf6594c2839dcea6e419c9b8b7d17b9e49f392c857ccb0a3f64a59a87332ffa41c17b82700789b163bbc8507f171b46d2c569e75810e60a06b6f69ef41ca39a200"/212], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x2, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x24004044) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x11, 0x800000003, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x11, 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_LINK_WINDOW(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x68, r6, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {}, {0x4c, 0x18, {0x4, @media='eth\x00'}}}}, 0x68}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="010028bd7000fedbdf2513000000080001"], 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x4) 1m20.624161294s ago: executing program 7 (id=1896): r0 = socket$netlink(0x10, 0x3, 0x400000000000004) writev(r0, &(0x7f0000019440)=[{&(0x7f0000000200)="480000001500190d7ebdeb75fd0d8c562c84d8c033ed7a80ffe0090f000060000000a2bc5603ca00000f7f89000000200000004a2471083ec6991778581acb6c0101ff0000000309", 0x48}], 0x1) (async) r1 = socket$caif_stream(0x25, 0x1, 0x2) (async) r2 = socket$vsock_stream(0x28, 0x1, 0x0) close(r2) (async) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x28, r5, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0xfffffff8, 0x3e}}}}}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x40) (async) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000002740)=ANY=[@ANYBLOB="140000001300015b993dde440113e90006"], 0x14}], 0x1}, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x5, 0x8) getsockopt$ax25_int(r8, 0x101, 0x8, &(0x7f00000000c0), &(0x7f0000000100)=0x4) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$inet_mreqn(r9, 0x0, 0x23, 0x0, 0x0) (async) ioctl$SIOCAX25ADDUID(r7, 0x89e1, &(0x7f0000000000)={0x3, @bcast}) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_RINGS_SET(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB="01800400", @ANYRES16=r11, @ANYBLOB="01000000000000000000100000003800018014000200776c616e31000000000000000000000008000300000000000800030003000000080003000200000008000300020000000800060003000000"], 0x54}}, 0x0) (async) setsockopt$CAIFSO_LINK_SELECT(r1, 0x116, 0x7f, &(0x7f0000000000)=0x1, 0x4) 1m20.511949623s ago: executing program 7 (id=1897): r0 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) bind$unix(r0, &(0x7f0000000000)=@file={0x0, './file0\x00'}, 0x6e) r1 = socket$inet_icmp(0x2, 0x2, 0x1) connect$inet(r1, &(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0xffffffffffffff68) ppoll(&(0x7f0000000140)=[{0xffffffffffffffff, 0x8068}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) 1m20.289220064s ago: executing program 7 (id=1901): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='fsi_slave_invalid_cfam\x00', r1, 0x0, 0x5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x5}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m7.292108665s ago: executing program 6 (id=1992): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000002140)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0xc8, 0x8, 0x170, 0x5803, 0x2c8, 0x2e8, 0x2e8, 0x2c8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x128, 0x170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@time={{0x38}}, @common=@dst={{0x48, 'dst\x00', 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'dvmrp0\x00', 'batadv_slave_1\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r1 = socket$netlink(0x10, 0x3, 0x9) sendmsg$NL80211_CMD_SET_CHANNEL(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x1c, 0x0, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000084}, 0x20004054) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b34, &(0x7f0000000000)={'virt_wifi0\x00', @random='\\\x00\x00 \x00'}) (async) r3 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000002c0)={r4, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x304, 0x0, 0x2c}, 0x9c) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r5, 0x8983, &(0x7f0000000080)={0x0, 'veth0_vlan\x00', {}, 0xfffe}) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="560a0000000000006111bc00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m6.973522871s ago: executing program 6 (id=1995): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=@delqdisc={0x3c, 0x25, 0x100, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xfff3, 0x10}, {0xf, 0x5}, {0x6, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x3}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x60e}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010000304004bdd000000000000007400", @ANYRES32=r4, @ANYBLOB="00000000031201002c0012800b00010062726964676500001c0002800600270007"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1m6.828533346s ago: executing program 6 (id=1996): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x14, 0x3, 0x2, 0x304, 0x0, 0x0, {0x0, 0x0, 0x1}, ["", ""]}, 0xfded}, 0x1, 0x0, 0x0, 0xc2c}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_audit(0x10, 0x3, 0x9) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r6}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) readv(r1, &(0x7f0000000400)=[{&(0x7f0000000300)=""/69, 0x45}, {&(0x7f0000001f40)=""/4096, 0x1000}, {&(0x7f0000000380)=""/76, 0x4c}, {&(0x7f0000000500)=""/240, 0xf0}, {&(0x7f0000000600)=""/232, 0xe8}, {&(0x7f0000000800)=""/216, 0xd8}], 0x6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) recvmmsg(r8, &(0x7f00000006c0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)=""/223, 0xdf}], 0x1}}], 0x2, 0x0, 0x0) sendmsg$AUDIT_SIGNAL_INFO(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x3f2, 0x100, 0x709d2b, 0x25dfdbff, "", ["", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x20004040}, 0x81) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f00000007c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000f40)=""/4089, 0x1a, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x20) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000e40)={0x0, 0xd, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2508007a0000000000000700000008000300", @ANYRES32, @ANYBLOB="1400140064756d6d7930000000000000000000001400040076657468315f746f5f626f016400000005005300010000000800050004"], 0x54}}, 0x0) 1m5.950848095s ago: executing program 0 (id=479): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000000000000002030000000000001a0000000800010000000000"], 0x24}}, 0x0) 1m4.532187712s ago: executing program 6 (id=2000): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_AEAD_AUTHSIZE(r0, 0x117, 0x5, 0x0, 0x8) r1 = socket$pppoe(0x18, 0x1, 0x0) splice(r0, &(0x7f0000000000)=0x40, r1, &(0x7f0000000040)=0x7, 0xa, 0x2) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000080)={0x18, 0x0, {0x1, @empty, 'veth0_to_team\x00'}}) epoll_create1(0x0) recvmsg(r1, &(0x7f0000001740)={&(0x7f00000000c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x80, &(0x7f0000001680)=[{&(0x7f0000000140)=""/108, 0x6c}, {&(0x7f00000001c0)=""/230, 0xe6}, {&(0x7f00000002c0)=""/70, 0x46}, {&(0x7f0000000340)=""/31, 0x1f}, {&(0x7f0000000380)=""/235, 0xeb}, {&(0x7f0000000480)=""/221, 0xdd}, {&(0x7f0000000580)=""/4096, 0x1000}, {&(0x7f0000001580)=""/213, 0xd5}], 0x8, &(0x7f0000001700)=""/30, 0x1e}, 0x1) connect$pppoe(r1, &(0x7f0000001780)={0x18, 0x0, {0x1, @local, 'lo\x00'}}, 0x1e) r4 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r4, 0x11b, 0x3, &(0x7f00000017c0)=0x1000114, 0x4) getpeername(r1, &(0x7f0000001800)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001880)=0x80) accept4$alg(r0, 0x0, 0x0, 0x80000) r5 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000001f40)={&(0x7f00000018c0)=@nfc_llcp={0x27, 0x0, 0xffffffffffffffff, 0x1, 0x5, 0x7, "aa95285c5935477193c3b75dcf0f4a3c634331e79281f2be6c9f4166d4907de05896f81ad6d2663499edd7d581e40c53568332760790bc46cba33d9419a728", 0x2e}, 0x80, &(0x7f0000001d40)=[{&(0x7f0000001940)="b20201dcdaf3c7e0a7e98e1521ffdb5ad1eb939eacffca2e3a5f86fcd91f8e84cfe9cfa066506fa2eaaa768c686e7edab5e26e2d0ef6efb8346f84ca571162ed497ceef36225f21a787e8938bda8b5d8c8ed9d833e05fec27d86b0f2e6208fcab6725daf8b3dbfdd032a7edc2103c4d31095ae67aa334a002dc94620160228bd494c45034ae1fa5e90a33e479378c27588a333951e432a9a77b8114e58bd7a7008056b32e74d0fcd3bb318539e9f6af07add0678bf1c63e5081dbae051fd6967d91a497410ff21558101c1a1df25ca96f4105e365df4bc3eff20440eb1cc0e87dca6caa285393c2d9be06886e6b6432297bdb8471f23b00b", 0xf8}, {&(0x7f0000001a40)="a23f9d1f97d7f5c38fc7a1e81e18ef98d8661a8370f66bc36aff0f3760a744f97e4ff8a13c98d5595585f544d9e15f2a2f30eb55fd67e2b39bd13d4a538e6bca92ba66596e3fe9e798bf79ccc6c0303c83b66ea193ec7df24e58d6ff3a912d432cbee916b374d3c7f1270f955aa6db5ca2fb816f823728a0441164830c0622aebbc8271ba19500ea16e37ff3bbf64c9a7776aeb0121053686bb5022622ecf513c17a2729dc41ce3ce5ceec53aa70d55a7665d4a3c881f0893e556fd8cd7602254a8a6a38943641eef5dd", 0xca}, {&(0x7f0000001b40)="018d84c2b92a16d661aae1c56bea8db62eb593712b13ad3b253e334aa76c84644173b0dfddc0696bd00579364a0790a18b5c3b33602b4b298bd17f3fcfa344afa94b0585ca0424f896746b315c7237107a7224e04afadd3bcec67a0ea6635369483ac5eb3dbc97e2a36d65d636dd8b3cf3b7329064cad92cd3e8c6bfef28c17cca96fc87d8850a970358901043e916ab506778ec707c675396ed5acc421fb6a6242043642b9944e89f087274f0f13ecfb92dd735c289053e6b06c807948106", 0xbf}, {&(0x7f0000001c00)="ae172a4601d084032df90cd238282a7b16f289d89cf98fff46ca91a71c9ea0752dd16930fff1cadf527bebccafd13021c84097f49e5a3bde9f147b154cdbf7f5df474e4e3e492ae4a99829283e088948ad9bc4e2e85f23a7ad2ca765481d5a6cfd27e9ee8836de58d4518dd206fc1c52c2089d583071713b37608459d4", 0x7d}, {&(0x7f0000001c80)="afdad2cb1bc60692493e5b33884dcd632c5683336bfe12dfe87c307dc8b9123c1304051590d24c2cfcd70263a2528a8c4977b84b4473886e0fea10720a271d5b3e1946a7ec70ea8c30e6e39f333e9694383b24f81de28cc6e858b22b072e9be93fdf07f4ec5ebf59575adb79805eeb1d9f925ccdd6ddbdf85df76a35cb202fe45d082117876c211ea29a44ded595da810f697e84b541b96c9ced72d999f95867ffcd60", 0xa3}], 0x5, &(0x7f0000001dc0)=[{0xf8, 0x108, 0x0, "a2ebbb80e473c592d0798b802755ac8cc3c4c10676d582dc23b178ff2153fea6b1a76e69f0d34915fa8c181ce4355423bf234974f5f9b28b12632ecd8835126e2d784e13caca051a3ea23de17c77d277c927dd4021b162fa7a8dd05c274bcf7bee3a450b605207f587277c35f38ada5125e581990acda9f4a55367be34f76fa5ad3f17b250b5107f76a34387c8e3c63b6c273721b7147902a459f2a0149584588f9f4492d1774269cb0089274fdd899b1a024049f1b356f8f845cbe93c82a1bfc98ad9e530ba243968febd2fe3c899b108dc4ef3b07a4a23cf93d4f672bed86275c1d2"}, {0x70, 0x118, 0x0, "9f2cd608e8ef881bb89a4a7ce0d68985ea60d0546f49c87e0276d14e8fbe583706cf0f47ce85ff68837b3706c16bc950e18384c1864ec644e2dc4ae3b7337f6dd8d1acbddced703a74d7760f075f50450eb06a1648fce66e84f8f9"}], 0x168}, 0x40004) poll(&(0x7f0000001f80)=[{r5, 0x200}], 0x1, 0xd01) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000002000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r6, &(0x7f0000002100)={&(0x7f0000001fc0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000020c0)={&(0x7f0000002040)={0x50, r7, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@HEADER={0x28, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8}]}]}, 0x50}, 0x1, 0x0, 0x0, 0x8040}, 0x90) write$cgroup_netprio_ifpriomap(0xffffffffffffffff, &(0x7f0000002140)={'pimreg0', 0x32, 0x31}, 0xa) pselect6(0x40, &(0x7f0000002180)={0xfffffffffffffff0, 0x2, 0x1, 0x4, 0x3, 0x3, 0x1, 0x5}, &(0x7f00000021c0)={0x7, 0x3, 0x1, 0x9, 0x4, 0xb, 0x6, 0x4000000000}, &(0x7f0000002200)={0x6, 0x0, 0x8, 0x3, 0x4, 0x6, 0x4, 0x80}, &(0x7f0000002240)={0x0, 0x3938700}, &(0x7f00000022c0)={&(0x7f0000002280)={[0x8000]}, 0x8}) r8 = accept4(r5, &(0x7f0000002300)=@x25, &(0x7f0000002380)=0x80, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f00000023c0)={0x0, 0x3}, &(0x7f0000002400)=0x8) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r8, 0x84, 0x10, &(0x7f0000002440)=@sack_info={r9, 0x6, 0xff}, &(0x7f0000002480)=0xc) r10 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r10, &(0x7f00000024c0)={0x2c, 0x4, r3, 0x23, r4}, 0x10) setsockopt$inet_sctp_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000002500)={0x3f, 0x6, 0x4, 0x0, 0x5, 0xc, 0x6, 0x7, 0xa, 0x40, 0x80, 0x6, 0xff, 0xf9}, 0xe) sendmsg$kcm(r5, &(0x7f0000002a00)={&(0x7f0000002540)=@un=@abs={0x0, 0x0, 0x4e22}, 0x80, &(0x7f00000026c0)=[{&(0x7f00000025c0)="6a902e3d298e68b18d1545df76f6fc989f5bf11460cd9ce5fdabf833c1e04fbef953eaa764f7fcc155e9115a4204de9aa46fd75b5163dd316fed4819844c8bc287ef7fc104217c6a1f2eadcc623a9f770f7ad1eccb8ac9760af8919eb666c8ed84aed61c0c2120a7123f3940d9ba6a5f9d14847fec9effbfd654ff15a08c02ba961f0da46acb", 0x86}, {&(0x7f0000002680)="d66b89302f4adb5a5c33fded74830086", 0x10}], 0x2, &(0x7f0000002700)=[{0x58, 0x10a, 0x7, "11180f1ca1429d73e2dba6308faa132f25dbcee18b5f19c386b64b1e2684b66630c8b4e37edf96088f1738e9f8b80dd7a78b16319f3372d57a3ca670dd8182731176ad4c4502ef1c"}, {0xe0, 0x84, 0x7, "a37732199541b0b94f332d4e108db348a23d095fb493bf76de5a38411b297cb4901601208c3ef7d8b8508dc660ee03365fadbab7a3c0f4be4540d90a70535ef61a4f001038cd2c44008291b02140dd297403689e8e71b0858165dcaf19e858687b35db472d62ce6b7a810d162be36d2ec3cfd13d41da2969d6459479ecd208dfd1ed6436e207ae0b7b20f323df79b0cf8c92f187848dcc8b8b0180ebbb13c30c3430de24598e24031e3e5ed0552be1c14c3459aa8e5828e2b9901d454554f6a9ca95748bc3714270290d84067dd4f0"}, {0x68, 0x1, 0x5, "76a76818a5b1a78e81cdd7cc9d59644383da9004e3fef0d58335079d67985c7748cfbb64b3fc6056bef474f4975ec857eb0083ab429f132cf7b23d7f78ec1e846fb46d407d736b9c78945acba85c07cbfa0c"}, {0x80, 0x112, 0x8000, "53ca94c21a3f01d84013847beb5e8272a553ecf8237c6d29fbdb2aaf7e629c833a9fca0325f801dfc3aaf34460a7fd9d48f22cd7e0ccbdc07fda4eaafc298e666285af21fb3b2d14113b3c903b41bb1a3a13f242d186768566cc84d1554e66f9e911df7d4a0c7c4c4c8f23"}, {0xb0, 0x10c, 0x5, "6809f5efeac827476023735f039b21971207fffec6b23ded589430eaa450dfeb6085c7ef15ab83c55329f0dbf323525e3e992a0abd419b63297c1d30bfb017b327fa8d6131f85e918aa27f49fff6198d977772b96d53ed0475cb0b7cf70191e7d77204f9e69614b2d11d6df5b857cb00062e373daaf36ad47146284e1b582a635bbf94f1c3b2190a68b67cb18200c5c29440ab4cb11d7f41834dcab7"}], 0x2d0}, 0x10) recvmsg$can_j1939(r8, &(0x7f0000004100)={&(0x7f0000002a40)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast1}}}, 0x80, &(0x7f0000003f80)=[{&(0x7f0000002ac0)=""/224, 0xe0}, {&(0x7f0000002bc0)=""/235, 0xeb}, {&(0x7f0000002cc0)=""/220, 0xdc}, {&(0x7f0000002dc0)=""/180, 0xb4}, {&(0x7f0000002e80)=""/184, 0xb8}, {&(0x7f0000002f40)=""/4096, 0x1000}, {&(0x7f0000003f40)=""/12, 0xc}], 0x7, &(0x7f0000004000)=""/255, 0xff}, 0x2000) ioctl$sock_TIOCOUTQ(r11, 0x5411, &(0x7f0000004140)) 1m4.483000418s ago: executing program 36 (id=1901): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='fsi_slave_invalid_cfam\x00', r1, 0x0, 0x5}, 0x18) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x5}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m3.480049794s ago: executing program 6 (id=2006): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x1, 0x2, &(0x7f0000000140)=ANY=[@ANYBLOB="0d10"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7a, &(0x7f00000002c0)={@remote, @local, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "92c01f", 0x44, 0x2f, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @loopback}, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x1}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x21}}}}}}}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfe37, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000003c0)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b907ef19edfff007049e0ff0888e", 0x0, 0x6000, 0x18000000, 0x0, 0x0, 0x0, 0x0}, 0x50) 1m3.356550883s ago: executing program 6 (id=2009): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r2, 0x0, 0xf69}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 53.28200893s ago: executing program 0 (id=479): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000000000000002030000000000001a0000000800010000000000"], 0x24}}, 0x0) 48.281746304s ago: executing program 37 (id=2009): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r2, 0x0, 0xf69}, 0x18) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0xfe98, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_FLOW_MAX_RATE={0x1400, 0x7, 0x3}]}}]}, 0x48}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 40.188624603s ago: executing program 0 (id=479): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000000000000002030000000000001a0000000800010000000000"], 0x24}}, 0x0) 27.604814167s ago: executing program 0 (id=479): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000000000000002030000000000001a0000000800010000000000"], 0x24}}, 0x0) 16.489179157s ago: executing program 0 (id=479): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000000000000002030000000000001a0000000800010000000000"], 0x24}}, 0x0) 5.351273856s ago: executing program 2 (id=2440): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r1, &(0x7f0000000200)=0x2, 0x12) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x4e22, 0x4b1, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7fffffff}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CANCEL_REMAIN_ON_CHANNEL(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB="80bedc124a54aa6bd30e1d2c59f03298e861f9fe499e01b4813ee41ca27cc1d4880737c1add23659c9d32231788eb7923cb7c1c44ad78f92e8d3649201664a9d97ae49b69849130e5aac3beaad7faedf7fccc01e340bda4bf1c123ff82318d785975f52ece0289496cf1c560fc9ad556932476c6fddf06c3558fe7226f8edffe060fe29c12a13a3c0077a54575ccb91384fcea4fec4e", @ANYRES16=r3, @ANYBLOB="01002cbd7000fedbdf253800000008000300", @ANYRES32=r4, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x84}, 0x20000020) sendmmsg$inet6(r1, &(0x7f00000003c0)=[{{&(0x7f0000000140)={0xa, 0x4e23, 0x0, @mcast1}, 0x1c, &(0x7f0000000380)=[{&(0x7f0000000300)="e38ac1a4cd245d91bb83994aa7f34df34ae9e39eb563328d5785386fe29e58aa0de138401b01d2ee74eff84bffc34a9e664d62fe3bef729d3981f29a18d9be08b1296072954a82e3c7f846ec7a72e32d8b91797f4e68d9354d2a", 0x5a}], 0x1}}], 0x1, 0x8002) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r6, 0x110, 0x4, &(0x7f00000000c0)=0x1, 0x4) r7 = socket(0x2d, 0x2, 0x0) close(r7) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f0000000400)={0x84, 0x0, '\x00', [@pad1]}, 0x10) sendmsg$netlink(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="340000002e0003050000000000000000200000f8ffffffffffffff0008000000", @ANYRES32, @ANYBLOB="0c000f"], 0x34}], 0x1}, 0x0) 5.068216983s ago: executing program 2 (id=2444): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x14}}, 0x24040) read(r0, &(0x7f0000000080)=""/186, 0xba) sendmsg$nl_generic(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2805ff003d000701000000e254f0ffffa5880000040000000c00034f616e654a7fc96fada52804f3f4fea5e38739180c8dbc0b3f8d2add417dfa5e4c71110ec045c25b7b1e1e382fd9f5c5ac951123e448a7371b2d340a5abfcfd49a1a262177074333384942326ef3", @ANYRESDEC=r0, @ANYRES8, @ANYRES64=r0], 0x528}}, 0xc000) 4.595090746s ago: executing program 0 (id=479): r0 = socket$kcm(0x11, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000280)={&(0x7f0000000080)=@nfc={0x27, 0x0, 0x1, 0x5}, 0x80, 0x0}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r1, 0x29, 0x18, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000240)={0xe, 0x0, 0x0, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="2400000020000103000000000000000002030000000000001a0000000800010000000000"], 0x24}}, 0x0) 2.575504628s ago: executing program 2 (id=2452): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a00a100", @ANYRES32=r2, @ANYBLOB="146c7b6113f400000000000000000000000000010800ca1086e70000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x300, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc4014}, 0x10) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000000)={0x5c, 0x2, 0x0, 0x10001, 0x0, 0xf0}) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a00a100", @ANYRES32=r2, @ANYBLOB="146c7b6113f400000000000000000000000000010800ca1086e70000"], 0x34}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@newqdisc={0x48, 0x24, 0x300, 0x0, 0x25dfdc00, {0x60, 0x0, 0x0, 0x0, {}, {0x2, 0xffff}, {0xfff3, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x1ff}, @TCA_CAKE_AUTORATE={0x8, 0x9, 0x1}]}}]}, 0x48}, 0x1, 0x0, 0x0, 0xc4014}, 0x10) (async) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0000000000008000280012800a00010076786c616e"], 0x50}}, 0x4000000) (async) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3400000015"], 0x34}, 0x1, 0x0, 0x0, 0x40}, 0x4000080) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305839, &(0x7f0000000000)={0x5c, 0x2, 0x0, 0x10001, 0x0, 0xf0}) (async) 2.404067947s ago: executing program 9 (id=2455): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES8=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000005000000a11a10d130000000ff070000000000001cfb0000000000000000677887000000000052e503ed44ab5e22030000000000000060"], 0x48) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00', 0x0}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r3, 0x0, 0x9}, 0x18) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) sendmsg$kcm(r5, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000580)="d8001c00180081064e81f782db44fd56170d12a0b9b545c7", 0x18}], 0x1}, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r6, 0x6, 0x1c, 0x0, &(0x7f0000000140)) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r1, @ANYRES64=r4, @ANYRES16=r3, @ANYRESDEC=r5, @ANYRES16=r4], 0x0, 0x34, 0x0, 0x1, 0xfffffffd, 0x0, @void, @value}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000ed0759cb47cd90df41fa7a40c72a22dcc53a83731c39b01fceb7"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f00000000c0)={0x0, 0x1}, 0x1, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000180)={r8, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, &(0x7f0000001200)=[{}], 0x8, 0x0, 0x0, 0x0, 0x37, 0x0, 0x8, 0x0, 0x0}}, 0x10) r9 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r9, &(0x7f0000000040)={0x1d, r2, 