last executing test programs: 6.23872168s ago: executing program 4 (id=247): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xc9, 0x8100, 0x0, 0x1, 0x8, 0x6, @local}, 0x14) bind$rds(r2, &(0x7f00000000c0)={0xa}, 0x1c) sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x4e1d, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1cf4000000000000000000000700000001832704"], 0xf41c}, 0x800) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000304fc0800"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000280012800b00010069703667726500001800028004001200060018000700000006000300a1000000"], 0x48}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) socket$rds(0x15, 0x5, 0x0) (async) sendto$packet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xc9, 0x8100, 0x0, 0x1, 0x8, 0x6, @local}, 0x14) (async) bind$rds(r2, &(0x7f00000000c0)={0xa}, 0x1c) (async) sendmsg$inet(r1, &(0x7f00000003c0)={&(0x7f0000000080)={0x2, 0x4e1d, @empty}, 0x10, 0x0, 0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="1cf4000000000000000000000700000001832704"], 0xf41c}, 0x800) (async) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="4800000010000304fc0800"/20, @ANYRES32=0x0, @ANYBLOB="a5fdad8800000000280012800b00010069703667726500001800028004001200060018000700000006000300a1000000"], 0x48}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xe, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002f000000620a00ff000000007500000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="00000000000000000504000000a48774000000f73b858730deef"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2d) (async) 5.716552729s ago: executing program 4 (id=252): r0 = socket$can_bcm(0x1d, 0x2, 0x2) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000000)={0x0, @dev, @initdev}, &(0x7f0000000040)=0xc) clock_gettime(0x0, &(0x7f00000000c0)={0x0, 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x0, 0x848, 0x791, {}, {r2, r3/1000+10000}, {0x2, 0x1}, 0x1, @can={{0x4, 0x0, 0x0, 0x1}, 0x0, 0x2, 0x0, 0x0, "85618b457943e690"}}, 0x48}}, 0x0) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000240)={0x100, 0x2e, 0x10, 0x70bd25, 0x25dfdbfc, {0x11}, [@generic="c1fc65ffc870a93f16307b950ef15403afcf43c9cd1119a656b8dc3978e05e039956aaf956e16a4f58a099932a528340d9a895235be09ffb6f564a8a2767cd6978444e2d9fb2f594b766f4175373283d331e07223e4e87cc2f5e8602daa3cab92ac4dad8a6e1d2343516277db2ed82496d6d80543e97ad2c7ecd70ce67aa9c87c1f99cc2b368c5de1ef106d54b0abe3906e8398c91ba482ba3bc", @nested={0x4d, 0x46, 0x0, 0x1, [@typed={0x14, 0x6b, 0x0, 0x0, @ipv6=@loopback}, @generic="e5a71b4726c221a55036ef39473e4e90984cfeaa9ad5205f5fe2d95b478f53c7fe", @typed={0x14, 0x109, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x100}, 0x1, 0x0, 0x0, 0x88}, 0x200088d0) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000400), r4) (rerun: 64) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000440)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4000008}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x74, r5, 0x400, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x4ac}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x5a3}, @NL80211_ATTR_STA_FLAGS={0x1c, 0x11, 0x0, 0x1, [@NL80211_STA_FLAG_WME={0x4}, @NL80211_STA_FLAG_ASSOCIATED={0x4}, @NL80211_STA_FLAG_SHORT_PREAMBLE={0x4}, @NL80211_STA_FLAG_AUTHORIZED={0x4}, @NL80211_STA_FLAG_MFP={0x4}, @NL80211_STA_FLAG_TDLS_PEER={0x4}]}, @NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x1}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x727}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x787}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_VLAN={0x8, 0x14, r6}, @NL80211_ATTR_MAC={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x44800}, 0x20004) (async) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000580)) (async) ppoll(&(0x7f00000005c0)=[{r0, 0x1c}], 0x1, &(0x7f0000000600)={0x77359400}, &(0x7f0000000640)={[0x9ed9]}, 0x8) (async, rerun: 64) r7 = accept$inet(0xffffffffffffffff, &(0x7f0000000680)={0x2, 0x0, @multicast1}, &(0x7f00000006c0)=0x10) (rerun: 64) bind$inet(r7, &(0x7f0000000700)={0x2, 0x4e21, @multicast1}, 0x10) r8 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000740), 0x0, 0x0) ioctl$PPPIOCGIDLE(r8, 0x8010743f, &(0x7f0000000780)) (async) socket$tipc(0x1e, 0x5, 0x0) (async, rerun: 32) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), r4) (async, rerun: 32) ioctl$TUNSETLINK(0xffffffffffffffff, 0x400454cd, 0x306) (async) r9 = socket$inet6(0xa, 0x5, 0x6) (async) r10 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000800), &(0x7f0000000840)=0x10, 0x80400) recvmmsg(r10, &(0x7f0000004a80)=[{{&(0x7f0000000880)=@phonet, 0x80, &(0x7f0000003a00)=[{&(0x7f0000000900)=""/4096, 0x1000}, {&(0x7f0000001900)=""/91, 0x5b}, {&(0x7f0000001980)=""/4096, 0x1000}, {&(0x7f0000002980)=""/78, 0x4e}, {&(0x7f0000002a00)=""/4096, 0x1000}], 0x5, &(0x7f0000003a80)=""/4096, 0x1000}, 0xfffffffe}], 0x1, 0x2, &(0x7f0000004ac0)={0x0, 0x989680}) (async) ioctl$sock_SIOCSIFBR(r9, 0x8941, &(0x7f0000004c00)=@get={0x1, &(0x7f0000004b00)=""/237, 0xb35}) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000004c40), r11) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004cc0), r4) sendmsg$NL80211_CMD_STOP_AP(r4, &(0x7f0000004d80)={&(0x7f0000004c80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000004d40)={&(0x7f0000004d00)={0x20, r12, 0x100, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x1e, 0x1a}}}}}, 0x20}, 0x1, 0x0, 0x0, 0x24000004}, 0x20000800) (async) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r13, 