last executing test programs: 3m55.773363716s ago: executing program 0 (id=617): syz_emit_ethernet(0x10e, &(0x7f0000000280)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0xd8, 0x67, 0x0, @mcast1, @local, {[@fragment={0x2, 0x0, 0x4, 0x0, 0x0, 0x3, 0x68}, @hopopts={0x2b, 0x7, '\x00', [@ra={0x5, 0x2, 0x4}, @ra={0x5, 0x2, 0xff}, @hao={0xc9, 0x10, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x8, {0x2, 0x0, 0x5, 0x8602}}, @hao={0xc9, 0x10, @private0}]}, @routing={0xa3, 0x2, 0x0, 0x80, 0x0, [@dev={0xfe, 0x80, '\x00', 0x30}]}, @srh={0x33, 0x0, 0x4, 0x0, 0x7, 0x3c, 0x3}, @routing={0x3b, 0xc, 0x1, 0x3, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, @mcast2, @mcast2]}]}}}}}, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a}, 0x1c) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000000)=0x1, 0x4) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xe, 0x3, &(0x7f0000000000)=@framed={{0x72, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0x6b}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000000c0)='cgroup.threads\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f0000000c40), 0x12) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)={0x2c, r4, 0x101, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1644}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x200000d0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x2a, &(0x7f0000001700)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2d}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @broadcast, @empty, @random="c79094b15e35", @local}}}}, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r7}, &(0x7f00000006c0), &(0x7f0000000700)=r6, 0x3}, 0x20) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000500)={0xffffffffffffffff}) splice(r9, 0x0, r8, 0x0, 0xffffffffffff8000, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)={[{0x2b, 'net_cls'}, {0x2d, 'freezer'}, {0x2d, 'cpuset'}, {0x2d, 'hugetlb'}, {0x2d, 'io'}, {0x2d, 'cpuset'}, {0x2d, 'cpuacct'}, {0x2d, 'perf_event'}]}, 0x44) 3m54.726012706s ago: executing program 0 (id=634): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2f, &(0x7f0000000340)={0x10003, {{0x2, 0x800, @multicast2}}, {{0x2, 0x4e23, @loopback}}}, 0xa9) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000480)={0x5, {{0x2, 0x4e23, @multicast1}}, {{0x2, 0x0, @broadcast}}}, 0x108) getsockopt$inet_buf(r2, 0x0, 0x30, &(0x7f0000000340)=""/225, &(0x7f0000000180)=0xe1) sendmsg$key(r1, &(0x7f0000000d00)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000c40)={0x2, 0x4, 0x0, 0x0, 0x2}, 0x10}}, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x0, 0x8010, 0xffffffffffffffff, 0x0) r3 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r3, 0x11b, 0x7, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0xe, &(0x7f0000f59ffc)=0xc, 0x4) 3m54.60024264s ago: executing program 0 (id=636): r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2cb}, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) (async) sendmsg$inet6(r2, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000022c0)="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", 0x2e7}], 0x1}, 0x20000044) r3 = socket(0x10, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e3, &(0x7f0000000000)={r3}) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='sys_enter\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000000), 0x12) ioctl$FS_IOC_RESVSP(r5, 0x40305829, &(0x7f0000000440)={0x1100, 0x0, 0x0, 0x10000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) (async) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendfile(r7, r6, 0x0, 0xfffbffff) (async) sendfile(r7, r6, 0x0, 0xfffbffff) r8 = socket$igmp(0x2, 0x3, 0x2) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r9, 0x84, 0x72, &(0x7f00000000c0)={r1, 0x7fffffff, 0x10}, &(0x7f0000000100)=0xc) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r10, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syz_tun\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="2000000000c14a", @ANYRES32=r13, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000640)={r4, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x6, &(0x7f00000001c0)=[0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xef, &(0x7f00000002c0)=[{}], 0x8, 0x10, &(0x7f0000000340), &(0x7f00000004c0), 0x8, 0x19, 0x8, 0x8, &(0x7f0000000500)}}, 0x10) socket(0x10, 0x3, 0x0) (async) r14 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r14, 0x89f2, &(0x7f0000000480)={'ip6gre0\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty, 0x700, 0x20}}) 3m54.468789437s ago: executing program 0 (id=638): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) (async) listen(r0, 0x0) r1 = socket$inet(0x2, 0x2, 0x1) bind$inet(r1, &(0x7f0000000000)={0x2, 0x6e24, @empty=0x20}, 0x10) (async) syz_emit_ethernet(0x4a, &(0x7f0000000080)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "fc7771", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x3, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000100)={@local, @link_local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a8435", 0x18, 0x6, 0x7e, @empty, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x4, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0x7}]}}}}}}}}, 0x0) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f0000000000)={@remote}, 0x20) (async, rerun: 64) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c020000190001000000000000000000fc0200000000000000000000000000000000000000000000000000000000000000000003000000000a0000005e000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x23c}}, 0x0) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x1b, &(0x7f00000000c0)={@remote={0xfe, 0x80, '\x00', 0xffffffffffffffff}}, 0x20) 3m54.239009289s ago: executing program 0 (id=643): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000000)="4fe72ad5230d8129b09607516d8c6b55dd99e7367670c09948f48a6b357e442a2522065e9c643b2a52341eaaff1a56ec2fb5d14fedd72b1a1e186f7d55b83c159b4c40024560d560f909968e903f50b1b360b467caf92c292c1086b27aff18f5aca97c137aea09ea4d0862dab573dd902d17954774361fb6dab4055d97a6e885", 0x80) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xffffffffffdfffff, 0x0, 0x10, r0, 0x0) 3m54.03649734s ago: executing program 0 (id=647): r0 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108001840000000032000018006000340000200001400018008000100ac1414aa08000200ffffffff0800044000000056b1d50b1d04075c000a8008000140000000015000028014000180080001007f00000108000200640101000c000280050001002f0000002c0001801400030020"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x24000000) 3m38.810457176s ago: executing program 32 (id=647): r0 = socket$kcm(0x21, 0x2, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], 0x0, 0x6, 0x0, 0x0, 0x0, 0x3e, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x29, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ITER_CREATE(0x21, &(0x7f0000000100)={r1}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000080)='rpc_call_rpcerror\x00', r2, 0x0, 0xf69}, 0x18) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="b00000000002010400000000000000000700000608000940ffffffff080004400000008108001840000000032000018006000340000200001400018008000100ac1414aa08000200ffffffff0800044000000056b1d50b1d04075c000a8008000140000000015000028014000180080001007f00000108000200640101000c000280050001002f0000002c0001801400030020"], 0xb0}, 0x1, 0x0, 0x0, 0x8004}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e"], 0x1c}}, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$kcm(r0, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @empty}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0x24000000) 2m39.74025768s ago: executing program 1 (id=1465): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x8b}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000002c0), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x3ff, 0x89, 0x10, 0x5c}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000180), 0x4) (async) setsockopt$sock_int(r2, 0x1, 0x12, &(0x7f0000000040), 0x4) (async, rerun: 64) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 64) ioctl$FS_IOC_SETFSLABEL(r3, 0x8911, &(0x7f0000000000)="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") r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x40201, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000380)={'syzkaller1\x00', 0xc201}) (async) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(r4, &(0x7f0000000040)=ANY=[@ANYBLOB="001c86dd2000100000004000000060ec97000fc82b00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r6 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r6, &(0x7f0000000280)={0xa, 0x0, 0xb6, @empty, 0x0, 0x2}, 0x20) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x10, {{@in=@multicast1, @in=@remote, 0x0, 0x0, 0xffff, 0x0, 0xa, 0x80, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {}, {0x1, 0x0, 0x80}}, [@tmpl={0x44, 0x5, [{{@in6=@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x3c}, 0xa, @in6=@private1, 0x0, 0x1, 0x0, 0x0, 0x1}]}]}, 0xfc}}, 0x0) (async, rerun: 32) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0xffffffffffffffb8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) (async) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x10) r9 = socket(0x10, 0x3, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={0x20, 0x7, 0xa, 0x101, 0x0, 0x0, {0x0, 0x0, 0x4}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x4001}, 0x4004) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x1000000, {0x60, 0x0, 0x0, r12, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x4}]}}]}, 0x3c}}, 0x0) (async, rerun: 64) write(r0, &(0x7f00000000c0)="240000001e005f0214fffffffffffff807000000b800000000000001080008001d000000", 0x24) (rerun: 64) 2m39.256199762s ago: executing program 1 (id=1472): bind$l2tp(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local, 0x1}, 0x10) bind$inet(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @loopback}, 0x10) r0 = socket$nl_route(0x10, 0x3, 0x0) mmap(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0x8, 0x80010, r0, 0x438fd000) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='blkio.bfq.sectors\x00', 0x0, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r1) getsockopt$IPT_SO_GET_INFO(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000100)={'raw\x00', 0x0, [0x2, 0x723, 0x9, 0x1f, 0x5]}, &(0x7f0000000180)=0x54) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_START_REQ(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x10, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PAN_COORD={0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x1b}, @IEEE802154_ATTR_BCN_ORD={0x5, 0x17, 0xad}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0xef}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x18}, @IEEE802154_ATTR_COORD_REALIGN={0x5, 0x1b, 0x4}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x4008084) splice(r1, &(0x7f0000000300)=0x4, r0, &(0x7f0000000340)=0x4, 0x7, 0x8) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000003c0)={0x5, &(0x7f0000000380)=[{0x0, 0x81, 0x3, 0x3}, {0x10, 0x7, 0x3e, 0x40}, {0x0, 0x6, 0x9, 0xffff}, {0xff80, 0x0, 0x8, 0xe9}, {0x1, 0x3, 0x5, 0x10000}]}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f00000004c0)={'syztnl2\x00', &(0x7f0000000400)={'tunl0\x00', 0x0, 0x8040, 0x10, 0x54, 0xfff, {{0x28, 0x4, 0x3, 0x27, 0xa0, 0x66, 0x0, 0xb7, 0x4, 0x0, @rand_addr=0x64010101, @multicast1, {[@cipso={0x86, 0x61, 0x2, [{0x0, 0xa, "af7e247629560b19"}, {0x1, 0x7, "8019e99ab7"}, {0x7, 0xb, "7abe3542afdcc2467b"}, {0x7, 0xd, "1ce7d4901245e57827c9dc"}, {0x2, 0x4, "bc06"}, {0x6, 0x3, "e6"}, {0x0, 0x12, "a8e993e023ceb410b314cc41fa42da6f"}, {0x0, 0x10, "0ff3c3dc311e0b047cac4fad12e3"}, {0x2, 0x2}, {0x2, 0x7, "39d859c6c0"}]}, @generic={0x0, 0x8, "6cef137f4d0f"}, @timestamp_addr={0x44, 0x1c, 0xba, 0x1, 0x9, [{@local, 0x3}, {@loopback, 0x1}, {@empty, 0x4}]}, @noop, @noop, @ra={0x94, 0x4}]}}}}}) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000540), r2) sendmsg$IEEE802154_ASSOCIATE_RESP(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x30, r4, 0x300, 0x70bd26, 0x25dfdbfd, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6, 0x8, 0xaaa1}, @IEEE802154_ATTR_STATUS={0x5, 0x3, 0x41}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x10) getsockname$packet(r1, &(0x7f00000006c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000700)=0x14) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x11, 0x1, &(0x7f0000000640)=@raw=[@ldst={0x1, 0x3, 0x6, 0xa, 0x4, 0x20, 0x4}], &(0x7f0000000680)='GPL\x00', 0x80000001, 0x0, 0x0, 0x41100, 0x28, '\x00', r5, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x5, 0x3}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000780)=[0xffffffffffffffff, r1, r1, r1], &(0x7f00000007c0)=[{0x4, 0x3, 0x8}, {0x3, 0x1, 0x2, 0x6}, {0x2, 0x1, 0xa, 0x4}, {0x1, 0x2, 0x8, 0x8}], 0x10, 0x7ff, @void, @value}, 0x94) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000900), r2) sendmsg$NL802154_CMD_DEL_SEC_DEV(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x3c, r7, 0x1, 0x70bd26, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_SEC_DEVICE={0x10, 0x2e, 0x0, 0x1, {0xc, 0x4, {0xaaaaaaaaaaaa0202}}}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40000001}, 0xc) sendmsg$TIPC_CMD_GET_BEARER_NAMES(r1, &(0x7f0000000ac0)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000a80)={&(0x7f0000000a40)={0x1c, 0x0, 0x8, 0x70bd25, 0x25dfdbfe, {}, ["", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001d40)={0x6, 0x1a, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa78, 0x0, 0x0, 0x0, 0x24000}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @jmp={0x5, 0x1, 0xd, 0x9, 0x1, 0xfffffffffffffff0, 0xfffffffffffffffc}, @call={0x85, 0x0, 0x0, 0xc3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='GPL\x00', 0xfffffffa, 0x1000, &(0x7f0000000c40)=""/4096, 0x40f00, 0x18, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000001c40)={0x5, 0x5}, 0x8, 0x10, &(0x7f0000001c80)={0x3, 0x6, 0x10, 0xfff}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000001cc0)=[r1, r1, r1, r1, r1, r1, r1, r1], &(0x7f0000001d00)=[{0x1, 0x1, 0x8, 0x8}, {0x1, 0x1, 0x0, 0x9}], 0x10, 0x0, @void, @value}, 0x94) r8 = socket$packet(0x11, 0x2, 0x300) sendmsg$NLBL_MGMT_C_PROTOCOLS(r2, &(0x7f0000001f00)={&(0x7f0000001e00)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e40)={0x58, 0x0, 0x400, 0x70bd2b, 0x25dfdbfc, {}, [@NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0x3}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @local}, @NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x22}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}, @NLBL_MGMT_A_DOMAIN={0x7, 0x1, '&)\x00'}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @multicast1}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x4000000}, 0x18000) r9 = syz_genetlink_get_family_id$fou(&(0x7f0000001f80), r1) sendmsg$FOU_CMD_DEL(r1, &(0x7f0000002040)={&(0x7f0000001f40)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002000)={&(0x7f0000001fc0)={0x1c, r9, 0x10, 0x70bd28, 0x25dfdbfb, {}, [@FOU_ATTR_IFINDEX={0x8, 0xb, r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000080}, 0x1) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r8, 0x8983, &(0x7f0000002080)) connect$inet6(r1, &(0x7f00000020c0)={0xa, 0x4e23, 0x9, @remote, 0x73c3}, 0x1c) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x40010, r6, 0x9152e000) ioctl$PPPIOCSACTIVE(r1, 0x40107446, &(0x7f0000002140)={0x3, &(0x7f0000002100)=[{0x4, 0x3, 0x10, 0x8}, {0x6, 0x9, 0x49, 0x3}, {0x8, 0x8, 0x10, 0x4}]}) connect$inet(r1, &(0x7f0000002180)={0x2, 0x4e22, @multicast2}, 0x10) sendmmsg$inet(r0, &(0x7f0000003040)=[{{&(0x7f00000021c0)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x25}}, 0x10, &(0x7f00000022c0)=[{&(0x7f0000002200)="78b6bbe1f1bb5e3c5dcfafb1bc99d13b1a5f93029519768fbb91bfcc4d4d61839badcc548b0d3cc2317add6e5aaf46de0bd12b434eeffa9511b0c5942042dcb44fb3b6b713d248ffde3005f4de0481bae9fcceceb0bbcdbecd1bfa6bc14ff9f5a50d019d881e83723d91eb1759bd40b7bbcf5a40239f2261decd05adc0449156b56323270f72e6a4640afd7166cb44b817d511551e40bfd8aaa2e5fa80c9f5fffcf41b9c210836028216", 0xaa}], 0x1, &(0x7f0000002300)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @broadcast, @multicast1}}}, @ip_retopts={{0xa0, 0x0, 0x7, {[@ssrr={0x89, 0xf, 0x9e, [@loopback, @remote, @multicast1]}, @cipso={0x86, 0x12, 0x6, [{0x5, 0xc, "247e7b43e2ff39ab5338"}]}, @timestamp_prespec={0x44, 0xc, 0xc4, 0x3, 0x1, [{@broadcast, 0x1}]}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x7, 0xcc, [@loopback]}, @ssrr={0x89, 0xb, 0x90, [@loopback, @remote]}, @timestamp_addr={0x44, 0x1c, 0xd4, 0x1, 0x4, [{@broadcast, 0x9}, {@local, 0xdad9}, {@rand_addr=0x64010101, 0x5}]}, @timestamp={0x44, 0x28, 0x41, 0x0, 0x0, [0x8, 0x8, 0x7, 0xf00, 0x5, 0x40, 0x6, 0x7, 0xfd]}, @cipso={0x86, 0x6, 0x3}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @private=0xa010102, @loopback}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@noop, @timestamp_prespec={0x44, 0xc, 0x70, 0x3, 0x6, [{@loopback, 0x100}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_tos_int={{0x14}}], 0x148}}, {{&(0x7f0000002480)={0x2, 0x4e20, @remote}, 0x10, &(0x7f0000002700)=[{&(0x7f00000024c0)="cf87325927852ced1548ca4cd3134faacf1fe53615a76e9e66c6db42c93b312acfcdf1157eba4188e42cf3408443ed596b6e7703f95e93c5968fbc775a94b557327a35e6dc735b039703de53129640e7bc20197387400925ed361c3bddb7d9ee64860c761b69cd2bd70be1a2", 0x6c}, {&(0x7f0000002540)="80fd38bf23332e1d59a93804537db3bab65a5f3c7320db62dabf03c6137d7ffff3528c8554662bc20c6d63e03b5a0a09d908694fd29510223122d6e2de7e9175979e3f57e2d55ec6a39c317625f5522db2e26d42741def9ca5c3c503b3cfa4595b3f0712ec9d0bf9e29d67e22daf73423a58f7dc937517c22f9d26190b6e36843c4c85dd8c1d53794c72336b2296a48c10106c7ab7b694c378b942e79dac1f6650ec997d32551ca1c90f1d7ecccfe9eeda9d32f416084f60f6", 0xb9}, {&(0x7f0000002600)="051b116c50a09419b8d948e085baae8c58a17484228a3e0b", 0x18}, {&(0x7f0000002640)="702cd15608a067c668690976d10eefb95c24da8d37bbedb164ce13057cb968cd44a97bda4d52abf7c9f1e9880588bafd6807d62b44256c5af88836d4296351f7c9dd34f88d6124be0267ff266cfc72ca07e81f2c3a961552601dc4dd9f24a59df2d55ba96e2d5cd3ec216b2a8fd1c63c5a649b340524d0adc6467b17f9d0434d174349b2515a31faf1f31d1a74bd44f51886f54787f1f3f6a9977f0fd28fe355ec4f86169073591b21fc424b811c8963eaa818e592fabc71b5", 0xb9}], 0x4, &(0x7f0000002740)=[@ip_ttl={{0x14, 0x0, 0x2, 0xb}}, @ip_retopts={{0x44, 0x0, 0x7, {[@cipso={0x86, 0x33, 0x3, [{0x0, 0x5, "8f6022"}, {0x6, 0xc, "7df7c9e8ed7f1a8284aa"}, {0x0, 0xf, "ffaca10a38e026e7401e255889"}, {0x1, 0xd, "96588420bd3238f03bcff9"}]}]}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@end, @generic={0x82, 0x5, "34eef9"}, @timestamp={0x44, 0x10, 0x42, 0x0, 0x9, [0x2, 0x0, 0x6]}, @timestamp={0x44, 0x1c, 0x4c, 0x0, 0x6, [0x9c, 0x3, 0x0, 0x0, 0x10, 0xffff]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @multicast2, @multicast2}}}], 0xc8}}, {{&(0x7f0000002840)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f0000002980)=[{&(0x7f0000002880)="ce0eecb14b52", 0x6}, {&(0x7f00000028c0)="99a7cfd88abc5b0470f3eafb23056339bba5625ab26651eb7e62f52a65921d162cab940d7efac4118c310954bf0f5ce0e761ad7809f1be41e077068b62133fbe5c21316b92b261141454f8dc257bd02e86237ccf510bf73fd4652c401f530b61533f27660e078b89b908e7e8347a62195c874c1fd5755a76cb73512e92d340925f455a0db43a3304a4860e1fd16d6d251636e5b6", 0x94}], 0x2, &(0x7f00000029c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @dev={0xac, 0x14, 0x14, 0x34}, @dev={0xac, 0x14, 0x14, 0x32}}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x800}}, @ip_retopts={{0x40, 0x0, 0x7, {[@end, @timestamp={0x44, 0x2c, 0x87, 0x0, 0x7, [0x6, 0x10000, 0x4, 0x6, 0xc000000, 0x80000001, 0x5, 0x2, 0x7ff, 0x7]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x400}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xc0}}, {{&(0x7f0000002a80)={0x2, 0x4e22, @loopback}, 0x10, &(0x7f0000002b80)=[{&(0x7f0000002ac0)="09d6ae7bbe032094aebf6a836055f563e452870f2f41831f94be5378856bb8e0a02efea5f62b5b4cf03b", 0x2a}, {&(0x7f0000002b00)="a6d6d183b375a826b319a3550bbdec78ecf70bb383727203e6e27e505af5616f8ca16f", 0x23}, {&(0x7f0000002b40)="e83f4ca10247fb6f889f623f03fe233960c7b82003a5ca746823f83340c61f071209bbf8ab2fa141a4770262e897bf48200d801e4b939bdce58d71531f8d", 0x3e}], 0x3, &(0x7f0000002bc0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x1ff}}], 0x18}}, {{&(0x7f0000002c00)={0x2, 0x4e23, @rand_addr=0x64010101}, 0x10, &(0x7f0000002cc0)=[{&(0x7f0000002c40)="cd017730a465240efab295e198335a7bacd817a93d5f4d052d88aa5ac613475c4bf8915f54c995d771596d6447e686773042582ef1ce08c97c0b9c0034081370cc6070e029abcc2af0a604a34635e57e08c5cd2d407bed84127fc891ed4e8c2aea8fb8998d8736e86b79e481ba2ad8f7a09e78baba7fab1875f61ded18f7c0", 0x7f}], 0x1}}, {{&(0x7f0000002d00)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000002f80)=[{&(0x7f0000002d40)="7c346b6a2a834d33e20f1e1448f5b9107d5031c758e6cc256937cdfcb24f20c701a9b89c41584c663a10b28e7904c348aebe20ea60d0b26ab87661e31cd000cb3737f19ce85072a4bb1d0dbf83991ec9f3d3906ebb3c187219785d1ff9c71d05e17db472cd6211b8c34bd9c5e8caaedd45fb423e29c3989802d452b27d9f8aa6a609122d46d23e58a057139f38a4006aa1c7a0c30efd5fcc4abeae2146c0542ef657a02cbb5fa08a52f2109a549b2774be19effd64db6fed8e2cd6bafa", 0xbd}, {&(0x7f0000002e00)="0b9206a992826fe0215e029e0547c2f2e828790b91c0d56c9ea7f21110edde0e0923e4df3911d748e10179ae270b2d93d7d854484213f817334d5bc2c72f52b1a05f3209a83faf7929f55cb76b309d8f7dd234ca0bb97251f8358175e459a492d4a7590875d4a4d045fee58c6736af76bc658d0b2451888dea59a571e2f1892f018e5f4ee905c7ddc504669db488f3a6a108bba511907726be5f72187d70120ac1ff8614e12e3ffe5497c8b8155a37a9a6511379b1b5a15d5ac592d4347169101d48f96678898a50b906791c27e6c382dae7cf313459db", 0xd7}, {&(0x7f0000002f00)="86b5e0dd1c03cd8a5f600c2f0be0eb96514afe2b4ec68115e5dbd7651b60da5ed3f45ffe66c09da0bb66762868e9ca753624150dec0756d9937ed936e793ef1b10987f9e7b1c6d950191b4", 0x4b}], 0x3, &(0x7f0000002fc0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x3}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}, @ip_retopts={{0x14, 0x0, 0x7, {[@end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x3}}], 0x60}}], 0x6, 0x40008c1) 2m38.916303309s ago: executing program 1 (id=1476): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r0, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x2e, &(0x7f0000000340)={@multicast, @random="866304000800", @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x3a, 0x20, 0x0, 0x0, 0xf9, 0x11, 0x0, @empty, @multicast1}, {0xfffe, 0x4e20, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x3, 0x100, @void}}}}}}}, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSETELEM={0x2c, 0x1d, 0xa, 0x805, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x74}}, 0x0) sendto$inet(r1, &(0x7f0000000140)='^', 0x34000, 0x0, &(0x7f0000004ff0)={0x2, 0x0, @rand_addr=0xfffffffffffffffe}, 0x10) listen(r1, 0xfff) r3 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r1, 0x84, 0x1c, &(0x7f0000000280), &(0x7f00000002c0)=0x4) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x4001, 0x0, @loopback}, 0x1c) connect$unix(r4, &(0x7f000057eff8)=@file={0x0, './file0\x00'}, 0x6e) syz_emit_ethernet(0x5a, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1e}, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa210106, @local, {[@ssrr={0x89, 0x1f, 0xe9, [@multicast2, @private=0xa010100, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010102, @empty]}, @generic={0x44, 0x2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x20}}}}}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000140)={0xa, 0xfffd, 0x0, @mcast2, 0x9}, 0x1c) syz_emit_ethernet(0x2a, &(0x7f0000000580)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}, @link_local={0x3}, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x4, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x17}, @remote, @broadcast, @loopback}}}}, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r8, 0x89f0, &(0x7f0000000840)={'ip6gre0\x00', &(0x7f00000007c0)={'ip6_vti0\x00', 0x0, 0x4, 0x0, 0x1, 0xf, 0x4, @empty, @mcast1, 0x7800, 0x10, 0x3, 0x8e}}) r9 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$MPTCP_PM_CMD_GET_LIMITS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1000000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x4001) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9506, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) getsockopt$inet_sctp_SCTP_GET_ASSOC_STATS(r3, 0x84, 0x70, &(0x7f0000000180)={0x0, @in={{0x2, 0x4e20, @loopback}}, [0x7, 0x2, 0x925, 0xffffffff00000001, 0xc42, 0x200, 0x6e1, 0x2090c5d2, 0xffffffffffff77ae, 0x2, 0x4, 0x7, 0x100000001, 0x2, 0x9]}, &(0x7f00000000c0)=0x100) syz_emit_ethernet(0x4e, &(0x7f0000002100)=ANY=[@ANYBLOB="aaaa91aaaaaabbbbbbbbbbbb86dd60cedd0000183aff00000000000000000000000000000000ff02000000000000000000000000000187009078fe80000000000000000000000000002e05009dc8"], 0x0) 2m37.963972529s ago: executing program 1 (id=1494): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 64) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 64) r2 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) r3 = socket$kcm(0x21, 0x2, 0xa) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in6={0x21, 0xfffc, 