0x1, {0x0, 0xf1, 0x3}}, 0x18) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)={'vxcan1\x00'}) bind$can_j1939(r1, &(0x7f0000001200)={0x1d, r2, 0x0, {0x2, 0xff, 0x7}}, 0x18) connect$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x4, {0x1, 0xff, 0x3}, 0xfe}, 0x18) writev(r1, &(0x7f0000000240)=[{&(0x7f0000000000)='h', 0xfdef}], 0x1) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{r0}, &(0x7f0000001800), &(0x7f0000000000)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@map_val={0x18, 0x8, 0x2, 0x0, r10, 0x0, 0x0, 0x0, 0x9}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r11, 0x2f08, 0x10, 0x10, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000700)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r13, 0x8933, &(0x7f0000000740)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_MAC_ACL(r13, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000780)={0x1c, r12, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r14}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x10) 2.201057643s ago: executing program 8 (id=2457): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="05000000010000000800000008"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000500)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "8a9646", 0x14, 0x4, 0x0, @empty, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x4, &(0x7f00000000c0)=@framed={{}, [@jmp={0x5, 0x1, 0xc, 0xb, 0x6, 0x100, 0xffffffffffffffff}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000100)) 2.081354355s ago: executing program 8 (id=2458): syz_init_net_socket$ax25(0x3, 0x2, 0xcf) 1.924893969s ago: executing program 8 (id=2459): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x1, 0x0) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x1}, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01010000000000000000020000000900010073797a3100000000080002400000000120000000000a03000000000000000000070000000900010073a27a310000000028000000000a030000000000000000000200000008000240000000000900010073797a310000000014000000110001"], 0x98}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x30, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_OIF={0x8, 0x5, r2}, @NHA_ENCAP={0x10, 0x8, 0x0, 0x1, @MPLS_IPTUNNEL_DST={0xc, 0x1, [{0x7f, 0x0, 0x1}, {0x200}]}}]}, 0x30}, 0x1, 0x0, 0x0, 0x4804}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="480000001000030401f80000000000000000eb00", @ANYRES32=0x0, @ANYBLOB="a5fdad880000000008000a00", @ANYRES32, @ANYBLOB="200012800b00010067656e6576650000100002"], 0x48}}, 0x0) 1.424443781s ago: executing program 2 (id=2460): r0 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f00000017c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xc4}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket(0x10, 0x803, 0x0) r2 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r2, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, 0x5) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000000040)=[{{0x0, 0x0, &(0x7f00000000c0)}}], 0x1, 0x0, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x89fc, &(0x7f0000000040)={'bond0\x00'}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r4, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000640)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)={0x188, r5, 0x10, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x1}, @NL80211_ATTR_MESH_SETUP={0x114, 0x70, [@NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AMPE={0x4}, @NL80211_MESH_SETUP_IE={0x90, 0x3, "21566169a11b541d8eeb914d54a4fcccadde3fa4dd028bd417425c63b6f40e459966ea65035c8a06340f95123639a434ed95a35db72497f99b86011c4d99e6daf73f5bfe1450346a193b1932c4bd3b85bae814bf15f4df27d61feaed30467d98789814ffbe353684593f165f6aa1c1661c27d14629b82c213621195c4129cb26b7902d9d890b7bef741755e2"}, @NL80211_MESH_SETUP_IE={0x6a, 0x3, "8b8c74b66788342d5e99eb8043bc760fd8bc619c144ec9b78f6b91b23e4c48b4689936c28091509c376327abe8812d1ad86456ba13aafe887c480b91070f774040fcaed7a5ff7d4076f4f0b998784b78a8ce015efa75ee2974e931969f683c33b22e17e69447"}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x2}]}, @NL80211_ATTR_MESH_SETUP={0x50, 0x70, [@NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_METRIC={0x5, 0x2, 0x1}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_USERSPACE_MPM={0x4}, @NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0xc}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5, 0x1, 0x1}, @NL80211_MESH_SETUP_IE={0x19, 0x3, "6d2d39b9d47f93f6c01b4772a3ac795fb6e2a5cc58"}]}]}, 0x188}, 0x1, 0x0, 0x0, 0x4880}, 0x48000) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000680)=ANY=[@ANYBLOB="3c00000010001fffef0000b41a8f5b6cbd47e33c2e403466da4d3862d0516ca6dd7bd244d2372d5c1661fd59e5db308bde3290c012ee959a769024122348444d6c78f68b0e58b193ff30a6dd36655d43bd6bd610caf3d01ea32da3d33295c410e3cdb149b5d1672704a0e9e180af", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e65766500000400028008000a00", @ANYRES32=r4, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket(0x1, 0x803, 0x0) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bind$bt_hci(r8, &(0x7f0000000040)={0x1f, 0x1}, 0x6) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c0000001000030425bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="000500000000000014003500776c610300ffff1f000000000000005508000a00", @ANYRES32=r9, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) 1.375952386s ago: executing program 3 (id=2461): connect$inet6(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 64) r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 64) bind$x25(r0, &(0x7f0000000040), 0x12) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000010000100ffffffff"], 0x38}}, 0x0) (async) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x27}, @random="0005d70000fe", @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x26}, @remote, @dev, @remote}}}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) r2 = socket$kcm(0x2, 0xa, 0x2) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x260001, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (rerun: 32) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r5) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) (async) ioctl$SIOCSIFHWADDR(r3, 0x8943, &(0x7f0000002280)={'pimreg0\x00'}) (async) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000280)=ANY=[@ANYBLOB="016f0900010000000000200000004600003f00001500008490783fffffffac1414aa00000000", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="ba0000009078001809c400050200000000000000000002d58838068b91000000"], 0x4e) (async) syz_emit_ethernet(0x2a, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], 0x0) (async, rerun: 64) r7 = socket$pppl2tp(0x18, 0x1, 0x1) (async, rerun: 64) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r9 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000100)=@pppol2tpin6={0x18, 0x1, {0x0, r6, 0x2, 0x0, 0x0, 0x3, {0xa, 0x4e22, 0x40000000, @mcast1, 0x80}}}, 0x32) (async, rerun: 32) close(r9) (async, rerun: 32) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) (async) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async, rerun: 64) r10 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) setsockopt$IPT_SO_SET_REPLACE(r10, 0x8001000000000000, 0x40, &(0x7f0000000740)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0xd0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0xd0, 0x2a8, 0x3, 0x0, {[{{@ip={@private=0xa010102, @dev={0xac, 0x14, 0x14, 0x12}, 0xffffff00, 0xffffffff, 'geneve0\x00', 'sit0\x00', {}, {0xff}, 0x73, 0x2, 0x14}, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x3, 0x3]}, {0xffffffffffffffff, [0x11]}}}}, {{@ip={@multicast2, @multicast2, 0xffffff00, 0xffffffff, 'lo\x00', 'ip6gretap0\x00', {0xff}, {0x7f}, 0x88, 0x3, 0x3}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00', {0xb201}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2c4) (async, rerun: 64) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (rerun: 64) 1.300170151s ago: executing program 9 (id=2462): r0 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000000)={0x3, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0x6, @ipv4={'\x00', '\xff\xff', @local}}}}, 0x108) r1 = socket$inet6(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r1, 0x6, 0x2e, 0x0, &(0x7f00000064c0)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x7}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc, 0x10}, {0xc, 0x9}}}]}]}, 0x70}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x70, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x44, 0x4, 0x0, 0x1, [{0x40, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SREG={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_OP={0x8}, @NFTA_BYTEORDER_SIZE={0x8, 0x5, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x98}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000000440)={'ip6_vti0\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x4, 0xbe, 0x53, 0xfd68, 0x2, @remote, @private2, 0x10, 0x7, 0x1000, 0x1ff}}) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f0000000480)={{{@in6=@local, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e20, 0x5, 0x4e20, 0x3, 0xa, 0x0, 0x180, 0x3c, r5}, {0x2, 0x6, 0x1, 0x8, 0x4, 0x1, 0x4, 0x7fff}, {0x8000000000000001, 0x400, 0x81, 0x919f}, 0x1, 0x6e6bb6, 0x0, 0x0, 0x3, 0x2}, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4d6, 0x2b}, 0xc5ed650417960dfb, @in=@local, 0x3504, 0x1, 0x1, 0x81, 0x6f4, 0x8b80, 0x7}}, 0xe8) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000140)={0x2, {{0xa, 0x0, 0x0, @mcast2}}, {{0xa, 0x0, 0xfffffffd, @mcast2, 0x10000000}}}, 0x108) getsockopt$inet6_buf(r0, 0x29, 0x30, &(0x7f0000000000)=""/40, &(0x7f0000001000)=0xf9) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000280)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000380)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x0, 0x1, 0x3, 0x80a0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5, 0x2, 0x0, @value=r7, @void, @void, @value}, 0x50) 1.157798119s ago: executing program 8 (id=2463): getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000000)=0x0, &(0x7f00000000c0)=0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0xc, 0xff}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@delneigh={0x94, 0x1d, 0x20, 0x70bd2d, 0x25dfdbfc, {0x19, 0x0, 0x0, r0, 0x40, 0x6, 0x6}, [@NDA_MASTER={0x8, 0x9, 0x8}, @NDA_DST_IPV4={0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x22}}, @NDA_CACHEINFO={0x14, 0x3, {0x802, 0x6, 0xa, 0x4}}, @NDA_DST_IPV6={0x14, 0x1, @remote}, @NDA_NH_ID={0x8, 0xd, 0xd1}, @NDA_CACHEINFO={0x14, 0x3, {0x80, 0x46, 0x63d, 0xfffffffc}}, @NDA_DST_MAC={0xa, 0x1, @remote}, @NDA_DST_IPV4={0x8, 0x1, @loopback}, @NDA_VNI={0x8, 0x7, 0x80000000}, @NDA_DST_IPV4={0x8, 0x1, @empty}]}, 0x94}}, 0x0) 1.106627713s ago: executing program 3 (id=2464): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x52, r1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) accept4(r2, 0x0, 0x0, 0x0) close(0x3) sendmsg$nl_route(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=@ipv4_getrule={0x1c, 0x22, 0x10, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0x0, 0x7e, 0x3, 0x0, 0x0, 0x1, 0x10}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x5) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r3 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r3, &(0x7f0000000dc0)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet6_int(r4, 0x29, 0x18, 0x0, &(0x7f0000000200)) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000000)={0xa, 0x4e20, 0x0, @empty}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000e00)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c200000008004500001c0000000300000000000000000000000000004e2000089078"], 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_mreq(r5, 0x0, 0x23, &(0x7f0000000000)={@initdev={0xac, 0x1e, 0x1, 0x0}, @remote}, 0x8) 976.350232ms ago: executing program 2 (id=2465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000240b05000300000000000900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) 972.374912ms ago: executing program 3 (id=2466): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtfilter={0x5c, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xb, 0x10}, {}, {0x7}}, [@filter_kind_options=@f_flow={{0x9}, {0x2c, 0x2, [@TCA_FLOW_RSHIFT={0x8, 0x4, 0x2}, @TCA_FLOW_POLICE={0x18, 0xa, 0x0, 0x1, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x15}, @TCA_POLICE_RATE64={0xc, 0x8, 0x5}]}, @TCA_FLOW_MASK={0x8, 0x6, 0x9}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x400c894}, 0x0) 971.115793ms ago: executing program 9 (id=2467): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_x25_SIOCADDRT(r1, 0x890b, &(0x7f0000000000)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x0}, 0xe, 'wlan1\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x14, r2, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f00000002c0)={0x40, r2, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x8, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_ACTIVE={0x4}]}]]}, 0x40}}, 0x0) r4 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r4, 0x0, 0x22, &(0x7f00000002c0)=0xffff0000, 0x4) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=@newlinkprop={0x20, 0x6c, 0x20, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, 0x208d2, 0x40010}}, 0x20}, 0x1, 0x0, 0x0, 0x44}, 0x0) 899.181519ms ago: executing program 8 (id=2468): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r1, 0x0, 0x13, &(0x7f0000d10ffc), 0x4) (async) accept(r1, 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) r3 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x24, r6, 0x1, 0x70bd28, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_NETNS_FD={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000044}, 0x4000000) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x68, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_EMATCHES={0x34, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x28, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x24, 0x1, 0x0, 0x0, {{0x7, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_NAME={0xb}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x3}]}}]}]}]}}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 842.829736ms ago: executing program 2 (id=2469): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), 0xffffffffffffffff) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) write$bt_hci(0xffffffffffffffff, 0x0, 0x138) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000140)={'macsec0\x00', &(0x7f0000000180)=@ethtool_rxfh_indir={0x39, 0x2, [0x851, 0x9]}}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000004, 0x13, r7, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r9, 0x84, 0x1b, &(0x7f0000001340), &(0x7f00000001c0)=0x8) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_MTU={0x8}]}, 0x3c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r8, 0x0, 0x0}, 0x10) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00), 0x4) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r11, 0x0, 0xd4, &(0x7f0000000000)=0xe, 0x4) sendmsg$ETHTOOL_MSG_TSINFO_GET(r2, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001680)={&(0x7f0000001500)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100ffffffff000000002b000000180001801400020076657468315f766972745f77696669"], 0x2c}}, 0x0) 596.280998ms ago: executing program 3 (id=2470): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x7}, {0x5, 0xb}}}, 0x24}}, 0x40004) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r1, &(0x7f0000000a80)={0x24, @short={0x2, 0x2, 0xffff}}, 0x14) 584.528982ms ago: executing program 9 (id=2471): socket$inet6_mptcp(0xa, 0x1, 0x106) syz_init_net_socket$rose(0xb, 0x5, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) socket$rds(0x15, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x2a, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6(0xa, 0x2, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{0x0}], 0x1}}], 0x1, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r0, &(0x7f0000000040), 0x40000000000029d, 0x832b, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x210, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x70, 0xe0, 0x0, {0x200003ae, 0x7f00}}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x1d, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x270) sendto$inet6(r1, &(0x7f0000000e80)="0d0ad7", 0x3, 0x6d91fb6102d8910c, 0x0, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000e4ff000000000000000000630100000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 484.36804ms ago: executing program 8 (id=2472): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000e00)=ANY=[], 0x58}, 0x1, 0x0, 0x0, 0x4001}, 0x40800) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001380)=ANY=[@ANYBLOB="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"], 0x2c0}}, 0x8000090) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xe, 0x4, &(0x7f0000000000)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x6e, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)=ANY=[@ANYRESDEC=r2, @ANYRES16=r2, @ANYRES16=r0, @ANYRES8=r1, @ANYRESHEX=r2], 0x50) getsockopt(r1, 0x4, 0xf, &(0x7f00000002c0)=""/168, &(0x7f0000000380)=0xa8) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000000200)={0x2, 0x4e20, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x8) ioctl$SIOCPNGETOBJECT(0xffffffffffffffff, 0x89e0, &(0x7f0000000000)=0xffff) sendmsg$NL80211_CMD_DEL_KEY(r3, &(0x7f0000000d40)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000d00)={&(0x7f0000000e80)=ANY=[@ANYBLOB="64150000b442c24fbe7fa1ad7d688ac9d1e67e0c50c6fbcd31503a6954fb9b8d7c5403805d9f27dc606a9fffb8cd54659412c6cac4bdc5ee58b5b631377f6b43c61b206f3a351a27a06fd18789d3e7c382d9ac1f75bd87b5df076f9898b8ed54600a55852f7404f19b82a88faaf2c6e6c8b1047797c8d4ec6df7f1374376229606e65487c0b0cbba60d03cf7ab4cdd28bfc245c088cf6ebf91f4bd6b537b39c48764abf60523d666c9a002c1ee8241f332c49ff739f3080a90272cb9e183f08000c94be56f0850b31a0b986e", @ANYRES16=0x0, @ANYBLOB="00022dbd7000fddbdf250c0000000c009900080000007800000018006e8004000100040001000400020004000100040002001100070047f4fb66a71fc8c8c76d06481d0000000400280009000700e202fb87b80000000800370000000000"], 0x64}, 0x1, 0x0, 0x0, 0x4}, 0x50) r5 = accept4(r4, 0x0, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000009000000050010000200000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r7], 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000280)={r8, &(0x7f0000000040)="8f4e0ac905e0d66dffde4a727d6a90a69dfca541265892e0ad8eb103839d025d58c3756207a9234b34469772b7af626b5709a858bc08caaada3334ca43451fa65d2b0fe7c5e0352a356bcce311fa97cf76625e1dab4f0cac81aea3c5495d", 0x0}, 0x20) ioctl$sock_netrom_SIOCDELRT(0xffffffffffffffff, 0x890c, &(0x7f0000000680)={0x0, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bpq0, 0x89, 'syz1\x00', @null, 0x0, 0x8, [@null, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @bcast, @bcast]}) ioctl$SIOCX25SENDCALLACCPT(r5, 0x89e9) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r5, 0x84, 0x23, &(0x7f0000000180)={0x0, 0x8}, 0x8) r9 = socket$packet(0x11, 0x3, 0x300) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c00)={r2, 0x0, 0x84, 0x9b, &(0x7f0000000580)="241e21dee504a41ebc22af07d0bdeeecb6b8ab4e715cf940600870cdb72149756e5106a34edc6fec2d463c968f8f596e463961509da874012957576db712c2357b03036381016b6d901ef14f89baffb0543b932ad6b3c460a988488f7dbe7f68f845319ee07ec6f9188eb1bb97dfd87f3a5db7b557c47f16b034daf3aaf1ec0fda807ae1", &(0x7f0000000700)=""/155, 0x7ff, 0x0, 0x6c, 0x68, &(0x7f00000007c0)="c68b35ca59b89b2fbd684a6a8f47b89f3101e99eeb6f46ab347f798b68f1e85954f1f44d0c4b46f351b4fbe8e59e7b86c3e2cb775750df4e537ae397f3343ad8cf56a2e9541614673e977abf3ccb338bdd8d176630d660dcfe141824d78cb2a9ac18766d7135505a56cfa42f", &(0x7f0000000b80)="f4eb941f3ccf648ee1887f919a96f98cc916a09805bfe584fbf98bc49e8a8a59c62797b3a1ec65325d7d3b27e892ab4924b5ab355fcc5132c6ccf2f06aa47569ce5b6ac58bb9b83283e406b27e7e02303a531ebd3368f1ed11045fae5e499e5060aeecc4f05175d2", 0x2, 0x0, 0x9}, 0x50) ioctl$sock_bt_bnep_BNEPCONNADD(0xffffffffffffffff, 0x400442c8, &(0x7f0000000480)=ANY=[@ANYRES32, @ANYBLOB="ff4a06b04f00e043898533c1878b6204e97108877815fa869176075cfa6173eebbea89de9370e86d011b2b4d9086206b0c68d4158cfc23a8badcb92be5cbc7ded77f000000"]) syz_emit_ethernet(0x52, &(0x7f0000000500)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd604dc58c001c060020010000000000000000000000000001fe8000000000000000000000000000aafffe4001", @ANYRESHEX=r9, @ANYRES16=r8, @ANYRES32=r9], 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001140)=@newqdisc={0x204, 0x24, 0x3fe3aa0262d8c783, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r10, {0x8}, {0xffff, 0xffff}, {0x10, 0x2}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x1d4, 0x2, {{0x1, [0x9, 0x1, 0x6, 0x9, 0x7, 0x2, 0x3, 0x10, 0x8, 0x4, 0xc, 0x6, 0x3, 0x7, 0x5, 0x8], 0x0, [0x7, 0x7f, 0x2, 0x8, 0x8, 0x3, 0x0, 0x6, 0x81, 0x8, 0x3fc0, 0x3, 0x81, 0x8, 0x0, 0x1], [0xa4, 0x6, 0xb, 0x6, 0x4, 0x7ff, 0xc, 0x8a7, 0x5, 0x6, 0x9, 0x9, 0x4b08, 0x3, 0x6, 0x4]}, [@TCA_MQPRIO_MIN_RATE64={0xc4, 0x3, 0x0, 0x1, [{0xc, 0x3, 0x8000}, {0xc, 0x3, 0xdf}, {0xc, 0x3, 0x400000000}, {0xc, 0x3, 0x1000}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0xfffffffffffffffb}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0x4}, {0xc, 0x3, 0x1}, {0xc, 0x3, 0x2}, {0xc, 0x3, 0xdd}, {0xc, 0x3, 0x91c}, {0xc, 0x3, 0x7f}, {0xc, 0x3, 0xd}, {0xc, 0x3, 0x7}, {0xc, 0x3, 0x9}]}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_MIN_RATE64={0xa0, 0x3, 0x0, 0x1, [{0xc, 0x3, 0xb}, {0xc, 0x3, 0x8}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0xfffffffffffff495}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x9}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0xc037}, {0xc, 