0x400448cb, &(0x7f0000004dc0)="60bc89865f83e70bfdee4befb85b2123dba09156e4952e36745e1829e7fdc6fc89ed342bb7f775f7fa6e14942a5182daa0994cfff9840c9ee26d4c105f3f3fdec54aba8b7046b682d949c193ee152607cd74fd22ece88d50a5a5f80ac884636e3e3a23271b5bd2f0aa63012c77472b12bbfaf77ee81153526233345d4b25d4f083e4b6676347708f0aac6957af02e369aa9ef69cfb72ad1b349f26f3f7b62b6d655bed39b1ac07a7379c4fafc6c0f108c98abcd96c7c9608f3ff0a641d60e95425b6d64922610a632dfb0480bd09802ad660f2ad652664") ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000004f40)={'ip6_vti0\x00', &(0x7f0000004ec0)={'ip6tnl0\x00', r1, 0x4, 0x6, 0x1, 0x0, 0x5, @dev={0xfe, 0x80, '\x00', 0x21}, @remote, 0x0, 0x10, 0x3, 0x80000000}}) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000052c0)={&(0x7f0000004f80)='rxrpc_rx_packet\x00', 0xffffffffffffffff, 0x0, 0x6b19}, 0x18) 5.387052496s ago: executing program 4 (id=254): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800000000feff000000000000000018030000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000053000000bf0900000000000055090100000000009500000000000000b702000000000000632af0ff0000000026090800000000007b9af0ff00000000bf8620000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70500000800000015000000760000e4be980000000000001e08000000000000850000006c000000b70000000000000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, @cgroup_skb=0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 5.241512708s ago: executing program 4 (id=256): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x2, [@func_proto={0x0, 0x4, 0x0, 0xd, 0xa, [{0xc, 0x2}, {0xd, 0x4}, {0xf, 0x1}, {0x8, 0x2}]}]}}, &(0x7f0000000f40)=""/4089, 0x46, 0xff9, 0x1, 0x0, 0x0, @void, @value}, 0x28) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02"], 0x10) socket$kcm(0xa, 0x2, 0x73) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f00000007c0)={0x24, r1, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@NL802154_ATTR_SEC_DEVICE={0x4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x20040044) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000800095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4.930673797s ago: executing program 4 (id=260): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000aa000000760000000000000007020000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x50}}, 0x0) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = getpid() ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r3) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000002800)) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x2) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000aa000000760000000000000007020000000000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@setlink={0x50, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'syz_tun\x00'}, @IFLA_AF_SPEC={0x1c, 0x1a, 0x0, 0x1, [@AF_INET6={0x18, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @private2}]}]}]}, 0x50}}, 0x0) (async) write$cgroup_int(r0, &(0x7f0000000100), 0x1001) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) getpid() (async) ioctl$sock_SIOCSPGRP(r2, 0x8902, &(0x7f0000000200)=r3) (async) ioctl$sock_FIOGETOWN(r2, 0x8903, &(0x7f0000002800)) (async) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000080)=0x2) (async) 4.8410265s ago: executing program 2 (id=261): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x20, 0x52, 0x1, 0x0, 0x0, {0xa}, [@typed={0xc, 0x1, 0x0, 0x0, @u64=0x7}]}, 0x20}}, 0x0) bind$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0xfff9, @any, 0x8, 0x2}, 0xe) 4.674011265s ago: executing program 2 (id=264): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000100)=0x3) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$EBT_SO_SET_COUNTERS(r1, 0x0, 0x81, &(0x7f0000000100)={'nat\x00', 0x0, 0x0, 0x0, [0x7, 0x0, 0xbe, 0x7, 0x9, 0x6], 0x1, 0x0, 0x0, [{}]}, 0x88) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCATTACH(r2, 0x4004743d, &(0x7f0000000040)=0x3) r3 = epoll_create1(0x0) r4 = socket$kcm(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r4, 0x89e2, &(0x7f0000000340)={r4}) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='netfs_rreq_ref\x00', r5, 0x0, 0x9}, 0x18) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r6}, 0x8) close(r7) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18080000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_GET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)={0x4, 0x0, 0x0, 0x70bd29, 0x25dfdbff, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xc1}, 0x4000004) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e3, &(0x7f0000000180)={r4, r8}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f00000004c0)) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000200)='ns/ipc\x00') r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f00000000c0)) close(r0) 4.50204312s ago: executing program 4 (id=267): sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="f800000016008502000000000000000020010000000000000000000000000002"], 0xf8}}, 0x0) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x30}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast2, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x29}, {0x0, 0x0, 0x7, 0x0, 0x0, 0x2, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0xffffffffffffffff}, 0x0, 0x100000}}, 0xb8}}, 0x4004) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x2, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) 3.815562797s ago: executing program 0 (id=268): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x4, 