0x2, 0x1c, {0xa, 0x0, 0x4, @dev}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=[{0x18, 0x110, 0x1, "dc"}], 0x18}, 0xfc00) (async) syz_emit_ethernet(0x2e, &(0x7f0000000000)={@link_local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, @private=0x80000000, @local}, {0x40, 0x37c1, 0xc, 0x0, @gue={{0x1, 0x0, 0x0, 0x0, 0x0, @void}}}}}}}, 0x0) (async, rerun: 32) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@updpolicy={0xc4, 0x19, 0x1, 0xfffffffc, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x28}, @in6=@local, 0x4e23, 0x0, 0x4e23, 0x0, 0xa, 0x0, 0x60}, {0x0, 0x1000000000000401, 0xfffffffffffffffe, 0x40000000, 0x0, 0x1a, 0x1, 0xfffffffffffffffe}, {0x77, 0x5, 0x0, 0x7fff}, 0x8, 0x0, 0x1, 0x0, 0x3, 0x3}, [@policy_type={0xa, 0x10, {0x1}}]}, 0xc4}}, 0x0) (rerun: 32) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000000)) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000040)={r0}) (async) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r8 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f00000001c0)={r7, @in={{0x2, 0x0, @empty}}}, 0x90) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r5, 0x84, 0x72, &(0x7f00000000c0)={r7, 0x3, 0x10}, &(0x7f0000000100)=0xc) sendmsg$nl_xfrm(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fc01000000000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000b93760000000000000000000000000000000000000000000200000000000000010000000000000044000500ac141400000000000000000000000000000000003c"], 0xfc}, 0x1, 0x0, 0x0, 0x24008040}, 0x20040000) (async, rerun: 32) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) (rerun: 32) 2m37.609923778s ago: executing program 1 (id=1499): bpf$BPF_RAW_TRACEPOINT_OPEN(0x23, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x78) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) r2 = socket$inet(0x2b, 0x801, 0x0) listen(r2, 0x200) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x3, &(0x7f0000000180)="5f4a57db02b4002de7000008a8b000", 0x10) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x4d576168}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x41) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x24040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6d651908", @ANYRES16=0x0, @ANYBLOB="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"], 0x354}, 0x1, 0x0, 0x0, 0xd5}, 0x4040890) bpf$BPF_RAW_TRACEPOINT_OPEN(0x23, &(0x7f0000000500)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffffc}, 0x78) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), r0) (async) socket$inet(0x2b, 0x801, 0x0) (async) listen(r2, 0x200) (async) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r2, 0x6, 0x3, &(0x7f0000000180)="5f4a57db02b4002de7000008a8b000", 0x10) (async) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r2, 0x84, 0x21, &(0x7f0000000340), &(0x7f0000000380)=0x4) (async) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x1c, r1, 0x2, 0x70bd2c, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x4d576168}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x41) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x30, r3, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x80c0}, 0x24040000) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$TIPC_NL_KEY_SET(r4, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="6d651908", @ANYRES16=0x0, @ANYBLOB="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"], 0x354}, 0x1, 0x0, 0x0, 0xd5}, 0x4040890) (async) 2m37.473175628s ago: executing program 1 (id=1502): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x2, 0x2, {0x4000}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0xb}}, {0x0, 0x2, [0xa37, 0xfff, 0x8]}}, {{0x0, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe}}, {0x0, 0x2, [0x6, 0x8, 0x9]}}]}]}, 0x38}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x3, 0x2}}, 0x14}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendto$packet(r7, &(0x7f00000000c0)="3f030e0033e6140006001e008808", 0xe, 0x0, &(0x7f0000000540)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x80) r10 = socket(0x10, 0x80002, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xb17, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) sendmmsg$alg(r10, &(0x7f00000000c0), 0x492492492492627, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2m36.632298856s ago: executing program 5 (id=1512): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)=ANY=[@ANYBLOB="340000000206010823000000000000000000000011000300686173683a69702c6d61726b000000000900020073797a3100000000"], 0x34}}, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r0, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0x9, [@volatile={0x0, 0x0, 0x0, 0x9, 0x5}, @var={0x7, 0x0, 0x0, 0xe, 0x1}, @func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @func_proto, @union={0x0, 0x0, 0x0, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x61, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='rose0\x00', 0x10) sendmmsg$inet(r1, &(0x7f0000009e00)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000002c0)="f27fe9a78470bcb9e27991000000000000000400"/37, 0x25}], 0x1, 0x0, 0x0, 0x2000000}}, {{0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000500)="70f3df8239179743846a41fcb034b7b6398c12ab3f0d96e152c377f26795fed07d931c9260fb3777d4ec7a92f50a441e1af5045d3dd340fd820620bd228c9be3a5b8b34f1ad6fd069ca4", 0x4a}], 0x1, &(0x7f00000005c0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x8000}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @broadcast, @private=0xa010101}}}], 0x38}}], 0x2, 0x4000) r2 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000600)={0xc, 0xe, &(0x7f0000000e80)=ANY=[@ANYRES16=r2], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) r4 = accept$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000080)=0x1c) getsockopt$inet_sctp_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, &(0x7f0000000400)={0x0, 0x9, 0x8, 0x4, 0x6d, 0xd7, 0x1, 0x4, {0x0, @in={{0x2, 0x4e23, @local}}, 0xae, 0xddbf, 0x29, 0x3ff, 0x9}}, &(0x7f00000000c0)=0xb0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1000000}, &(0x7f0000000380)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r4, 0x84, 0xe, &(0x7f00000004c0)={r5, 0x7ff, 0x7, 0xb0, 0x5, 0xfff9, 0xfff, 0x294, {r6, @in={{0x2, 0x4e20, @multicast2}}, 0x4, 0xcc44, 0x7, 0x9, 0x4a8fa96}}, &(0x7f0000000580)=0xb0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000500000000000000b64f7110b3000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r3, 0xfeffff, 0xe80, 0x3f000002, &(0x7f0000000700)="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", 0x0, 0xf0, 0x0, 0xf0, 0xffffff0c}, 0x40) 2m36.444380387s ago: executing program 5 (id=1515): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) recvmmsg(r1, &(0x7f00000064c0)=[{{&(0x7f0000000180)=@l2tp={0x2, 0x0, @private}, 0x80, &(0x7f0000000100)=[{&(0x7f0000000200)=""/70, 0x46}, {&(0x7f0000000000)=""/28, 0x1c}, {&(0x7f00000002c0)=""/151, 0x97}, {&(0x7f0000000080)=""/9, 0x9}], 0x4, &(0x7f0000000380)=""/191, 0xbf}, 0x9}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000440)=""/70, 0x46}, {&(0x7f00000004c0)=""/189, 0xbd}, {&(0x7f0000000580)=""/18, 0x12}], 0x3, &(0x7f0000000600)=""/190, 0xbe}, 0xfffffffe}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f00000006c0)=""/61, 0x3d}, {&(0x7f0000000700)=""/166, 0xa6}], 0x2, &(0x7f0000000800)=""/49, 0x31}, 0x6e90}, {{0x0, 0x0, &(0x7f0000001b40)=[{&(0x7f0000000840)=""/106, 0x6a}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f00000009c0)=""/84, 0x54}, {&(0x7f0000000a40)=""/37, 0x25}, {&(0x7f0000000a80)=""/4096, 0x1000}, {&(0x7f0000001a80)=""/62, 0x3e}, {&(0x7f0000001ac0)=""/112, 0x70}], 0x7}, 0x4}, {{0x0, 0x0, &(0x7f0000001bc0), 0x0, &(0x7f0000001c00)=""/38, 0x26}, 0x3ed4}, {{&(0x7f0000001c40)=@caif=@dgm, 0x80, &(0x7f0000002fc0)=[{&(0x7f0000001cc0)=""/72, 0x48}, {&(0x7f0000001d40)=""/68, 0x44}, {&(0x7f0000001dc0)=""/4096, 0x1000}, {&(0x7f0000002dc0)=""/245, 0xf5}, {&(0x7f0000002ec0)=""/224, 0xe0}], 0x5, &(0x7f0000003040)=""/4096, 0x1000}, 0xffffffff}, {{&(0x7f0000004040)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @initdev}}, 0x80, &(0x7f0000004200)=[{&(0x7f00000040c0)=""/172, 0xac}, {&(0x7f0000004180)=""/113, 0x71}], 0x2}, 0x9}, {{&(0x7f0000004240)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000006400)=[{&(0x7f00000042c0)=""/4096, 0x1000}, {&(0x7f00000052c0)=""/4096, 0x1000}, {&(0x7f00000062c0)=""/89, 0x59}, {&(0x7f0000006340)=""/137, 0x89}], 0x4, &(0x7f0000006440)=""/118, 0x76}, 0x6}], 0x8, 0x10021, &(0x7f00000066c0)={0x0, 0x989680}) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r0) sendmsg$DEVLINK_CMD_RATE_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)={0x14, r2, 0x701, 0x0, 0x0, {0x45}}, 0x14}}, 0x0) 2m36.30848553s ago: executing program 5 (id=1516): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/248, 0x1a, 0xf8, 0x1, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000000080)=""/248, 0x1a, 0xf8, 0x1, 0x0, 0x0, @void, @value}, 0x20) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x4}, 0x6) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'ip6gre0\x00', @broadcast}) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000003201"], 0x138) (async) write$bt_hci(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="000000003201"], 0x138) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009c0000000b"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r3}, 0x18) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="5c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000340012800e00010069703665727370616e0000002000028006000200300000001400060000000000000000000000ffff7f00000108000a00", @ANYRES32], 0x5c}}, 0x0) 2m36.133942387s ago: executing program 5 (id=1520): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x8607}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x14, 0x1d, 0x309f38874454b401, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000500)=@filter={'filter\x00', 0x2, 0x4, 0x400, 0xffffffff, 0x138, 0x228, 0x0, 0xfeffffff, 0xffffffff, 0x330, 0x330, 0x330, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x2f2, 0x110, 0x138, 0x0, {}, [@common=@unspec=@devgroup={{0x38}}, @common=@srh={{0x30}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5f00}}]}, @REJECT={0x28}}, {{@ipv6={@dev, @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xf0}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00'}}}, {{@ipv6={@loopback, @dev, [], [], 'erspan0\x00', 'veth0_to_bridge\x00'}, 0x0, 0xa8, 0x108}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@multicast1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x460) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001e00010000000000007f000007000000", @ANYRES32=r0, @ANYRESOCT=r1], 0x30}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000040)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = socket$igmp6(0xa, 0x3, 0x2) r4 = socket(0x10, 0x803, 0x0) sendto(r4, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r4, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x14b}, {&(0x7f0000000280)=""/85, 0x53}, {&(0x7f0000000fc0)=""/4096, 0x564}, {&(0x7f0000000400)=""/106, 0xb}, {&(0x7f0000000740)=""/73, 0x60}, {&(0x7f0000000200)=""/77, 0x630}, {&(0x7f00000007c0)=""/154, 0x4a}, {&(0x7f0000000100)=""/10, 0x158}], 0x8, &(0x7f0000000600)=""/191, 0x41}, 0x1}], 0x4000000000003b4, 0x2, &(0x7f0000003700)={0x77359400}) r5 = socket(0x2, 0x3, 0x1) getsockopt$IP_VS_SO_GET_SERVICE(r5, 0x0, 0x483, &(0x7f00000000c0), &(0x7f0000000000)=0x68) getsockopt$MRT(r5, 0x0, 0xd0, 0x0, 0x0) ioctl(r3, 0x2, &(0x7f0000001a80)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2m35.98771169s ago: executing program 5 (id=1522): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000000)={0x1b, 0x0, 0x0, 0xc76d, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) r0 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x8936, &(0x7f0000000000)) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x8, &(0x7f0000000040)=0x10001, 0x4) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x3}, 0xc) (async) r5 = socket$inet(0x2, 0x6, 0xfffe) setsockopt$inet_opts(r5, 0x0, 0x4, &(0x7f0000000000)="8907040400", 0x5) (async) getsockopt$inet_opts(r5, 0x0, 0x4, 0x0, &(0x7f0000000040)) (async) sendmsg$TIPC_NL_MON_PEER_GET(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=r3, @ANYBLOB="030b0000000000080000130000000161cad2dcabeb9e286e841e2319b1daa457b9571451f181178136b367ee6d5de2caf86a143827b941dc2700948bb7bb0adc098b480c9e1922220ff178c0187d7123d398f35d33b09b6f0189bf5517611e0000000021709972b5a12409aa56ad018dc03dcf1a8d1c11afed5dc7cd"], 0x14}}, 0x0) 2m35.422495308s ago: executing program 5 (id=1529): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0005d70000fe08060001080006"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="504ae68e"], 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_stats_latency\x00', r5, 0x0, 0x8001}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r7, 0x0, 0xf}, 0x18) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6001000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000008000000000000000000000000000000000000000000300000000000000000000000000000004000000000000e3ff000000000000000000000000000000040000000000000000000040000000000000000000000000000000ba9b55090000000000fcffffff0000000002000001000000000000000008001f0004000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000008001f0003000000150008"], 0x160}}, 0x4810) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x8000}, 0x4) 2m22.204321512s ago: executing program 33 (id=1502): socket$inet6_tcp(0xa, 0x1, 0x0) r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000080)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2b, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'veth1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x2, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x2, 0x2, {0x4000}}}, @TCA_STAB={0x0, 0x8, 0x0, 0x1, [{{0x0, 0x1, {0xfa, 0xf, 0x100, 0x3, 0x1, 0x3, 0xb}}, {0x0, 0x2, [0xa37, 0xfff, 0x8]}}, {{0x0, 0x1, {0xaa, 0x0, 0x7, 0x7, 0x1, 0x1, 0xfffffffe}}, {0x0, 0x2, [0x6, 0x8, 0x9]}}]}]}, 0x38}}, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2c, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, 0x108) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r4, 0x114, 0xa, &(0x7f0000000040)=ANY=[@ANYRES64=r4], 0x4) syz_emit_ethernet(0x0, 0x0, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)={0x14, 0x25, 0x1, 0xfffffffd, 0x0, {0x3, 0x2}}, 0x14}}, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendto$packet(r7, &(0x7f00000000c0)="3f030e0033e6140006001e008808", 0xe, 0x0, &(0x7f0000000540)={0x11, 0x0, r9, 0x1, 0x0, 0x6, @multicast}, 0x14) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r6, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(r6, 0x6, 0x15, &(0x7f00000000c0), 0x4) bpf$PROG_LOAD(0x5, 0x0, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f0000000b80)=[{{0x0, 0x0, &(0x7f0000000100)=[{0x0}, {0x0}, {0x0}, {&(0x7f0000000a40)="118db76e8efb27d530b26a8302bad647e35540226c4052b6d573165d39ad8ead67632e8fe108cf55473bc22914286359c3bb3decf99ed04d34d1a73ae48dae0e69ee69fe", 0x44}], 0x4}}], 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x45, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010001fff001201000006000043be4354", @ANYRES32=0x0, @ANYBLOB="ff7f000000000000140012800a00010076786c616e00000004000280080004"], 0x3c}, 0x1, 0x8000a0ffffffff}, 0x80) r10 = socket(0x10, 0x80002, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x58, 0x10, 0x401, 0x0, 0x2, {0x0, 0x0, 0x0, 0x0, 0xb17, 0xc574450d1af3b5bc}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MODE={0x5}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x20044010}, 0x0) sendmmsg$alg(r10, &(0x7f00000000c0), 0x492492492492627, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 2m20.330763829s ago: executing program 34 (id=1529): syz_emit_ethernet(0x2a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbb0005d70000fe08060001080006"], 0x0) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000015c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2}, 0x8, 0x10, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x700, &(0x7f0000000540)="e460334470b8d480eb00c15286dd", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendto$packet(r0, &(0x7f0000000100)="f257a8ea7bc273dfaeab96850806", 0x2a, 0x0, &(0x7f0000000200)={0x11, 0x0, r1, 0x1, 0x0, 0x6, @link_local}, 0x14) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='hugetlb.1GB.rsvd.limit_in_bytes\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[@ANYBLOB="504ae68e"], 0x8) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_stats_latency\x00', r5, 0x0, 0x8001}, 0x18) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r7, 0x0, 0xf}, 0x18) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000a40)=ANY=[@ANYBLOB="6001000010000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb0000fff720000001000000003b000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="64010102000000000000000000000000000000006c000000ac1414bb00000000000000000000000000000000000000000000008000000000000000000000000000000000000000000300000000000000000000000000000004000000000000e3ff000000000000000000000000000000040000000000000000000040000000000000000000000000000000ba9b55090000000000fcffffff0000000002000001000000000000000008001f0004000000480003006465666c6174650000000000000000000000000000000000000000000000000000000000000000000000000000000000000080000000000000000000000000000000000008001f0003000000150008"], 0x160}}, 0x4810) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x4, 0x8000}, 0x4) 1m21.319397061s ago: executing program 4 (id=1626): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000980), 0xe) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x8e92, 0x4) listen(r2, 0x0) 1m20.605385389s ago: executing program 2 (id=783): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000ea00"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000880)={0x0, 0xfffffffffffffe62, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) 1m8.428803117s ago: executing program 2 (id=783): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000ea00"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000880)={0x0, 0xfffffffffffffe62, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) 1m7.855918777s ago: executing program 4 (id=1626): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000980), 0xe) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x8e92, 0x4) listen(r2, 0x0) 55.392467075s ago: executing program 2 (id=783): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000ea00"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000880)={0x0, 0xfffffffffffffe62, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) 54.083315876s ago: executing program 4 (id=1626): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000980), 0xe) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x8e92, 0x4) listen(r2, 0x0) 44.928236265s ago: executing program 7 (id=2261): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) setsockopt$ax25_int(r0, 0x101, 0x9, &(0x7f0000000000)=0x7fffffff, 0x4) r1 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x89f0, &(0x7f0000001440)={'bridge0\x00', &(0x7f0000000300)=@ethtool_ringparam={0x12, 0x0, 0x3, 0x0, 0x0, 0xf, 0x0, 0x4, 0x4}}) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = getpid() sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0x301, 0x0, 0x0, {0xc}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r3}]}, 0x1c}, 0x1, 0x0, 0x0, 0xc001}, 0x4000000) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0xc3) accept$ax25(r4, &(0x7f0000000340)={{0x3, @null}, [@remote, @bcast, @null, @netrom, @bcast, @netrom, @null, @null]}, &(0x7f0000000040)=0x48) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x1a, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="05000000000000006b113c00000000008510e65002000000850000007600000095005122000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x3, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) 44.841931137s ago: executing program 7 (id=2262): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1900000004"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0b00000000010000000100000900000001"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r0}, 0x38) bpf$MAP_LOOKUP_BATCH(0x1b, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000100), 0x0, 0x3, r0}, 0x38) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{0x3c}, {0x6}]}, 0x10) 44.706627474s ago: executing program 7 (id=2263): r0 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_buf(r0, 0x107, 0x15, 0x0, &(0x7f0000001040)) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000580)=ANY=[@ANYBLOB="3800000001010101000000000000000002000000180001805600018008000100ac14141c3c5d7a8c6e301b45de3a3e607abb080002000000"], 0x38}}, 0x4000000) setsockopt$inet6_int(r1, 0x29, 0xce, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f00000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x4d) 44.300430097s ago: executing program 7 (id=2266): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000004c0)={0x1c, r1, 0x413, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x8880) r3 = socket$nl_route(0x10, 0x3, 0x0) sendto(r3, &(0x7f00000000c0)="534ee65c46ea4ca14bfb3075445fc040a4c4c026c4d77cafc9d24d72a69a51f7cb107b72156cf0f87dc9a422f0d7abe5a11a83458719558c8091f474ecfec4dca50cc8605de4472d05c2cd9501ef8315484b88ce4d26d2d596797ebc9628a8867ceb46936c2aa5a888d8dc688534d7b96638a362496e27528e4a757709ded7710a23daa3bfe0a287b0980f3e317d454ed1e9851dc487c8d33db7594c808eb344eb2135b54c9be0be02cef0d1361d16482d7fd5150055409421e88fa0e5259f7f0638fe463c96cdd19722b77ce3d0b54676960de2f05f5ccc2bb1b253ec3cf1e8921a", 0xe2, 0x50, &(0x7f0000000000)=@in={0x2, 0x4e21, @broadcast}, 0x80) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=@newlink={0x5c, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @IFLA_IPTUN_LOCAL={0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}]}}}]}, 0x5c}}, 0x0) 44.064652136s ago: executing program 7 (id=2269): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, 0x0, 0x1a, 0x0, 0x1, 0x800001, 0x0, @void, @value}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@getnexthop={0x20, 0x6a, 0x501, 0x0, 0x0, {}, [@NHA_MASTER={0x8, 0xa, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x4004854}, 0x0) r1 = socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r1) sendmsg$TIPC_CMD_GET_NETID(r1, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x1c, r2, 0x8, 0x70bd28, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40488}, 0x4000) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x15, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x9e}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x2}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x5, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x7}, @tail_call, @btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000340)='GPL\x00', 0x4, 0x1000, &(0x7f0000000a80)=""/4096, 0x40f00, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0xfdd5, 0x2}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0xa, 0x5, 0xbd0d}, 0x10, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0xffffffffffffffff], &(0x7f0000000440)=[{0x0, 0x1, 0x9, 0xc}, {0x0, 0x2, 0x5}, {0x4, 0x1, 0x2, 0x8}, {0x2, 0x4, 0x0, 0x8}], 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000007c0)={r3, 0x0, 0x60, 0xa1, &(0x7f0000000540)="59612225622f4b902308624d9d10f4ab4d44d6608854456aba4294655bac915f3867655a1066ddcbecee58238091f4f5fe60a694ff54da5e8d3147d1697aece44788d29cfb2b1b3190e82f71ca7ac582f4bc7b9b55b505a5db54b87de6623529", &(0x7f00000005c0)=""/161, 0x0, 0x0, 0x0, 0xf1, &(0x7f0000000680), &(0x7f00000006c0)="8f63718db7e705c924d4a68f1aa2f06a6d0221578591a9a05d3fac2323e633e91c3faf4c57dfabe7b315fc2cabb3ee56cb28b6ad14fe422d7b451be4fc81a7cee771d76fcbd78e2f03747628264c8ed8e89aada7b881a1f6ee8954ecae929bbf4b2999b4883b33a44d03f6fc898a461b86489504aa004832bed3a4c0f3247e0ac19ac09baab12608b94b99fb8ce3d4320a3cc2b6447bbdec5874f5eab60e02780cf0cd53267fd9573d7dd74048e0016bfd1007fc914febe8859750981fe7183c46ffe5dd3137660f93c9089716ccac0d62ae09872d711af8ce20ba6fb4406934fa6e40e8cfb5da54cbceea4ef69266d5d3", 0x0, 0x0, 0x6}, 0x50) sendmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYRES16=r1], 0x18, 0xe000}, 0x5}], 0x1, 0x0) 43.922087421s ago: executing program 7 (id=2271): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_stats_latency\x00', r0, 0x0, 0x8001}, 0x18) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000050000000500000000900000001000000044000060400000005000000bc0100000a0000000100000000000000540900000600000002000000000000000000000203000000100000000000000204000000000000000000000203000000002e225f5f5f002e00"], &(0x7f0000000380)=""/161, 0x71, 0xa1, 0x0, 0x2, 0x10000, @value=r2}, 0x28) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r4, 0x0, 0xf}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 40.115365111s ago: executing program 4 (id=1626): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000980), 0xe) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x8e92, 0x4) listen(r2, 0x0) 39.602508562s ago: executing program 