0x3, 0x200}, {0xc, 0x3, 0x401}, {0xc, 0x3, 0x6}, {0xc, 0x3, 0x80000001}, {0xc, 0x3, 0x8}]}, @TCA_MQPRIO_MODE={0x6}, @TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x204}}, 0x0) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="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"/276], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 386.821867ms ago: executing program 3 (id=2473): syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40) (async) sendmsg$DEVLINK_CMD_GET(0xffffffffffffffff, 0x0, 0x40) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) (async) r1 = syz_genetlink_get_family_id$nbd(&(0x7f0000000000), r0) r2 = socket(0x1e, 0x4, 0x0) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x3c}}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000300)={0x3c, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}, {0xc, 0x1, 0x0, 0x1, {0x8, 0x1, r2}}]}]}, 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0}, 0x1, 0x0, 0x0, 0x20004015}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x0, 0x20000000000000bb, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb714000008"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x0, 0x2000000000000080, 0x0, 0x0, 0x4, 0x0, 0x0, 0x1f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0x200008, 0x8, 0x20000}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="4c0000001800010800000000000000850a600000000000000500000014000500200100000000000000000300000000001c00090008000000", @ANYRES32=r3], 0x4c}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) 282.896054ms ago: executing program 9 (id=2474): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0xb4, 0x65, 0x2, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x8}, {0x0, 0x9}, {0x6}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}, @filter_kind_options=@f_route={{0xa}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x6, 0x22}}, @filter_kind_options=@f_route={{0xa}, {0x60, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x4}, @TCA_ROUTE4_POLICE={0x48, 0x5, [@TCA_POLICE_TBF={0x3c, 0x1, {0x7ff, 0xffffffffffffffff, 0x3, 0xa, 0x6, {0xb, 0x2, 0x1, 0x9, 0x0, 0x4}, {0x10, 0x2, 0x6, 0xfffe, 0x1, 0xeaa1}, 0x6, 0x200, 0x7}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xb}]}]}}]}, 0xb4}, 0x1, 0x0, 0x0, 0x81}, 0x8000) (async) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x3a1}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x87}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) 50.327011ms ago: executing program 3 (id=2475): bpf$ENABLE_STATS(0x20, &(0x7f0000000040), 0x4) (async, rerun: 64) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$sock_int(r1, 0x1, 0x27, &(0x7f0000000140)=0x32, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r2) (async) r3 = socket$can_j1939(0x1d, 0x2, 0x7) (async) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="fdff00a557e977473158b9a874748fb7ce2be6c017ddf7680335208322ec5ea489e2cc12b7b2cfa9eb642cbf774d07884b535f0ee95334f9cc527fcffebe2b5d99c94c09f65ea496f50060b27d324c7b4b0e2fcf74ee47d0a0ff00df87141e6baee5964ed8990a093b40956bbd105f8fde752a6149ce696c4b498a09065cb6859e4af07b9d00ac8ded1279d13787fc7ff6e9e14de623d2c9db965808a781181b6ef71fe64c0d0b02776ce53cbbdbc5756e8fcdb0fc2f0eee4bde2364a23f94c458eaec8e9f188502be1453a7e4d84be92578145d5d8663561ff34711d92c91", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES64=r0], 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{r4}, &(0x7f0000001800), &(0x7f0000000000)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r4}, 0x4) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x3, 0x5, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4}, [@cb_func={0x18, 0x2, 0x4, 0x0, 0x4}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x2f08, 0x8, 0x8, &(0x7f00000006c0)="0000000000000005", &(0x7f0000000200)=""/8, 0x447, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) sendmsg$can_j1939(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x20044804}, 0x24044000) (async, rerun: 32) bind$ax25(r0, &(0x7f0000000080)={{0x3, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @null]}, 0x48) (async, rerun: 32) r6 = socket(0x18, 0x3, 0x801000) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000800000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050800) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000400), r6) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000078000100005332d8f200000007000000"], 0x28}, 0x1, 0x0, 0x0, 0x44090}, 0x8040) syz_emit_ethernet(0x46, &(0x7f0000000000)=ANY=[@ANYBLOB="0380c2000000bbbbbbbbbbbb080045000038ffff000000019678ac1e0001ac1414aa030490781200183f252400000000000000890000ac14143ce0000002d33cffd98794e48a"], 0x0) getsockname$packet(r6, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000140)=0x2) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000040)) (async, rerun: 32) r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_route(r11, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010067656e6576650000040002800a000100aaaaaa6ddb1f5300"], 0x40}}, 0x0) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)=ANY=[@ANYRES8=r11, @ANYRES8=r7, @ANYRESOCT=r7, @ANYRES32=r0, @ANYRES64=r6, @ANYBLOB="806e3bfd3cd64f666a868033fd50ee359006ab94589a0b25de2d494e96b6a0479b5e8643b0a2f7e9caad28225652c4d4f9a5e8e34cf98465f339310e3d3d929a59189ae12f2fb5f9c644ab9b5dbcebb2ca2078e60432bb0ba397df1482a78c6176cd39b7ee0a9a750bfb8655bf10c501d9d4eadd218d69793826e0b45da8f58a784b3fce9e8da7dc95671bbadb5ec7451737aa86f19a71f984dc108e8b2036119295358d881348982ec33aa4cfb4e793c565a5da94e2b9578c8091b0f27dd0", @ANYRES8=r8, @ANYRESHEX=r8], 0x48) bind$inet6(r6, &(0x7f0000000180)={0xa, 0x4e20, 0x955, @loopback, 0x3}, 0x1c) (async) sendmsg$nl_route(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="480000001000030500"/20, @ANYRES32=r10, @ANYBLOB="00000000400002002800128000000100767863616e000000180002801400010000000000", @ANYRES64=r12], 0x48}, 0x1, 0x0, 0x0, 0x2400008c}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r0) 0s ago: executing program 9 (id=2476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0xfffffffa}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x1a, &(0x7f0000000000)=0x6, 0x4) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newlink={0x38, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x42}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gtp={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GTP_FD1={0x8, 0x2, @udp6=r2}]}}}]}, 0x38}, 0x1, 0xba01}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f0000000340)={0xf8, 0x1, 0x1, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@CTA_MARK={0x8, 0x8, 0x1, 0x0, 0x7}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x7]}, @CTA_TUPLE_ORIG={0xcc, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x14, 0x4, @private1}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x1}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @dev={0xac, 0x14, 0x14, 0x27}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x14, 0x4, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}]}, @CTA_STATUS={0x8, 0x3, 0x1, 0x0, 0x2400}]}, 0xf8}, 0x1, 0x0, 0x0, 0x80}, 0x8001) bind$inet(r3, &(0x7f0000000200)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r3, &(0x7f0000004980)=[{{&(0x7f0000000000)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000000040)=[{&(0x7f0000000280)="674477c4547e1afff7f4f92f8c47b31bc154dbcecc5685917d0ac3bb6788bba5d9fe3f6c700a5b439a471a1f9c370500000050531a2536852cf70892b19b4a13c26300b32c7ea0d5e4697935673b7cce3706da59be8eaceac8b35590242c7f19ddce74bb493a1ffaef1e83902ecd07328d461d1659a93f312d5277d2e8ed51011eec525c4db22366b30aca529d3711e40d8f68148a3d0a83224c8e84d99f83f76ed05658de4da41388de97f0021e628e3c6b0b8ae875f9", 0xb7}], 0x1}}], 0x1, 0x20008000) r4 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) setsockopt$inet_tcp_TLS_TX(r4, 0x6, 0x1, &(0x7f0000000100)=@gcm_256={{0x304}, '\x00', "24a4c88ea3e4daa74173357604869f5e2625b8bd00", "00a3c581", "bbbd0cef73b0e4fa"}, 0x38) kernel console output (not intermixed with test programs): g attributes in process `syz.5.1676'. [ 236.267215][ T1165] bridge_slave_1: left allmulticast mode [ 236.283236][ T1165] bridge_slave_1: left promiscuous mode [ 236.290497][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.327869][ T1165] bridge_slave_0: left allmulticast mode [ 236.345499][ T1165] bridge_slave_0: left promiscuous mode [ 236.355831][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.751192][T11573] netlink: 252 bytes leftover after parsing attributes in process `syz.2.1682'. [ 237.084655][T11580] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1683'. [ 237.169151][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 237.187328][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 237.198914][ T1165] bond0 (unregistering): Released all slaves [ 237.269770][T11575] batadv_slave_1: entered promiscuous mode [ 237.323816][T11574] batadv_slave_1: left promiscuous mode [ 237.843535][ T5841] Bluetooth: hci0: command tx timeout [ 237.893430][T11541] chnl_net:caif_netlink_parms(): no params data found [ 238.086954][T11626] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.202051][T11635] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1697'. [ 238.211779][T11635] netlink: 220 bytes leftover after parsing attributes in process `syz.2.1697'. [ 238.403443][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 238.548981][ T1165] hsr_slave_0: left promiscuous mode [ 238.558152][ T1165] hsr_slave_1: left promiscuous mode [ 238.574342][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.584743][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.607227][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.623789][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.712944][ T1165] veth1_macvtap: left promiscuous mode [ 238.731789][ T1165] veth0_macvtap: left promiscuous mode [ 238.739605][ T1165] veth1_vlan: left promiscuous mode [ 238.746769][ T1165] veth0_vlan: left promiscuous mode [ 239.400637][T11658] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1704'. [ 239.429469][T11658] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1704'. [ 239.551774][ T5839] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 239.565308][ T5839] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 239.573236][ T5839] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 239.592745][ T5839] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 239.600542][ T5839] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 239.618197][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 239.664424][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 239.923233][ T5839] Bluetooth: hci0: command tx timeout [ 240.062715][T11541] bridge0: port 1(bridge_slave_0) entered blocking state [ 240.070247][T11541] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.079700][T11541] bridge_slave_0: entered allmulticast mode [ 240.096973][T11541] bridge_slave_0: entered promiscuous mode [ 240.124996][T11653] pimreg3: entered allmulticast mode [ 240.187149][T11663] bridge_slave_0: left allmulticast mode [ 240.216970][T11663] bridge_slave_0: left promiscuous mode [ 240.222875][T11663] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.251128][T11663] bridge_slave_1: left allmulticast mode [ 240.258999][T11663] bridge_slave_1: left promiscuous mode [ 240.271796][T11663] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.359469][T11663] team0: Port device C removed [ 240.371004][T11663] team0: Port device team_slave_1 removed [ 240.384913][T11663] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.396820][T11663] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.405302][T11663] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.433811][T11541] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.441380][T11541] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.463715][ T5838] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.479366][T11541] bridge_slave_1: entered allmulticast mode [ 240.490380][T11541] bridge_slave_1: entered promiscuous mode [ 240.553291][ T976] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 240.667488][T11541] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 240.700603][T11541] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.906674][T11683] veth0: entered promiscuous mode [ 240.916990][T11541] team0: Port device team_slave_0 added [ 240.953545][T11683] geneve2: entered promiscuous mode [ 240.958908][T11683] geneve2: entered allmulticast mode [ 240.997730][T11541] team0: Port device team_slave_1 added [ 241.019123][T11682] veth0: left promiscuous mode [ 241.038185][T11688] __nla_validate_parse: 1 callbacks suppressed [ 241.038206][T11688] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1714'. [ 241.132068][T11688] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1714'. [ 241.220922][T11541] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 241.228257][T11541] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.253340][T11693] ip6t_REJECT: ECHOREPLY is not supported [ 241.273235][T11541] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 241.298617][T11541] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 241.310580][T11541] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 241.347000][T11541] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 241.687060][ T5839] Bluetooth: hci7: command tx timeout [ 241.720495][T11541] hsr_slave_0: entered promiscuous mode [ 241.728121][T11541] hsr_slave_1: entered promiscuous mode [ 241.734640][T11541] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.742216][T11541] Cannot create hsr debugfs directory [ 241.762498][T11695] veth3: entered allmulticast mode [ 242.003820][ T5839] Bluetooth: hci0: command tx timeout [ 242.249915][T11698] syzkaller0: entered promiscuous mode [ 242.259688][T11698] syzkaller0: entered allmulticast mode [ 242.331373][T11660] chnl_net:caif_netlink_parms(): no params data found [ 243.773291][ T5839] Bluetooth: hci7: command tx timeout [ 243.817486][T11716] netlink: 144 bytes leftover after parsing attributes in process `syz.6.1722'. [ 244.045811][T11660] bridge0: port 1(bridge_slave_0) entered blocking state [ 244.068054][T11660] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.083263][ T5839] Bluetooth: hci0: command tx timeout [ 244.083388][T11660] bridge_slave_0: entered allmulticast mode [ 244.118451][T11660] bridge_slave_0: entered promiscuous mode [ 244.132583][T11660] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.140089][T11660] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.147678][T11660] bridge_slave_1: entered allmulticast mode [ 244.156548][T11660] bridge_slave_1: entered promiscuous mode [ 244.188875][T11728] syzkaller0: entered promiscuous mode [ 244.195310][T11728] syzkaller0: entered allmulticast mode [ 244.310846][T11660] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.360104][T11660] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.504149][T11660] team0: Port device team_slave_0 added [ 244.520667][T11660] team0: Port device team_slave_1 added [ 244.571371][T11748] netlink: 'syz.6.1731': attribute type 4 has an invalid length. [ 244.627165][T11751] netlink: 'syz.6.1731': attribute type 4 has an invalid length. [ 244.654608][T11753] netlink: 'syz.5.1732': attribute type 1 has an invalid length. [ 244.662533][T11753] netlink: 'syz.5.1732': attribute type 2 has an invalid length. [ 244.679191][T11753] netlink: 1172 bytes leftover after parsing attributes in process `syz.5.1732'. [ 244.696133][T11660] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.704761][T11660] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.732870][T11660] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.768740][T11756] tipc: Enabling of bearer rejected, failed to enable media [ 244.779469][T11660] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.789309][T11660] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.818134][T11660] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.841731][T11541] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 244.879995][T11541] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 244.943284][T11541] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 245.006613][T11541] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 245.021881][T11660] hsr_slave_0: entered promiscuous mode [ 245.031211][T11660] hsr_slave_1: entered promiscuous mode [ 245.038941][T11660] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 245.046702][T11660] Cannot create hsr debugfs directory [ 245.330527][T11768] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 245.568695][T11773] netlink: 'syz.2.1737': attribute type 21 has an invalid length. [ 245.594256][T11773] netlink: 156 bytes leftover after parsing attributes in process `syz.2.1737'. [ 245.649389][T11541] 8021q: adding VLAN 0 to HW filter on device bond0 [ 245.676415][T11660] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 245.721742][T11660] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 245.765846][T11660] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 245.791789][T11781] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1739'. [ 245.841689][T11660] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 245.849212][ T5839] Bluetooth: hci7: command tx timeout [ 245.888137][T11541] 8021q: adding VLAN 0 to HW filter on device team0 [ 245.942823][ T7645] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.950081][ T7645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.007645][ T7645] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.015064][ T7645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.309860][T11660] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.379594][T11660] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.428375][ T7651] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.435639][ T7651] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.452782][T11804] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1748'. [ 246.466670][T11806] netlink: 'syz.6.1747': attribute type 1 has an invalid length. [ 246.475660][T11806] netlink: 'syz.6.1747': attribute type 2 has an invalid length. [ 246.497183][ T7651] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.504433][ T7651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.524945][T11806] netlink: 1172 bytes leftover after parsing attributes in process `syz.6.1747'. [ 246.936668][T11541] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.095697][T11541] veth0_vlan: entered promiscuous mode [ 247.134118][T11660] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.149944][T11541] veth1_vlan: entered promiscuous mode [ 247.218863][T11541] veth0_macvtap: entered promiscuous mode [ 247.254264][T11541] veth1_macvtap: entered promiscuous mode [ 247.360047][T11541] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.381621][T11836] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1754'. [ 247.396454][T11541] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.413628][T11836] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1754'. [ 247.438305][T11541] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.448354][T11836] netlink: 'syz.6.1754': attribute type 15 has an invalid length. [ 247.471837][T11541] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.509732][T11541] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.523857][T11541] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.791293][T11842] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1756'. [ 247.854339][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 247.862797][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.932729][ T5839] Bluetooth: hci7: command tx timeout [ 248.018648][ T7647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.052288][ T7647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.072646][T11660] veth0_vlan: entered promiscuous mode [ 248.126889][T11660] veth1_vlan: entered promiscuous mode [ 248.237724][T11660] veth0_macvtap: entered promiscuous mode [ 248.307829][T11660] veth1_macvtap: entered promiscuous mode [ 248.377876][T11660] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.406691][T11660] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.431172][T11660] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.442409][T11660] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.458387][T11660] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.467148][T11660] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.624715][T11870] netlink: 'syz.6.1763': attribute type 1 has an invalid length. [ 248.632611][T11870] netlink: 'syz.6.1763': attribute type 2 has an invalid length. [ 248.656112][T11870] netlink: 1172 bytes leftover after parsing attributes in process `syz.6.1763'. [ 248.670544][ T149] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.682436][T11868] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1764'. [ 248.744981][ T7645] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.766098][ T7645] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.791116][T11868] geneve2: entered promiscuous mode [ 248.965628][ T149] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.000975][ T7647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.019016][ T7647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.091126][ T149] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.314390][ T149] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.754506][ T149] bridge_slave_1: left allmulticast mode [ 249.760202][ T149] bridge_slave_1: left promiscuous mode [ 249.766522][ T149] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.776264][ T149] bridge_slave_0: left allmulticast