0xfa, &(0x7f00000007c0)=""/250, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) pselect6(0x40, &(0x7f0000000140)={0x5, 0x6, 0x8, 0x8, 0x0, 0x3, 0xb, 0x8}, &(0x7f0000000180)={0x100000001, 0x2, 0x7fff, 0x20000000022c, 0x5, 0x0, 0xa9e, 0x7}, &(0x7f00000001c0)={0x4, 0x9, 0x81, 0x9d, 0x3, 0x1, 0x1, 0xffff}, &(0x7f0000000200)={0x77359400}, &(0x7f00000004c0)={&(0x7f0000000240)={[0xc6]}, 0x8}) (async) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="2c0000001000010800000000000000000063bbcead5a12000000", @ANYRES32=0x0, @ANYBLOB="008000000000000004002b8008001b0000000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2e}}, 0x10) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe8000000000"], 0xfdef) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x1, 0x0, 0x0, &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001e80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) (async) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r2, 0x84, 0x23, &(0x7f00000000c0)={0x0, 0xe1}, 0x8) r3 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r3, &(0x7f0000000000), 0x10) sendmsg$can_bcm(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000380)=ANY=[@ANYBLOB="0500"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="000000080100000000000000d2038d840000000000000000"], 0x48}}, 0x0) (async) sendmsg$can_bcm(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x5, 0x3, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "9dfc47318ccc3455"}}, 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4c00000002060108000034e400000000000000020500010006000000050004000000fe000900020073797a3100000000050005000200000012000300686173683a6e65742c706f7274000000ff5b3b87675a"], 0x4c}}, 0x2) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000000)="6a0e6435f82b96e120e95ef657c67f3804ab3fd20f854380e05a23b6758439b1bcc2af4612a9ffbedef954ca796197b2ad54eb4aa5e40f7e0679b02c55444cd757567b124e1c78808a05eac11e93d4de3287", 0x52) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000090601080000000000000000050000000900020073797a310000000005000100070000002c000780060004404e21000005000700e30000000c00018008000140850101010c00028008000140"], 0x54}, 0x1, 0x0, 0x0, 0x10004893}, 0x80) (async) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000014c0)=@raw={'raw\x00', 0x8, 0x3, 0x528, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x458, 0xffffffff, 0xffffffff, 0x458, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00', {}, {}, 0x62}, 0x0, 0x358, 0x388, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'veth0_to_hsr\x00', {0x4, 0x8, 0x20, 0x5e1b2d47, 0xf91, 0x5, 0x4, 0x9f7, 0x18}, {0x8}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x588) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0xf00) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000000), r7) 3.815104972s ago: executing program 1 (id=269): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c000180080001400000000324"], 0x140}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_STATION(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[], 0x84}, 0x1, 0x0, 0x0, 0x8000}, 0x2400c010) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000022000103243d7002fddbdf2501000000"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000250000000e0001006e657464657673696d0000000f0002006e65746454c279166d30000008008b00", @ANYRES32=r4, @ANYBLOB], 0x3c}}, 0x4000084) sendmsg$DEVLINK_CMD_SB_GET(r5, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000400)={&(0x7f0000000300)=ANY=[], 0xd4}, 0x1, 0x0, 0x0, 0x1}, 0x20000804) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001340)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff4870000000000000200000000000e0ff95000000000000002ba7e1d30cb599e83f040000f300000000bd01212fb56f040026fbfefc41056bd8174b79ed317142fa9ea4158123751c5c652fbc1626cca2a2ad75806150ae0209e62f55ee988e6e06c8206ac6939fc404004900c788b277be1cb79b0a4dcf3ed410f6accd3641110bec4e90a634199e07f8f6eb9604000e011ea665c45a3449abe802f5ab3e89cf6cfdffffffb8580218ce740068720000074e8b1715807ea0ca469e468eea13c9a77e1c89c5082a703fd2f73902ebcfcf49822775985bf313405b367e81c700000040000000000200000000005335000000143ea7042ab40c7cb70cc8943a6d60d7c4900282e147d08e0af4b29df814f5691db43a5c00000004000000000089faff01210cce39bf405f1e846c12423a164a330100846f26ad03dd65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d6155102b1ced1e8019e63c850bf895abba14f6fbd7fb5e2a431ab914040000000000010092c9f4609646b6c5c29647d2f950a959cf9938d6dfcb8ed2cbdc2ba9d580609e31c3fa90812a533ce206e7e57a79d6fce424c2200af6c7784a1975fabc0c4dd418c005479ecab19bdfb15a32a4fd67ce446adb431d7e74853b7978639be2463308af07db79240acaf0910300000077d05d988d6efdffdf48dca02113a38300cabf2b5543ffc166955709009e000000000061622718551c20ec23812770d72c700a44e113d17088fdd00600000f7889b8d7044f56ff030000000000006cd4970400cac6f45a6922ded2e29514af463f740586903500090000000000000000be34b10f9d640dd782ac0cbc0abcf72846903243d0d0f4bc7fb0a0d7c5000032daaf281c450e64c33aac8ff7e7d1c94c4505a9839688b008c370494f6734b771546d9552d3bb2da0d000000000000000009125c97f0400f5e1671bc5eb7739daa7820a91cb0e732df2ae1d39c747e00a4fbfe8942fa859cd28bdaa1509309926c77fbcb15ec58b42b4bfaf5a6b649dd5f13cd776e6c7c4b5c4b0de20e0c81efb5e392a13cdd2ce219e6733b378553ead4c8cc530b62c36364e6505992209bdbc6203da7a3797246a6adef071102f0aa2c40095ddd05176f5cb8bd99e1ba0f9568f3e3876bba7bf973334e7919a080000000000000004fb996ad919f7e9672ce107000000ad882f2aead166c94500be902ee7dabc768eb9ec13f334aae90981ecaf5f744f22f2e45afe2c9e863fef0ad9d1ac32276cffe5f1fc21390797d0244cf1ce269d10525745caaa3f77d1b80116cb385a0242010000000100000091a0116f4693133138583da5e10b434697b0443b7b4ddfb3ace29e16e5a881336aad0974269a1025e2a9a135c0508af1aec2926627b43bba1229a7466bdca64f514b7911458da09fe8681916d408d753226a83ae2424ccd3fc508216aea86833030f569d61dc998620fcf4eeb92e7bc511df63c53b82514493b8f3c74f44ba184d40e87612024da1a1ebe316923865f037c01d71b5de81121046d84b18acb5cbea7eecad9b6dd46ed83515cd911e0e5f00019be25b5910a3193e90be231a05fd82e6003969c3f081ff1d0eb50a04d14644234828cbb5aaa0ece702abdd425fa25ae04a2315c89064df633700000000d9e5953ea67310993d01000000000000003ac753358791b1490273ca535e05b11d815237743a5b79ad45de2a3c91257f02c2f30f55136628090702f70000d0055b238f466e1442f8ec7a5b394228035039ceeb452dca75f9ff5332b4c4777a58a0aa9a821667c685492a1689ad4218cea744b332ab232a09cf1ec375627074ce2d3d7619936768a84a1465fff4610cf8838b28319e0f79533d87eedba55955434f132ab7b8840558b3f918d675a79907a72a8252cd3fbaea5d3006a03507838231a335ae759ed25534f2e90a7def4b3d4af7fd47ab1a701e4b7a7dfc1d12775ed0a31bc7b5855880aa767e68196c7aa5ac115724b6cb8fcebb67719eccd87b06b38566cf61ad2f307a79d2ce9801837bf0bd3af0271de700eef2795d28cb0017000000000000000000e052d93194121b774d21a0317d0346078400004652c769fd3d3e661a2fb511164f1502ab2ac4eb3f19c042163e0bdb88b82de384a8055e8b1e24294b0546cce481ff5618b7b9585dbb64d66debf219fa479abf22f3d64fe82e466ea6f278ea00cee8a2088359946e72f80bb1c9cfcde57b79625e2979fe689a5a246cbbdf6ad488f43f46b2536f175f46dfb27d5229"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x2, 0x0, @dev={0xfe, 0x80, '\x00', 0x43}}, 0x1c) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r9 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r9, 0x8b2c, &(0x7f0000000040)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r8, 0x18000000000002a0, 0x34, 0x62, &(0x7f0000000380)="b9e403c6630d698cb8a00b04339c", 0x0, 0x172, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000480)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106-gcm-aesni\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) r11 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r11, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x8edd8f8aa5555183}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000062010c000000800095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.959772864s ago: executing program 0 (id=271): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000000)={'gretap0\x00', &(0x7f0000000100)={'gretap0\x00', 0x0, 0x7, 0x791, 0x1, 0x60, {{0x20, 0x4, 0x3, 0x13, 0x80, 0x66, 0x0, 0x4, 0x4, 0x0, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@rr={0x7, 0x17, 0xcb, [@local, @multicast1, @remote, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @timestamp={0x44, 0xc, 0xcd, 0x0, 0x9, [0xb, 0x4]}, @cipso={0x86, 0x46, 0x3, [{0x1, 0x11, "6f4f63ffd12dbc8ef9f7c5fd7491e4"}, {0x7, 0xb, "2e4a9a678666133d32"}, {0x5, 0xa, "fc21f14f44634135"}, {0x6, 0x9, "5ae7562708f465"}, {0x6, 0x11, "7ca62af77edd9fc90e1b9802d89c05"}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@getnexthop={0x30, 0x76, 0x1, 0x0, 0x0, {0x3}, [@NHA_ID={0x8, 0x1, 0x2}, @NHA_OIF={0x8, 0x5, r1}, @NHA_ID={0x8, 0x1, 0x1}]}, 0x30}}, 0x0) 2.479605946s ago: executing program 0 (id=273): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="000100"/20], 0x30}, 0x1, 0x0, 0x0, 0x24004804}, 0x0) 2.263033959s ago: executing program 0 (id=275): r0 = socket(0x1e, 0x1, 0x0) listen(r0, 0xfff) shutdown(r0, 0x2) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1, 0x0, 0x35b}, 0xfffffffffffffe0f) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r3, &(0x7f00000016c0)=[{&(0x7f0000000780)="1d", 0x1}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) unshare(0x22020600) unshare(0x2a020400) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r4 = accept4(r2, 0x0, 0x0, 0x0) ioctl$int_in(r4, 0x5452, &(0x7f0000000000)=0x5) syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), r4) r5 = socket$kcm(0x2, 0x200000000000001, 0x0) setsockopt$sock_attach_bpf(r5, 0x1, 0x21, &(0x7f0000000240), 0x4) sendmsg$inet(r5, &(0x7f0000000000)={&(0x7f0000000140)={0x2, 0x4e30, @rand_addr=0x64010101}, 0x10, 0x0}, 0x20000000) sendmsg$kcm(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001140)=[{&(0x7f0000001040)=';', 0x1}], 0x1}, 0x0) 2.199352441s ago: executing program 3 (id=276): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x3c, 0x10, 0x1, 0x70bd27, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gre={{0x8}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_ENCAP_TYPE={0x6, 0xe, 0x2}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x3c}}, 0x0) r2 = socket(0x40000000002, 0x3, 0x80000000002) setsockopt$SO_BINDTODEVICE(r2, 0x1, 0x19, &(0x7f0000000240)='wg1\x00', 0x10) (async) sendto$unix(r2, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) (async) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000080)) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000040)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x10, 0x1, 0x4, 0x8, {{0x1a, 0x4, 0x0, 0x1, 0x68, 0x65, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@ssrr={0x89, 0x7, 0xe1, [@remote]}, @timestamp_prespec={0x44, 0x34, 0x7c, 0x3, 0x6, [{@remote, 0xffff}, {@dev={0xac, 0x14, 0x14, 0x10}, 0x6}, {@multicast2, 0x3}, {@remote, 0xffffff00}, {@empty, 0xd67}, {@rand_addr=0x64010101, 0x3}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x14, 0x49, 0x1, 0x5, [{@local, 0x3}, {@loopback, 0x3}]}, @end]}}}}}) r4 = socket(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=@deltfilter={0xb4c, 0x2d, 0x200, 0x70bd27, 0x25dfdbff, {0x0, 0x0, 0x0, r3, {0xb, 0x9}, {0x5, 0x4}, {0xd, 0xfff1}}, [@filter_kind_options=@f_matchall={{0xd}, {0xb18, 0x2, [@TCA_MATCHALL_CLASSID={0x8, 0x1, {0x10, 0xfff2}}, @TCA_MATCHALL_ACT={0xf8, 