2 (id=783): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000ea00"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000880)={0x0, 0xfffffffffffffe62, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) 37.6859365s ago: executing program 3 (id=2299): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0x3100, 0x0, &(0x7f0000000000), 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1a}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0x3}]}, 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) 37.067398013s ago: executing program 3 (id=2302): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="3800001068aa009180441fae6db29fd48f7c0000000000000c000200010074c53a2a814b7373e7eef35e90030000150000040c000c80080003000800000006000b000100"/81], 0x38}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=ANY=[@ANYBLOB="3400000068000100000000000000000000000000000000001c0002000000000000000000020000000000b45cbe"], 0x34}}, 0x0) 36.872673755s ago: executing program 3 (id=2304): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x2, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0xe0}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000001880)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02"], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan1\x00', 0x0}) r7 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r7, 0x6b, 0x3, &(0x7f0000000580)=0x3, 0x4) sendmsg$NL80211_CMD_START_P2P_DEVICE(r5, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, 0x0, 0x8, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x80000001, 0x44}}}}, ["", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40006) r8 = socket$inet6(0xa, 0x2, 0x0) getsockopt$MRT6(r8, 0x29, 0x1e, 0x0, &(0x7f00000000c0)=0xfffffffffffffe6f) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r0, 0x84, 0x7a, &(0x7f0000000340)={r4, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) 36.668275144s ago: executing program 3 (id=2306): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000001c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a700000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1b, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) bind$packet(r5, &(0x7f00000000c0)={0x11, 0x5, r6, 0x1, 0x8, 0x6, @link_local}, 0x14) sendmsg$NL80211_CMD_SET_CQM(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_CQM={0x14, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x1000000}, @NL80211_ATTR_CQM_RSSI_THOLD={0x8, 0x1, [0xefffffff]}]}]}, 0x30}}, 0x0) 36.426003073s ago: executing program 3 (id=2308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x5db3, @loopback, 0x823}, 0x1c) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x6, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="27050200340f14000600002fb96dbcf706e10500000086dd000f1144ee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x800) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280040018"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xd0, 0x11, 0x148, 0xd0, 0x10, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x70, 0xd0, 0x1c}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4, [], 0x0, 0x0, 0x0, 0x0, 0xca25, 0xba, 0x0, 0x1f}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98, 0x2202}, {0x28}}}}, 0x280) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000ffdbdf252e00000008000300", @ANYRES32=r6, @ANYBLOB="2a67cb7ad4d6209ade11fd246a5bf7a3684113e7c7fa8986b9e208ab269e9b7b5f7f73a7019c6dc834e9177a86295ef6c8242d205cd35ab5147db3f6a0a9aab6df1bb8e612d160f8e9d577090b691ddd33f49a629fc3f4dcca"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) 29.198844139s ago: executing program 4 (id=1626): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000980), 0xe) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x8e92, 0x4) listen(r2, 0x0) 27.954298085s ago: executing program 35 (id=2271): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_stats_latency\x00', r0, 0x0, 0x8001}, 0x18) r2 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000440)={0x0, r1}, 0x8) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="9feb0100180000000000000050000000500000000900000001000000044000060400000005000000bc0100000a0000000100000000000000540900000600000002000000000000000000000203000000100000000000000204000000000000000000000203000000002e225f5f5f002e00"], &(0x7f0000000380)=""/161, 0x71, 0xa1, 0x0, 0x2, 0x10000, @value=r2}, 0x28) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x5, 0x0, 0x0, 0x40f00, 0x43, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r4, 0x0, 0xf}, 0x18) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 27.941388134s ago: executing program 2 (id=783): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000ea00"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000880)={0x0, 0xfffffffffffffe62, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) 13.357920124s ago: executing program 2 (id=783): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000ea00"/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r0}, &(0x7f00000001c0), &(0x7f0000000200)}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000880)={0x0, 0xfffffffffffffe62, &(0x7f0000000840)={&(0x7f00000009c0)=@bridge_getlink={0x28, 0x12, 0x101, 0x0, 0xffffffe0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x4000}, [@IFLA_EXT_MASK={0x8, 0x1d, 0xc3}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), r1) 11.75519506s ago: executing program 3 (id=2308): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x5db3, @loopback, 0x823}, 0x1c) r3 = socket$kcm(0x11, 0x3, 0x0) setsockopt$sock_attach_bpf(r3, 0x107, 0xf, &(0x7f0000000000), 0x4) sendmsg$kcm(r3, &(0x7f0000000080)={&(0x7f0000000100)=@caif=@rfm={0x25, 0x6, "cdfaaf7254f4ef6249f068fcdd7e1cbd"}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000300)="27050200340f14000600002fb96dbcf706e10500000086dd000f1144ee162fd4b8bf4a31accb", 0x26}], 0x1}, 0x800) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005d00)=ANY=[@ANYBLOB="140100002d00010000000000fcdbdf250401f280040018"], 0x114}], 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x220, 0xd0, 0x11, 0x148, 0xd0, 0x10, 0x188, 0x2a8, 0x2a8, 0x188, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0x70, 0xd0, 0x1c}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4, [], 0x0, 0x0, 0x0, 0x0, 0xca25, 0xba, 0x0, 0x1f}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'veth0_to_bond\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98, 0x2202}, {0x28}}}}, 0x280) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="050000000000ffdbdf252e00000008000300", @ANYRES32=r6, @ANYBLOB="2a67cb7ad4d6209ade11fd246a5bf7a3684113e7c7fa8986b9e208ab269e9b7b5f7f73a7019c6dc834e9177a86295ef6c8242d205cd35ab5147db3f6a0a9aab6df1bb8e612d160f8e9d577090b691ddd33f49a629fc3f4dcca"], 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x10) 11.7551431s ago: executing program 4 (id=1626): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000980), 0xe) listen(r0, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000980), 0xe) r2 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$TIPC_IMPORTANCE(r2, 0x10f, 0x83, &(0x7f0000000140), &(0x7f00000001c0)=0x4) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x25, &(0x7f00000000c0)=0x8e92, 0x4) listen(r2, 0x0) 972.687673ms ago: executing program 8 (id=2413): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000fcdbdf254f00000008000300", @ANYRES32=r2, @ANYBLOB="477e7a59f7ddd82480"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x80) 823.480083ms ago: executing program 8 (id=2415): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x24, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_ENABLED={0x5, 0x29, 0xfe}]}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0xc4) socket(0x2a, 0x1, 0x81) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x12094}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_REMOTE={0x8, 0x2, @local}, @IFLA_GENEVE_ID={0x8}]}}}]}, 0x48}}, 0x20000050) (async) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="01002000000000000000fffeffff"], 0x14}}, 0x0) 604.359084ms ago: executing program 6 (id=2416): mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1000001, 0x32, 0xffffffffffffffff, 0x0) connect$802154_dgram(0xffffffffffffffff, &(0x7f0000000180)={0x27}, 0x14) 603.158031ms ago: executing program 8 (id=2417): socket$nl_generic(0x10, 0x3, 0x10) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=@setlink={0x28, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_TARGET_NETNSID={0x8}]}, 0x28}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f0000000c00)=[{{0x0, 0x0, 0x0}, 0x32}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000240)=""/181, 0xb5}, {&(0x7f0000000580)=""/262, 0x106}, {&(0x7f0000002fc0)=""/4067, 0xfe3}, {&(0x7f0000000940)=""/238, 0xee}, {&(0x7f00000004c0)=""/139, 0x8b}, {&(0x7f0000000080)=""/238, 0xee}], 0x6}, 0x4}], 0x4, 0xa100, 0x0) 566.070856ms ago: executing program 6 (id=2418): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="64f900001000030500e57764d4e519a0bf000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000100000000000a000100aaaaaaaaaa0000001c0012800b00010062726964676500000c00028005002c0004000000"], 0x64}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000001100)={0x0}, &(0x7f0000002180)=0x8) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000021c0)={r2, 0x2}, 0x8) sendmmsg(0xffffffffffffffff, &(0x7f0000003a40)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000080)="947cdb0eb81c853fe193d345b34d4cff052a021fd7a16deb37ebdcfc9becd6d9a23c8e4a97a5d5e1367d785ca155a5f0bb830887746e2b5034521cfaeb55e0efac70598f62efa4675c80a5385beb1c6748542afb0ebaa95378eb69fa6b0355d3eaef86d0a39bbf52b26340c82cc8561655ec2fa585ec68f9b43a4bce27bb3099df18d2c6d385", 0x86}, {&(0x7f0000000140)="a4832148608c5fb4587f9f2dae833febaa328737ede547356829e8683b66aa6f19b4d1f743f4e562897684581393d4eed2e1e04b4953b1d2fc12f0c00835a5f479029bc8ee0f07ced232263d5e0447569b4b6fe711fcb3943146642730a65ab9083e772f6c518abdf3b42f3cb525cf6d396800db3efcd71ae2d6c5b67713b9337a75bf05632bcf08628907f6355b56765d4d5e8dbf476dc9023eb951b497f27c36bc61ab9055ed01a5", 0xa9}], 0x2, &(0x7f0000000240)=[{0x30, 0x84, 0xbd, "61eef7a67f10336d2719d968273c53e1024628eace713c8a2f522747"}, {0xc8, 0x0, 0xe, "2fbcdef4de874e3c8554cf8815e66a26765aef1050ee391c96e2bb13c5a88597e3bd8b7179bda6cc81015bae5fd3fac31b2993396d5b0a3ae904b76bb23cb7ccffe2973ca986ca92f70cde961d84a7b46e452aaf5c3dd5b58946a755fa15a1420bbd26f885dda8e78cfd02ed1d6941f7f331df1befb0be75ae0c91e0d2f1af3bb26ebfa5bc6a9d3274f346fdb5e9b115fe9cd9de2fe9fd9a320e3acb90341e805a2efc334e8b11c924105a87beca4bc417"}, {0x28, 0x0, 0x4121, "bd688c01b4bcc64e03d76a5cdd1a839ada"}, {0xa0, 0x103, 0x81, "9c6a84ff7b48db4a6889a534679bafddb4c4eaf019aadf2d48add0d0bd10ff45700d53d05d7406759352d8c130e386e056127ea88e2c58cbcab72a8acacfec745df61de79ed3fb44b540aabc251e572a3f15ddd8b3dda8e0526969172510634a53c6307a6953847e55d4a35e64e412711506b5a235f94d9b917c71ba19c7af7a5670360bf53771f2057293c2e52e"}, {0x98, 0x7, 0x9, "a4d513e67a147a40a84e6517f54d39406412dd596e39a6ac8b04a0065c5c5b82645f58cbcacf931dd2144c8611b6674e5f6422f1623b794587005d0edc14d062bc63bfc4c7b3eb031eb656e7fe4855daa270a9ad08d77412b0705b7f493c928d83743ca3182b18009c1ac5ae7616fb1ab36cd8bd687c23194640a4870a2d5226f16ef86466d8b0"}, {0xc8, 0x104, 0xe80, "1dbc02c6bc011cdaffea343a78488fb464f0d7e921b8b8cf4f998afd2a616d0ca2a29843181a5d0cab1cc5d63a728304f18d45d01da54b6b5d4efb31bc905160cd909bd751ed02660da4cd3ab8d2b8e45f14ee2b22dfb9f60fe94fc561c197ad65e447c2e13f8f2aa4a141913d438aad98194b5e9fcfeb3dc215012f5b9f982e0f0e4de79bb2884e1bacb9ec7c1bdedc3c05764f33569797123af379070c14c610f47fef5ba8cad5cdb90b616300a72eaf"}, {0x30, 0x139, 0xf, "c77d307d4ea3d072903a4776358a3b3ff20a47e99ab5f7bdb0e28b"}, {0x68, 0x116, 0x5, "0ac89764b410f13c3210877be65fca6ee3d84bd6623087b283ed3d1f70be8d0a04f3455cc74fbe1223439ef83a67f1db7aa08eb4282768af60e8547dec00ccbd4ec5a75afa7a9b25639cafd1bb8d7ded75087c5d946b3f10"}, {0x98, 0x11, 0xd53, "234d367a4710b7dfb8e34c6a83c6fb5dadbc7ea836806029fd038bfcb448fccb81a71a1b3e8a41fa9dc708e6114e265f54f68c190182948ca3bc3e10ec322e1dcef332be14d689a107cca411b15ec2b54ae93d170afe82e78562ee6ab0039a4dca542ddb3408946a5c1ddff1a13cdc66a6c3dfe5d6c670e6772818f421522dd08d3aa9ab19"}], 0x450}}, {{&(0x7f00000006c0)=@rc={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x80}, 0x80, &(0x7f00000007c0)=[{&(0x7f0000000740)="c34f6e66aa38720167e6dd68c77174b001fac3737e05152056e220a0b004a0315f8bc4b131202fe88a4e2fd7e94bc4fab63c6fb6f8d782b689f0b789cedc94406dc86578963340714458f2fa81ebe89389c9745f1315a53320cfcc84923531c4c17e6bd79ac2304503ae1e7fcefd6cdc", 0x70}], 0x1, &(0x7f0000002280)=[{0x110, 0x102, 0x8, "880e298b4bd819a441186197a7d00ed306f32a1f0dccd01117431374445f49571be547ece7921e6cdd90bea51d910068d6a0ab171d28c4b5c3e7859b209aae87160b80eb7def4645c8c4f1180f51452b8a0ddfda744e54f2092b081db4b63d0cc2455c0ef5e414588129b0660fcd0b194da91986e71f0b12a75fccb46739204819abbc9511498ac26b85270cef80ba856342969f72d7a265cd685aeb73c5df579470d063f7a0924d31e241254a7349c87d564c8c7b5242e2af6ed2b8fdde691f60814e36f52e7afee27237ad46a199141dae8173592c15ea3a8c4b3adcbda60a72281ba311445bbedd83890c6ba52fb41ae7b5b1fe9ddc9527"}, {0xa0, 0x10c, 0x5, "2089d6724f91ddeb3caa6e467862376e12e0c8c41971ff66263f01ca886f2b57c6cede885e8f04b81bf1a1f4b4972b46f6c1bb984c95063ff2efb11623b50c1af227d4077d99105209611cf85b4495b4b76cdd18444853c0a5610b1cc7d2a4291e65b648f2ba1212196bda1692024e5f5e918970b814c03a9d993debda0c7f672d5d71c013de4b717d132aef6b3257"}, {0xa0, 0x29, 0x4, "cd84da901ecba70642fe83ad5afc274f2c861a7355a62a6787097649d762777743d702260166213dc64b17ccc3d1e5ccf108c72f82a341c83e575a1893fe5b6aa0db048d71d0e1c0d74d5d3cf332174585187f2229156784c261d4feda6b2d0c5633554b464076afcffcc50f57826820f5319287c6cb8f40cf4ad14766dbf3333d220da2a43777585f"}, {0x88, 0x10e, 0x2, "02b5203b2ef29d03c32588e8753329e65bedc46198555a7ddb0aed106e7f149091f8f92a0f7508ee352c0c27b216806a6d20008f85825a5caaeb677670de22bbfdc436eb35c85f35cd875779b53232774a3a46f0aff64e49d365582f99a6c17ab8978455212684fb64e79118c1b20577b3"}, {0x110, 0x104, 0x2, "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"}, {0x1010, 0x88, 0x60a, "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"}, {0xc0, 0x119, 0x80000000, "258fe014c6a84075e8e3b43e557a503ead48ef92b7ea1ac960060fa075aa4dc0579a155814b76f335ffe90476a6f7eb7d6a397cd81c426ef104c39a5f9486d3eabfa838b7ed79fdad16efa007a4af2d5ad9bd036363b1ef97a08f541af49b16423435e69f60a05a6498a69e2c6fa6fc7cdc839de7733fcee6587bd71cf2d88b394fe535827dcb12b8cfad495184c4992ca0275f8e0da8730a9b79c99db64563f47586b5f3e5c7266d96ce5a7"}, {0x90, 0xb276e1242d41ecc4, 0x8, "7112d60962e96c41b32c2cd4374360c01221a2034379a7c7ed887f28b0581253bd03b462947cd892662cc2a91f3497f2af8f42f5c166383de996e04947ab1e1d9eba2de268ed702d8d9b236666cdac7b52d0047cbe48dbf95273f1acdbd1f44d3b0fe25da95b25daad479d50abb247b695adc01761ad079823"}, {0x60, 0x113, 0xd6f, "b9631e7a4a1dbe18d8115aade9d6fffc244be4c88ea17c56592ae84066b1a5d2eac1882c0be267a0ff55dc6bdbcf712d6e80482ecba2c94a50ac82c29cccf4dbc015bda0bca966f0c8a743a969"}, {0xf0, 0x111, 0xfffffffd, "441fc4f78a684b625b5ce3d99dbaa3e89765d8b3057706b36bce59d8e76c278a62a9ad96f939ebd1ebbb53b1a35d3f2f0698495bc16420db7a6340bad4f38b28bb44235dcbfb58f44bd0f9c6cfe92c9f66d92240f828ba2b0b67b3b0ad1456fa1c702383f59c3b0f24a79b57c62df74e393150c0d2bb90900095871d627c184aed0b4ed60a0ec29b7822ba884392c819843612f05f0ef15639d855f8eb779f7bda1360e6bc9a71e8c4555e9182be8fe3054842fc33d44a7dbd3105a6d402362ed25fc1f2c25dc7f823010c90ed1e81911d016a5d294a65e3276411c7da53d2"}], 0x1698}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000800)="e1df12a319ce088666b7215f081bb5219b5d3b45309374765f4033718dcd33bab5807ea8fe135a6cb00def5d1cbe9fc9f8624cdca54fb987398bd91ed384d22d0d6d4762b580befb2acb90806caf54df83a2cd98e62a1a7f6b961ea63a9537c0492292aaa8ecf44fd247e44f97f64eeac6d0ed0d97198c90d15e2580416052eab0c5540770bdf2f7057fb53878e2895d6281e39748b10778c19ed4c7aa4326c935a5fcd1b4c2b3f299c0780bff2df1da4d87696366ab39b1f3eadb6c423ac652f48acae9a00418a10bab366e", 0xcc}, {&(0x7f0000000900)="dc7e00aa25adeb3edbc969ad00a30270de9cc1baaa4bcd280c3bcfe2aa2430c56e80a5a3f17574fd3cc9ef76de58104cbbd2a58bbed4acae18850519b0ec9730bd2e8fe6aac735c9c6c76d92fad418cfa2f2e9169f64aade9234781945cc3ab60abab2a4c98cc6a1fce907661a455d24516ecb4d0d65d15a9cefd98b2efb3e60a19f3bdbc8aae44b60c5751b3d032f4b21d35f63e35586e6c3e55c5ec5eae4ff7e99f8", 0xa3}, {&(0x7f0000001180)="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", 0x1000}, {&(0x7f00000009c0)="14fb2e72004df579d95583be9126d46ee417fc24626589cad6f379f8c60728a3edf2fec1bcb9f9090017033a563e0a19a759cd208cd17b0cba623c1be8c6c3d1dbb91e7e6f519d012d5dc4321927044b1d3994fe094f556f8671309d2da25e204f4ed911ae3490586d11a00078320465b9cfe4f44b5ca1d02d0dd2c323abad73b10b6deed6c847b2a7340591b2312b2948cff7007ff1fda4e608d25a7e150d03cf1af7b8ff45765ee7dd5c0ecffc01e10e991fe20583f15d3df2eb000789077ff014acb8b779ea3e89e657972a067caff53a253945604ffe5716d9a07492c2ced267ad047731740d5c31af45cf", 0xed}, {&(0x7f0000000ac0)="332d0cb6b4300cf81c7f62e7cdf6f05043dc4b7416e6f290a894f68d5198466b3d175571bb954a120e8459c88e5c6e34e5f2f3f1d599ffd79082d5ef0011344b5904234b6729255eff81474ac9c0dc622e66f82f61b7457eab87d8a162571282d0df26212b9a92e2978c5f4e45a449ca1ee30a9223cf9d022d8ec5", 0x7b}, {&(0x7f0000000b40)="7baa9d47dfa52e41c3144dd26d75cc0844cf963b97f423d8ae042babaab444358cca1d0de79b16ef2f01afb380b3ec7b47b5e2f3cc878f60748160852708132450516f52c4630423fa61dc2b423ba68cbfdab81d4884e1a9b4ce07c317dd892e9bd7b76e6a009b9344d09392c48a835fb50123ab0872ec4322721968c9125078a425492ef4faade318190772a59af653f4b93780422d768afacdea3438", 0x9d}, {&(0x7f0000000c00)="2282f83a63ca6b896f93b4eba9916a23d565361d3048f06f7769a06cd2b75a416bd7cbb51c2454d76303966bb9d776504470e38b7730cfc17dffccfec9b8806dacb1004b2bdb45277eff52266e21146b381a4af1741a122ee21b", 0x5a}], 0x7, &(0x7f0000000d00)=[{0x80, 0xf0ce6f999ab097d8, 0xcf, "9d9c099c5f274bc32b510cc4b4d722ec28645b24c59ee4686767c6937b070668833b8c57ecb4f05c5f74e59adbf1c665ee76f2d6d6e4cffaf3902354ab72449fa049637397957c67737c2cbb6eaaf179aa9c1194e08279e1dbd9873b8937a14de3255c41c8e345ec04"}, {0xc0, 0x101, 0x9, "8764e9e8087aebc347275d7b743f40e7f33f244100f663807496f7340252576248b167e837c0d53440dc2be31396a5f21a4456bdf2b9bccb3877f3a6c8c395ccf94cf98fc239af06abb0f316c2d6256d189d47c5b7721b1d9a843ca088046fba4b9bc5d092cfa757b1826880129dc873e3e5bc492901a23f51e47247823ed4710dbcb93323f091e3d94de34ef720d60cdd06f7842af6cc96879dd6dc9a6dc0e871c685864a45739bd68591"}, {0xa0, 0x115, 0x2, "f03f0929eb8e8ad747aa5db7f17f9687e9bec22b3e24bce548f90815a574e7fc88b82b8bf2271ce2e77fef92b55ba9c939e0f2f9c4b37a88b44191356c8f87a58d868dcb711601bf5acbc07330f8e5f4a0854c10f203646bf09da23be7d86b488ea1f4d76b78afeac604a3ec163a861e2b399f270156d2ed209bdc44f16535effbd7b3be6e78039b8101a58eae8927"}, {0xc8, 0x116, 0x4, "3c6e6ba92b02c1572354185ff1ca1f1bfbb660cc2917b513ed78f5d808479d30d69692bac608fa7b15a5ea794d0193df624d8faf5d0f13b648b7fbb615f2bf1a9f27dc088927af13213d52c661c142de946138ef02c181b3acf2ae3f9e042ba1483cd6cbbb29ff13075452b74f1e1f5d765c79c941f18b350430b508d79ad1cbd805ebcfa233af374650529e00506600c23fe9dea31043cd1c3390b97ef11b4fb9001fd51b46a5a6d0e69fa2ec106557d451f8ee0c531908"}, {0x38, 0x6, 0x5, "554469851f2702b96953e2e274791fb7d35ed9b1f6a049af184f3329773b8192a1"}, {0x40, 0x116, 0x8, "bcc66a4711c982133cf50fc5e6c0de426e71f3752ceaa8f502fd2029c5e51f536ca22476e595ee4ae8b59ec8589fd8bd"}], 0x320}}, {{&(0x7f0000001040)=@l2tp6={0xa, 0x0, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0xffffff01, 0x4}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000003940)="361f40496c29478ba9ef7fbf4ce1ec0b142fea16b88fd25f06370028ebced9e0255918ab0a1f5c06f04d7ab2af584fc76618cea57213da827b8767f080c3010419bf867a6c814270a74cb2f3dc48a78d850c29dc61850dfd1a954872740d2d6cf74669dfaa3997e0a4f9cdfd796762e1d43f4b6449b71d2a370b37f1c380ce4162f1e1e82d167d05965d4fc52f589f132cbea93e022bb15e4cbe9fb14ceaf81aee07b35b16043de8c76591ffce23bb2c962b5cdbd98c51b9c04b7b84bd1a679d4b4e0fd497574e8452f7cf20b18152726756e815b237b9", 0xd7}], 0x1}}], 0x4, 0x80) 536.592418ms ago: executing program 8 (id=2419): r0 = socket$kcm(0x2, 0x1000000000000005, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r2, &(0x7f0000000040), &(0x7f0000000080)=@udp6, 0x1}, 0x20) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_LP_INTERVAL={0x8, 0x13, 0x3}, @IFLA_BOND_PACKETS_PER_SLAVE={0x8}]}}}]}, 0x44}}, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x0, @rand_addr=0x20}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000c40)="56ae", 0x2}], 0x1, &(0x7f0000000b80)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x4dc) 392.573196ms ago: executing program 6 (id=2420): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x1f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=@getstats={0x1c, 0x5e, 0x200, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r2}, ["", "", "", "", "", "", "", ""]}, 0x1c}}, 0x0) 317.525877ms ago: executing program 6 (id=2421): r0 = socket(0x10, 0x3, 0x0) (async) syz_init_net_socket$ax25(0x3, 0x2, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r2, &(0x7f0000000000)={0x10, @short}, 0x2) (async, rerun: 32) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x18) (async, rerun: 32) socket$tipc(0x1e, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) (async) socket$inet6(0xa, 0x80803, 0x87) syz_emit_ethernet(0x5e, &(0x7f00000004c0)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) socket$unix(0x1, 0x5, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10, 0x3, {0x5, 0xd04f, 0xa59}}}}]}, 0x44}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000400)=@newtfilter={0x68, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {}, {0xfff1, 0x4}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x38, 0x2, [@TCA_CGROUP_ACT={0x34}]}}]}, 0x68}}, 0x0) (rerun: 64) 294.379429ms ago: executing program 8 (id=2422): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x11, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={r0, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000380)=@newlink={0x20, 0x10, 0x200, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, 0x400, 0x6c200}}, 0x20}}, 0x0) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000000)={r0, &(0x7f0000000300), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000071104f000000000006000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 190.036666ms ago: executing program 8 (id=2423): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x200000, {0x0, 0x0, 0x0, r3, {0x2}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x3, 0x2, [@TCA_FQ_FLOW_MAX_RATE={0x8, 0x12}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x8, 0x11, 0x4000}]}}]}, 0x38}}, 0x0) r7 = socket$can_raw(0x1d, 0x3, 0x1) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="060c0000360406c0efe907b3", @ANYRES16=r9, @ANYBLOB="01002abd7000fadbdf254400000008000300", @ANYRES32=r11, @ANYBLOB="0c0023800600190009000000"], 0x28}, 0x1, 0x0, 0x0, 0x4801}, 0x0) r12 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000700)={'veth0\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000400)={&(0x7f0000000300)={0x1d, r13}, 0x10, &(0x7f00000003c0)={0x0, 0x10}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0x58, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)=ANY=[@ANYBLOB="44000000520002002bbd7000ffdbdf2502080002000000000008000100", @ANYRES32=r6, @ANYBLOB="08000300050000000800030081000000080002000200000008000100", @ANYRES32=r14, @ANYBLOB='\x00\x00\x00'], 0x44}, 0x1, 0x0, 0x0, 0x4040001}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan1\x00'}) r15 = socket(0x2a, 0x2, 0x0) getsockname$packet(r15, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r17 = socket$igmp(0x2, 0x3, 0x2) ioctl$BTRFS_IOC_SUBVOL_CREATE(r17, 0x89e0, 0x0) sendmsg$nl_route_sched(r15, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000680)=@newtfilter={0x4c, 0x2c, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r16, {0xfffa, 0x2}, {0x10}, {0xa, 0xfff9}}, [@filter_kind_options=@f_fw={{0x7}, {0x18, 0x2, [@TCA_FW_INDEV={0x14}]}}, @TCA_CHAIN={0x8, 0xb, 0x3}]}, 0x4c}, 0x1, 0x0, 0x0, 0x844}, 0x24004000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000080)) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'gre0\x00'}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r15, 0x89f0, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000100)={'syztnl2\x00', r16, 0x29, 0x7, 0xff, 0x401, 0x53, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast1, 0x1, 0x7800, 0x94, 0x264}}) 129.395373ms ago: executing program 6 (id=2424): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x8, &(0x7f0000000100)=0xfffffffa, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x8, 0x0, &(0x7f0000000040)) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000300)={0x2c, r2, 0x1, 0x0, 0x400, {0x1c}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}]}]}, 0x2c}}, 0x0) 0s ago: executing program 6 (id=2425): ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f00000052c0)={0x0, @default, @netrom={'nr', 0x0}, 0x743, 'syz1\x00', @bcast, 0x10, 0x1, [@bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000011c0)={&(0x7f0000000000)=@l2tp={0x2, 0x0, @multicast1, 0x3}, 0x80, &(0x7f0000001180)=[{&(0x7f0000000080)="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", 