mode [ 249.781946][ T149] bridge_slave_0: left promiscuous mode [ 249.817469][ T149] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.098106][T11893] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1767'. [ 250.315691][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.329640][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.338583][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.349727][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.358380][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.516890][ T149] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.531101][ T149] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.541741][ T149] bond0 (unregistering): Released all slaves [ 250.571191][T11886] syzkaller1: entered promiscuous mode [ 250.582523][T11886] syzkaller1: entered allmulticast mode [ 250.759747][T11899] netlink: 'syz.6.1768': attribute type 21 has an invalid length. [ 250.835605][T11899] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1768'. [ 250.897894][T11899] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1768'. [ 251.593405][T11927] netlink: 'syz.7.1775': attribute type 1 has an invalid length. [ 251.601195][T11927] netlink: 'syz.7.1775': attribute type 2 has an invalid length. [ 251.663721][T11927] __nla_validate_parse: 2 callbacks suppressed [ 251.663740][T11927] netlink: 1172 bytes leftover after parsing attributes in process `syz.7.1775'. [ 251.711902][T11933] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1777'. [ 251.861635][T11936] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1778'. [ 252.171066][ T149] hsr_slave_0: left promiscuous mode [ 252.192132][ T149] hsr_slave_1: left promiscuous mode [ 252.199572][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.209933][ T149] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.220999][ T149] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.228606][ T149] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.262041][ T149] veth1_macvtap: left promiscuous mode [ 252.267840][ T149] veth0_macvtap: left promiscuous mode [ 252.275805][ T149] veth1_vlan: left promiscuous mode [ 252.281151][ T149] veth0_vlan: left promiscuous mode [ 252.403993][ T5839] Bluetooth: hci0: command tx timeout [ 252.643361][ T5839] Bluetooth: hci4: command 0x0405 tx timeout [ 253.047580][ T149] team0 (unregistering): Port device team_slave_1 removed [ 253.088124][ T149] team0 (unregistering): Port device team_slave_0 removed [ 253.822373][T11970] Unsupported ieee802154 address type: 0 [ 253.899585][T11894] chnl_net:caif_netlink_parms(): no params data found [ 253.980370][T11974] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1789'. [ 254.161221][T11894] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.165034][T11987] netlink: 'syz.7.1792': attribute type 1 has an invalid length. [ 254.169077][T11894] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.184114][T11894] bridge_slave_0: entered allmulticast mode [ 254.192011][T11894] bridge_slave_0: entered promiscuous mode [ 254.201734][T11894] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.209048][T11894] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.212484][T11987] netlink: 'syz.7.1792': attribute type 2 has an invalid length. [ 254.216630][T11894] bridge_slave_1: entered allmulticast mode [ 254.232383][T11894] bridge_slave_1: entered promiscuous mode [ 254.244573][T11987] netlink: 1172 bytes leftover after parsing attributes in process `syz.7.1792'. [ 254.295607][T11989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1793'. [ 254.312408][T11894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.332600][T11894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.351535][T11991] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 254.409450][T11894] team0: Port device team_slave_0 added [ 254.420785][T11894] team0: Port device team_slave_1 added [ 254.473284][T11894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.480414][T11894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.507667][ T5841] Bluetooth: hci0: command tx timeout [ 254.514979][T11894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.528692][T11894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.536163][T11894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.563942][T11894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.721060][T11894] hsr_slave_0: entered promiscuous mode [ 254.735913][T11894] hsr_slave_1: entered promiscuous mode [ 254.756565][T11894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.779904][T11894] Cannot create hsr debugfs directory [ 255.198276][T12016] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1801'. [ 255.427782][T12028] netlink: 'syz.7.1804': attribute type 9 has an invalid length. [ 255.439766][T12028] netlink: 211988 bytes leftover after parsing attributes in process `syz.7.1804'. [ 255.674559][T11894] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 255.692168][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.711592][T11894] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 255.764032][T11894] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 255.804408][T11894] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 255.819041][T12037] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1806'. [ 255.828839][T12037] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1806'. [ 255.847257][T12037] netlink: 'syz.2.1806': attribute type 10 has an invalid length. [ 255.860047][T12039] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 255.900821][T12042] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 256.088396][T12048] netlink: 'syz.6.1810': attribute type 11 has an invalid length. [ 256.110028][T11894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.171152][T11894] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.215711][T12056] netlink: 'syz.7.1812': attribute type 1 has an invalid length. [ 256.216614][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.230925][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.236163][T12056] netlink: 'syz.7.1812': attribute type 1 has an invalid length. [ 256.280276][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.287523][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.498170][T11894] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 256.563935][ T5841] Bluetooth: hci0: command tx timeout [ 256.628569][T12067] netlink: 'syz.7.1816': attribute type 13 has an invalid length. [ 256.644617][T12067] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 256.947581][T11894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.401804][T12091] __nla_validate_parse: 6 callbacks suppressed [ 257.401829][T12091] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1821'. [ 257.484043][T12088] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.491670][T12088] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.036835][T12088] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.074443][T12088] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.582962][T12088] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.592351][T12088] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.602450][T12088] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.623607][T12088] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 258.654361][ T5841] Bluetooth: hci0: command tx timeout [ 258.770501][T12098] tun0: tun_chr_ioctl cmd 1074025675 [ 258.779780][T12098] tun0: persist disabled [ 258.856565][T11894] veth0_vlan: entered promiscuous mode [ 258.905754][T11894] veth1_vlan: entered promiscuous mode [ 258.992271][T11894] veth0_macvtap: entered promiscuous mode [ 259.012234][T11894] veth1_macvtap: entered promiscuous mode [ 259.059104][T11894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 259.082227][T11894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 259.109218][T12120] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1825'. [ 259.120677][T11894] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.130635][T11894] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.139777][T11894] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.149380][T11894] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 259.220368][T12122] netlink: 'syz.6.1826': attribute type 2 has an invalid length. [ 259.262162][T12122] 8021q: VLANs not supported on lo [ 259.297939][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.319850][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.365884][ T7657] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.384348][ T7657] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.439877][T12129] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1829'. [ 259.462647][T12129] netlink: 10 bytes leftover after parsing attributes in process `syz.6.1829'. [ 259.529606][T12132] xt_ecn: cannot match TCP bits for non-tcp packets [ 259.636784][T12136] netlink: 'syz.6.1831': attribute type 142 has an invalid length. [ 259.660399][T12137] C: renamed from team_slave_0 [ 259.685441][T12137] netlink: 'syz.7.1832': attribute type 1 has an invalid length. [ 259.694003][T12137] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 259.742610][T12137] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1832'. [ 259.754853][T12137] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1832'. [ 259.786849][T12143] netlink: 'syz.7.1832': attribute type 1 has an invalid length. [ 259.799444][T12143] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 259.991931][T12151] IPVS: Scheduler module ip_vs_sip not found [ 260.019072][T12154] netlink: 'syz.2.1837': attribute type 10 has an invalid length. [ 260.266878][T12167] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1839'. [ 260.285251][ T7657] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.320892][T12172] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1842'. [ 260.475402][ T7657] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.654344][ T7657] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.715238][ T7657] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.826201][ T7657] bridge_slave_1: left allmulticast mode [ 260.831957][ T7657] bridge_slave_1: left promiscuous mode [ 260.838084][ T7657] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.848714][ T7657] bridge_slave_0: left allmulticast mode [ 260.854782][ T7657] bridge_slave_0: left promiscuous mode [ 260.860494][ T7657] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.149630][ T7657] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 261.160830][ T7657] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 261.171495][ T7657] bond0 (unregistering): Released all slaves [ 261.555722][T12178] netlink: 36 bytes leftover after parsing attributes in process `syz.7.1845'. [ 261.726094][ T7657] hsr_slave_0: left promiscuous mode [ 261.751829][ T7657] hsr_slave_1: left promiscuous mode [ 261.774238][ T7657] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.781705][ T7657] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.817876][ T7657] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.855621][ T7657] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.958073][ T7657] veth1_macvtap: left promiscuous mode [ 261.972790][ T7657] veth0_macvtap: left promiscuous mode [ 261.979282][ T7657] veth1_vlan: left promiscuous mode [ 261.992170][ T7657] veth0_vlan: left promiscuous mode [ 262.197597][T12197] netlink: 'syz.6.1850': attribute type 4 has an invalid length. [ 262.221236][T12197] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1850'. [ 262.260302][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 262.270954][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 262.279333][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 262.297877][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 262.305913][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 262.488645][T12209] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1854'. [ 262.519105][T12209] netlink: 'syz.7.1854': attribute type 7 has an invalid length. [ 262.539095][T12209] netlink: 'syz.7.1854': attribute type 8 has an invalid length. [ 262.559138][T12209] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1854'. [ 262.822661][ T7657] team0 (unregistering): Port device team_slave_1 removed [ 262.861912][ T7657] team0 (unregistering): Port device team_slave_0 removed [ 263.411173][T12215] netlink: 'syz.7.1855': attribute type 29 has an invalid length. [ 263.866957][T12233] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1861'. [ 263.931144][T12233] ipvlan2: entered allmulticast mode [ 263.946261][T12233] veth0_vlan: entered allmulticast mode [ 263.975707][T12237] ÿ: renamed from dummy0 (while UP) [ 263.999817][T12233] syzkaller0: entered allmulticast mode [ 264.075204][T12233] syzkaller0 (unregistering): left allmulticast mode [ 264.081771][T12238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 264.213689][ T5839] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 264.227367][ T5839] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 264.240360][ T5839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 264.250344][ T5839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 264.273356][ T5839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 264.323222][ T5839] Bluetooth: hci0: command tx timeout [ 264.534124][T12254] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1868'. [ 264.615953][T12254] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 264.670287][T12256] netlink: 'syz.2.1869': attribute type 1 has an invalid length. [ 264.856653][T12269] netlink: 'syz.6.1872': attribute type 1 has an invalid length. [ 264.914813][T12269] 8021q: adding VLAN 0 to HW filter on device bond2 [ 264.923717][T12200] chnl_net:caif_netlink_parms(): no params data found [ 264.943627][T12267] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 264.951485][T12267] team0: Device ipvlan2 is already an upper device of the team interface [ 265.001007][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 265.042224][T12271] veth3: entered promiscuous mode [ 265.053216][T12271] bond2: (slave veth3): Enslaving as an active interface with a down link [ 265.072610][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 265.151751][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 265.209208][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 265.247125][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 265.313513][T12274] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1873'. [ 265.506229][T12200] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.515556][T12200] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.522885][T12200] bridge_slave_0: entered allmulticast mode [ 265.531885][T12200] bridge_slave_0: entered promiscuous mode [ 265.546312][T12200] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.559911][T12200] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.567316][T12200] bridge_slave_1: entered allmulticast mode [ 265.575731][T12200] bridge_slave_1: entered promiscuous mode [ 266.197084][T12200] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.218121][T12200] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.292539][T12242] chnl_net:caif_netlink_parms(): no params data found [ 266.316809][T12200] team0: Port device team_slave_0 added [ 266.323508][ T5839] Bluetooth: hci8: command tx timeout [ 266.359023][T12200] team0: Port device team_slave_1 added [ 266.406595][ T5839] Bluetooth: hci0: command tx timeout [ 266.572307][T12317] sctp: [Deprecated]: syz.6.1881 (pid 12317) Use of struct sctp_assoc_value in delayed_ack socket option. [ 266.572307][T12317] Use struct sctp_sack_info instead [ 266.607682][T12200] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 266.616796][T12200] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.658165][T12200] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 266.701683][T12200] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 266.721714][T12200] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.759051][T12200] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 266.791901][T12242] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.799812][T12242] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.808135][T12242] bridge_slave_0: entered allmulticast mode [ 266.817320][T12242] bridge_slave_0: entered promiscuous mode [ 266.832274][T12242] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.839835][T12242] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.849382][T12242] bridge_slave_1: entered allmulticast mode [ 266.861274][T12242] bridge_slave_1: entered promiscuous mode [ 266.919667][T12242] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.955667][T12242] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.008201][T12200] hsr_slave_0: entered promiscuous mode [ 267.015408][T12200] hsr_slave_1: entered promiscuous mode [ 267.021644][T12200] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.029688][T12200] Cannot create hsr debugfs directory [ 267.057967][T12242] team0: Port device team_slave_0 added [ 267.072620][T12242] team0: Port device team_slave_1 added [ 267.170561][T12242] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.178332][T12242] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.206724][T12242] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.238896][T12242] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.246581][T12242] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.275289][T12242] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.602504][T12339] __nla_validate_parse: 23 callbacks suppressed [ 267.602523][T12339] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1891'. [ 267.667986][T12242] hsr_slave_0: entered promiscuous mode [ 267.696896][T12242] hsr_slave_1: entered promiscuous mode [ 267.703691][T12242] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.711436][T12242] Cannot create hsr debugfs directory [ 268.248805][T12366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1900'. [ 268.258565][T12366] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1900'. [ 268.403820][ T5839] Bluetooth: hci8: command tx timeout [ 268.478448][T12372] netlink: 'syz.2.1903': attribute type 11 has an invalid length. [ 268.489380][ T5839] Bluetooth: hci0: command tx timeout [ 268.548995][T12242] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 268.562288][T12242] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 268.655697][T12242] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 268.686683][T12242] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 268.749618][T12379] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1906'. [ 269.028262][T12379] team0 (unregistering): Port device team_slave_0 removed [ 269.054483][T12379] team0 (unregistering): Port device team_slave_1 removed [ 269.091639][T12200] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 269.109047][T12385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 269.147142][T12200] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 269.172058][T12200] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 269.196179][T12200] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 269.279134][T12389] netlink: 'syz.2.1909': attribute type 30 has an invalid length. [ 269.303342][T12389] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.312092][T12389] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.321346][T12389] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.330395][T12389] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 269.333536][T12390] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1909'. [ 269.351192][T12389] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.360493][T12389] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.369868][T12389] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.379227][T12389] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 269.454774][T12242] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.500118][T12242] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.528866][ T7645] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.536138][ T7645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.617024][T12200] 8021q: adding VLAN 0 to HW filter on device bond0 [ 269.628985][ T7651] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.636254][ T7651] bridge0: port 2(bridge_slave_1) entered forwarding state [ 269.763668][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 269.842727][T12200] 8021q: adding VLAN 0 to HW filter on device team0 [ 269.951677][ T149] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.958932][ T149] bridge0: port 1(bridge_slave_0) entered forwarding state [ 269.985433][ T149] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.992586][ T149] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.180878][T12407] veth1_to_team: entered promiscuous mode [ 270.275347][T12407] veth1_to_team (unregistering): left promiscuous mode [ 270.483575][ T5839] Bluetooth: hci8: command tx timeout [ 270.563500][ T5839] Bluetooth: hci0: command tx timeout [ 270.596802][T12200] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.718389][T12200] veth0_vlan: entered promiscuous mode [ 270.784700][T12200] veth1_vlan: entered promiscuous mode [ 270.823857][T12242] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.932128][T12200] veth0_macvtap: entered promiscuous mode [ 270.989016][T12200] veth1_macvtap: entered promiscuous mode [ 