0x2, [@m_xt={0xf4, 0x4, 0x0, 0x0, {{0x7}, {0x54, 0x2, 0x0, 0x1, [@TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'security\x00'}, @TCA_IPT_TABLE={0x24, 0x1, 'filter\x00'}]}, {0x7a, 0x6, "19e97aac42dc9c082cfe41b9eb8ffe4ab501e6de0a39602a4b2b32d0063c333f3d8074261f4ad6f9e7dfb0243b77f082358e3bae483d8e1a2d40685d049d4725157e2f5c44a469739063e0436ab32bfc32c0f3b5f42740eeabc0ae0ea45a9cce9fd64798a0f866bab4cb99cacb1a42c2558afc62aef0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xe, 0x10}}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffff, 0x1}}, @TCA_MATCHALL_ACT={0x118, 0x2, [@m_skbedit={0x114, 0x1a, 0x0, 0x0, {{0xc}, {0x34, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x8}}, @TCA_SKBEDIT_MARK={0x8, 0x5, 0x40}, @TCA_SKBEDIT_MARK={0x8}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_PTYPE={0x6, 0x7, 0x4}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x6}]}, {0xb7, 0x6, "8924a00018ba4d227092e114740b8831f99f0a90f06b672b65f0d6bfd96a939ddcf88d1eabe17f8316a4bc62046a6f36a05888ea878cff0cfa3a18b110be63b899a8bea3b801245634cf79fabb262e2bac3149ff2493d3dddc36f6a1d5cf5bf2a96f5c57145af040e34eb377b82b661e43987a857cf2c8bb940910c6bda6b8da4ac135dbd9bf3e68d6f78f3fc46d733d748669afd74418dc14db6a2c90f0784bf1148ade56c7ab2419464bf5409c98bbc7ee45"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x1}}}}]}, @TCA_MATCHALL_ACT={0x184, 0x2, [@m_mpls={0xc0, 0x5, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_MPLS_TC={0x5, 0x6, 0x1}, @TCA_MPLS_TTL={0x5}, @TCA_MPLS_LABEL={0x8, 0x5, 0xb57d7}, @TCA_MPLS_TC={0x5, 0x6, 0x3}]}, {0x74, 0x6, "2e0dadc40ef423896a7e8004f853c16ccbee5fe840b761d80f567bf4f5a0a36e07d3eab3066c8b2a3cfdb6ac9a8fd4fd688c1843521a9115cff0b4b408e3a1a2aae9627567690bc7b55d4841dd7f63dc27ecf887b3d99453d4bb8889e5612d74238b34ecdf4ab0f43c7f5a35a02d40ab"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_xt={0xc0, 0x12, 0x0, 0x0, {{0x7}, {0x1c, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_HOOK={0x8, 0x2, 0x2}, @TCA_IPT_INDEX={0x8, 0x3, 0x5}]}, {0x80, 0x6, "66a339ea5a12549fa49f64cfda9f16f7fa795cdb4028ced4f024b915d24a9f477b067622aba14ef5300aa4db03af6bd62837ff7040123c2c999a0ead3bbd8128fa537a33f415e278030f50111d3b871f73d30561b5d31b896a7e926a6b122a746348f3dd062ec27d42e3660861459976ab6b2a0b92eeb522d0fed34b"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_MATCHALL_ACT={0x768, 0x2, [@m_tunnel_key={0xc4, 0x20, 0x0, 0x0, {{0xf}, {0x1c, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7d}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e20}, @TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e24}]}, {0x7b, 0x6, "678df7ab29f7c9349d4c5f49f0e73b6063f98b02feb2e2fa7b388e0fe936d4a57da65055745f9e4da3f8802a9b061f039f2a09397ac2720d2c436fdd7c573f637753300ae3df680dd70d4f267fa7d1bd75b85403390180153161c35f2926d2ce2146c4e89aeb71a63d97ca9db014cbe114987b7118a4a0"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2}}}}, @m_tunnel_key={0x100, 0x20, 0x0, 0x0, {{0xf}, {0xc, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_DST_PORT={0x6, 0x9, 0x4e21}]}, {0xc8, 0x6, "3865a4c27455ca0cd708f37fa045cf3dcaf59937a46a949a834030836c612123cd29524946076a74af4211d0061a7c29c6e35be75d0aabd77fa51b3a960be640270633d3a27609a99107dc0ca177f53a578edbbcb05b092fa2958c6c319da81314a7392818dfc7d5b3eef73a96d40f8b63cb71bfb907ab1a74e1a84c7e9854ecbcaaf63bc031dfd5207818c4defc22acd4ccf29a752652032d18f24d89bfefb4373d4b37ed6c41c065116421c5fad2eda21f74b3373b2806accebd274be3cfb84c40c1eb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2a00d620d380574c}}}}, @m_simple={0xec, 0x7, 0x0, 0x0, {{0xb}, {0x28, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x6, 0x9, 0x2, 0x80000000, 0x3ff}}, @TCA_DEF_DATA={0xc, 0x3, '}\xac(&},&\x00'}]}, {0x9b, 0x6, "317145264c352cf2f12678d8675f16a0714f86f3eff960f94fa3ee8549ec0e731936a4a7eb75f3fc2d2eca2aa71babf027974bbedaaf3cb261f3fa6aca0053e459f5edd121c31a889ab45b55e78b9d6b5632dac8227f7c4bfa7147a894835d69e3b1dc706c595999e9c875280384c0d3dd746a02021efd2d24e126ebd51e38a51e78ab9be6f843bf17f35f9cfd89e2d6d9f41a31dd8c7d"}, {0xc, 0x7, {0x1}}, {0xc}}}, @m_ct={0xa4, 0x1d, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6, 0x4, 0x5}, @TCA_CT_MARK={0x8}, @TCA_CT_MARK={0x8, 0x5, 0x10}, @TCA_CT_MARK_MASK={0x8, 0x6, 0x3b1}, @TCA_CT_NAT_IPV4_MIN={0x8, 0x9, @broadcast}, @TCA_CT_LABELS={0x14, 0x7, "e562aa57882a64bed9e84bf3fa1b9643"}]}, {0x3f, 0x6, "a4013b60dda2a5774ef3b0d32c4885711b84901a89289b235816dd47b35c2d17e4fd347f52a4185c50eb9afd0e247318dcabf971f74dfbf0acce10"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x2}}}}, @m_ct={0x160, 0xd, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_ZONE={0x6}, @TCA_CT_NAT_IPV6_MIN={0x14, 0xb, @dev={0xfe, 0x80, '\x00', 0x1a}}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_MARK={0x8, 0x5, 0x9}, @TCA_CT_MARK={0x8, 0x5, 0x65a5}, @TCA_CT_NAT_PORT_MIN={0x6, 0xd, 0x4e21}]}, {0xfa, 0x6, "95fe778967f979fe5f74db99d4e9e762285e4756ea4b6fd227fff656f2bb33d9337b9a2811c56eb62275594a9a5930a39b45df03e2910af24c222a85d07de258604def98ff470b5173c86a728a452b701f661d0d823307f73778e67a00f637f6bf85c4fbe858c797c6c127437d5dbc4a14f99a0af220d5817c8ec7ecf548e2e969cefe6d03f5fb572c36d314641d7c2813343d8c925041236927f894f3029a203ca6d338d0d786ffee7cc9882a68886482124323d5e8b0c3d04d307fded5f34ec654ba523f9d48c59a405f3fc96c13179041201207ca2d04e5fa58ff7548e42286b4fbddc5e7cd8cd5cc19b34e7c4445e712a771bf49"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_sample={0x14c, 0xb, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8, 0x5, 0x80000}, @TCA_SAMPLE_TRUNC_SIZE={0x8, 0x4, 0x7}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x800002, 