0xfd}, {&(0x7f0000000180)="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", 0x1000}], 0x2}, 0x40080c0) kernel console output (not intermixed with test programs): miscuous mode [ 269.677965][T12877] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1922'. [ 269.704558][ T6575] bridge_slave_1: left allmulticast mode [ 269.710259][ T6575] bridge_slave_1: left promiscuous mode [ 269.731611][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.762817][ T6575] bridge_slave_0: left allmulticast mode [ 269.781527][ T6575] bridge_slave_0: left promiscuous mode [ 269.792810][ T6575] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.192789][ T6575] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.206492][ T6575] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.218284][ T6575] bond0 (unregistering): Released all slaves [ 270.267524][T12754] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.281981][T12754] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.549988][T12754] team0: Port device team_slave_0 added [ 270.587682][T12754] team0: Port device team_slave_1 added [ 270.666691][ T5839] Bluetooth: hci5: command tx timeout [ 270.776167][T12915] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.813008][ T6575] hsr_slave_0: left promiscuous mode [ 270.824413][ T5839] Bluetooth: hci3: command tx timeout [ 270.840807][ T6575] hsr_slave_1: left promiscuous mode [ 270.854532][ T6575] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.862537][ T6575] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.874919][ T6575] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.882721][ T6575] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.886664][T12918] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 270.918487][ T6575] veth1_macvtap: left promiscuous mode [ 270.925159][ T6575] veth0_macvtap: left promiscuous mode [ 270.931590][ T6575] veth1_vlan: left promiscuous mode [ 270.939676][ T6575] veth0_vlan: left promiscuous mode [ 271.141063][T12933] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 271.742512][ T6575] team0 (unregistering): Port device team_slave_1 removed [ 271.787999][ T6575] team0 (unregistering): Port device team_slave_0 removed [ 272.218783][T12754] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.228308][T12754] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.254699][T12754] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.277273][T12754] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.284460][T12754] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.344264][T12754] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.631053][T12754] hsr_slave_0: entered promiscuous mode [ 272.659752][T12754] hsr_slave_1: entered promiscuous mode [ 272.666090][T12754] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.673975][T12754] Cannot create hsr debugfs directory [ 272.743913][ T5839] Bluetooth: hci5: command tx timeout [ 272.916793][ T5839] Bluetooth: hci3: command tx timeout [ 272.933356][T12725] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 273.022986][T12725] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 273.044877][T12725] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 273.110942][T12725] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 273.269746][T12977] SET target dimension over the limit! [ 273.326973][T12725] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.373496][T12725] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.382656][T12979] syzkaller1: entered promiscuous mode [ 273.388881][T12979] syzkaller1: entered allmulticast mode [ 273.400600][T12979] __nla_validate_parse: 1 callbacks suppressed [ 273.400615][T12979] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1947'. [ 273.410230][ T6535] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.423053][ T6535] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.442871][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.450008][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.562492][T12981] ipvlan0: entered promiscuous mode [ 273.571840][T12981] ipvlan0: entered allmulticast mode [ 273.686790][T12985] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1949'. [ 273.740322][T12754] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 273.742727][T12985] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1949'. [ 273.774816][T12754] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 273.796631][T12754] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 273.839870][T12754] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 273.902204][T12991] siw: device registration error -23 [ 273.969919][T12986] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1950'. [ 274.029885][T12725] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.131308][T12754] 8021q: adding VLAN 0 to HW filter on device bond0 [ 274.197997][T12754] 8021q: adding VLAN 0 to HW filter on device team0 [ 274.233339][ T6555] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.240582][ T6555] bridge0: port 1(bridge_slave_0) entered forwarding state [ 274.273815][ T56] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.280975][ T56] bridge0: port 2(bridge_slave_1) entered forwarding state [ 274.466541][T13011] IPVS: persistence engine module ip_vs_pe_À not found [ 274.665966][T13021] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1955'. [ 275.133696][ T5839] Bluetooth: hci5: command tx timeout [ 275.257915][T12725] veth0_vlan: entered promiscuous mode [ 275.280646][T12725] veth1_vlan: entered promiscuous mode [ 275.340959][T12725] veth0_macvtap: entered promiscuous mode [ 275.449208][T12725] veth1_macvtap: entered promiscuous mode [ 275.476543][T13036] lo speed is unknown, defaulting to 1000 [ 275.487142][T12754] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.510220][T12725] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.551024][T12725] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.559773][T13043] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1963'. [ 275.618975][T12725] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.642999][T12725] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.652907][T12725] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.662806][T12725] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.694007][T13050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1965'. [ 275.812132][T12754] veth0_vlan: entered promiscuous mode [ 275.872513][T12754] veth1_vlan: entered promiscuous mode [ 276.085643][ T6563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.107140][ T6563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.181902][ T6555] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.184562][T12754] veth0_macvtap: entered promiscuous mode [ 276.205651][ T6555] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.254672][T12754] veth1_macvtap: entered promiscuous mode [ 276.347830][T12754] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 276.416246][T12754] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.463282][T12754] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.494890][T12754] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.521734][T12754] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.545273][T12754] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.766951][ T6569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 276.788519][ T6569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 276.855877][T13086] netlink: 'syz.3.1974': attribute type 1 has an invalid length. [ 276.979054][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.030732][ T6565] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.046593][ T6565] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.135774][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.368380][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.587404][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 277.758680][ T13] bridge_slave_1: left allmulticast mode [ 277.765601][ T13] bridge_slave_1: left promiscuous mode [ 277.771453][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 277.781726][ T13] bridge_slave_0: left allmulticast mode [ 277.788226][ T13] bridge_slave_0: left promiscuous mode [ 277.795934][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.960931][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 277.989597][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 278.000164][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 278.013396][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 278.030273][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 278.227928][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 278.238728][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 278.248972][ T13] bond0 (unregistering): Released all slaves [ 278.301878][T13099] lo speed is unknown, defaulting to 1000 [ 278.527382][ T13] hsr_slave_0: left promiscuous mode [ 278.535996][ T13] hsr_slave_1: left promiscuous mode [ 278.542059][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.549526][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.562035][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.569592][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.591022][ T13] veth1_macvtap: left promiscuous mode [ 278.597918][ T13] veth0_macvtap: left promiscuous mode [ 278.603808][ T13] veth1_vlan: left promiscuous mode [ 278.609160][ T13] veth0_vlan: left promiscuous mode [ 279.183391][ T13] team0 (unregistering): Port device team_slave_1 removed [ 279.236484][ T13] team0 (unregistering): Port device team_slave_0 removed [ 279.321777][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 279.342320][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 279.351149][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 279.371843][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 279.392473][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 279.762578][T13099] chnl_net:caif_netlink_parms(): no params data found [ 280.019515][T13113] lo speed is unknown, defaulting to 1000 [ 280.109925][ T5839] Bluetooth: hci3: command tx timeout [ 280.186083][T13099] bridge0: port 1(bridge_slave_0) entered blocking state [ 280.193378][T13099] bridge0: port 1(bridge_slave_0) entered disabled state [ 280.201000][T13099] bridge_slave_0: entered allmulticast mode [ 280.212693][T13099] bridge_slave_0: entered promiscuous mode [ 280.281170][T13099] bridge0: port 2(bridge_slave_1) entered blocking state [ 280.299856][T13099] bridge0: port 2(bridge_slave_1) entered disabled state [ 280.310505][T13099] bridge_slave_1: entered allmulticast mode [ 280.347578][T13099] bridge_slave_1: entered promiscuous mode [ 280.457165][T13099] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.484387][T13151] delete_channel: no stack [ 280.502318][T13099] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.597078][T13099] team0: Port device team_slave_0 added [ 280.642873][T13099] team0: Port device team_slave_1 added [ 280.718641][T13099] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.732703][T13099] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.770287][T13099] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.813532][T13099] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.820869][T13099] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.849825][T13099] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 280.914919][ T6555] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.972020][T13113] chnl_net:caif_netlink_parms(): no params data found [ 280.989661][T13162] tipc: Enabled bearer , priority 0 [ 281.090876][ T6555] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.118188][T13161] tipc: Disabling bearer [ 281.244303][ T6555] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.282080][T13099] hsr_slave_0: entered promiscuous mode [ 281.289362][T13099] hsr_slave_1: entered promiscuous mode [ 281.362649][ T6555] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.466195][ T5839] Bluetooth: hci5: command tx timeout [ 281.494503][T13186] netlink: 96 bytes leftover after parsing attributes in process `syz.3.2001'. [ 281.544944][T13183] netlink: 40 bytes leftover after parsing attributes in process `syz.7.2000'. [ 281.599097][T13186] 8021q: VLANs not supported on ip6gre0 [ 281.637004][T13113] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.648806][T13113] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.693944][T13113] bridge_slave_0: entered allmulticast mode [ 281.702246][T13113] bridge_slave_0: entered promiscuous mode [ 281.719283][T13113] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.736837][T13113] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.754691][T13113] bridge_slave_1: entered allmulticast mode [ 281.762483][T13113] bridge_slave_1: entered promiscuous mode [ 281.835908][T13194] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2004'. [ 281.876615][T13202] xt_l2tp: unknown flags: 18 [ 281.904446][T13113] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.924949][T13194] bridge_slave_1: left allmulticast mode [ 281.930735][T13194] bridge_slave_1: left promiscuous mode [ 281.937271][T13194] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.949048][T13194] bridge_slave_0: left allmulticast mode [ 281.955195][T13194] bridge_slave_0: left promiscuous mode [ 281.961095][T13194] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.068221][T13113] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.184195][ T5839] Bluetooth: hci3: command tx timeout [ 282.211797][T13217] netlink: 'syz.3.2011': attribute type 16 has an invalid length. [ 282.220452][T13217] netlink: 'syz.3.2011': attribute type 3 has an invalid length. [ 282.228382][T13217] netlink: 132 bytes leftover after parsing attributes in process `syz.3.2011'. [ 282.310851][T13113] team0: Port device team_slave_0 added [ 282.341557][T13113] team0: Port device team_slave_1 added [ 282.356183][ T6555] bridge_slave_1: left allmulticast mode [ 282.361934][ T6555] bridge_slave_1: left promiscuous mode [ 282.384138][ T6555] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.407312][ T6555] bridge_slave_0: left allmulticast mode [ 282.427747][ T6555] bridge_slave_0: left promiscuous mode [ 282.433617][ T6555] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.476992][T13230] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2016'. [ 283.039940][ T6555] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.050882][ T6555] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.061079][ T6555] bond0 (unregistering): Released all slaves [ 283.101912][T13222] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2013'. [ 283.334077][T13113] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.352332][T13113] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.410763][T13113] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.512125][T13113] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.544836][ T5839] Bluetooth: hci5: command tx timeout [ 283.546022][T13113] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.672078][T13113] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.847611][T13269] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2026'. [ 283.909947][ T6555] hsr_slave_0: left promiscuous mode [ 283.919412][ T6555] hsr_slave_1: left promiscuous mode [ 283.929362][ T6555] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.945645][ T6555] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.965226][ T6555] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.972658][ T6555] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.009846][ T6555] veth1_macvtap: left promiscuous mode [ 284.034888][ T6555] veth0_macvtap: left promiscuous mode [ 284.050240][ T6555] veth1_vlan: left promiscuous mode [ 284.064015][ T6555] veth0_vlan: left promiscuous mode [ 284.092853][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057a1ac00: rx timeout, send abort [ 284.273749][ T5839] Bluetooth: hci3: command tx timeout [ 284.567380][ T6555] team0 (unregistering): Port device team_slave_1 removed [ 284.592982][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888067634800: rx timeout, send abort [ 284.601707][ C0] vxcan1: j1939_tp_rxtimer: 0xffff888057a1ac00: abort rx timeout. Force session deactivation [ 284.635715][ T6555] team0 (unregistering): Port device team_slave_0 removed [ 285.088909][T13113] hsr_slave_0: entered promiscuous mode [ 285.097598][T13113] hsr_slave_1: entered promiscuous mode [ 285.103179][ C0] vxcan1 (unregistering): j1939_tp_rxtimer: 0xffff888067634800: abort rx timeout. Force session deactivation [ 285.118740][T13113] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.130385][T13113] Cannot create hsr debugfs directory [ 285.280163][T13294] netlink: 'syz.7.2031': attribute type 2 has an invalid length. [ 285.289719][T13293] netlink: 'syz.7.2031': attribute type 2 has an invalid length. [ 285.585154][T13305] IPVS: Error connecting to the multicast addr [ 285.624732][ T5839] Bluetooth: hci5: command tx timeout [ 285.768790][T13099] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 285.781925][T13309] netlink: 6 bytes leftover after parsing attributes in process `syz.3.2036'. [ 285.802170][T13309] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.818005][T13099] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 285.873860][T13099] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 285.891468][T13099] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 286.252145][T13099] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.286516][T13113] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 286.312188][T13113] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 286.327085][T13113] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 286.343761][ T5839] Bluetooth: hci3: command tx timeout [ 286.352800][T13113] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 286.369428][T13099] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.393638][ T6565] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.400766][ T6565] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.445759][ T6569] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.452861][ T6569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 286.460792][T13341] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2044'. [ 286.646234][T13113] 8021q: adding VLAN 0 to HW filter on device bond0 [ 286.679114][T13113] 8021q: adding VLAN 0 to HW filter on device team0 [ 286.736096][ T6569] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.743255][ T6569] bridge0: port 1(bridge_slave_0) entered forwarding state [ 286.762520][ T6569] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.769781][ T6569] bridge0: port 2(bridge_slave_1) entered forwarding state [ 287.030967][T13351] syzkaller0: entered promiscuous mode [ 287.055498][T13351] syzkaller0: entered allmulticast mode [ 287.189034][T13099] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.264907][ T7941] IPVS: starting estimator thread 0... [ 287.364839][T13375] IPVS: using max 34 ests per chain, 81600 per kthread [ 287.518761][T13113] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 287.658797][T13113] veth0_vlan: entered promiscuous mode [ 287.691734][T13113] veth1_vlan: entered promiscuous mode [ 287.705025][ T5839] Bluetooth: hci5: command tx timeout [ 287.811715][T13113] veth0_macvtap: entered promiscuous mode [ 287.839295][T13396] ksmbd: Unknown IPC event: 3, ignore. [ 287.860409][T13113] veth1_macvtap: entered promiscuous mode [ 287.919059][T13099] veth0_vlan: entered promiscuous mode [ 287.967852][T13099] veth1_vlan: entered promiscuous mode [ 287.993439][T13113] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.019569][T13113] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.062790][T13113] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.084146][T13113] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.092906][T13113] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.122537][T13113] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.164553][T13409] veth0: entered promiscuous mode [ 288.210207][T13408] veth0: left promiscuous mode [ 288.278729][T13099] veth0_macvtap: entered promiscuous mode [ 288.339769][T13099] veth1_macvtap: entered promiscuous mode [ 288.371997][T13416] (unnamed net_device) (uninitialized): Unable to set up delay as MII monitoring is disabled [ 288.412050][ T6535] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.434105][ T6535] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.473303][T13099] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.566154][T13099] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.601149][T13099] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.622436][T13099] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.633548][T13099] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.673815][T13099] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.712618][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 288.734083][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 288.745054][T13434] netlink: 'syz.6.2066': attribute type 10 has an invalid length. [ 288.803438][T13434] batman_adv: batadv0: Adding interface: team0 [ 288.848899][T13434] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.943041][T13434] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 289.237874][T13455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2068'. [ 289.256446][T13455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2068'. [ 289.281879][T13455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2068'. [ 289.291902][T13455] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2068'. [ 289.311768][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.311987][T13452] tipc: Started in network mode [ 289.324110][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.341623][T13452] tipc: Node identity ac1414aa, cluster identity 4711 [ 289.365285][T13452] tipc: Enabled bearer , priority 10 [ 289.451027][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.470836][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.511311][T13465] sctp: [Deprecated]: syz.6.2074 (pid 13465) Use of int in maxseg socket option. [ 289.511311][T13465] Use struct sctp_assoc_value instead [ 289.625110][T13469] xt_hashlimit: invalid rate [ 289.838115][T13480] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.2078'. [ 289.950398][ T6557] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.436186][ T6557] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.485344][ T5836] tipc: Node number set to 2886997162 [ 290.517646][ T6557] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.585240][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 290.595501][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 290.604279][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 290.620740][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 290.630026][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 290.631167][ T6557] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.828407][ T6557] bridge_slave_1: left allmulticast mode [ 290.844347][ T6557] bridge_slave_1: left promiscuous mode [ 290.850163][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.900795][T13500] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2083'. [ 290.915745][ T6557] bridge_slave_0: left allmulticast mode [ 290.921533][ T6557] bridge_slave_0: left promiscuous mode [ 290.927834][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.029905][T13509] Bluetooth: MGMT ver 1.23 [ 291.328564][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 291.341582][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 291.350653][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 291.360275][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 291.371365][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 291.492767][ T6557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.503878][ T6557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.519055][ T6557] bond0 (unregistering): Released all slaves [ 291.536766][T13497] netem: incorrect gi model size [ 291.544282][T13497] netem: change failed [ 291.586554][T13506] gtp0: entered promiscuous mode [ 291.653200][T13491] chnl_net:caif_netlink_parms(): no params data found [ 291.800269][T13518] netlink: 48 bytes leftover after parsing attributes in process `syz.6.2086'. [ 292.143904][T13491] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.151341][T13491] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.169241][T13491] bridge_slave_0: entered allmulticast mode [ 292.179129][T13491] bridge_slave_0: entered promiscuous mode [ 292.233543][ T6557] hsr_slave_0: left promiscuous mode [ 292.240276][ T6557] hsr_slave_1: left promiscuous mode [ 292.246927][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 292.255208][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 292.273347][T13548] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2092'. [ 292.284496][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 292.292183][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 292.329678][ T6557] veth1_macvtap: left promiscuous mode [ 292.336998][ T6557] veth0_macvtap: left promiscuous mode [ 292.342600][ T6557] veth1_vlan: left promiscuous mode [ 292.348228][ T6557] veth0_vlan: left promiscuous mode [ 292.666914][ T5839] Bluetooth: hci3: command tx timeout [ 292.860488][ T6557] team0 (unregistering): Port device team_slave_1 removed [ 292.903316][ T6557] team0 (unregistering): Port device team_slave_0 removed [ 293.360255][T13491] bridge0: port 2(bridge_slave_1) entered blocking state [ 293.367946][T13491] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.375280][T13491] bridge_slave_1: entered allmulticast mode [ 293.382421][T13491] bridge_slave_1: entered promiscuous mode [ 293.419698][T13547] geneve1: entered promiscuous mode [ 293.466320][ T5839] Bluetooth: hci5: command tx timeout [ 293.572974][T13491] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 293.597849][T13491] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.790657][T13491] team0: Port device team_slave_0 added [ 293.874560][T13491] team0: Port device team_slave_1 added [ 294.145251][T13491] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 294.162487][T13491] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.244001][T13593] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2102'. [ 294.251492][T13491] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 294.276003][ T6535] tipc: Subscription rejected, illegal request [ 294.289012][T13586] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 294.303135][T13586] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 294.327304][T13491] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.342730][T13491] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.379006][T13491] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.438864][T13512] chnl_net:caif_netlink_parms(): no params data found [ 294.669670][T13491] hsr_slave_0: entered promiscuous mode [ 294.681866][T13491] hsr_slave_1: entered promiscuous mode [ 294.690592][T13491] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 294.699040][T13491] Cannot create hsr debugfs directory [ 294.743826][ T5839] Bluetooth: hci3: command tx timeout [ 294.821756][T13624] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2110'. [ 294.896319][ T6557] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.057437][T13632] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2112'. [ 295.215912][ T6557] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.241861][T13512] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.267842][T13512] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.278271][T13512] bridge_slave_0: entered allmulticast mode [ 295.305957][T13512] bridge_slave_0: entered promiscuous mode [ 295.325837][T13512] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.333013][T13512] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.357835][T13512] bridge_slave_1: entered allmulticast mode [ 295.373122][T13512] bridge_slave_1: entered promiscuous mode [ 295.375382][T13651] ipt_REJECT: TCP_RESET invalid for non-tcp [ 295.391908][T13640] bond0: entered promiscuous mode [ 295.403774][T13640] bond_slave_0: entered promiscuous mode [ 295.414004][T13640] bond_slave_1: entered promiscuous mode [ 295.421030][T13640] batadv0: entered promiscuous mode [ 295.438799][T13640] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 295.462655][ T6557] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.547012][ T5839] Bluetooth: hci5: command tx timeout [ 295.900953][ T6557] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.918901][ T7940] infiniband syz1: ib_query_port failed (-19) [ 295.923558][T13512] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.952979][T13512] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.091832][T13512] team0: Port device team_slave_0 added [ 296.142499][T13512] team0: Port device team_slave_1 added [ 296.365133][T13512] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.372101][T13512] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.422242][T13512] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.471405][T13512] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.480141][T13512] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.537806][T13512] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.698021][ T6557] bridge_slave_1: left allmulticast mode [ 296.713807][ T6557] bridge_slave_1: left promiscuous mode [ 296.720099][ T6557] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.731617][ T6557] bridge_slave_0: left allmulticast mode [ 296.739420][ T6557] bridge_slave_0: left promiscuous mode [ 296.768849][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.825234][ T5839] Bluetooth: hci3: command tx timeout [ 297.200849][ T6557] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.212153][ T6557] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.222324][ T6557] bond0 (unregistering): Released all slaves [ 297.256612][T13512] hsr_slave_0: entered promiscuous mode [ 297.262888][T13512] hsr_slave_1: entered promiscuous mode [ 297.275081][T13512] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.282655][T13512] Cannot create hsr debugfs directory [ 297.571278][T13704] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 297.626079][ T5839] Bluetooth: hci5: command tx timeout [ 297.769268][ T6557] hsr_slave_0: left promiscuous mode [ 297.778019][ T6557] hsr_slave_1: left promiscuous mode [ 297.784584][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.792218][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.801520][ T6557] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.809250][ T6557] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.835426][ T6557] veth1_macvtap: left promiscuous mode [ 297.841139][ T6557] veth0_macvtap: left promiscuous mode [ 297.847029][ T6557] veth1_vlan: left promiscuous mode [ 297.852311][ T6557] veth0_vlan: left promiscuous mode [ 298.302672][ T6557] team0 (unregistering): Port device team_slave_1 removed [ 298.347919][ T6557] team0 (unregistering): Port device team_slave_0 removed [ 298.905305][ T5839] Bluetooth: hci3: command tx timeout [ 298.919903][T13731] netlink: 'syz.7.2142': attribute type 18 has an invalid length. [ 298.939551][T13491] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 299.041320][T13491] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 299.090102][T13491] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 299.117601][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2144'. [ 299.126697][T13742] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2144'. [ 299.147692][T13731] netlink: 'syz.7.2142': attribute type 18 has an invalid length. [ 299.160823][T13737] netlink: 1400 bytes leftover after parsing attributes in process `syz.6.2143'. [ 299.180511][T13745] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2144'. [ 299.236479][T13742] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2144'. [ 299.252587][T13742] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2144'. [ 299.272870][T13491] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 299.314342][T13731] netlink: 'syz.7.2142': attribute type 18 has an invalid length. [ 299.420494][T13731] netlink: 'syz.7.2142': attribute type 18 has an invalid length. [ 299.568331][T13731] netlink: 'syz.7.2142': attribute type 18 has an invalid length. [ 299.675713][T13731] netlink: 'syz.7.2142': attribute type 18 has an invalid length. [ 299.706237][ T5839] Bluetooth: hci5: command tx timeout [ 299.792686][T13491] 8021q: adding VLAN 0 to HW filter on device bond0 [ 299.909395][T13776] netlink: 'syz.7.2152': attribute type 4 has an invalid length. [ 299.909594][T13491] 8021q: adding VLAN 0 to HW filter on device team0 [ 299.955457][ T6563] bridge0: port 1(bridge_slave_0) entered blocking state [ 299.962664][ T6563] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.016931][T13783] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2154'. [ 300.068499][ T6563] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.075723][ T6563] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.221264][T13512] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 300.279090][T13791] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 300.279444][T13512] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 300.302525][T13791] x_tables: duplicate underflow at hook 1 [ 300.322720][T13512] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 300.356141][T13512] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 300.628853][T13512] 8021q: adding VLAN 0 to HW filter on device bond0 [ 300.706515][T13512] 8021q: adding VLAN 0 to HW filter on device team0 [ 300.759523][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.766748][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 300.817399][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.824591][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 300.894611][T13816] netlink: 'syz.6.2163': attribute type 11 has an invalid length. [ 300.911242][T13816] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2163'. [ 301.002945][T13491] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.181680][T13491] veth0_vlan: entered promiscuous mode [ 301.199717][T13828] netlink: 'syz.6.2166': attribute type 1 has an invalid length. [ 301.234133][T13828] netlink: 224 bytes leftover after parsing attributes in process `syz.6.2166'. [ 301.235448][T13491] veth1_vlan: entered promiscuous mode [ 301.395768][T13491] veth0_macvtap: entered promiscuous mode [ 301.437664][T13491] veth1_macvtap: entered promiscuous mode [ 301.491031][T13491] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.520796][T13491] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.565734][T13491] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.595165][T13491] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.606287][T13491] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.615421][T13491] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.754340][T13862] netlink: 'syz.7.2175': attribute type 10 has an invalid length. [ 301.775222][T13512] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 301.791136][T13862] veth1_vlan: entered allmulticast mode [ 301.808926][T13862] team0: Device veth1_vlan failed to register rx_handler [ 301.838546][T13867] macvtap1: entered allmulticast mode [ 301.848175][T13867] veth0_macvtap: entered allmulticast mode [ 302.011402][T13876] netlink: 4096 bytes leftover after parsing attributes in process `syz.7.2178'. [ 302.109315][ T6578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.140943][ T6578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.253559][T13855] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 302.288876][T13855] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 302.470046][T13889] lo: entered promiscuous mode [ 302.505499][T13889] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 302.630511][T13898] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2184'. [ 302.721432][T13512] veth0_vlan: entered promiscuous mode [ 302.950841][ T6578] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.013159][T13512] veth1_vlan: entered promiscuous mode [ 303.059578][ T6578] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.143523][ T6578] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.168095][T13512] veth0_macvtap: entered promiscuous mode [ 303.179653][T13512] veth1_macvtap: entered promiscuous mode [ 303.200630][T13512] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.227437][ T6578] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 303.251464][T13512] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.263030][T13512] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.272236][T13512] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.286804][T13512] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.297244][T13512] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.362051][ T6559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.374797][ T6559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.411422][ T6542] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.419721][ T6542] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.539133][ T6578] bridge_slave_1: left allmulticast mode [ 303.546414][ T6578] bridge_slave_1: left promiscuous mode [ 303.552093][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 303.561090][ T6578] bridge_slave_0: left allmulticast mode [ 303.567140][ T6578] bridge_slave_0: left promiscuous mode [ 303.572804][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 303.992553][ T6578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 304.013067][ T6578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 304.031062][ T6578] bond0 (unregistering): Released all slaves [ 304.414727][ T6578] hsr_slave_0: left promiscuous mode [ 304.428691][ T6578] hsr_slave_1: left promiscuous mode [ 304.437592][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 304.442959][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 304.448459][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 304.456368][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 304.467888][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 304.468542][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 304.482240][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 304.483860][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 304.499595][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 304.526521][ T6578] veth1_macvtap: left promiscuous mode [ 304.532037][ T6578] veth0_macvtap: left promiscuous mode [ 304.537795][ T6578] veth1_vlan: left promiscuous mode [ 304.543119][ T6578] veth0_vlan: left promiscuous mode [ 304.888804][T13932] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2191'. [ 304.897963][T13932] netlink: 'syz.6.2191': attribute type 7 has an invalid length. [ 304.909811][T13932] netlink: 'syz.6.2191': attribute type 8 has an invalid length. [ 304.923704][T13932] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2191'. [ 304.935392][T13934] xt_l2tp: invalid flags combination: 4 [ 305.217910][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 305.231083][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 305.240684][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 305.262944][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 305.283900][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 305.357069][ T6578] team0 (unregistering): Port device team_slave_1 removed [ 305.481614][ T6578] team0 (unregistering): Port device team_slave_0 removed [ 305.699104][T13945] netlink: 'syz.7.2193': attribute type 21 has an invalid length. [ 306.217413][ T30] audit: type=1800 audit(1750041563.294:11): pid=13949 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.6.2196" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=1015 res=0 errno=0 [ 306.597682][ T5839] Bluetooth: hci3: command tx timeout [ 306.612042][T13923] chnl_net:caif_netlink_parms(): no params data found [ 306.698507][T13973] netlink: 'syz.7.2198': attribute type 1 has an invalid length. [ 306.706736][T13973] netlink: 'syz.7.2198': attribute type 3 has an invalid length. [ 306.715646][T13973] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2198'. [ 306.904600][ T6578] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.062143][ T6578] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.083344][T13923] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.108294][T13923] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.130427][T13923] bridge_slave_0: entered allmulticast mode [ 307.158069][T13923] bridge_slave_0: entered promiscuous mode [ 307.182742][T13923] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.198276][T13923] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.206055][T13923] bridge_slave_1: entered allmulticast mode [ 307.214464][T13923] bridge_slave_1: entered promiscuous mode [ 307.320792][T13923] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.360798][ T6578] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.384082][ T5839] Bluetooth: hci5: command tx timeout [ 307.406490][T13923] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.476924][T13935] chnl_net:caif_netlink_parms(): no params data found [ 307.574546][ T6578] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 307.589444][T14016] x_tables: unsorted underflow at hook 4 [ 307.622114][T14022] netlink: 20 bytes leftover after parsing attributes in process `syz.7.2212'. [ 307.752020][T13923] team0: Port device team_slave_0 added [ 307.918074][T13923] team0: Port device team_slave_1 added [ 307.932898][T14034] netlink: 'syz.3.2216': attribute type 10 has an invalid length. [ 308.033842][T14040] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2216'. [ 308.052750][T14034] bond0: (slave bridge_slave_1): Enslaving as an active interface with an up link [ 308.074453][T13935] bridge0: port 1(bridge_slave_0) entered blocking state [ 308.081554][T13935] bridge0: port 1(bridge_slave_0) entered disabled state [ 308.095977][T13935] bridge_slave_0: entered allmulticast mode [ 308.114739][T13935] bridge_slave_0: entered promiscuous mode [ 308.186295][T13923] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.193271][T13923] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.259276][T13923] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.307071][T13935] bridge0: port 2(bridge_slave_1) entered blocking state [ 308.322164][T13935] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.330356][T13935] bridge_slave_1: entered allmulticast mode [ 308.345375][T13935] bridge_slave_1: entered promiscuous mode [ 308.363811][T14049] netlink: 240 bytes leftover after parsing attributes in process `syz.7.2219'. [ 308.422927][T13923] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.441269][T13923] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.508158][T13923] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.664125][ T5839] Bluetooth: hci3: command tx timeout [ 308.730914][T13935] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 308.795729][T13935] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 308.900118][T13923] hsr_slave_0: entered promiscuous mode [ 308.925619][T13923] hsr_slave_1: entered promiscuous mode [ 308.932444][ T6578] bridge_slave_1: left allmulticast mode [ 308.949723][ T6578] bridge_slave_1: left promiscuous mode [ 308.966289][ T6578] bridge0: port 2(bridge_slave_1) entered disabled state [ 308.980540][ T6578] bridge_slave_0: left allmulticast mode [ 308.987261][ T6578] bridge_slave_0: left promiscuous mode [ 308.993795][ T6578] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.474620][ T5839] Bluetooth: hci5: command tx timeout [ 309.491032][T14105] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2230'. [ 309.500372][T14106] netlink: 'syz.7.2230': attribute type 1 has an invalid length. [ 309.512588][T14106] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2230'. [ 309.667839][ T6578] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 309.693023][ T6578] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 309.718700][ T6578] bond0 (unregistering): Released all slaves [ 309.941619][T13935] team0: Port device team_slave_0 added [ 309.989751][T14115] geneve1 speed is unknown, defaulting to 1000 [ 310.097438][T13935] team0: Port device team_slave_1 added [ 310.120730][T14115] geneve1 speed is unknown, defaulting to 1000 [ 310.196003][T14115] geneve1 speed is unknown, defaulting to 1000 [ 310.231408][T14115] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 310.272943][T13935] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.283749][T13935] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.319844][T13935] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.325525][T14132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2236'. [ 310.373080][T14115] geneve1 speed is unknown, defaulting to 1000 [ 310.381057][T13935] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.388991][T13935] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.417317][T13935] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.444490][T14115] geneve1 speed is unknown, defaulting to 1000 [ 310.458455][T14115] geneve1 speed is unknown, defaulting to 1000 [ 310.510072][T14115] geneve1 speed is unknown, defaulting to 1000 [ 310.550065][T14115] geneve1 speed is unknown, defaulting to 1000 [ 310.588647][T13935] hsr_slave_0: entered promiscuous mode [ 310.617881][T13935] hsr_slave_1: entered promiscuous mode [ 310.624424][T13935] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 310.632000][T13935] Cannot create hsr debugfs directory [ 310.645444][T14115] geneve1 speed is unknown, defaulting to 1000 [ 310.686243][T14115] geneve1 speed is unknown, defaulting to 1000 [ 310.686262][T14141] syz_tun: entered allmulticast mode [ 310.702629][T14115] geneve1 speed is unknown, defaulting to 1000 [ 310.743825][ T5839] Bluetooth: hci3: command tx timeout [ 310.771409][T14115] geneve1 speed is unknown, defaulting to 1000 [ 310.885523][T14148] sock: sock_timestamping_bind_phc: sock not bind to device [ 310.897133][ T6578] hsr_slave_0: left promiscuous mode [ 310.906086][T14145] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2239'. [ 310.908589][ T6578] hsr_slave_1: left promiscuous mode [ 310.929461][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 310.939188][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 310.953085][ T6578] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 310.973844][ T6578] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.044807][T14157] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2243'. [ 311.047483][ T6578] veth1_macvtap: left promiscuous mode [ 311.062260][T14152] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 311.069642][ T6578] veth0_macvtap: left promiscuous mode [ 311.080111][ T6578] veth1_vlan: left promiscuous mode [ 311.087707][ T6578] veth0_vlan: left promiscuous mode [ 311.221764][T14163] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2244'. [ 311.241336][T14162] netlink: 'syz.7.2245': attribute type 1 has an invalid length. [ 311.548059][ T5839] Bluetooth: hci5: command tx timeout [ 311.651093][ T6578] team0 (unregistering): Port device team_slave_1 removed [ 311.698398][ T6578] team0 (unregistering): Port device team_slave_0 removed [ 312.293258][T14171] sctp: [Deprecated]: syz.6.2248 (pid 14171) Use of int in maxseg socket option. [ 312.293258][T14171] Use struct sctp_assoc_value instead [ 312.530541][T14181] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 312.768338][T13923] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 312.795367][T13923] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 312.823304][T13923] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 312.834291][ T5839] Bluetooth: hci3: command tx timeout [ 312.862112][T13923] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 313.000665][T13935] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 313.038315][T13935] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 313.059470][T13935] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 313.092061][T13935] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 313.281721][T13923] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.396351][T13923] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.440035][T13855] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.447311][T13855] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.473020][T13935] 8021q: adding VLAN 0 to HW filter on device bond0 [ 313.487184][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.494370][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 313.532238][T14233] __nla_validate_parse: 1 callbacks suppressed [ 313.532255][T14233] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2263'. [ 313.561885][T13935] 8021q: adding VLAN 0 to HW filter on device team0 [ 313.586574][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 313.593763][ T6578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 313.624727][ T5839] Bluetooth: hci5: command tx timeout [ 313.726755][T13935] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 313.740885][T13935] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 313.768728][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 313.775970][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.250626][T13923] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.412195][T13935] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.454780][T13923] veth0_vlan: entered promiscuous mode [ 314.508483][T13923] veth1_vlan: entered promiscuous mode [ 314.515585][T14268] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2273'. [ 314.608660][T13923] veth0_macvtap: entered promiscuous mode [ 314.628818][T13923] veth1_macvtap: entered promiscuous