271.013579][T12200] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.038763][T12200] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.091193][T12200] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.113132][T12200] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.132181][T12200] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.161693][T12200] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.177704][T12431] tipc: Enabling of bearer rejected, failed to enable media [ 271.379162][T12440] netlink: 'syz.2.1918': attribute type 3 has an invalid length. [ 271.532740][ T7651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.623771][ T7651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.766180][ T7651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 271.801676][ T7651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 271.912717][T12242] veth0_vlan: entered promiscuous mode [ 271.962871][T12242] veth1_vlan: entered promiscuous mode [ 272.220230][T12242] veth0_macvtap: entered promiscuous mode [ 272.241544][T12459] netlink: 26 bytes leftover after parsing attributes in process `syz.2.1922'. [ 272.269974][T12242] veth1_macvtap: entered promiscuous mode [ 272.316990][T12242] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 272.332661][T12242] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 272.377869][T12242] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.386958][T12242] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.412627][T12242] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.435206][T12242] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.452884][T12467] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.1924'. [ 272.563585][ T5839] Bluetooth: hci8: command tx timeout [ 272.744084][ T1165] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 272.768645][ T7661] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.779776][ T7661] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.850353][ T7647] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.868200][ T7647] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.012431][ T1165] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.230839][ T1165] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.371675][ T1165] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 273.469824][ T1165] bridge_slave_1: left allmulticast mode [ 273.475820][ T1165] bridge_slave_1: left promiscuous mode [ 273.481543][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.491395][ T1165] bridge_slave_0: left allmulticast mode [ 273.497506][ T1165] bridge_slave_0: left promiscuous mode [ 273.504517][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.838225][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 273.849588][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 273.859914][ T1165] bond0 (unregistering): Released all slaves [ 274.076011][T12480] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 274.107401][T12478] netlink: 212376 bytes leftover after parsing attributes in process `syz.8.1857'. [ 274.464446][T12492] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1932'. [ 274.748448][ T1165] hsr_slave_0: left promiscuous mode [ 274.764052][ T1165] hsr_slave_1: left promiscuous mode [ 274.770254][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.789524][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.806106][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.806794][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 274.814661][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.834529][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 274.854452][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 274.886007][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 274.895423][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 274.949796][ T1165] veth1_macvtap: left promiscuous mode [ 274.959414][ T1165] veth0_macvtap: left promiscuous mode [ 274.971039][ T1165] veth1_vlan: left promiscuous mode [ 274.980528][ T1165] veth0_vlan: left promiscuous mode [ 275.053267][T12513] Dead loop on virtual device ip6_vti0, fix it urgently! [ 275.105359][T12514] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1938'. [ 275.851040][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 275.899774][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 276.337157][T12528] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1943'. [ 276.588249][T12536] openvswitch: netlink: Tunnel attr 303 out of range max 16 [ 276.657234][T12539] can: request_module (can-proto-0) failed. [ 276.820964][T12547] syzkaller1: entered promiscuous mode [ 276.974326][ T5841] Bluetooth: hci0: command tx timeout [ 277.308583][T12570] x_tables: duplicate underflow at hook 1 [ 277.409333][T12503] chnl_net:caif_netlink_parms(): no params data found [ 277.457124][T12576] netlink: 'syz.2.1957': attribute type 18 has an invalid length. [ 277.838664][T12586] netlink: 96 bytes leftover after parsing attributes in process `syz.6.1958'. [ 277.851768][T12503] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.868053][T12503] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.879292][T12503] bridge_slave_0: entered allmulticast mode [ 277.892883][T12503] bridge_slave_0: entered promiscuous mode [ 277.927584][T12503] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.948259][T12503] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.963340][T12503] bridge_slave_1: entered allmulticast mode [ 277.989528][T12503] bridge_slave_1: entered promiscuous mode [ 278.199386][T12503] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 278.226171][T12503] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 278.305410][T12503] team0: Port device team_slave_0 added [ 278.339726][T12503] team0: Port device team_slave_1 added [ 278.485710][T12503] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 278.499706][T12610] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1964'. [ 278.508787][T12503] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.575028][T12503] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 278.592714][T12503] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 278.600074][T12503] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 278.628489][T12503] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 278.715800][T12620] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input8 [ 278.741527][T12503] hsr_slave_0: entered promiscuous mode [ 278.755935][T12503] hsr_slave_1: entered promiscuous mode [ 278.762954][T12503] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 278.780955][T12503] Cannot create hsr debugfs directory [ 278.799675][T12623] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1968'. [ 279.055667][ T5841] Bluetooth: hci0: command tx timeout [ 279.356498][T12503] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 279.368826][T12503] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 279.382213][T12503] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 279.395907][T12503] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 279.562220][T12503] 8021q: adding VLAN 0 to HW filter on device bond0 [ 279.570821][T12640] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1973'. [ 279.617355][T12503] 8021q: adding VLAN 0 to HW filter on device team0 [ 279.643965][ T7647] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.651273][ T7647] bridge0: port 1(bridge_slave_0) entered forwarding state [ 279.680718][ T7647] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.687972][ T7647] bridge0: port 2(bridge_slave_1) entered forwarding state [ 280.188519][T12503] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.335032][T12503] veth0_vlan: entered promiscuous mode [ 280.382246][T12503] veth1_vlan: entered promiscuous mode [ 280.425695][T12674] : entered promiscuous mode [ 280.487390][T12503] veth0_macvtap: entered promiscuous mode [ 280.516321][T12503] veth1_macvtap: entered promiscuous mode [ 280.585903][T12503] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 280.631811][T12503] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.665186][T12503] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.675064][T12503] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.684270][T12503] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.693880][T12503] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.868235][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.913538][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.005536][ T7661] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.046524][ T7661] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.087633][T12696] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1990'. [ 281.092422][T12693] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1988'. [ 281.125640][ T5841] Bluetooth: hci0: command tx timeout [ 281.579324][T12717] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1995'. [ 281.590930][T12717] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.598875][T12717] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.822390][T12721] netlink: 'syz.6.1996': attribute type 20 has an invalid length. [ 282.442002][T12727] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1998'. [ 282.646995][ T7661] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.603710][ T7661] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.661427][ T7661] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.743959][ T7661] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.838696][ T7661] bridge_slave_1: left allmulticast mode [ 283.847304][ T7661] bridge_slave_1: left promiscuous mode [ 283.853312][ T7661] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.866450][ T7661] bridge_slave_0: left allmulticast mode [ 283.872114][ T7661] bridge_slave_0: left promiscuous mode [ 283.878699][ T7661] bridge0: port 1(bridge_slave_0) entered disabled state [ 284.639105][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 284.648630][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 284.664497][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 284.698535][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 284.714392][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 284.752297][ T5841] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 284.760975][ T7661] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 284.761506][ T5841] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 284.781352][ T5841] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 284.791238][ T5841] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 284.799797][ T5841] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 284.800908][ T7661] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 284.833484][ T7661] bond0 (unregistering): Released all slaves [ 284.850011][T12742] bridge0: port 3(gretap0) entered blocking state [ 284.857122][T12742] bridge0: port 3(gretap0) entered disabled state [ 284.864484][T12742] gretap0: entered allmulticast mode [ 284.873425][T12742] gretap0: entered promiscuous mode [ 284.879507][T12742] bridge0: port 3(gretap0) entered blocking state [ 284.886087][T12742] bridge0: port 3(gretap0) entered forwarding state [ 284.903315][T12749] netlink: 16186 bytes leftover after parsing attributes in process `syz.2.2005'. [ 285.111978][T12761] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2008'. [ 285.162572][T12761] netlink: 64 bytes leftover after parsing attributes in process `syz.2.2008'. [ 285.168937][T12759] ieee802154 phy0 wpan0: encryption failed: -22 [ 285.604091][T12777] sctp: [Deprecated]: syz.2.2013 (pid 12777) Use of struct sctp_assoc_value in delayed_ack socket option. [ 285.604091][T12777] Use struct sctp_sack_info instead [ 285.726110][T12779] netlink: 'syz.8.2014': attribute type 1 has an invalid length. [ 285.825590][T12779] 8021q: adding VLAN 0 to HW filter on device bond2 [ 286.144747][T12795] netlink: 44 bytes leftover after parsing attributes in process `syz.8.2018'. [ 286.153974][T12795] netlink: 35 bytes leftover after parsing attributes in process `syz.8.2018'. [ 286.162945][T12795] netlink: 'syz.8.2018': attribute type 5 has an invalid length. [ 286.180562][T12795] netlink: 35 bytes leftover after parsing attributes in process `syz.8.2018'. [ 286.481162][T12802] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2020'. [ 286.543470][T12752] chnl_net:caif_netlink_parms(): no params data found [ 286.658749][T12811] xt_bpf: check failed: parse error [ 286.665772][T12812] xt_bpf: check failed: parse error [ 286.752344][ T7661] hsr_slave_0: left promiscuous mode [ 286.758788][ T7661] hsr_slave_1: left promiscuous mode [ 286.765066][ T7661] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 286.772552][ T7661] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 286.781466][ T7661] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 286.790410][ T7661] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 286.803355][ T5841] Bluetooth: hci0: command tx timeout [ 286.821944][ T7661] veth1_macvtap: left promiscuous mode [ 286.827799][ T7661] veth0_macvtap: left promiscuous mode [ 286.833898][ T7661] veth1_vlan: left promiscuous mode [ 286.839395][ T7661] veth0_vlan: left promiscuous mode [ 286.883166][ T5841] Bluetooth: hci9: command tx timeout [ 287.349374][ T7661] team0 (unregistering): Port device team_slave_1 removed [ 287.409258][ T7661] team0 (unregistering): Port device team_slave_0 removed [ 287.848352][T12814] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2023'. [ 288.129731][T12752] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.139777][T12752] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.169308][T12752] bridge_slave_0: entered allmulticast mode [ 288.178420][T12752] bridge_slave_0: entered promiscuous mode [ 288.200881][T12754] chnl_net:caif_netlink_parms(): no params data found [ 288.241299][T12752] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.258368][T12752] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.290658][T12752] bridge_slave_1: entered allmulticast mode [ 288.298993][T12752] bridge_slave_1: entered promiscuous mode [ 288.439666][T12752] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.465448][T12752] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.588846][T12752] team0: Port device team_slave_0 added [ 288.606910][T12752] team0: Port device team_slave_1 added [ 288.617008][T12754] bridge0: port 1(bridge_slave_0) entered blocking state [ 288.627405][T12754] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.636075][T12754] bridge_slave_0: entered allmulticast mode [ 288.650448][T12754] bridge_slave_0: entered promiscuous mode [ 288.678720][T12754] bridge0: port 2(bridge_slave_1) entered blocking state [ 288.691052][T12754] bridge0: port 2(bridge_slave_1) entered disabled state [ 288.704691][T12754] bridge_slave_1: entered allmulticast mode [ 288.712712][T12754] bridge_slave_1: entered promiscuous mode [ 288.777448][T12752] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 288.794810][T12752] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.814599][T12856] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 288.822328][T12752] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.856035][T12752] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.864292][T12752] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.891498][T12752] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.899283][ T5841] Bluetooth: hci0: command tx timeout [ 288.903602][T12855] geneve0: mtu greater than device maximum [ 288.918945][T12754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 288.951739][T12754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 288.965399][ T5841] Bluetooth: hci9: command tx timeout [ 289.050270][T12754] team0: Port device team_slave_0 added [ 289.087543][T12752] hsr_slave_0: entered promiscuous mode [ 289.094509][T12752] hsr_slave_1: entered promiscuous mode [ 289.100938][T12752] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.108735][T12752] Cannot create hsr debugfs directory [ 289.128281][T12754] team0: Port device team_slave_1 added [ 289.202512][T12864] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2038'. [ 289.256610][T12754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 289.265758][T12754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.309835][T12754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 289.341234][T12754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 289.349688][T12754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 289.378380][T12754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 289.393762][T12870] netlink: 288 bytes leftover after parsing attributes in process `syz.2.2040'. [ 289.467539][T12870] pim6reg1: entered promiscuous mode [ 289.481049][T12870] pim6reg1: entered allmulticast mode [ 289.520296][T12754] hsr_slave_0: entered promiscuous mode [ 289.527431][T12754] hsr_slave_1: entered promiscuous mode [ 289.533826][T12754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.542484][T12754] Cannot create hsr debugfs directory [ 289.852901][T12876] vlan4: entered allmulticast mode [ 290.049005][T12886] __nla_validate_parse: 2 callbacks suppressed [ 290.049024][T12886] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2046'. [ 290.089671][T12890] netlink: 240 bytes leftover after parsing attributes in process `syz.8.2045'. [ 290.294536][T12752] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 290.308276][T12752] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 290.345997][T12752] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 290.381760][T12752] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 290.419609][T12754] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 290.444042][T12754] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 290.465882][T12754] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 290.489135][T12754] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 290.576492][T12752] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.628581][T12752] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.646330][T12754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.661446][ T7645] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.668768][ T7645] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.700176][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.707337][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.720469][T12754] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.766492][ T7661] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.773862][ T7661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.789955][ T7661] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.797116][ T7661] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.935705][T12754] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 290.963990][ T5841] Bluetooth: hci0: command tx timeout [ 291.044222][ T5841] Bluetooth: hci9: command tx timeout [ 291.348235][T12752] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.487847][T12919] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 291.494368][T12919] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 291.670352][T12917] sit0: left promiscuous mode [ 292.670736][T12917] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.693307][T12917] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.702189][T12917] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.721413][T12917] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.053927][ T5841] Bluetooth: hci0: command tx timeout [ 293.059413][T12917] ip6tnl4: left promiscuous mode [ 293.123288][ T5841] Bluetooth: hci9: command tx timeout [ 293.221926][T12754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 293.397923][T12752] veth0_vlan: entered promiscuous mode [ 293.515801][T12752] veth1_vlan: entered promiscuous mode [ 293.551382][T12938] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2057'. [ 293.607484][T12752] veth0_macvtap: entered promiscuous mode [ 293.630717][T12752] veth1_macvtap: entered promiscuous mode [ 293.697646][T12752] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 293.743987][T12752] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.784961][T12947] netlink: 64138 bytes leftover after parsing attributes in process `syz.8.2059'. [ 293.811309][T12752] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.826381][T12752] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.840270][T12752] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.863112][T12752] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.058520][T12953] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2061'. [ 294.110265][ T149] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.141693][ T149] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.237248][T12754] veth0_vlan: entered promiscuous mode [ 294.253868][ T7651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.281702][ T7651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 294.296397][T12754] veth1_vlan: entered promiscuous mode [ 294.409049][T12754] veth0_macvtap: entered promiscuous mode [ 294.430060][T12754] veth1_macvtap: entered promiscuous mode [ 294.477334][T12754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 294.596752][T12754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 294.617765][T12754] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.628032][T12754] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.638669][T12754] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.648834][T12754] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 294.761029][ T5887] IPVS: starting estimator thread 0... [ 294.853320][T12976] IPVS: using max 23 ests per chain, 55200 per kthread [ 294.951443][ T1165] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 