0x7, 0x8, 0x6, 0x8}}]}, {0xf5, 0x6, "ed933c3d31b4e4b7e54a502dd47b3b2eb661b445170fcf002129e248c8c591cbedc49cc67f0689b9d53379c7523bdade340d73c8a4ab0c72ac1a4257272a17cfcc7956f62d5ab9311581c60e80b3bfbc39481472515a7dc86b62597296a7126e3057a765185df71a730de4125203acbd99f08ad63216c7a7cd82b0d182ed509fb1eeb860641160a2453ad137166803c35e511af7ed6cb66321b0ab75a8c6c708e71188cb9463042f11c05449c1d9dfb0a2887a8110cabc807008d5c9a07ba930d9be9154d3e135bba97b78a339254a5f29f746b8ea767cf19790820f7864d09d5513dd05a703d0d5dd5efc99f969329d57"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_connmark={0x164, 0x8, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x9, 0x2, 0xffffffff, 0x3}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3ff, 0x3, 0x8, 0x6, 0x1}, 0x9}}]}, {0xf9, 0x6, "afe5634fa98d6697332c3f002cb023b942b78a41cf9d18a657a3e2abacb392566eba77f9b46c561e9d1ff2ae5cbb3e97755a9eefb43f7b3801ebe46a3811d6de5cb5a4ad0fc9026ddb20e15f51935181f999eabdd2255cf1f4c55d6332d39a0ab1efe6aabdee41feeb2bfe2e9d987c761ae844e5b651b58b803bff11e6ef5c774a9705cbf39beb859932d9c4d334d89cee90ac79de3f504544c9850d17e08207412800dc72d24764997d72abeb89d458ebff57dc9dcd039a43e38522030da1decf7136ef50217af2e393816ff142350969d4c75319c7708b26ffc8c9fd7ce165a44af6e6a736087d2fe09dcbeb30ea09dc2c1638bb"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x1, 0x3}}}}]}]}}]}, 0xb4c}}, 0x0) r7 = socket(0x10, 0x2, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r9 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r9, 0x29, 0xb, &(0x7f0000000040)=0x9, 0x4) (async) bind$inet6(r9, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) recvmmsg(r9, &(0x7f0000002480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)=""/24, 0x18}, 0x7ff}], 0x1, 0x2, 0x0) (async) setsockopt$inet6_int(r9, 0x29, 0x46, 0x0, 0x0) (async) setsockopt$inet6_int(r9, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) (async) sendto$inet6(r9, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) (async) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x3, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_INTERVAL={0x8, 0x6, 0xfffffffd}]}}]}, 0x40}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000400}, 0xc, &(0x7f0000000080)={&(0x7f0000000100)=@dellink={0x64, 0x11, 0x4, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, 0x2, 0x20410}, [@IFLA_AF_SPEC={0x34, 0x1a, 0x0, 0x1, [@AF_INET={0x20, 0x2, 0x0, 0x1, {0x1c, 0x1, 0x0, 0x1, [{0x8, 0x6, 0x0, 0x0, 0x894a}, {0x8, 0x1, 0x0, 0x0, 0xffffffff}, {0x8, 0x11, 0x0, 0x0, 0x9}]}}, @AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_MPLS={0x4}]}, @IFLA_MASTER={0x8, 0xa, r6}, @IFLA_EVENT={0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x4008880}, 0x1) (async) r11 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r11, 0x8942, &(0x7f0000000640)={'tunl0\x00', 0x0}) (async) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0xffffff1f, 0xee020000, 0x2, {0x0, 0x0, 0x0, 0x0, 0x0, 0x35288}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_IPTUN_COLLECT_METADATA={0x4}, @IFLA_IPTUN_FWMARK={0x8, 0x14, 0x2}]}}}, @IFLA_MTU={0x8}]}, 0x48}}, 0x0) 1.878278604s ago: executing program 2 (id=277): r0 = socket$unix(0x1, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="0100"/11], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='contention_end\x00', r2}, 0x10) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$IP_VS_SO_GET_TIMEOUT(r3, 0x0, 0x486, &(0x7f0000000000), &(0x7f0000000040)=0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)=ANY=[@ANYBLOB="340000001500010086f700000000000002100000", @ANYRES32=r4, @ANYBLOB="1400030073797a5f74756e"], 0x34}, 0x1, 0x0, 0x0, 0x8010}, 0x0) r5 = socket$inet(0x2, 0x1, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) r8 = socket$can_j1939(0x1d, 0x2, 0x7) syz_genetlink_get_family_id$ethtool(&(0x7f0000000400), r1) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x4, 0x0, &(0x7f0000000000)) getpeername$packet(r9, &(0x7f0000000680)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000003c0)=0x14) sendmmsg(r9, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r10}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r5, 0x89f8, &(0x7f00000004c0)={'ip_vti0\x00', &(0x7f00000005c0)={'erspan0\x00', r7, 0x8000, 0x700, 0x4, 0x9, {{0xa, 0x4, 0x0, 0x3c, 0x28, 0x68, 0x0, 0x3, 0x2f, 0x0, @remote, @broadcast, {[@cipso={0x86, 0x14, 0xffffffffffffffff, [{0x2, 0xe, "63e4908e5238e9ac454cfff3"}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000580)={'syztnl0\x00', &(0x7f0000000500)={'syztnl2\x00', 0x0, 0x2f, 0x3, 0x7f, 0x3, 0x75, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @loopback, 0x700, 0x80, 0x7, 0x100}}) ioctl$SIOCGSTAMP(r5, 0x8906, &(0x7f00000007c0)) bind$can_j1939(r8, &(0x7f00000000c0)={0x1d, r7, 0x1, {0x3, 0xff}, 0x2}, 0x18) r11 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_IFINDEX(r11, 0x113, 0x2, &(0x7f0000000180), &(0x7f00000001c0)=0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) sendmsg$can_j1939(r8, &(0x7f0000000380)={&(0x7f0000000240)={0x1d, r12, 0x3, {0x2, 0x1, 0x2}, 0x2}, 0x18, &(0x7f0000000340)={&(0x7f0000000280)="48926b6fb749aa83ab06bdd73b2f53d6048eed45e6967e2c426c178bb6f23b463d170cd5b86ee53a29d8d496ce65b2a4f350a1bfadacca037ebbbccd493db989e8476c6bf434658034b175f018270523e8ab2717781fef7b37b6fff2dd7e817d33c5f02f098cbf2a4719a159f275da49de729f5c3710832bc6137b8e53c3e09646b1c3f64f14e49ae1691d29e6f198e5a965d642af637a9276756161d68241db26d4bfd098f988f32ea9c2", 0xab}, 0x1, 0x0, 0x0, 0x14000080}, 0x20000000) bind$can_j1939(r8, &(0x7f0000000040)={0x1d, r7, 0x3, {0x2, 0x1, 0x5}, 0xff}, 0x18) r13 = socket$inet_icmp(0x2, 0x2, 0x1) setsockopt$inet_opts(r13, 0x0, 0x4, &(0x7f0000000000)='\x00\x00\x00', 0x3) 1.718874396s ago: executing program 1 (id=278): setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[], 0x7c}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd50200000009"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32], 0x34}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff", @ANYBLOB="0000000000000000b705008500000000000000278b4260399b930da78025af0469d82e2e6ae0c9a6e6299751d24002606dc4264e6425d2699df53b2e1dbaa86e290b8c8788f14334ec156d48fe2907b609e7b1593b3c5769aef4ef2860dbd2df4d7735bf3b2c5e4cc71c2cba4aaa932d89dd46305f80e06362459aaf286bc2ad59ead55fd5dabec69693bd966247b4480115106600afb5972465072ebfcae091424fa01b9927ac92d20d2b86953d617cc84a13a9080889a012e024b8707c7c528ccc3cb5a4ea2a0eb578f50ac8803e8a04d8b33f5e9e77307fbf7b0a19", @ANYRES32], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}, {0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0x4d, 0x6e, &(0x7f0000000440)="15d4c1407a94870044be5992470874d1d7a41e1d097d8ce769e885209198ec130244a28a252cf6490b531ec29e021ada67f8b0f7b2a1b08a500375e79aacf5f2cf2ea9ca26ac74eff182dce987", &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x14, 0x0, &(0x7f0000000540)="a31b61a67eb50f6874312e2c7ac2f49727627a50", &(0x7f0000000580), 0x0, 0x0, 0x607}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.370435574s ago: executing program 1 (id=279): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$inet_int(r0, 0x0, 0x17, 0x0, &(0x7f00000000c0)) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c\x00'}, 0x58) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r2) 1.337086469s ago: executing program 3 (id=280): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_SERVICE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x28, r1, 0x400, 0x70bd2d, 0x25dfdbfe, {}, [@IPVS_CMD_ATTR_DEST={0x14, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_L_THRESH={0x8, 0x6, 0xc3b}, @IPVS_DEST_ATTR_WEIGHT={0x8, 0x4, 0x3}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x81}, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0xa, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x100, 0x0, 0x0, 0x0, 0x6}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7ff}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f00000001c0)='GPL\x00', 0x92, 0x7b, &(0x7f0000000200)=""/123, 0x40f00, 0x10, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000280)={0x2, 0xb, 0x5}, 0x10, 0x0, 0x0, 0x4, &(0x7f00000002c0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000300)=[{0x2, 0x5, 0xb, 0x6}, {0x3, 0x1, 0x8, 0x8}, {0x1, 0x1, 0x1, 0x3}, {0x5, 0x4, 0x8}], 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001680)={r2, 0x0, 0xe7, 0xe3, &(0x7f0000000400)="17cf15c5aac35c818e2c381aeb1c305f48f39571bfa310940fe4921a777896707358c1f9f35a6bf53cafc78bd756ad8df4bcfc391a47b59f30b0b3ba47261c48ff7e7710ff5c4c77edd78f6ce352519ee8a1633e12d00199096dd4ecbbc0ed3b59f6977cf9a17ae2be63c718b0a7e254971b47c01be9f73ab48536787925069532ce736190ddbfb34fb1191f20abd5d2161a82811d2f8c540cb48907ce1dc3d157107da910c87e89b2f8e5a331d6c91e0f24db3b1efe4f404d6cd044c0089061f919df59b82d4f85616692b4e76c73f4623bc69a791a3f0b03a0f74334481c876cd2dcd4bc500a", &(0x7f0000000500)=""/227, 0x101, 0x0, 0x6b, 0x1000, &(0x7f0000000600)="99921ef8e8b3163b90d8849fd056edf5c64af1b2e1f4c2b262c01d17b1fe5f184363b5409f5328f205d7ba8ac073a487b0211b3d086e0ecad7d57a8dc0dc7ce407065437def53751644718f18345a6b0b139c335562ff7e4457a60b964e5a91383b838adeec4da1bdfd4e9", &(0x7f0000000680)="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", 0x18cd33e0c47ab46, 0x0, 0x7}, 0x50) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000017c0)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000001780)={&(0x7f0000001740)={0x2c, 0x0, 0x102, 0x70bd25, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_MESH_PEER_AID={0x6, 0xed, 0x457}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x2}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000010}, 0x4004000) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000001800), 0x8) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000001880), r0) sendmsg$BATADV_CMD_GET_HARDIF(r3, &(0x7f0000001940)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000001900)={&(0x7f00000018c0)={0x24, r4, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x40) sendmsg$BATADV_CMD_GET_VLAN(r0, &(0x7f0000001a40)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000001a00)={&(0x7f00000019c0)={0x3c, r4, 0x20, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x8001}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x1e02c395}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x3c}, 0x1, 0x0, 0x0, 0x840}, 0x64001800) recvmsg$unix(r3, &(0x7f0000003140)={&(0x7f0000001a80), 0x6e, &(0x7f0000002f00)=[{&(0x7f0000001b00)=""/235, 0xeb}, {&(0x7f0000001c00)}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/31, 0x1f}, {&(0x7f0000002c80)=""/83, 0x53}, {&(0x7f0000002d00)=""/58, 0x3a}, {&(0x7f0000002d40)=""/75, 0x4b}, {&(0x7f0000002dc0)=""/33, 0x21}, {&(0x7f0000002e00)=""/245, 0xf5}], 0x9, &(0x7f0000002fc0)=[@rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x148}, 0x102) syz_genetlink_get_family_id$nl80211(&(0x7f0000003180), 0xffffffffffffffff) sendmsg$RDMA_NLDEV_CMD_RES_GET(r10, &(0x7f0000003280)={&(0x7f00000031c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000003240)={&(0x7f0000003200)={0x20, 0x1409, 0x400, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x10) r15 = socket(0xfd00e40d640e0c96, 0x6, 