mode [ 314.704963][T13923] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.750156][T13923] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.777591][T13923] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.793743][T13923] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.807031][T13923] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.816005][T13923] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.077174][ T6549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.109511][ T6549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.204336][T14286] syzkaller0: entered promiscuous mode [ 315.209994][T14286] syzkaller0: entered allmulticast mode [ 315.363519][ T6569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.388809][ T6569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.917005][T13935] veth0_vlan: entered promiscuous mode [ 316.937066][T13935] veth1_vlan: entered promiscuous mode [ 317.056512][T13935] veth0_macvtap: entered promiscuous mode [ 317.167336][T14314] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2285'. [ 317.201318][T13935] veth1_macvtap: entered promiscuous mode [ 317.262192][T13935] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.289165][T13935] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.305504][T13935] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.315531][T13935] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.337446][T13935] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.346602][T13935] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.537437][T14325] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 317.558698][ T6549] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.574747][ T6549] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.618121][T14328] pimreg: entered allmulticast mode [ 317.636912][T14328] pimreg: left allmulticast mode [ 317.643178][ T6578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.653459][ T6578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.979178][ T30] audit: type=1800 audit(1750041575.054:12): pid=14330 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.2288" name="cgroup.controllers" dev="tmpfs" ino=3405 res=0 errno=0 [ 318.159591][ T6549] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.293132][ T6549] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.395952][ T6549] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.573214][ T6549] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.788279][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.797277][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.807682][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 318.816643][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 318.825748][ T6549] bridge_slave_1: left allmulticast mode [ 318.831422][ T6549] bridge_slave_1: left promiscuous mode [ 318.838282][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.844638][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 318.856900][ T6549] bridge_slave_0: left allmulticast mode [ 318.862873][ T6549] bridge_slave_0: left promiscuous mode [ 318.869088][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.207905][ T6549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 319.219552][ T6549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 319.230050][ T6549] bond0 (unregistering): Released all slaves [ 319.261062][T14348] geneve1 speed is unknown, defaulting to 1000 [ 319.483098][T14348] chnl_net:caif_netlink_parms(): no params data found [ 319.550260][ T6549] hsr_slave_0: left promiscuous mode [ 319.557907][ T6549] hsr_slave_1: left promiscuous mode [ 319.566978][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.575047][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.583055][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.590701][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.615362][ T6549] veth1_macvtap: left promiscuous mode [ 319.620884][ T6549] veth0_macvtap: left promiscuous mode [ 319.626688][ T6549] veth1_vlan: left promiscuous mode [ 319.631944][ T6549] veth0_vlan: left promiscuous mode [ 320.078193][ T6549] team0 (unregistering): Port device team_slave_1 removed [ 320.124636][ T6549] team0 (unregistering): Port device team_slave_0 removed [ 320.795524][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 320.823194][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 320.824817][T14382] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2301'. [ 320.850100][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 320.875377][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 320.899637][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 320.907495][ T5839] Bluetooth: hci3: command tx timeout [ 321.126393][T14348] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.134168][T14348] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.143975][T14348] bridge_slave_0: entered allmulticast mode [ 321.151863][T14348] bridge_slave_0: entered promiscuous mode [ 321.209052][T14348] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.238542][T14348] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.256784][T14348] bridge_slave_1: entered allmulticast mode [ 321.267224][T14348] bridge_slave_1: entered promiscuous mode [ 321.295429][T14380] geneve1 speed is unknown, defaulting to 1000 [ 321.349738][T14348] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.406798][T14348] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.429460][T14401] netlink: 'syz.6.2305': attribute type 1 has an invalid length. [ 321.532884][T14348] team0: Port device team_slave_0 added [ 321.553903][T14403] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2307'. [ 321.602438][ T5832] syz_tun (unregistering): left allmulticast mode [ 321.616332][T14348] team0: Port device team_slave_1 added [ 321.661424][T14348] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 321.668678][T14348] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.695645][T14348] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 321.720876][T14348] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 321.729569][T14348] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 321.755759][T14348] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 321.870246][T14348] hsr_slave_0: entered promiscuous mode [ 321.877335][T14348] hsr_slave_1: entered promiscuous mode [ 321.890265][T14348] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 321.898734][T14348] Cannot create hsr debugfs directory [ 321.955804][ T6549] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.144590][ T6549] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.241400][ T6549] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.335845][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 322.351983][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 322.360095][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 322.379420][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 322.381645][ T6549] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.401594][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 322.436480][T14380] chnl_net:caif_netlink_parms(): no params data found [ 322.550827][T14409] geneve1 speed is unknown, defaulting to 1000 [ 322.647761][T14380] bridge0: port 1(bridge_slave_0) entered blocking state [ 322.655960][T14380] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.663293][T14380] bridge_slave_0: entered allmulticast mode [ 322.670962][T14380] bridge_slave_0: entered promiscuous mode [ 322.687582][T14380] bridge0: port 2(bridge_slave_1) entered blocking state [ 322.698100][T14380] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.706674][T14380] bridge_slave_1: entered allmulticast mode [ 322.713949][T14380] bridge_slave_1: entered promiscuous mode [ 322.796075][T14380] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 322.814046][ T6549] bridge_slave_1: left allmulticast mode [ 322.821141][ T6549] bridge_slave_1: left promiscuous mode [ 322.836404][ T6549] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.855716][ T6549] bridge_slave_0: left allmulticast mode [ 322.861414][ T6549] bridge_slave_0: left promiscuous mode [ 322.867552][ T6549] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.987541][ T51] Bluetooth: hci3: command tx timeout [ 322.994477][ T51] Bluetooth: hci5: command tx timeout [ 323.212905][ T6549] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.228011][ T6549] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.238331][ T6549] bond0 (unregistering): Released all slaves [ 323.255307][T14380] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 323.392742][T14380] team0: Port device team_slave_0 added [ 323.444961][T14380] team0: Port device team_slave_1 added [ 323.525348][T14380] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 323.533903][T14380] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.560417][T14380] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 323.602373][T14380] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 323.609828][T14380] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 323.639745][T14380] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 323.650899][T14348] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 323.666045][T14409] chnl_net:caif_netlink_parms(): no params data found [ 323.699170][T14348] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 323.741998][T14348] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 323.771032][ T6549] hsr_slave_0: left promiscuous mode [ 323.781010][ T6549] hsr_slave_1: left promiscuous mode [ 323.788462][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 323.795987][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 323.803988][ T6549] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.811429][ T6549] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 323.829939][ T6549] veth1_macvtap: left promiscuous mode [ 323.835705][ T6549] veth0_macvtap: left promiscuous mode [ 323.841385][ T6549] veth1_vlan: left promiscuous mode [ 323.846721][ T6549] veth0_vlan: left promiscuous mode [ 324.272371][ T6549] team0 (unregistering): Port device team_slave_1 removed [ 324.325347][ T6549] team0 (unregistering): Port device team_slave_0 removed [ 324.437564][ T51] Bluetooth: hci1: command tx timeout [ 324.783491][T14348] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 324.860624][T14425] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2310'. [ 324.862683][T14380] hsr_slave_0: entered promiscuous mode [ 324.889933][T14380] hsr_slave_1: entered promiscuous mode [ 325.064111][ T51] Bluetooth: hci5: command tx timeout [ 325.064250][T14409] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.069543][ T51] Bluetooth: hci3: command tx timeout [ 325.086664][T14409] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.121082][T14409] bridge_slave_0: entered allmulticast mode [ 325.139721][T14409] bridge_slave_0: entered promiscuous mode [ 325.148878][T14409] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.164023][T14409] bridge0: port 2(bridge_slave_1) entered disabled state [ 325.171252][T14409] bridge_slave_1: entered allmulticast mode [ 325.179964][T14409] bridge_slave_1: entered promiscuous mode [ 325.274962][T14442] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 325.302880][T14409] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 325.313278][T14442] netlink: 209852 bytes leftover after parsing attributes in process `syz.6.2313'. [ 325.336190][T14409] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 325.340136][T14442] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 325.461325][T14409] team0: Port device team_slave_0 added [ 325.488781][T14409] team0: Port device team_slave_1 added [ 325.616935][T14409] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.633280][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.665556][T14409] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.680858][T14409] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.687889][T14409] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.719896][T14409] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.752071][T14456] virt_wifi0 speed is unknown, defaulting to 1000 [ 325.774029][T14456] virt_wifi0 speed is unknown, defaulting to 1000 [ 325.782099][T14456] virt_wifi0 speed is unknown, defaulting to 1000 [ 325.790838][T14348] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.811201][T14456] infiniband sy{0: RDMA CMA: cma_listen_on_dev, error -98 [ 325.835096][T14409] hsr_slave_0: entered promiscuous mode [ 325.841866][T14409] hsr_slave_1: entered promiscuous mode [ 325.848409][T14409] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.856240][T14409] Cannot create hsr debugfs directory [ 325.872269][T14456] virt_wifi0 speed is unknown, defaulting to 1000 [ 325.884606][T14456] virt_wifi0 speed is unknown, defaulting to 1000 [ 325.899191][T14348] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.946393][T14456] virt_wifi0 speed is unknown, defaulting to 1000 [ 325.956329][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.963968][ T6549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.992113][T14456] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.025234][T14456] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.042500][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.049712][ T6560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.075710][T14456] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.115104][T14380] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 326.122167][T14456] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.144538][T14380] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 326.151716][T14456] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.182678][T14456] virt_wifi0 speed is unknown, defaulting to 1000 [ 326.182701][T14380] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 326.251059][T14380] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 326.293991][T14459] syzkaller0: entered promiscuous mode [ 326.299498][T14459] syzkaller0: entered allmulticast mode [ 326.326910][T14409] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.348056][T14459] netlink: 'syz.6.2317': attribute type 6 has an invalid length. [ 326.412603][T14409] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.504037][ T51] Bluetooth: hci1: command tx timeout [ 326.532413][T14409] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.624177][T14409] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 326.635876][T14472] netlink: 40 bytes leftover after parsing attributes in process `syz.6.2318'. [ 326.711889][T14348] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.723226][T14380] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.759264][T14380] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.805244][ T6560] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.812411][ T6560] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.876985][ T6560] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.884187][ T6560] bridge0: port 2(bridge_slave_1) entered forwarding state [ 326.982241][T14409] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 327.014155][T14409] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 327.054509][T14409] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 327.091898][T14409] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 327.144348][ T51] Bluetooth: hci3: command tx timeout [ 327.150725][ T51] Bluetooth: hci5: command tx timeout [ 327.203366][T14380] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.327539][T14348] veth0_vlan: entered promiscuous mode [ 327.351050][T14497] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2321'. [ 327.415867][T14348] veth1_vlan: entered promiscuous mode [ 327.510589][T14409] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.554808][T14348] veth0_macvtap: entered promiscuous mode [ 327.581821][T14409] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.608605][T14348] veth1_macvtap: entered promiscuous mode [ 327.660850][ T6578] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.668530][ T6578] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.729997][T14348] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 327.762192][ T6578] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.769419][ T6578] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.812883][T14348] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 327.852292][T14348] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.884025][T14348] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.892864][T14348] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.910294][T14348] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 327.958394][T14380] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.225959][T14380] veth0_vlan: entered promiscuous mode [ 328.264659][T14380] veth1_vlan: entered promiscuous mode [ 328.295353][ T6559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.313461][ T6559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.386734][ T6578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.405433][ T6578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.422775][T14380] veth0_macvtap: entered promiscuous mode [ 328.461012][T14380] veth1_macvtap: entered promiscuous mode [ 328.509356][T14380] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.524269][T14380] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.547561][T14380] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.565239][T14380] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.581218][T14380] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.590615][T14380] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.594084][ T51] Bluetooth: hci1: command tx timeout [ 328.701953][T14409] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 328.772547][T14523] netlink: 'syz.6.2324': attribute type 11 has an invalid length. [ 328.790363][T14523] netlink: 64 bytes leftover after parsing attributes in process `syz.6.2324'. [ 328.870999][T14409] veth0_vlan: entered promiscuous mode [ 328.883093][ T6559] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.892281][T14409] veth1_vlan: entered promiscuous mode [ 328.915739][ T6559] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.001628][ T6559] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.089376][ T6569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.125104][ T6569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.169924][ T6559] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.224212][ T51] Bluetooth: hci5: command tx timeout [ 329.260646][T14409] veth0_macvtap: entered promiscuous mode [ 329.330358][ T6559] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.406636][T14409] veth1_macvtap: entered promiscuous mode [ 329.445393][ T6559] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.480691][T14409] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 329.501239][T14409] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 329.515438][T14409] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.525524][T14409] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.534667][T14409] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.543392][T14409] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 329.627503][ T6569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.644574][ T6569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.675262][ T6578] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 329.683130][ T6578] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 329.755793][ T6559] bridge_slave_1: left allmulticast mode [ 329.761495][ T6559] bridge_slave_1: left promiscuous mode [ 329.768368][ T6559] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.796380][ T6559] bridge_slave_0: left allmulticast mode [ 329.802060][ T6559] bridge_slave_0: left promiscuous mode [ 329.809018][ T6559] bridge0: port 1(bridge_slave_0) entered disabled state [ 330.315039][T14535] set match dimension is over the limit! [ 330.512552][ T6559] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 330.531886][ T6559] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 330.549261][ T6559] bond0 (unregistering): Released all slaves [ 330.691859][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.703171][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 330.719551][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.729294][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.740862][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 330.758214][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.765863][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 330.775721][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.783516][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 330.800022][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 330.997717][T14538] geneve1 speed is unknown, defaulting to 1000 [ 331.047027][T14538] virt_wifi0 speed is unknown, defaulting to 1000 [ 331.053871][T14536] geneve1 speed is unknown, defaulting to 1000 [ 331.069208][T14536] virt_wifi0 speed is unknown, defaulting to 1000 [ 331.202024][ T6559] hsr_slave_0: left promiscuous mode [ 331.227979][ T6559] hsr_slave_1: left promiscuous mode [ 331.254690][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.262169][ T6559] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.271471][T14544] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2328'. [ 331.297470][ T6559] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.303703][T14544] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2328'. [ 331.313870][ T6559] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.375905][ T6559] veth1_macvtap: left promiscuous mode [ 331.381494][ T6559] veth0_macvtap: left promiscuous mode [ 331.403872][ T6559] veth1_vlan: left promiscuous mode [ 331.409251][ T6559] veth0_vlan: left promiscuous mode [ 331.529777][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 331.542843][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 331.551464][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 331.562177][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 331.572414][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 331.674046][ T5839] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 331.690810][ T5839] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 331.699194][ T5839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 331.711701][ T5839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 331.725524][ T5839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 332.071713][ T6559] team0 (unregistering): Port device team_slave_1 removed [ 332.120249][ T6559] team0 (unregistering): Port device team_slave_0 removed [ 332.725143][T14549] geneve1 speed is unknown, defaulting to 1000 [ 332.766591][T14547] geneve1 speed is unknown, defaulting to 1000 [ 332.789575][T14549] virt_wifi0 speed is unknown, defaulting to 1000 [ 332.829703][ T5839] Bluetooth: hci1: command tx timeout [ 332.898011][T14547] virt_wifi0 speed is unknown, defaulting to 1000 [ 332.905119][ T5839] Bluetooth: hci3: command tx timeout [ 333.242584][T14538] chnl_net:caif_netlink_parms(): no params data found [ 333.562627][T14549] chnl_net:caif_netlink_parms(): no params data found [ 333.576072][T14536] chnl_net:caif_netlink_parms(): no params data found [ 333.623769][ T5839] Bluetooth: hci5: command tx timeout [ 333.730045][ T6563] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.752830][T14538] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.761853][T14538] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.770736][T14538] bridge_slave_0: entered allmulticast mode [ 333.779449][T14538] bridge_slave_0: entered promiscuous mode [ 333.794785][ T5839] Bluetooth: hci8: command tx timeout [ 333.830863][T14547] chnl_net:caif_netlink_parms(): no params data found [ 333.857887][T14538] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.866251][T14538] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.873530][T14538] bridge_slave_1: entered allmulticast mode [ 333.883348][T14538] bridge_slave_1: entered promiscuous mode [ 333.921952][ T6563] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.975962][T14584] netlink: 'syz.6.2331': attribute type 10 has an invalid length. [ 334.071204][ T6563] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.107919][T14538] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.122412][T14538] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.222430][ T6563] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.267625][T14549] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.281689][T14549] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.289993][T14549] bridge_slave_0: entered allmulticast mode [ 334.314996][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2333'. [ 334.325056][T14592] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2333'. [ 