294.960976][ T1165] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.057700][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 295.076998][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 295.284678][ T1165] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.356554][T12987] netlink: 24 bytes leftover after parsing attributes in process `syz.9.2003'. [ 295.378668][T12987] netlink: 10 bytes leftover after parsing attributes in process `syz.9.2003'. [ 295.555066][ T1165] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.696808][ T1165] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.920067][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.938906][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.946933][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.956120][ T5839] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.957821][ T1165] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.975446][ T5839] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 296.112290][ T1165] bridge_slave_1: left allmulticast mode [ 296.130480][ T1165] bridge_slave_1: left promiscuous mode [ 296.140836][ T1165] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.161096][ T1165] bridge_slave_0: left allmulticast mode [ 296.178209][ T1165] bridge_slave_0: left promiscuous mode [ 296.188298][ T1165] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.557609][ T1165] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 296.572878][ T1165] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 296.585291][ T1165] bond0 (unregistering): Released all slaves [ 296.920172][T12992] chnl_net:caif_netlink_parms(): no params data found [ 297.076810][T12999] IPVS: set_ctl: invalid protocol: 47 172.30.1.9:20001 [ 297.098867][T12999] netlink: 'syz.8.2074': attribute type 58 has an invalid length. [ 297.119593][T12999] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2074'. [ 297.261182][ T1165] hsr_slave_0: left promiscuous mode [ 297.281127][ T1165] hsr_slave_1: left promiscuous mode [ 297.307541][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.340995][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.375182][ T1165] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.398154][ T1165] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.429169][T13006] netlink: 'syz.8.2076': attribute type 20 has an invalid length. [ 297.437286][T13005] netlink: 'syz.8.2076': attribute type 20 has an invalid length. [ 297.464179][ T1165] veth1_macvtap: left promiscuous mode [ 297.469955][ T1165] veth0_macvtap: left promiscuous mode [ 297.476361][ T1165] veth1_vlan: left promiscuous mode [ 297.481919][T13008] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2076'. [ 297.491336][ T1165] veth0_vlan: left promiscuous mode [ 297.560777][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 297.570852][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 297.579408][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 297.589275][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 297.599199][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 298.006952][ T5841] Bluetooth: hci0: command tx timeout [ 298.031327][ T1165] team0 (unregistering): Port device team_slave_1 removed [ 298.069684][ T1165] team0 (unregistering): Port device team_slave_0 removed [ 298.625671][T12992] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.632864][T12992] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.652072][T12992] bridge_slave_0: entered allmulticast mode [ 298.677305][T12992] bridge_slave_0: entered promiscuous mode [ 298.704052][T13018] bond0: entered allmulticast mode [ 298.708324][T13016] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2077'. [ 298.709210][T13018] bond_slave_0: entered allmulticast mode [ 298.709232][T13018] bond_slave_1: entered allmulticast mode [ 298.714497][T12992] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.741311][T12992] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.749493][T12992] bridge_slave_1: entered allmulticast mode [ 298.758009][T12992] bridge_slave_1: entered promiscuous mode [ 298.764375][T13017] netlink: 68 bytes leftover after parsing attributes in process `syz.8.2077'. [ 298.890587][T12992] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 298.945588][T12992] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 299.121624][T12992] team0: Port device team_slave_0 added [ 299.159486][T12992] team0: Port device team_slave_1 added [ 299.280863][T12992] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 299.291466][T12992] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.293448][T13032] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2081'. [ 299.324919][T13034] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2081'. [ 299.340647][T12992] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 299.343407][T13036] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2082'. [ 299.382082][T12992] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 299.389592][T12992] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 299.419293][T12992] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 299.568912][T12992] hsr_slave_0: entered promiscuous mode [ 299.578595][T12992] hsr_slave_1: entered promiscuous mode [ 299.588503][T12992] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 299.596267][T12992] Cannot create hsr debugfs directory [ 299.683506][ T5841] Bluetooth: hci3: command tx timeout [ 299.936671][T13050] IPVS: set_ctl: invalid protocol: 44 172.20.20.22:20003 [ 300.084899][ T5841] Bluetooth: hci0: command tx timeout [ 300.204642][T13010] chnl_net:caif_netlink_parms(): no params data found [ 300.556583][T13071] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2092'. [ 300.644703][ T5839] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 300.654764][ T5839] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 300.664207][ T5839] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 300.673451][ T5839] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 300.686279][ T5839] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 300.879869][T13071] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 300.898286][T13071] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 300.909138][T13071] bond0 (unregistering): Released all slaves [ 300.935829][T13010] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.943839][T13010] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.951109][T13010] bridge_slave_0: entered allmulticast mode [ 300.958768][T13010] bridge_slave_0: entered promiscuous mode [ 301.015743][T13010] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.022948][T13010] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.030649][T13010] bridge_slave_1: entered allmulticast mode [ 301.051980][T13010] bridge_slave_1: entered promiscuous mode [ 301.242450][T13010] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.270539][T13010] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.439910][T13010] team0: Port device team_slave_0 added [ 301.462845][T12992] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 301.511077][T13010] team0: Port device team_slave_1 added [ 301.530106][T12992] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 301.611626][T12992] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 301.649006][T12992] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 301.680391][T13101] ªªªªªª: renamed from vlan0 (while UP) [ 301.736224][T13010] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.744410][T13010] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.777661][ T5841] Bluetooth: hci3: command tx timeout [ 301.797293][T13010] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.861829][T13010] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.871436][T13010] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.898879][T13010] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.120996][T13010] hsr_slave_0: entered promiscuous mode [ 302.131307][T13010] hsr_slave_1: entered promiscuous mode [ 302.139530][T13010] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.150167][T13010] Cannot create hsr debugfs directory [ 302.163781][ T5841] Bluetooth: hci0: command tx timeout [ 302.411247][T13130] delete_channel: no stack [ 302.644811][T13137] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2111'. [ 302.661091][T13137] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2111'. [ 302.691031][T13074] chnl_net:caif_netlink_parms(): no params data found [ 302.724239][ T5841] Bluetooth: hci10: command tx timeout [ 302.809042][T12992] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.887594][T13146] openvswitch: netlink: Message has 3 unknown bytes. [ 302.910352][T13146] openvswitch: netlink: Actions may not be safe on all matching packets [ 303.034150][T12992] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.138479][T13074] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.152391][T13074] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.171282][T13074] bridge_slave_0: entered allmulticast mode [ 303.190982][T13074] bridge_slave_0: entered promiscuous mode [ 303.205311][T13074] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.212537][T13074] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.219948][T13074] bridge_slave_1: entered allmulticast mode [ 303.228055][T13074] bridge_slave_1: entered promiscuous mode [ 303.238869][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.246089][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.400501][ T7645] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.407836][ T7645] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.503708][T13074] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 303.547258][T13074] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 303.621849][T13174] tipc: Started in network mode [ 303.627039][T13174] tipc: Node identity , cluster identity 4711 [ 303.727432][T13074] team0: Port device team_slave_0 added [ 303.789160][T13074] team0: Port device team_slave_1 added [ 303.843572][ T5841] Bluetooth: hci3: command tx timeout [ 303.920974][T13186] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2124'. [ 303.945130][T13074] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 303.952116][T13074] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 303.991775][T13074] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 304.015836][T13074] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 304.022810][T13074] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 304.050789][T13074] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 304.078382][T13010] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 304.202097][T13010] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 304.204717][T13193] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2127'. [ 304.221991][T13010] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 304.239233][T13010] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 304.247668][ T5841] Bluetooth: hci0: command tx timeout [ 304.266331][T13074] hsr_slave_0: entered promiscuous mode [ 304.272709][T13074] hsr_slave_1: entered promiscuous mode [ 304.288276][T13074] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 304.296188][T13074] Cannot create hsr debugfs directory [ 304.556941][T13200] nbd: must specify at least one socket [ 304.804732][ T5841] Bluetooth: hci10: command tx timeout [ 304.816283][T13074] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.855417][T12992] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 304.915805][T13211] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2130'. [ 304.940727][T13074] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.017818][T13074] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.108412][T13010] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.147818][T13074] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.200852][T12992] veth0_vlan: entered promiscuous mode [ 305.227403][T13010] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.238255][T13214] netlink: 4 bytes leftover after parsing attributes in process `syz.9.2131'. [ 305.240652][T12992] veth1_vlan: entered promiscuous mode [ 305.269842][ T7657] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.277012][ T7657] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.369978][ T1165] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.377229][ T1165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.433712][T13219] rdma_rxe: rxe_newlink: failed to add vxcan1 [ 305.467150][T12992] veth0_macvtap: entered promiscuous mode [ 305.541073][T12992] veth1_macvtap: entered promiscuous mode [ 305.632747][T13221] netlink: 244 bytes leftover after parsing attributes in process `syz.9.2134'. [ 305.652608][T12992] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 305.722571][T12992] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 305.776943][T13074] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 305.801795][T13074] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 305.836802][T12992] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.862631][T12992] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.883173][T12992] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.902183][T12992] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.923343][ T5841] Bluetooth: hci3: command tx timeout [ 305.934464][T13074] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 306.028998][T13235] pimreg3: entered allmulticast mode [ 306.040590][T13074] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 306.125986][T13239] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2138'. [ 306.149656][T13239] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2138'. [ 306.197169][T13242] netlink: 'syz.8.2138': attribute type 1 has an invalid length. [ 306.212073][T13242] netlink: 244 bytes leftover after parsing attributes in process `syz.8.2138'. [ 306.240181][T13246] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2139'. [ 306.319382][T13246] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2139'. [ 306.367588][T13246] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2139'. [ 306.408668][T13248] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 306.413450][ T7657] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.425854][T13246] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2139'. [ 306.425985][ T7657] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.442462][T13246] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2139'. [ 306.457892][T13010] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 306.476843][T13246] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2139'. [ 306.512478][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.538395][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.628955][T13074] 8021q: adding VLAN 0 to HW filter on device bond0 [ 306.670209][T13010] veth0_vlan: entered promiscuous mode [ 306.712704][T13010] veth1_vlan: entered promiscuous mode [ 306.748809][T13074] 8021q: adding VLAN 0 to HW filter on device team0 [ 306.802278][ T4516] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.809507][ T4516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 306.872150][ T4516] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.879383][ T4516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 306.901052][ T5841] Bluetooth: hci10: command tx timeout [ 307.018371][T13010] veth0_macvtap: entered promiscuous mode [ 307.046803][T13010] veth1_macvtap: entered promiscuous mode [ 307.241115][T13010] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 307.307687][T13010] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 307.356439][T13010] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.387720][T13010] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.419389][T13010] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.430841][T13010] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.531751][T13290] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 307.541023][T13290] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 307.698821][ T7651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.733954][ T7651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.827991][ T1091] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 307.838270][ T1091] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 307.871198][T13074] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 308.022312][T13074] veth0_vlan: entered promiscuous mode [ 308.096624][T13305] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 308.144873][T13074] veth1_vlan: entered promiscuous mode [ 308.239783][T13074] veth0_macvtap: entered promiscuous mode [ 308.489229][ T9762] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.543102][T13074] veth1_macvtap: entered promiscuous mode [ 308.649787][ T9762] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.681856][T13074] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 308.710059][T13074] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 308.810467][ T9762] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.855031][T13074] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.864576][T13074] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.873428][T13074] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.882149][T13074] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 308.929214][ T9762] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 308.966450][ T5841] Bluetooth: hci10: command tx timeout [ 309.042630][ T7659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.055044][ T7659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.087948][ T7665] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 309.101956][ T7665] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 309.211728][ T9762] bridge_slave_1: left allmulticast mode [ 309.217961][ T9762] bridge_slave_1: left promiscuous mode [ 309.224028][ T9762] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.236821][ T9762] bridge_slave_0: left allmulticast mode [ 309.244115][ T9762] bridge_slave_0: left promiscuous mode [ 309.249853][ T9762] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.615882][ T9762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.628287][ T9762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.638967][ T9762] bond0 (unregistering): Released all slaves [ 310.024798][ T9762] hsr_slave_0: left promiscuous mode [ 310.030826][ T9762] hsr_slave_1: left promiscuous mode [ 310.037653][ T9762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.045652][ T9762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.053664][ T9762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.064119][ T9762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 310.091758][ T9762] veth1_macvtap: left promiscuous mode [ 310.097440][ T9762] veth0_macvtap: left promiscuous mode [ 310.103555][ T9762] veth1_vlan: left promiscuous mode [ 310.108855][ T9762] veth0_vlan: left promiscuous mode [ 310.964938][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 310.978348][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 311.002720][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 311.017132][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 311.027106][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 311.236725][ T9762] team0 (unregistering): Port device team_slave_1 removed [ 311.281605][ T9762] team0 (unregistering): Port device team_slave_0 removed [ 311.819102][T13354] veth0_to_team: entered promiscuous mode [ 311.841340][T13354] bridge0: port 3(macsec1) entered blocking state [ 311.863334][T13354] bridge0: port 3(macsec1) entered disabled state [ 311.870029][T13354] macsec1: entered allmulticast mode [ 311.885681][T13354] veth0_to_team: entered allmulticast mode [ 311.900757][T13354] macsec1: entered promiscuous mode [ 311.911502][T13354] bridge0: port 3(macsec1) entered blocking state [ 311.918089][T13354] bridge0: port 3(macsec1) entered forwarding state [ 311.967100][T13367] netlink: 'syz.8.2168': attribute type 4 has an invalid length. [ 312.572339][T13384] __nla_validate_parse: 63 callbacks suppressed [ 312.602635][T13384] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2175'. [ 312.636444][T13384] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2175'. [ 312.684494][T13384] netlink: 'syz.2.2175': attribute type 5 has an invalid length. [ 313.128211][ T5841] Bluetooth: hci3: command tx timeout [ 313.276882][T13361] chnl_net:caif_netlink_parms(): no params data found [ 313.350230][T13408] netlink: 68 bytes leftover after parsing attributes in process `syz.2.2180'. [ 313.454932][T13415] netlink: 'syz.9.2182': attribute type 1 has an invalid length. [ 313.481248][T13415] netlink: 'syz.9.2182': attribute type 3 has an invalid length. [ 313.511537][T13415] netlink: 216 bytes leftover after parsing attributes in process `syz.9.2182'. [ 313.521233][T13415] NCSI netlink: No device for ifindex 813332851 [ 313.802331][T13361] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.819339][T13361] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.834449][T13361] bridge_slave_0: entered allmulticast mode [ 313.855044][T13361] bridge_slave_0: entered promiscuous mode [ 313.904658][T13361] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.913000][T13361] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.920284][T13361] bridge_slave_1: entered allmulticast mode [ 313.967006][T13361] bridge_slave_1: entered promiscuous mode [ 314.121050][T13361] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.135983][T13444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2188'. [ 