334.329361][T14549] bridge_slave_0: entered promiscuous mode [ 334.355578][T14549] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.362766][T14549] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.380688][T14549] bridge_slave_1: entered allmulticast mode [ 334.388894][T14549] bridge_slave_1: entered promiscuous mode [ 334.418100][T14538] team0: Port device team_slave_0 added [ 334.428909][T14538] team0: Port device team_slave_1 added [ 334.503372][T14536] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.527305][T14536] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.542824][T14536] bridge_slave_0: entered allmulticast mode [ 334.555804][T14536] bridge_slave_0: entered promiscuous mode [ 334.582859][T14547] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.596557][T14547] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.607311][T14547] bridge_slave_0: entered allmulticast mode [ 334.616262][T14547] bridge_slave_0: entered promiscuous mode [ 334.625271][T14547] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.632594][T14547] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.640370][T14547] bridge_slave_1: entered allmulticast mode [ 334.648491][T14547] bridge_slave_1: entered promiscuous mode [ 334.659923][T14549] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.674273][T14536] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.681428][T14536] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.689081][T14536] bridge_slave_1: entered allmulticast mode [ 334.697201][T14536] bridge_slave_1: entered promiscuous mode [ 334.793205][T14549] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.873397][T14538] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.888848][T14538] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.914876][ T5839] Bluetooth: hci1: command tx timeout [ 334.924742][T14538] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.939368][T14538] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.943002][T14607] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2338'. [ 334.946534][T14538] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.981792][T14538] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.994869][ T5839] Bluetooth: hci3: command tx timeout [ 335.029232][T14536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.039539][T14608] netlink: 'syz.6.2338': attribute type 26 has an invalid length. [ 335.089183][T14547] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 335.126689][T14547] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.145774][T14549] team0: Port device team_slave_0 added [ 335.155806][T14536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 335.191851][T14612] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 335.246999][T14549] team0: Port device team_slave_1 added [ 335.289584][T14536] team0: Port device team_slave_0 added [ 335.303468][T14538] hsr_slave_0: entered promiscuous mode [ 335.315499][T14538] hsr_slave_1: entered promiscuous mode [ 335.321973][T14538] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.329835][T14538] Cannot create hsr debugfs directory [ 335.364188][T14616] x_tables: duplicate underflow at hook 3 [ 335.376021][T14547] team0: Port device team_slave_0 added [ 335.417232][T14536] team0: Port device team_slave_1 added [ 335.499130][T14547] team0: Port device team_slave_1 added [ 335.586409][T14536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.593405][T14536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.631310][T14536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.661427][T14549] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.668586][T14549] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.694701][T14549] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.705318][ T5839] Bluetooth: hci5: command tx timeout [ 335.713056][T14549] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.720130][T14549] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.748641][T14549] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.789318][ T6563] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.821116][T14536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.830396][T14536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.859985][T14536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.871503][ T5839] Bluetooth: hci8: command tx timeout [ 335.958053][T14547] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.966421][T14547] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.992649][T14547] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 336.005611][T14547] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 336.012575][T14547] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 336.039033][T14547] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 336.095977][ T6563] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.138169][T14536] hsr_slave_0: entered promiscuous mode [ 336.145016][T14536] hsr_slave_1: entered promiscuous mode [ 336.151153][T14536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.159917][T14536] Cannot create hsr debugfs directory [ 336.231427][ T6563] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.282899][T14547] hsr_slave_0: entered promiscuous mode [ 336.292266][T14547] hsr_slave_1: entered promiscuous mode [ 336.299503][T14547] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.307209][T14547] Cannot create hsr debugfs directory [ 336.320100][T14549] hsr_slave_0: entered promiscuous mode [ 336.329695][T14549] hsr_slave_1: entered promiscuous mode [ 336.337834][T14549] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 336.345937][T14549] Cannot create hsr debugfs directory [ 336.376401][ T6563] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.899410][ T6563] bridge_slave_1: left allmulticast mode [ 336.906480][ T6563] bridge_slave_1: left promiscuous mode [ 336.912355][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.922209][ T6563] bridge_slave_0: left allmulticast mode [ 336.928090][ T6563] bridge_slave_0: left promiscuous mode [ 336.939360][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.950435][ T6563] bridge_slave_1: left allmulticast mode [ 336.956899][ T6563] bridge_slave_1: left promiscuous mode [ 336.962952][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.972605][ T6563] bridge_slave_0: left allmulticast mode [ 336.978828][ T6563] bridge_slave_0: left promiscuous mode [ 336.987707][ T5839] Bluetooth: hci1: command tx timeout [ 336.999615][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.065688][ T5839] Bluetooth: hci3: command tx timeout [ 337.410662][ T6563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.421505][ T6563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.431791][ T6563] bond0 (unregistering): Released all slaves [ 337.786509][ T5839] Bluetooth: hci5: command tx timeout [ 337.850885][ T6563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.861891][ T6563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.875933][ T6563] bond0 (unregistering): Released all slaves [ 337.944376][ T5839] Bluetooth: hci8: command tx timeout [ 338.299551][T14536] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 338.318193][T14536] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 338.380452][T14646] netlink: 'syz.6.2349': attribute type 13 has an invalid length. [ 338.396175][T14646] veth0_macvtap: left promiscuous mode [ 338.401805][T14646] macvtap0: entered allmulticast mode [ 338.424662][T14646] macvtap0: refused to change device tx_queue_len [ 338.431156][T14536] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 338.452323][T14536] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 338.617607][ T6563] hsr_slave_0: left promiscuous mode [ 338.625161][ T6563] hsr_slave_1: left promiscuous mode [ 338.631352][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.639060][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.647568][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.657043][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.673851][ T6563] hsr_slave_0: left promiscuous mode [ 338.688903][ T6563] hsr_slave_1: left promiscuous mode [ 338.697033][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.704660][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.713296][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.722541][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.778583][ T6563] veth1_macvtap: left promiscuous mode [ 338.784896][ T6563] veth0_macvtap: left promiscuous mode [ 338.790574][ T6563] veth1_vlan: left promiscuous mode [ 338.796152][ T6563] veth0_vlan: left promiscuous mode [ 338.804673][ T6563] veth1_macvtap: left promiscuous mode [ 338.810471][ T6563] veth0_macvtap: left promiscuous mode [ 338.830956][ T6563] veth1_vlan: left promiscuous mode [ 338.840919][ T6563] veth0_vlan: left promiscuous mode [ 339.063902][ T5839] Bluetooth: hci1: command tx timeout [ 339.158128][ T5839] Bluetooth: hci3: command tx timeout [ 339.477667][ T6563] team0 (unregistering): Port device team_slave_1 removed [ 339.531905][ T6563] team0 (unregistering): Port device team_slave_0 removed [ 339.785395][ T5839] Bluetooth: hci6: command 0x0406 tx timeout [ 339.863979][ T5837] Bluetooth: hci5: command tx timeout [ 340.024050][ T5837] Bluetooth: hci8: command tx timeout [ 340.345752][ T6563] team0 (unregistering): Port device team_slave_1 removed [ 340.392741][ T6563] team0 (unregistering): Port device team_slave_0 removed [ 341.002319][T14667] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2352'. [ 341.042711][T14536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.142498][T14536] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.162117][T14549] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 341.224029][T14669] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2353'. [ 341.253853][T14672] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2353'. [ 341.274513][T14549] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 341.290597][ T6549] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.297728][ T6549] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.350321][T14549] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 341.367321][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.374536][ T6549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.398613][T14549] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 341.548188][T14536] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.566559][T14536] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.778543][T14549] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.881085][T14549] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.890122][T14538] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 341.919258][T14538] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 341.935518][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.942703][ T6542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.952438][T14538] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 341.982077][T14538] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 342.002770][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.009909][ T6542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.039277][T14536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.146158][T14547] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 342.166284][T14547] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 342.179607][T14547] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 342.201731][T14547] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 342.457305][T14538] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.529993][T14538] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.587866][T14547] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.605856][ T6559] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.613074][ T6559] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.648954][ T6549] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.656173][ T6549] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.764553][T14547] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.799230][T14549] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.814437][ T6542] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.821572][ T6542] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.875007][ T6542] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.882181][ T6542] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.906185][T14536] veth0_vlan: entered promiscuous mode [ 342.961770][T14536] veth1_vlan: entered promiscuous mode [ 343.071540][T14549] veth0_vlan: entered promiscuous mode [ 343.129377][T14536] veth0_macvtap: entered promiscuous mode [ 343.145545][T14549] veth1_vlan: entered promiscuous mode [ 343.161695][T14536] veth1_macvtap: entered promiscuous mode [ 343.209780][T14536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.223544][T14538] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.250439][T14536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.296995][T14536] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.315060][T14536] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.334013][T14536] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.353370][T14536] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.418534][T14549] veth0_macvtap: entered promiscuous mode [ 343.496717][T14549] veth1_macvtap: entered promiscuous mode [ 343.548629][T14549] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.699640][T14549] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.745698][T14549] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.772505][T14549] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.782065][T14549] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.792841][T14549] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.808552][ T6569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.820091][ T6569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.829876][T14547] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.968029][T14738] netlink: 56 bytes leftover after parsing attributes in process `syz.6.2359'. [ 343.977001][ T6569] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.977020][ T6569] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.050928][T14538] veth0_vlan: entered promiscuous mode [ 344.162618][ T6563] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.181402][ T6563] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.203946][T14538] veth1_vlan: entered promiscuous mode [ 344.227379][T14547] veth0_vlan: entered promiscuous mode [ 344.308341][ T6559] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.309662][T14547] veth1_vlan: entered promiscuous mode [ 344.341730][ T6559] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.487199][T14547] veth0_macvtap: entered promiscuous mode [ 344.503041][T14538] veth0_macvtap: entered promiscuous mode [ 344.529797][T14547] veth1_macvtap: entered promiscuous mode [ 344.539217][T14538] veth1_macvtap: entered promiscuous mode [ 344.611215][T14753] netlink: 44 bytes leftover after parsing attributes in process `syz.6.2361'. [ 344.620997][T14752] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2361'. [ 344.688125][T14547] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.728688][T14538] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.790121][T14538] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.904210][ T5839] Bluetooth: hci7: command 0x0406 tx timeout [ 344.952089][ T6563] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.984970][T14547] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.011807][T14547] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.030316][T14547] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.041578][T14547] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.058236][T14547] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.085053][T14538] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.095023][T14538] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.104447][T14538] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.113195][T14538] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.164527][ T6563] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.259464][ T6563] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.348576][ T6563] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.419479][ T6578] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.436077][ T6578] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.451370][ T6569] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.460456][ T6569] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.502783][ T6549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.510908][ T6549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.525610][ T6549] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 345.535639][ T6549] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 345.741759][ T6563] bridge_slave_1: left allmulticast mode [ 345.748623][ T6563] bridge_slave_1: left promiscuous mode [ 345.754861][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.766049][ T6563] bridge_slave_0: left allmulticast mode [ 345.771712][ T6563] bridge_slave_0: left promiscuous mode [ 345.777670][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.216740][ T6563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.231213][ T6563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.245086][ T6563] bond0 (unregistering): Released all slaves [ 346.419971][ T5836] hid-generic 0005:0B57:3DDA.0002: collection stack underflow [ 346.443837][ T5836] hid-generic 0005:0B57:3DDA.0002: item 0 0 0 12 parsing failed [ 346.464895][ T5836] hid-generic 0005:0B57:3DDA.0002: probe with driver hid-generic failed with error -22 [ 346.930808][T14780] netlink: 28 bytes leftover after parsing attributes in process `syz.8.2367'. [ 346.981496][ T6563] hsr_slave_0: left promiscuous mode [ 346.988161][ T6563] hsr_slave_1: left promiscuous mode [ 346.998301][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.012442][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 347.024880][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 347.034501][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 347.042702][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.051543][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 347.060271][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 347.069213][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.077778][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.109242][ T6563] veth1_macvtap: left promiscuous mode [ 347.115041][ T6563] veth0_macvtap: left promiscuous mode [ 347.123303][ T6563] veth1_vlan: left promiscuous mode [ 347.128815][ T6563] veth0_vlan: left promiscuous mode [ 347.501281][ T5839] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.518851][ T5839] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.529660][ T5839] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 347.537890][ T5839] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 347.567795][ T5839] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.626594][ T5839] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 347.641890][ T5839] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 347.659725][ T5839] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 347.673321][ T5839] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 347.684883][ T5839] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 347.933708][ T6563] team0 (unregistering): Port device team_slave_1 removed [ 347.985765][ T6563] team0 (unregistering): Port device team_slave_0 removed [ 348.418978][T14780] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 348.562248][T14785] geneve1 speed is unknown, defaulting to 1000 [ 348.591533][T14792] netlink: 'syz.8.2370': attribute type 1 has an invalid length. [ 348.605533][T14785] virt_wifi0 speed is unknown, defaulting to 1000 [ 348.610929][T14787] geneve1 speed is unknown, defaulting to 1000 [ 348.632768][T14792] netlink: 'syz.8.2370': attribute type 1 has an invalid length. [ 348.660684][T14787] virt_wifi0 speed is unknown, defaulting to 1000 [ 348.671942][T14782] geneve1 speed is unknown, defaulting to 1000 [ 348.754564][T14782] virt_wifi0 speed is unknown, defaulting to 1000 [ 348.832744][T14802] openvswitch: netlink: Flow actions attr not present in new flow. [ 349.144478][ T5837] Bluetooth: hci3: command tx timeout [ 349.299529][ T6563] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.335539][T14785] chnl_net:caif_netlink_parms(): no params data found [ 349.559069][ T6563] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.601247][T14782] chnl_net:caif_netlink_parms(): no params data found [ 349.620284][T14833] netlink: 'syz.8.2379': attribute type 9 has an invalid length. [ 349.626922][ T5837] Bluetooth: hci5: command tx timeout [ 349.688788][ T6563] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.721496][T14787] chnl_net:caif_netlink_parms(): no params data found [ 349.786037][ T5837] Bluetooth: hci8: command tx timeout [ 349.916456][ T6563] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.947178][T14848] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2383'. [ 350.100552][T14785] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.115156][T14785] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.122446][T14785] bridge_slave_0: entered allmulticast mode [ 350.130256][T14785] bridge_slave_0: entered promiscuous mode [ 350.169697][T14785] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.177087][T14785] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.185368][T14785] bridge_slave_1: entered allmulticast mode [ 350.194009][T14785] bridge_slave_1: entered promiscuous mode [ 350.279977][T14782] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.287721][T14782] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.295692][T14782] bridge_slave_0: entered allmulticast mode [ 350.303347][T14782] bridge_slave_0: entered promiscuous mode [ 350.311663][T14787] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.319732][T14787] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.327173][T14787] bridge_slave_0: entered allmulticast mode [ 350.336036][T14787] bridge_slave_0: entered promiscuous mode [ 350.390595][T14782] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.411259][T14782] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.421751][T14782] bridge_slave_1: entered allmulticast mode [ 350.432385][T14782] bridge_slave_1: entered promiscuous mode [ 350.467150][T14787] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.474627][T14787] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.481886][T14787] bridge_slave_1: entered allmulticast mode [ 350.489847][T14787] bridge_slave_1: entered promiscuous mode [ 350.501072][T14785] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.577977][T14785] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.654991][T14782] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.708868][T14787] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.777030][T14782] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.805078][T14787] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.837304][T14785] team0: Port device team_slave_0 added [ 350.948877][ T6563] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.988344][T14785] team0: Port device team_slave_1 added [ 351.120906][T14872] batman_adv: batadv0: Removing interface: team0 [ 351.151096][T14872] team0 (unregistering): Port device team_slave_0 removed [ 351.170932][T14872] team0 (unregistering): Port device team_slave_1 removed [ 351.208879][T14787] team0: Port device team_slave_0 added [ 351.218265][T14879] syzkaller1: entered promiscuous mode [ 351.224318][T14879] syzkaller1: entered allmulticast mode [ 351.224558][ T5837] Bluetooth: hci3: command tx timeout [ 351.271814][T14782] team0: Port device team_slave_0 added [ 351.281843][T14782] team0: Port device team_slave_1 added [ 351.326901][T14787] team0: Port device team_slave_1 added [ 351.353257][ T6563] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.394166][T14785] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.401147][T14785] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.428081][T14785] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.448193][T14884] netlink: 72 bytes leftover after parsing attributes in process `syz.8.2389'. [ 351.492955][T14785] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.501408][T14785] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.528249][T14785] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.585158][ T6563] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.681394][T14782] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.698356][T14782] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.733834][ T5837] Bluetooth: hci5: command tx timeout [ 351.743837][T14782] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.841174][ T6563] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.863836][ T5837] Bluetooth: hci8: command tx timeout [ 351.872861][T14782] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.892338][T14898] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2393'. [ 351.904796][T14782] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.943924][T14898] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 351.951546][T14898] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 351.970883][T14782] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.056578][T14787] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.078604][T14787] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.105973][T14787] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.137122][T14787] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.144458][T14787] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.171158][T14787] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.225551][T14901] IPVS: Unknown mcast interface: vcan0 [ 352.232362][T14887] geneve1 speed is unknown, defaulting to 1000 [ 352.243500][T14785] hsr_slave_0: entered promiscuous mode [ 352.283847][T14785] hsr_slave_1: entered promiscuous mode [ 352.321987][T14782] hsr_slave_0: entered promiscuous mode [ 352.338996][T14782] hsr_slave_1: entered promiscuous mode [ 352.348614][T14782] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.356551][T14782] Cannot create hsr debugfs directory [ 352.362232][T14887] virt_wifi0 speed is unknown, defaulting to 1000 [ 352.642811][T14917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2399'. [ 352.668705][T14787] hsr_slave_0: entered promiscuous mode [ 352.675925][T14787] hsr_slave_1: entered promiscuous mode [ 352.682616][T14787] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.690567][T14787] Cannot create hsr debugfs directory [ 353.024209][ T6563] bridge_slave_1: left allmulticast mode [ 353.029900][ T6563] bridge_slave_1: left promiscuous mode [ 353.036333][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.047486][ T6563] bridge_slave_0: left allmulticast mode [ 353.053119][ T6563] bridge_slave_0: left promiscuous mode [ 353.060019][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.083003][ T6563] bridge_slave_1: left allmulticast mode [ 353.089206][ T6563] bridge_slave_1: left promiscuous mode [ 353.095122][ T6563] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.106842][ T6563] bridge_slave_0: left allmulticast mode [ 353.112505][ T6563] bridge_slave_0: left promiscuous mode [ 353.119257][ T6563] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.304467][ T5837] Bluetooth: hci3: command tx timeout [ 353.509589][ T6563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.520900][ T6563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.531046][ T6563] bond0 (unregistering): Released all slaves [ 353.786662][ T5837] Bluetooth: hci5: command tx timeout [ 353.855711][ T6563] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 353.867952][ T6563] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 353.879411][ T6563] bond0 (unregistering): Released all slaves [ 353.908849][T14927] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 353.944390][ T5837] Bluetooth: hci8: command tx timeout [ 353.950523][T14927] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 353.976211][T14927] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 354.306575][T14935] netlink: 'syz.6.2405': attribute type 1 has an invalid length. [ 354.315965][T14935] netlink: 220 bytes leftover after parsing attributes in process `syz.6.2405'. [ 354.325353][T14935] netlink: 'syz.6.2405': attribute type 1 has an invalid length. [ 354.760671][ T6563] hsr_slave_0: left promiscuous mode [ 354.776182][ T6563] hsr_slave_1: left promiscuous mode [ 354.782721][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.794409][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.803218][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.810949][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.822226][ T6563] hsr_slave_0: left promiscuous mode [ 354.831856][ T6563] hsr_slave_1: left promiscuous mode [ 354.838226][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 354.847022][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 354.855431][ T6563] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 354.862854][ T6563] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 354.866332][T14956] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2410'. [ 354.917023][ T6563] veth1_macvtap: left promiscuous mode [ 354.922683][ T6563] veth0_macvtap: left promiscuous mode [ 354.929319][ T6563] veth1_vlan: left promiscuous mode [ 354.941713][ T6563] veth0_vlan: left promiscuous mode [ 354.952501][ T6563] veth1_macvtap: left promiscuous mode [ 354.961118][T14959] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2411'. [ 354.968341][ T6563] veth0_macvtap: left promiscuous mode [ 354.976884][ T6563] veth1_vlan: left promiscuous mode [ 354.977780][T14959] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2411'. [ 354.982213][ T6563] veth0_vlan: left promiscuous mode [ 355.390967][ T5837] Bluetooth: hci3: command tx timeout [ 355.601545][ T6563] team0 (unregistering): Port device team_slave_1 removed [ 355.650022][ T6563] team0 (unregistering): Port device team_slave_0 removed [ 355.865227][ T5837] Bluetooth: hci5: command tx timeout [ 356.034134][ T5837] Bluetooth: hci8: command tx timeout [ 356.512747][ T6563] team0 (unregistering): Port device team_slave_1 removed [ 356.561485][ T6563] team0 (unregistering): Port device team_slave_0 removed [ 357.001705][T14952] netlink: 24 bytes leftover after parsing attributes in process `syz.8.2410'. [ 357.218121][T14966] netlink: 4 bytes leftover after parsing attributes in process `syz.8.2413'. [ 357.244448][T14785] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 357.263747][T14968] netlink: 16 bytes leftover after parsing attributes in process `syz.6.2414'. [ 357.305830][T14785] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 357.325729][T14968] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.344181][T14785] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 357.365650][T14968] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2414'. [ 357.375764][T14968] tc_dump_action: action bad kind [ 357.380865][T14785] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 357.909411][T14782] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 357.939384][T14782] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 357.971577][T14997] netlink: 12 bytes leftover after parsing attributes in process `syz.8.2423'. [ 358.021967][T14782] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 358.056234][T14782] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 358.082221][T14785] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.190450][ T31] INFO: task syz.1.1502:11162 blocked for more than 143 seconds. [ 358.191246][T14785] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.198554][ T31] Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 [ 358.233395][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.253864][ T31] task:syz.1.1502 state:D stack:26088 pid:11162 tgid:11160 ppid:5831 task_flags:0x400140 flags:0x00004004 [ 358.271700][ T31] Call Trace: [ 358.275188][ T31] [ 358.278154][ T31] __schedule+0x16f5/0x4d00 [ 358.287135][ T31] ? __lock_acquire+0xab9/0xd20 [ 358.292000][ T31] ? schedule+0x165/0x360 [ 358.296735][ T31] ? __pfx___schedule+0x10/0x10 [ 358.301618][ T31] ? schedule+0x91/0x360 [ 358.306128][ T31] schedule+0x165/0x360 [ 358.310310][ T31] schedule_preempt_disabled+0x13/0x30 [ 358.316151][ T31] __mutex_lock+0x724/0xe80 [ 358.320674][ T31] ? __mutex_lock+0x51b/0xe80 [ 358.328631][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 358.334581][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 358.339657][ T31] ? __nlmsg_put+0xef/0x1b0 [ 358.344612][ T31] ? genlmsg_put+0x137/0x2e0 [ 358.349235][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 358.355851][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 358.361933][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 358.367237][ T31] ? kernel_text_address+0xa5/0xe0 [ 358.372366][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 358.378315][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 358.386086][ T31] genl_rcv_msg+0x60e/0x790 [ 358.390625][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.395842][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 358.401925][ T31] netlink_rcv_skb+0x208/0x470 [ 358.406725][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.411771][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 358.417234][ T31] ? down_read+0x1ad/0x2e0 [ 358.421678][ T31] genl_rcv+0x28/0x40 [ 358.425934][ T31] netlink_unicast+0x75b/0x8d0 [ 358.430722][ T31] netlink_sendmsg+0x805/0xb30 [ 358.436644][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.441963][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 358.446972][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 358.452276][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.457730][ T31] __sock_sendmsg+0x219/0x270 [ 358.462443][ T31] ____sys_sendmsg+0x505/0x830 [ 358.467323][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.472627][ T31] ? import_iovec+0x74/0xa0 [ 358.477299][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 358.481990][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.488213][ T31] ? __fget_files+0x2a/0x420 [ 358.492828][ T31] ? __fget_files+0x3a0/0x420 [ 358.497666][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 358.502621][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.508485][ T31] ? rcu_is_watching+0x15/0xb0 [ 358.513323][ T31] ? do_syscall_64+0xbe/0x3b0 [ 358.518142][ T31] do_syscall_64+0xfa/0x3b0 [ 358.522656][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.527902][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.534055][ T31] ? clear_bhb_loop+0x60/0xb0 [ 358.538754][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.544891][ T31] RIP: 0033:0x7fd9bff8e929 [ 358.549314][ T31] RSP: 002b:00007fd9bddf6038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.557829][ T31] RAX: ffffffffffffffda RBX: 00007fd9c01b5fa0 RCX: 00007fd9bff8e929 [ 358.565896][ T31] RDX: 0000000000000000 RSI: 0000200000000100 RDI: 0000000000000008 [ 358.577465][ T31] RBP: 00007fd9c0010b39 R08: 0000000000000000 R09: 0000000000000000 [ 358.585547][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.594914][ T31] R13: 0000000000000000 R14: 00007fd9c01b5fa0 R15: 00007fff120dbda8 [ 358.602935][ T31] [ 358.606428][ T31] INFO: task syz.5.1529:11254 blocked for more than 143 seconds. [ 358.615123][ T31] Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 [ 358.622819][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 358.633133][ T31] task:syz.5.1529 state:D stack:24664 pid:11254 tgid:11253 ppid:8792 task_flags:0x400140 flags:0x00004004 [ 358.645195][ T31] Call Trace: [ 358.648486][ T31] [ 358.651425][ T31] __schedule+0x16f5/0x4d00 [ 358.656116][ T31] ? __lock_acquire+0xab9/0xd20 [ 358.660983][ T31] ? schedule+0x165/0x360 [ 358.665565][ T31] ? __pfx___schedule+0x10/0x10 [ 358.670499][ T31] ? schedule+0x91/0x360 [ 358.674906][ T31] schedule+0x165/0x360 [ 358.679100][ T31] schedule_preempt_disabled+0x13/0x30 [ 358.684690][ T31] __mutex_lock+0x724/0xe80 [ 358.690625][ T31] ? __mutex_lock+0x51b/0xe80 [ 358.696423][ T31] ? nfsd_nl_listener_set_doit+0x12a/0x1650 [ 358.702349][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 358.707554][ T31] ? __asan_memset+0x22/0x50 [ 358.712166][ T31] ? ____sys_sendmsg+0x505/0x830 [ 358.717176][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 358.722034][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 358.727319][ T31] nfsd_nl_listener_set_doit+0x12a/0x1650 [ 358.733058][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 358.738835][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 358.745183][ T31] ? __nla_parse+0x40/0x60 [ 358.749634][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 358.756134][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 358.761737][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 358.768079][ T31] ? bpf_lsm_capable+0x9/0x20 [ 358.772765][ T31] ? security_capable+0x7e/0x2e0 [ 358.777768][ T31] genl_rcv_msg+0x60e/0x790 [ 358.782288][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.787424][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 358.795905][ T31] netlink_rcv_skb+0x208/0x470 [ 358.800703][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.806811][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 358.812123][ T31] ? down_read+0x1ad/0x2e0 [ 358.816607][ T31] genl_rcv+0x28/0x40 [ 358.820600][ T31] netlink_unicast+0x75b/0x8d0 [ 358.831850][ T31] netlink_sendmsg+0x805/0xb30 [ 358.836709][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.842015][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 358.847078][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 358.852390][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.857740][ T31] __sock_sendmsg+0x219/0x270 [ 358.862428][ T31] ____sys_sendmsg+0x505/0x830 [ 358.867297][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.872599][ T31] ? import_iovec+0x74/0xa0 [ 358.877370][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 358.882075][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 358.887344][ T31] ? __fget_files+0x2a/0x420 [ 358.891931][ T31] ? __fget_files+0x3a0/0x420 [ 358.898032][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 358.902993][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 358.908627][ T31] ? rcu_is_watching+0x15/0xb0 [ 358.913417][ T31] ? do_syscall_64+0xbe/0x3b0 [ 358.918205][ T31] do_syscall_64+0xfa/0x3b0 [ 358.922723][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 358.927943][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.934079][ T31] ? clear_bhb_loop+0x60/0xb0 [ 358.938801][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.944752][ T31] RIP: 0033:0x7f0fbe98e929 [ 358.949179][ T31] RSP: 002b:00007f0fbf7c5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.957660][ T31] RAX: ffffffffffffffda RBX: 00007f0fbebb5fa0 RCX: 00007f0fbe98e929 [ 358.965805][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000009 [ 358.973904][ T31] RBP: 00007f0fbea10b39 R08: 0000000000000000 R09: 0000000000000000 [ 358.981971][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.990921][ T31] R13: 0000000000000000 R14: 00007f0fbebb5fa0 R15: 00007ffc9fff0b68 [ 358.999998][ T31] [ 359.003162][ T31] [ 359.003162][ T31] Showing all locks held in the system: [ 359.029413][T13851] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.036663][T13851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.048966][ T31] 3 locks held by kworker/1:0/24: [ 359.056355][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 359.067755][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 359.079466][ T31] #2: ffff888044370fe0 (&r->consumer_lock#2){+.+.}-{3:3}, at: wg_packet_decrypt_worker+0x87a/0xd10 [ 359.090444][ T31] 1 lock held by khungtaskd/31: [ 359.100704][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 359.111050][ T31] 2 locks held by getty/5598: [ 359.116229][ T31] #0: ffff8880355120a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 359.126059][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 359.136471][ T31] 2 locks held by syz-executor/5821: [ 359.141768][ T31] #0: ffff8880b873b918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 359.152006][ T31] #1: ffff8880b8723f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x314/0x6d0 [ 359.163472][ T31] 3 locks held by kworker/1:6/5902: [ 359.168702][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 359.179717][ T31] #1: ffffc9000479fbc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 359.190761][ T31] #2: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 359.202123][ T31] 4 locks held by kworker/u8:18/6560: [ 359.207711][ T31] #0: ffff8880b873b918 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 359.217742][ T31] #1: ffffc9001b75fbc0 ((work_completion)(&(&bat_priv->nc.work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 359.231192][ T31] #2: ffff888056820120 (&hard_iface->bat_iv.ogm_buff_mutex){+.+.}-{4:4}, at: batadv_iv_ogm_schedule+0xdf/0xea0 [ 359.243117][ T31] #3: ffffffff99c500f0 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 359.254429][ T31] 4 locks held by kworker/u8:19/6563: [ 359.259825][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 359.270831][ T31] #1: ffffc9001b78fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 359.281466][ T31] #2: ffffffff8f502d90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 359.290812][ T31] #3: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: fib6_rules_net_exit_batch+0x20/0xc0 [ 359.300772][ T31] 3 locks held by kworker/u8:22/6569: [ 359.307820][ T31] #0: ffff88814ca4a148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 359.319620][ T31] #1: ffffc9001b7efbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 359.332583][ T31] #2: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 359.346949][ T31] 2 locks held by syz.0.647/8087: [ 359.351982][ T31] #0: ffffffff8f575b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 359.361426][ T31] #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 359.375907][ T31] 2 locks held by syz.1.1502/11162: [ 359.381106][ T31] #0: ffffffff8f575b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 359.389681][ T31] #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 359.399886][ T31] 2 locks held by syz.5.1529/11254: [ 359.405140][ T31] #0: ffffffff8f575b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 359.414928][ T31] #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 359.426182][ T31] 2 locks held by syz.7.2271/14261: [ 359.431392][ T31] #0: ffffffff8f575b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 359.439617][ T31] #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 359.449889][ T31] 1 lock held by syz-executor/14782: [ 359.455228][ T31] #0: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 359.465793][ T31] 1 lock held by syz-executor/14785: [ 359.471105][ T31] #0: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 [ 359.481907][ T31] 8 locks held by syz-executor/14787: [ 359.487373][ T31] #0: ffff888034b22428 (sb_writers#7){.+.+}-{0:0}, at: vfs_write+0x211/0xa90 [ 359.496398][ T31] #1: ffff8880766fc488 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1e0/0x4f0 [ 359.506299][ T31] #2: ffff888027878d28 (kn->active#52){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x203/0x4f0 [ 359.517997][ T31] #3: ffffffff8edaa648 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xd1/0x360 [ 359.528362][ T31] #4: ffff888021bcc0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xb6/0x7c0 [ 359.539101][ T31] #5: ffff888021bcb250 (&devlink->lock_key#37){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 359.549485][ T31] #6: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xdb/0x670 [ 359.558575][ T31] #7: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 359.569577][ T31] [ 359.571920][ T31] ============================================= [ 359.571920][ T31] [ 359.581980][ T31] NMI backtrace for cpu 0 [ 359.582006][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) [ 359.582053][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 359.582076][ T31] Call Trace: [ 359.582091][ T31] [ 359.582106][ T31] dump_stack_lvl+0x189/0x250 [ 359.582163][ T31] ? __wake_up_klogd+0xd9/0x110 [ 359.582213][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.582272][ T31] ? __pfx__printk+0x10/0x10 [ 359.582348][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 359.582371][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 359.582389][ T31] ? _printk+0xcf/0x120 [ 359.582411][ T31] ? __pfx__printk+0x10/0x10 [ 359.582430][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 359.582455][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 359.582479][ T31] watchdog+0xfee/0x1030 [ 359.582503][ T31] ? watchdog+0x1de/0x1030 [ 359.582533][ T31] kthread+0x70e/0x8a0 [ 359.582555][ T31] ? __pfx_watchdog+0x10/0x10 [ 359.582576][ T31] ? __pfx_kthread+0x10/0x10 [ 359.582596][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.582618][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.582639][ T31] ? __pfx_kthread+0x10/0x10 [ 359.582659][ T31] ret_from_fork+0x3fc/0x770 [ 359.582685][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 359.582714][ T31] ? __switch_to_asm+0x39/0x70 [ 359.582730][ T31] ? __switch_to_asm+0x33/0x70 [ 359.582746][ T31] ? __pfx_kthread+0x10/0x10 [ 359.582766][ T31] ret_from_fork_asm+0x1a/0x30 [ 359.582799][ T31] [ 359.582807][ T31] Sending NMI from CPU 0 to CPUs 1: [ 359.744906][ C1] NMI backtrace for cpu 1 [ 359.744922][ C1] CPU: 1 UID: 0 PID: 13851 Comm: kworker/u8:32 Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) [ 359.744941][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 359.744952][ C1] Workqueue: bat_events batadv_nc_worker [ 359.744976][ C1] RIP: 0010:__lock_acquire+0xae1/0xd20 [ 359.744998][ C1] Code: 00 00 85 c0 0f 84 e4 01 00 00 41 f6 46 22 10 75 2e 48 8b 1c 24 4c 89 bb e0 0a 00 00 8b 83 e8 0a 00 00 ff c0 89 83 e8 0a 00 00 <83> f8 30 0f 83 64 01 00 00 3b 05 68 64 06 12 0f 87 c9 01 00 00 41 [ 359.745012][ C1] RSP: 0018:ffffc900032678f0 EFLAGS: 00000006 [ 359.745025][ C1] RAX: 0000000000000003 RBX: ffff88807a34bc00 RCX: dc39fdbd92d11a00 [ 359.745036][ C1] RDX: 0000000000000000 RSI: ffff88807a34c740 RDI: ffff88807a34bc00 [ 359.745047][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b33ef02 [ 359.745057][ C1] R10: dffffc0000000000 R11: ffffffff8b33ee30 R12: 000000009d919e46 [ 359.745068][ C1] R13: ffff88807a34c6f0 R14: ffff88807a34c740 R15: e8c54d3ef84f971a [ 359.745080][ C1] FS: 0000000000000000(0000) GS:ffff888125d52000(0000) knlGS:0000000000000000 [ 359.745092][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 359.745103][ C1] CR2: 00007fecb1d80ab8 CR3: 000000007e438000 CR4: 00000000003526f0 [ 359.745117][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 359.745126][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 359.745136][ C1] Call Trace: [ 359.745142][ C1] [ 359.745154][ C1] ? batadv_nc_worker+0xd2/0x610 [ 359.745171][ C1] lock_acquire+0x120/0x360 [ 359.745190][ C1] ? batadv_nc_worker+0xd2/0x610 [ 359.745211][ C1] ? batadv_nc_worker+0xd2/0x610 [ 359.745228][ C1] ? batadv_nc_worker+0xd2/0x610 [ 359.745246][ C1] batadv_nc_worker+0xef/0x610 [ 359.745263][ C1] ? batadv_nc_worker+0xd2/0x610 [ 359.745281][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 359.745303][ C1] process_scheduled_works+0xae1/0x17b0 [ 359.745335][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 359.745362][ C1] worker_thread+0x8a0/0xda0 [ 359.745394][ C1] kthread+0x70e/0x8a0 [ 359.745411][ C1] ? __pfx_worker_thread+0x10/0x10 [ 359.745431][ C1] ? __pfx_kthread+0x10/0x10 [ 359.745447][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 359.745473][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 359.745507][ C1] ? __pfx_kthread+0x10/0x10 [ 359.745523][ C1] ret_from_fork+0x3fc/0x770 [ 359.745544][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 359.745565][ C1] ? __switch_to_asm+0x39/0x70 [ 359.745592][ C1] ? __switch_to_asm+0x33/0x70 [ 359.745606][ C1] ? __pfx_kthread+0x10/0x10 [ 359.745622][ C1] ret_from_fork_asm+0x1a/0x30 [ 359.745644][ C1] [ 359.746185][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 360.017311][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) [ 360.029106][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 360.039154][ T31] Call Trace: [ 360.042426][ T31] [ 360.045350][ T31] dump_stack_lvl+0x99/0x250 [ 360.049941][ T31] ? __asan_memcpy+0x40/0x70 [ 360.054528][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.059722][ T31] ? __pfx__printk+0x10/0x10 [ 360.064317][ T31] panic+0x2db/0x790 [ 360.068218][ T31] ? __pfx_panic+0x10/0x10 [ 360.072627][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 360.078693][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 360.084059][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 360.090211][ T31] watchdog+0x102d/0x1030 [ 360.094540][ T31] ? watchdog+0x1de/0x1030 [ 360.098956][ T31] kthread+0x70e/0x8a0 [ 360.103017][ T31] ? __pfx_watchdog+0x10/0x10 [ 360.107691][ T31] ? __pfx_kthread+0x10/0x10 [ 360.112276][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 360.117562][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.122753][ T31] ? __pfx_kthread+0x10/0x10 [ 360.127337][ T31] ret_from_fork+0x3fc/0x770 [ 360.131924][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 360.137033][ T31] ? __switch_to_asm+0x39/0x70 [ 360.141787][ T31] ? __switch_to_asm+0x33/0x70 [ 360.146548][ T31] ? __pfx_kthread+0x10/0x10 [ 360.151130][ T31] ret_from_fork_asm+0x1a/0x30 [ 360.155905][ T31] [ 360.159606][ T31] Kernel Offset: disabled [ 360.163921][ T31] Rebooting in 86400 seconds..