314.146489][T13444] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2188'. [ 314.190724][T13361] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.288473][T13444] gretap0: entered promiscuous mode [ 314.325888][T13444] gretap0: left promiscuous mode [ 314.529890][T13453] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2192'. [ 314.583508][T13361] team0: Port device team_slave_0 added [ 314.606668][T13361] team0: Port device team_slave_1 added [ 314.736791][T13361] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.753356][T13361] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.813977][T13361] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.827141][T13361] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.848601][T13361] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.954497][T13361] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.006366][T13469] netlink: 14 bytes leftover after parsing attributes in process `syz.8.2197'. [ 315.029818][T13472] netlink: 68 bytes leftover after parsing attributes in process `syz.9.2198'. [ 315.083924][T13472] netlink: 20 bytes leftover after parsing attributes in process `syz.9.2198'. [ 315.154144][T13361] hsr_slave_0: entered promiscuous mode [ 315.173575][T13361] hsr_slave_1: entered promiscuous mode [ 315.193778][T13361] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.202454][T13361] Cannot create hsr debugfs directory [ 315.209667][ T5841] Bluetooth: hci3: command tx timeout [ 315.803405][T13510] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 315.920958][T13502] veth0: entered promiscuous mode [ 315.936109][T13512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.347071][T13525] netlink: 'syz.2.2212': attribute type 12 has an invalid length. [ 316.364302][T13532] syz_tun: entered allmulticast mode [ 316.473394][T13532] syz_tun: left allmulticast mode [ 316.611916][T13544] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 316.619266][T13544] IPv6: NLM_F_CREATE should be set when creating new route [ 316.626589][T13544] IPv6: NLM_F_CREATE should be set when creating new route [ 316.633874][T13544] IPv6: NLM_F_CREATE should be set when creating new route [ 317.082310][T13361] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 317.127489][ T1301] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.155985][T13361] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 317.223653][T13361] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 317.265111][T13361] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 317.295023][ T5839] Bluetooth: hci3: command tx timeout [ 317.602159][T13361] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.730933][T13361] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.782927][T13593] __nla_validate_parse: 6 callbacks suppressed [ 317.782945][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2232'. [ 317.800545][ T4516] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.807729][ T4516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.965287][ T7665] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.972456][ T7665] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.018946][T13600] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 318.641501][T13632] netlink: 'syz.2.2238': attribute type 12 has an invalid length. [ 318.655621][T13634] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2237'. [ 318.670862][T13632] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2238'. [ 318.774743][T13639] x_tables: duplicate underflow at hook 2 [ 318.791806][T13639] netlink: 248 bytes leftover after parsing attributes in process `syz.8.2239'. [ 318.857591][T13361] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 319.031545][T13652] netlink: 'syz.3.2241': attribute type 3 has an invalid length. [ 319.125916][T13652] netlink: 'syz.3.2241': attribute type 1 has an invalid length. [ 319.148394][T13652] netlink: 'syz.3.2241': attribute type 3 has an invalid length. [ 319.179013][T13361] veth0_vlan: entered promiscuous mode [ 319.192282][T13652] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2241'. [ 319.206758][ T5839] Bluetooth: hci5: command 0x0405 tx timeout [ 319.255831][T13361] veth1_vlan: entered promiscuous mode [ 319.304226][T13361] veth0_macvtap: entered promiscuous mode [ 319.317045][T13361] veth1_macvtap: entered promiscuous mode [ 319.323496][T13663] netlink: 12 bytes leftover after parsing attributes in process `syz.9.2242'. [ 319.363914][ T5841] Bluetooth: hci3: command tx timeout [ 319.385279][T13361] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.398616][T13361] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.439005][T13361] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.473030][T13361] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.516070][T13361] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.573517][T13361] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.634959][T13669] 8021q: VLANs not supported on ip6gre0 [ 319.963840][T13254] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.023992][T13254] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.099743][ T7659] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 320.133157][ T7659] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.177668][T13697] netlink: 'syz.2.2251': attribute type 1 has an invalid length. [ 320.194797][T13697] netlink: 'syz.2.2251': attribute type 1 has an invalid length. [ 320.463927][T13707] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2253'. [ 320.528620][T13709] netlink: 20 bytes leftover after parsing attributes in process `syz.8.2254'. [ 320.561715][T13707] vlan2: entered allmulticast mode [ 320.596780][T13707] mac80211_hwsim hwsim61 wlan0: entered allmulticast mode [ 320.832728][T13726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2258'. [ 320.877171][T13728] netlink: 'syz.9.2259': attribute type 2 has an invalid length. [ 320.886515][T13728] netlink: 'syz.9.2259': attribute type 2 has an invalid length. [ 320.895515][T13728] netlink: 'syz.9.2259': attribute type 13 has an invalid length. [ 320.916026][T13728] netlink: 'syz.9.2259': attribute type 17 has an invalid length. [ 321.060306][T13726] hsr_slave_1 (unregistering): left promiscuous mode [ 321.186100][ T1091] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.385499][ T1091] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.601362][ T1091] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.716991][ T1091] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.838641][ T1091] bridge_slave_1: left allmulticast mode [ 321.844698][ T1091] bridge_slave_1: left promiscuous mode [ 321.850394][ T1091] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.861783][ T1091] bridge_slave_0: left allmulticast mode [ 321.867871][ T1091] bridge_slave_0: left promiscuous mode [ 321.873926][ T1091] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.187364][ T1091] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 322.201689][ T1091] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 322.213456][ T1091] bond0 (unregistering): Released all slaves [ 322.590861][ T1091] hsr_slave_0: left promiscuous mode [ 322.600959][ T1091] hsr_slave_1: left promiscuous mode [ 322.607564][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.615302][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.623323][ T1091] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.630754][ T1091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.724475][T13736] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 322.726152][ T1091] veth1_macvtap: left promiscuous mode [ 322.748091][ T1091] veth0_macvtap: left promiscuous mode [ 322.754731][ T1091] veth1_vlan: left promiscuous mode [ 322.760189][ T1091] veth0_vlan: left promiscuous mode [ 322.779950][T13741] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2262'. [ 322.789197][T13741] netlink: 2 bytes leftover after parsing attributes in process `syz.8.2262'. [ 322.880375][T13749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2261'. [ 322.928536][T13749] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2261'. [ 323.319081][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.337804][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.346510][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.355903][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.364506][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.588352][ T1091] team0 (unregistering): Port device team_slave_1 removed [ 323.636663][ T1091] team0 (unregistering): Port device team_slave_0 removed [ 324.130874][T13749] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 324.173048][T13760] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2264'. [ 324.324252][ T5841] Bluetooth: hci6: command 0x0406 tx timeout [ 324.554237][T13771] 8021q: VLANs not supported on gre0 [ 324.873665][T13782] netlink: 36 bytes leftover after parsing attributes in process `syz.9.2272'. [ 324.963430][T13785] netlink: 'syz.8.2275': attribute type 1 has an invalid length. [ 325.116641][T13795] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 325.276144][T13794] veth3: entered allmulticast mode [ 325.381436][T13756] chnl_net:caif_netlink_parms(): no params data found [ 325.445875][ T5839] Bluetooth: hci3: command tx timeout [ 325.666586][T13820] netlink: 132 bytes leftover after parsing attributes in process `syz.8.2281'. [ 325.691897][T13815] mac80211_hwsim hwsim52 wlan1: entered allmulticast mode [ 325.704796][T13756] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.721093][T13756] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.740160][T13756] bridge_slave_0: entered allmulticast mode [ 325.751901][T13756] bridge_slave_0: entered promiscuous mode [ 325.793525][T13756] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.800815][T13756] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.826878][T13756] bridge_slave_1: entered allmulticast mode [ 325.855933][T13756] bridge_slave_1: entered promiscuous mode [ 325.967670][T13756] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.008328][T13756] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.180172][T13756] team0: Port device team_slave_0 added [ 326.189162][T13840] xt_TPROXY: Can be used only with -p tcp or -p udp [ 326.200179][T13756] team0: Port device team_slave_1 added [ 326.310722][T13756] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 326.329823][T13756] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.388425][T13756] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 326.411774][T13756] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 326.428832][T13756] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 326.470113][T13756] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 326.681612][T13756] hsr_slave_0: entered promiscuous mode [ 326.698942][T13756] hsr_slave_1: entered promiscuous mode [ 326.712843][T13756] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 326.727665][T13756] Cannot create hsr debugfs directory [ 326.943857][T13863] netlink: 'syz.2.2300': attribute type 21 has an invalid length. [ 326.966698][T13862] netlink: 316 bytes leftover after parsing attributes in process `syz.2.2300'. [ 327.077717][T13871] netlink: 56 bytes leftover after parsing attributes in process `syz.8.2303'. [ 327.127286][T13873] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2304'. [ 327.143777][T13871] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 327.154369][T13873] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2304'. [ 327.172496][T13873] netlink: 'syz.2.2304': attribute type 15 has an invalid length. [ 327.523229][ T5839] Bluetooth: hci3: command tx timeout [ 327.861104][T13902] sock: sock_timestamping_bind_phc: sock not bind to device [ 327.879738][T13903] sock: sock_timestamping_bind_phc: sock not bind to device [ 328.011682][T13756] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 328.045118][T13756] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 328.070297][T13756] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 328.095773][T13756] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 328.337466][T13756] 8021q: adding VLAN 0 to HW filter on device bond0 [ 328.417024][T13756] 8021q: adding VLAN 0 to HW filter on device team0 [ 328.506054][ T7661] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.513284][ T7661] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.607032][ T9762] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.614236][ T9762] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.993703][T13948] netlink: 'syz.3.2327': attribute type 1 has an invalid length. [ 329.130096][T13955] __nla_validate_parse: 1 callbacks suppressed [ 329.130118][T13955] netlink: 9 bytes leftover after parsing attributes in process `syz.2.2330'. [ 329.239310][T13955] 0·: renamed from hsr_slave_1 (while UP) [ 329.288592][T13955] 0·: entered allmulticast mode [ 329.311616][T13955] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 329.357652][T13968] tipc: Started in network mode [ 329.421751][T13968] tipc: Node identity ffffa848, cluster identity 4711 [ 329.434163][T13968] tipc: Node number set to 4294944840 [ 329.549170][T13756] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.603676][ T5839] Bluetooth: hci3: command tx timeout [ 329.704762][T13756] veth0_vlan: entered promiscuous mode [ 329.727601][T13984] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2339'. [ 329.768740][T13986] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2340'. [ 329.815665][ T7661] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 329.834865][ T7661] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 329.844674][ T5887] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 329.888754][T13756] veth1_vlan: entered promiscuous mode [ 330.033301][T12094] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 330.079391][T13994] netlink: 1036 bytes leftover after parsing attributes in process `syz.2.2343'. [ 330.093489][T13994] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 330.143314][T12094] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 330.169259][T13756] veth0_macvtap: entered promiscuous mode [ 330.177910][T14004] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2346'. [ 330.433366][T14004] team0 (unregistering): Port device team_slave_0 removed [ 330.450969][T14004] team0 (unregistering): Port device team_slave_1 removed [ 330.576865][T13756] veth1_macvtap: entered promiscuous mode [ 330.726744][T14026] netlink: 17 bytes leftover after parsing attributes in process `syz.9.2352'. [ 330.729784][T13756] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.748186][T14028] netlink: 'syz.8.2353': attribute type 10 has an invalid length. [ 330.776911][T13756] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.794727][T14028] veth1_macvtap: left promiscuous mode [ 330.828216][T13756] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.848419][T13756] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.861959][T13756] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.880263][T13756] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.033631][T14042] netlink: 16 bytes leftover after parsing attributes in process `syz.8.2358'. [ 331.200832][ T7659] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.219490][ T7659] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.227452][T14047] netlink: 'syz.9.2359': attribute type 10 has an invalid length. [ 331.311986][T14047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.351537][T14047] batadv0: entered allmulticast mode [ 331.371930][T14047] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 331.457802][ T9762] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.472370][ T9762] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.683331][ T5839] Bluetooth: hci3: command tx timeout [ 331.885697][T14070] netlink: 56 bytes leftover after parsing attributes in process `syz.9.2366'. [ 332.042163][T14079] can: request_module (can-proto-0) failed. [ 332.067169][ T5887] IPVS: starting estimator thread 0... [ 332.084893][T14079] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2369'. [ 332.103900][T14083] netlink: 'syz.9.2371': attribute type 1 has an invalid length. [ 332.111788][T14083] netlink: 'syz.9.2371': attribute type 2 has an invalid length. [ 332.138304][T14083] netlink: 'syz.9.2371': attribute type 1 has an invalid length. [ 332.160550][T14083] netlink: 1156 bytes leftover after parsing attributes in process `syz.9.2371'. [ 332.193310][T14085] IPVS: using max 26 ests per chain, 62400 per kthread [ 332.275751][ T9762] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.606612][ T9762] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.686246][ T9762] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.905505][ T9762] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.082533][ T9762] bridge_slave_1: left allmulticast mode [ 333.088829][ T9762] bridge_slave_1: left promiscuous mode [ 333.095098][ T9762] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.106714][ T9762] bridge_slave_0: left allmulticast mode [ 333.112384][ T9762] bridge_slave_0: left promiscuous mode [ 333.118632][ T9762] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.482791][ T9762] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.501169][ T9762] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.512522][ T9762] bond0 (unregistering): Released all slaves [ 333.908238][ T9762] hsr_slave_0: left promiscuous mode [ 333.918349][ T9762] hsr_slave_1: left promiscuous mode [ 333.927298][ T9762] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.933514][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 333.935044][ T9762] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 334.001078][ T9762] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 334.034969][ T9762] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 334.095227][ T9762] veth1_macvtap: left promiscuous mode [ 334.108879][ T9762] veth0_macvtap: left promiscuous mode [ 334.119735][ T9762] veth1_vlan: left promiscuous mode [ 334.127011][ T9762] veth0_vlan: left promiscuous mode [ 334.431759][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 334.452425][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 334.462275][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 334.472377][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 334.496527][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 334.754594][ T9762] team0 (unregistering): Port device team_slave_1 removed [ 334.790879][ T9762] team0 (unregistering): Port device team_slave_0 removed [ 335.171557][T14095] __nla_validate_parse: 2 callbacks suppressed [ 335.171573][T14095] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2376'. [ 335.388972][T14114] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2378'. [ 335.391457][T14113] netlink: 8 bytes leftover after parsing attributes in process `syz.9.2379'. [ 335.641959][T14124] netlink: 'syz.3.2382': attribute type 1 has an invalid length. [ 335.676364][T14124] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2382'. [ 335.707426][T14124] netlink: 'syz.3.2382': attribute type 1 has an invalid length. [ 335.731124][T14124] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2382'. [ 335.761041][T14124] netlink: 'syz.3.2382': attribute type 1 has an invalid length. [ 335.777445][T14124] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2382'. [ 335.803316][T14124] netlink: 'syz.3.2382': attribute type 1 has an invalid length. [ 335.827421][T14124] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2382'. [ 335.863215][T14124] netlink: 'syz.3.2382': attribute type 1 has an invalid length. [ 335.879728][T14124] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2382'. [ 335.891972][T14124] netlink: 'syz.3.2382': attribute type 1 has an invalid length. [ 335.908076][T14124] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2382'. [ 335.930110][T14131] netlink: 'syz.9.2384': attribute type 7 has an invalid length. [ 335.937413][T14124] netlink: 'syz.3.2382': attribute type 1 has an invalid length. [ 335.947626][T14124] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2382'. [ 335.953085][T14129] netlink: 'syz.9.2384': attribute type 7 has an invalid length. [ 335.957767][T14124] netlink: 'syz.3.2382': attribute type 1 has an invalid length. [ 335.973541][T14124] netlink: 'syz.3.2382': attribute type 1 has an invalid length. [ 335.981562][T14124] netlink: 'syz.3.2382': attribute type 1 has an invalid length. [ 336.209088][T14108] chnl_net:caif_netlink_parms(): no params data found [ 336.398350][T14152] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 336.514618][T14108] bridge0: port 1(bridge_slave_0) entered blocking state [ 336.523298][T14157] x_tables: duplicate underflow at hook 1 [ 336.553508][T14108] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.563385][ T5839] Bluetooth: hci3: command tx timeout [ 336.579682][T14108] bridge_slave_0: entered allmulticast mode [ 336.605738][T14108] bridge_slave_0: entered promiscuous mode [ 336.632045][T14108] bridge0: port 2(bridge_slave_1) entered blocking state [ 336.661650][T14108] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.695435][T14108] bridge_slave_1: entered allmulticast mode [ 336.726806][T14108] bridge_slave_1: entered promiscuous mode [ 336.883419][T14108] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.945199][T14108] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.162288][T14108] team0: Port device team_slave_0 added [ 337.208707][T14108] team0: Port device team_slave_1 added [ 337.386090][T14194] bond0: entered promiscuous mode [ 337.391601][T14194] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.399360][T14196] 8021q: VLANs not supported on tunl0 [ 337.410973][T14108] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.429621][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.494086][T14108] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.507478][T14108] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.517829][T14108] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.544745][T14108] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.576941][T14198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.584300][T14198] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 337.595038][T14198] bond0: (slave wireguard0): Setting fail_over_mac to active for active-backup mode [ 337.607430][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 337.643976][T14198] bond0: (slave wireguard0): making interface the new active one [ 337.654440][T14198] wireguard0: entered promiscuous mode [ 337.669921][T14198] bond0: (slave wireguard0): Enslaving as an active interface with an up link [ 337.872602][T14215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.028005][T14108] hsr_slave_0: entered promiscuous mode [ 338.054474][T14108] hsr_slave_1: entered promiscuous mode [ 338.061426][T14108] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 338.078782][T14108] Cannot create hsr debugfs directory [ 338.191884][T14219] 8021q: adding VLAN 0 to HW filter on device bond1 [ 338.205458][T14219] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 338.235020][T14219] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 338.340412][T14227] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 338.525440][T14212] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 338.643492][ T5839] Bluetooth: hci3: command tx timeout [ 339.161481][T14264] xt_CT: No such helper "snmp_trap" [ 339.193123][T14265] xt_CT: No such helper "snmp_trap" [ 339.695983][T14289] 8021q: adding VLAN 0 to HW filter on device bond1 [ 339.886815][T14289] veth3: entered promiscuous mode [ 339.908519][T14289] bond1: (slave veth3): Enslaving as an active interface with a down link [ 340.083760][T14108] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 340.135890][T14108] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 340.207509][T14108] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 340.247083][T14108] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 340.685021][T14108] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.723691][ T5839] Bluetooth: hci3: command tx timeout [ 340.792023][T14108] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.858338][T13254] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.865641][T13254] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.935043][T13254] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.942252][T13254] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.082868][T14108] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.306685][T14108] veth0_vlan: entered promiscuous mode [ 342.354932][T14108] veth1_vlan: entered promiscuous mode [ 342.507956][T14108] veth0_macvtap: entered promiscuous mode [ 342.578244][T14108] veth1_macvtap: entered promiscuous mode [ 342.679357][T14108] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.738461][ C1] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 342.786601][T14108] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.806803][ T5839] Bluetooth: hci3: command tx timeout [ 342.866902][T14108] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.921938][T14108] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.968477][T14108] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.985940][T14108] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.003494][T14318] xt_cgroup: invalid path, errno=-2 [ 343.140849][T14318] validate_nla: 26 callbacks suppressed [ 343.140873][T14318] netlink: 'syz.9.2436': attribute type 4 has an invalid length. [ 343.244574][T14333] netlink: 'syz.9.2436': attribute type 7 has an invalid length. [ 343.289662][T14334] __nla_validate_parse: 38 callbacks suppressed [ 343.289682][T14334] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2440'. [ 343.332684][T14338] netlink: 68 bytes leftover after parsing attributes in process `syz.3.2442'. [ 343.421738][ T7651] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.446156][ T7651] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.523474][ T7651] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.537155][ T7651] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.778977][ T5887] IPVS: starting estimator thread 0... [ 343.883690][T14355] IPVS: using max 29 ests per chain, 69600 per kthread [ 343.969406][T13256] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.098896][T13256] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.197493][T13256] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.297862][T13256] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.591185][T13256] bridge_slave_1: left allmulticast mode [ 344.597202][T13256] bridge_slave_1: left promiscuous mode [ 344.602925][T13256] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.617283][T13256] bridge_slave_0: left allmulticast mode [ 344.623172][T13256] bridge_slave_0: left promiscuous mode [ 344.628885][T13256] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.981256][T13256] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.996613][T13256] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.007863][T13256] bond0 (unregistering): Released all slaves [ 345.426295][T13256] hsr_slave_0: left promiscuous mode [ 345.432231][T13256] hsr_slave_1: left promiscuous mode [ 345.454262][T13256] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.461836][T13256] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.470286][T13256] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.478177][T13256] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.502128][T13256] veth1_macvtap: left promiscuous mode [ 345.508315][T13256] veth0_macvtap: left promiscuous mode [ 345.514083][T13256] veth1_vlan: left promiscuous mode [ 345.520334][T13256] veth0_vlan: left promiscuous mode [ 345.971102][T14367] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2452'. [ 346.013899][T14367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2452'. [ 346.067142][T14372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2452'. [ 346.119085][T14372] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2452'. [ 346.121590][T14377] netlink: 40 bytes leftover after parsing attributes in process `syz.3.2451'. [ 346.187977][T14378] netlink: 8 bytes leftover after parsing attributes in process `syz.8.2456'. [ 346.344335][T13256] team0 (unregistering): Port device team_slave_1 removed [ 346.460801][T13256] team0 (unregistering): Port device team_slave_0 removed [ 346.559642][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 346.566424][T14387] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2459'. [ 346.583626][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 346.595007][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 346.603520][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 346.611265][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 347.082911][T14387] geneve2: entered promiscuous mode [ 347.183628][T14390] netlink: 'syz.2.2460': attribute type 1 has an invalid length. [ 347.286475][T14390] 8021q: adding VLAN 0 to HW filter on device bond2 [ 347.327222][T14401] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2460'. [ 347.436305][T14406] netlink: 'syz.8.2463': attribute type 12 has an invalid length. [ 347.466134][T14406] (unnamed net_device) (uninitialized): option primary_reselect: invalid value (255) [ 347.936946][T14426] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 348.074860][T14423] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.163653][T14434] block nbd1: server does not support multiple connections per device. [ 348.176669][T14434] block nbd1: shutting down sockets [ 348.232542][T14423] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.284644][T14432] block nbd1: server does not support multiple connections per device. [ 348.297849][T14432] block nbd1: shutting down sockets [ 348.315990][T14430] netlink: 'syz.8.2472': attribute type 1 has an invalid length. [ 348.329625][T14430] netlink: 224 bytes leftover after parsing attributes in process `syz.8.2472'. [ 348.385351][T14423] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.484489][ T31] INFO: task syz.1.1187:9927 blocked for more than 143 seconds. [ 348.492370][ T31] Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 [ 348.503302][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 348.512100][ T31] task:syz.1.1187 state:D stack:25656 pid:9927 tgid:9923 ppid:5831 task_flags:0x400140 flags:0x00000004 [ 348.529268][ T31] Call Trace: SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 348.532600][ T31] [ 348.535634][ T31] __schedule+0x16e2/0x4cd0 [ 348.550388][ T31] ? __lock_acquire+0xaac/0xd20 [ 348.562101][ T31] ? schedule+0x165/0x360 [ 348.566698][ T31] ? __pfx___schedule+0x10/0x10 [ 348.571590][ T31] ? schedule+0x91/0x360 [ 348.613383][ T31] schedule+0x165/0x360 [ 348.627906][ T31] schedule_preempt_disabled+0x13/0x30 [ 348.678709][ T31] __mutex_lock+0x724/0xe80 [ 348.703462][ T31] ? __mutex_lock+0x51b/0xe80 [ 348.708226][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 348.723955][ T5841] Bluetooth: hci3: command tx timeout [ 348.726171][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 348.735466][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 348.742097][ T31] ? skb_put+0x11b/0x210 [ 348.746453][ T31] ? __nlmsg_put+0xef/0x1b0 [ 348.751002][ T31] ? genlmsg_put+0x137/0x2e0 [ 348.755691][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 348.761336][ T31] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 348.768447][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 348.775784][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 348.781379][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 348.787584][ T31] genl_rcv_msg+0x60e/0x790 [ 348.792124][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.797289][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 348.803816][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 348.808897][ T31] ? __copy_skb_header+0xa7/0x550 [ 348.814154][ T31] netlink_rcv_skb+0x219/0x490 [ 348.818954][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 348.824453][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 348.829808][ T31] ? down_read+0x1ad/0x2e0 [ 348.834394][ T31] genl_rcv+0x28/0x40 [ 348.838406][ T31] netlink_unicast+0x75b/0x8d0 [ 348.843330][ T31] netlink_sendmsg+0x805/0xb30 [ 348.848127][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.853556][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 348.858525][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 348.864003][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 348.870555][ T31] __sock_sendmsg+0x219/0x270 [ 348.875460][ T31] ____sys_sendmsg+0x505/0x830 [ 348.880442][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.886134][ T31] ? import_iovec+0x74/0xa0 [ 348.890671][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 348.895518][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 348.900768][ T31] ? __fget_files+0x2a/0x420 [ 348.905423][ T31] ? __fget_files+0x3a0/0x420 [ 348.910139][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 348.915233][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 348.920753][ T31] ? do_syscall_64+0xba/0x210 [ 348.925587][ T31] do_syscall_64+0xf6/0x210 [ 348.930148][ T31] ? clear_bhb_loop+0x60/0xb0 [ 348.936465][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.942392][ T31] RIP: 0033:0x7fc53d38e969 [ 348.947366][ T31] RSP: 002b:00007fc53e22a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.955919][ T31] RAX: ffffffffffffffda RBX: 00007fc53d5b5fa0 RCX: 00007fc53d38e969 [ 348.964037][ T31] RDX: 0000000024000100 RSI: 0000200000001740 RDI: 0000000000000007 [ 348.972036][ T31] RBP: 00007fc53d410ab1 R08: 0000000000000000 R09: 0000000000000000 [ 348.980530][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 348.988785][ T31] R13: 0000000000000000 R14: 00007fc53d5b5fa0 R15: 00007ffd809c5628 [ 348.997103][ T31] [ 349.000312][ T31] [ 349.000312][ T31] Showing all locks held in the system: [ 349.008439][ T31] 1 lock held by khungtaskd/31: [ 349.014883][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 349.025003][ T31] 2 locks held by getty/5589: [ 349.029700][ T31] #0: ffff88814d1c60a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 349.039768][ T31] #1: ffffc900030162f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 349.050595][ T31] 3 locks held by kworker/1:5/5887: [ 349.056429][ T31] #0: ffff88801a080d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 349.067535][ T31] #1: ffffc90004f77c60 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 349.080293][ T31] #2: ffffffff8df43680 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 349.090584][ T31] 2 locks held by syz.3.666/8225: [ 349.096290][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 349.104795][ T31] #1: ffffffff8e2139a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 349.115189][ T31] 2 locks held by syz.1.1187/9927: [ 349.120315][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 349.129123][ T31] #1: ffffffff8e2139a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 349.139361][ T31] 2 locks held by syz.4.1570/11187: [ 349.144673][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 349.152916][ T31] #1: ffffffff8e2139a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 349.163697][ T31] 2 locks held by syz.5.1761/11863: [ 349.168919][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 349.179737][ T31] #1: ffffffff8e2139a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 349.190318][ T31] 2 locks held by syz.7.1901/12368: [ 349.195762][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 349.204630][ T31] #1: ffffffff8e2139a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 349.215851][ T31] 2 locks held by syz.6.2009/12766: [ 349.221081][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 349.229475][ T31] #1: ffffffff8e2139a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 349.239768][ T31] 2 locks held by kworker/u8:24/13254: [ 349.245566][ T31] #0: ffff8880b8939b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 349.255578][ T31] #1: ffffc90003ea7c60 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 349.268816][ T31] 1 lock held by syz-executor/14386: [ 349.274373][ T31] #0: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 349.284159][ T31] 4 locks held by syz.2.2469/14423: [ 349.289387][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 349.297690][ T31] #1: ffff8880293f00e8 (&dev->mutex){....}-{4:4}, at: devlink_get_from_attrs_lock+0x240/0x3a0 [ 349.308494][ T31] #2: ffff8880293f5250 (&devlink->lock_key#22){+.+.}-{4:4}, at: devlink_get_from_attrs_lock+0x24f/0x3a0 [ 349.319823][ T31] #3: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_net_dev_lock+0x257/0x2f0 [ 349.329375][ T31] 6 locks held by syz.8.2472/14430: [ 349.335147][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 349.343496][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 349.352508][ T31] #2: ffffffff8eb62f68 (hwsim_phys_lock){+.+.}-{4:4}, at: hwsim_del_radio_nl+0x87/0x150 [ 349.362375][ T31] #3: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: ieee802154_unregister_hw+0x5a/0xe0 [ 349.372759][ T31] #4: ffff888144700788 (&local->iflist_mtx#2){+.+.}-{4:4}, at: ieee802154_remove_interfaces+0x33/0x1d0 [ 349.384039][ T31] #5: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 349.395345][ T31] 2 locks held by syz.3.2475/14446: [ 349.400560][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 349.409033][ T31] #1: ffffffff8f35b808 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 349.418127][ T31] 2 locks held by syz.9.2476/14448: [ 349.423742][ T31] #0: ffffffff8f7f40f0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 349.433360][ T31] #1: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 349.443864][ T31] [ 349.446225][ T31] ============================================= [ 349.446225][ T31] [ 349.455143][ T31] NMI backtrace for cpu 0 [ 349.455161][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 PREEMPT(full) [ 349.455183][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.455195][ T31] Call Trace: [ 349.455203][ T31] [ 349.455211][ T31] dump_stack_lvl+0x189/0x250 [ 349.455239][ T31] ? __wake_up_klogd+0xd9/0x110 [ 349.455264][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.455289][ T31] ? __pfx__printk+0x10/0x10 [ 349.455321][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 349.455361][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 349.455377][ T31] ? _printk+0xcf/0x120 [ 349.455398][ T31] ? __pfx__printk+0x10/0x10 [ 349.455418][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 349.455441][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 349.455465][ T31] watchdog+0xfee/0x1030 [ 349.455494][ T31] ? watchdog+0x1de/0x1030 [ 349.455526][ T31] kthread+0x711/0x8a0 [ 349.455554][ T31] ? __pfx_watchdog+0x10/0x10 [ 349.455580][ T31] ? __pfx_kthread+0x10/0x10 [ 349.455607][ T31] ? __pfx_kthread+0x10/0x10 [ 349.455632][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.455657][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.455684][ T31] ? __pfx_kthread+0x10/0x10 [ 349.455708][ T31] ret_from_fork+0x4b/0x80 [ 349.455729][ T31] ? __pfx_kthread+0x10/0x10 [ 349.455754][ T31] ret_from_fork_asm+0x1a/0x30 [ 349.455791][ T31] [ 349.455799][ T31] Sending NMI from CPU 0 to CPUs 1: [ 349.605113][ C1] NMI backtrace for cpu 1 [ 349.605129][ C1] CPU: 1 UID: 0 PID: 13254 Comm: kworker/u8:24 Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 PREEMPT(full) [ 349.605152][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.605164][ C1] Workqueue: bat_events batadv_nc_worker [ 349.605189][ C1] RIP: 0010:lock_acquire+0x70/0x360 [ 349.605217][ C1] Code: f8 08 0f 83 b8 01 00 00 89 c0 48 0f a3 05 d8 be e0 0d 73 16 e8 e1 d9 08 00 84 c0 75 0d f6 05 f8 b4 ca 0d 01 0f 84 d7 01 00 00 <83> 3d 99 ed e0 0d 00 0f 84 f0 00 00 00 48 8b b4 24 90 00 00 00 4c [ 349.605233][ C1] RSP: 0018:ffffc90003ea7a20 EFLAGS: 00000202 [ 349.605247][ C1] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0389a8c1968d0600 [ 349.605259][ C1] RDX: 0000000000000000 RSI: ffffffff8bc1d980 RDI: ffffffff8bc1d940 [ 349.605272][ C1] RBP: ffffffff8b245302 R08: 0000000000000000 R09: 0000000000000000 [ 349.605283][ C1] R10: 0000000000000000 R11: ffffffff8b245302 R12: 0000000000000002 [ 349.605295][ C1] R13: ffffffff8df3dce0 R14: 0000000000000000 R15: 0000000000000000 [ 349.605307][ C1] FS: 0000000000000000(0000) GS:ffff8881261c7000(0000) knlGS:0000000000000000 [ 349.605321][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 349.605333][ C1] CR2: 0000200000004980 CR3: 000000000dd38000 CR4: 00000000003526f0 [ 349.605349][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 349.605359][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 349.605370][ C1] Call Trace: [ 349.605377][ C1] [ 349.605390][ C1] ? batadv_nc_worker+0xd2/0x610 [ 349.605410][ C1] ? batadv_nc_worker+0xd2/0x610 [ 349.605429][ C1] batadv_nc_worker+0xef/0x610 [ 349.605448][ C1] ? batadv_nc_worker+0xd2/0x610 [ 349.605468][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 349.605487][ C1] process_scheduled_works+0xade/0x17a0 [ 349.605521][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 349.605560][ C1] worker_thread+0x8a0/0xda0 [ 349.605600][ C1] kthread+0x711/0x8a0 [ 349.605623][ C1] ? __pfx_worker_thread+0x10/0x10 [ 349.605640][ C1] ? __pfx_kthread+0x10/0x10 [ 349.605662][ C1] ? __pfx_kthread+0x10/0x10 [ 349.605683][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.605703][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.605725][ C1] ? __pfx_kthread+0x10/0x10 [ 349.605746][ C1] ret_from_fork+0x4b/0x80 [ 349.605764][ C1] ? __pfx_kthread+0x10/0x10 [ 349.605785][ C1] ret_from_fork_asm+0x1a/0x30 [ 349.605811][ C1] [ 349.606421][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 349.852946][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00167-gc46286fdd6aa #0 PREEMPT(full) [ 349.864760][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 349.874819][ T31] Call Trace: [ 349.878096][ T31] [ 349.881023][ T31] dump_stack_lvl+0x99/0x250 [ 349.885626][ T31] ? __asan_memcpy+0x40/0x70 [ 349.890239][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 349.895453][ T31] ? __pfx__printk+0x10/0x10 [ 349.900065][ T31] panic+0x2db/0x790 [ 349.903979][ T31] ? __pfx_panic+0x10/0x10 [ 349.908401][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 349.913779][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 349.919178][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 349.925365][ T31] watchdog+0x102d/0x1030 [ 349.929711][ T31] ? watchdog+0x1de/0x1030 [ 349.934147][ T31] kthread+0x711/0x8a0 [ 349.938228][ T31] ? __pfx_watchdog+0x10/0x10 [ 349.943001][ T31] ? __pfx_kthread+0x10/0x10 [ 349.947606][ T31] ? __pfx_kthread+0x10/0x10 [ 349.952218][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 349.957419][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 349.962626][ T31] ? __pfx_kthread+0x10/0x10 [ 349.967223][ T31] ret_from_fork+0x4b/0x80 [ 349.971657][ T31] ? __pfx_kthread+0x10/0x10 [ 349.976250][ T31] ret_from_fork_asm+0x1a/0x30 [ 349.981029][ T31] [ 349.984426][ T31] Kernel Offset: disabled [ 349.988766][ T31] Rebooting in 86400 seconds..