0x9413) sendmsg$TIPC_CMD_SET_LINK_PRI(r15, &(0x7f00000033c0)={&(0x7f00000032c0), 0xc, &(0x7f0000003380)={&(0x7f0000003300)={0x68, 0x0, 0x200, 0x70bd25, 0x25dfdbff, {{}, {}, {0x4c, 0x18, {0x80000000, @link='syz0\x00'}}}, ["", "", "", "", "", ""]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) r16 = openat$cgroup_ro(r12, &(0x7f0000003400)='blkio.bfq.idle_time\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r11, 0x8933, &(0x7f00000036c0)={'batadv0\x00', 0x0}) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000003780)={0x7, 0x0}, 0x8) r19 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f00000037c0), 0x4) r20 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000003800)={0xffffffffffffffff, 0x7, 0x18}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000003900)={0xe, 0x22, &(0x7f0000003440)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xfff}, {{0x18, 0x1, 0x1, 0x0, r13}}, {}, [@map_idx={0x18, 0x7, 0x5, 0x0, 0x7}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @alu={0x7, 0x1, 0xb, 0x1, 0x8, 0x80, 0xfffffffffffffff0}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffff8}, @exit, @exit, @tail_call={{0x18, 0x2, 0x1, 0x0, r16}}, @ldst={0x3, 0x0, 0x1, 0x5, 0x6}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000003580)='GPL\x00', 0x1, 0xde, &(0x7f00000035c0)=""/222, 0x41100, 0x9, '\x00', r17, @sk_skb=0x26, r14, 0x8, &(0x7f0000003700)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000003740)={0x0, 0x2, 0x240000, 0x4}, 0x10, r18, r19, 0x6, &(0x7f0000003840)=[r20, r8, r7, r13, r6, r5], &(0x7f0000003880)=[{0x4, 0x5, 0xb, 0x8}, {0x5, 0x1, 0x2, 0x2}, {0x5, 0x5, 0x1, 0xb}, {0x2, 0x1, 0x9, 0x7}, {0x1, 0x5, 0x9, 0x8}, {0x1, 0x5, 0x1}], 0x10, 0x7, @void, @value}, 0x94) getsockopt$inet_pktinfo(r9, 0x0, 0x8, &(0x7f00000039c0)={0x0, @rand_addr, @empty}, &(0x7f0000003a00)=0xc) connect$bt_l2cap(r9, &(0x7f0000003a40)={0x1f, 0x6, @none, 0x8, 0x2}, 0xe) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r11, 0x84, 0x1f, &(0x7f0000003a80)={0x0, @in6={{0xa, 0x4e23, 0x7, @mcast2, 0x6}}, 0x5, 0xd}, &(0x7f0000003b40)=0x90) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r7, 0x84, 0x7b, &(0x7f0000003b80)={r21, 0x297f32}, &(0x7f0000003bc0)=0x8) getsockname$tipc(r8, &(0x7f0000003c00)=@name, &(0x7f0000003c40)=0x10) writev(r13, &(0x7f0000003f80)=[{&(0x7f0000003c80)="ead7ee5ed7a4ae09436beb22fbbf234d8459cffe589d2f0c6db6ee23941746bd30cc69bcf9e31571efa02ad15d65c41bdf0c25275d7c47c72fa9aea6e7fa459dacb8994f583e993cadb8449a193cbf01eb4fe1ba1ed5fe66c1eb93a28f40f1481194e1aeadd5d123b786507606e05bbf81553794b8a71619655cd1bcad5a54a97144d1f6f4b882d05f483fe3164fa79fde9934e89989ff35e66010", 0x9b}, {&(0x7f0000003d40)="2fef1f5db0d445642e212bb5de734e2ebf8d09ed5cad9399d359f0ff6b4267ddab6c977c29fa05bafed0ed92ae562c55c6f58dfd5d20427b9a438303b844616b1c90bef9ba6f6a94373411c5ee7d037fdcdde94a7789117fc544404b8ffbe62333c8e008a6d8afe183041aaa7582ade0230095ff167fc510fbfab754b9635becdb7d4908b706d147", 0x88}, {&(0x7f0000003e00)="52174e5dc5677be56ecf4a2c7bba27c85e1cf5d28544db77293bc2483e95ed5ee6aa9332bd375689fd4923be0d1a26276a117ffb5a744beee84696cb7ec4276dcd14659c3cf727eba1dd44557c7ad2fb103efb4870628f1824de23ca19722476ffbe0b7a1c2fbca46267", 0x6a}, {&(0x7f0000003e80)="876d95f749886b0a3f4399ccce23c8f87dd89228dbc11f11d9e5419fce07aac56fb582b0b9bac32b3968b8dd7493f7201a79c0b8f596d792248ca49fef9bd2db219cd508", 0x44}, {&(0x7f0000003f00)="0ac8ec753d8da8d5deed954ffc7f23312a971c7933acd8be9f0a92a024883c07d35a0e401c58e09b57e98342965780a38d3822e58ca73dbc476edfbe527da385b68ae3231287b4035f8d4b628f721d2b0b68fc8a9c967f502283d4504d", 0x5d}], 0x5) setsockopt$SO_RDS_MSG_RXPATH_LATENCY(r12, 0x114, 0xa, &(0x7f0000004000)={0x1, "b9"}, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000004040)) socket$inet_icmp(0x2, 0x2, 0x1) 1.242981424s ago: executing program 0 (id=281): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$can_bcm(0x1d, 0x2, 0x2) sendmsg$can_bcm(r1, 0x0, 0x0) sendmsg$can_bcm(r1, 0x0, 0x8800) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) connect$can_bcm(r2, &(0x7f0000000300)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000480)=ANY=[@ANYBLOB="05"], 0x48}}, 0x0) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="0500"/12, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) write(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r6, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)=ANY=[@ANYBLOB="ac000000", @ANYBLOB="01060000000000000000090000002c0004801300010062726f6164636173742d6c696e6b0000140007800800"], 0xac}}, 0x0) sendmsg$TIPC_NL_NET_SET(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x400c804}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000004c00)=@newtfilter={0x24, 0x11, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x74, r7}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f00000001c0)=0xf3, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)={{0x14}, [@NFT_MSG_NEWSETELEM={0x3c, 0x1e, 0xa, 0x105, 0x0, 0x0, {0x7, 0x0, 0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x40000) 1.151713604s ago: executing program 2 (id=282): r0 = accept$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @null}, [@null, @remote, @remote, @netrom, @netrom, @bcast]}, &(0x7f0000000080)=0x48) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r2, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x58, r3, 0x8, 0x70bd2c, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x4}]}, @MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x14}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @mcast1}]}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x400}, @MPTCP_PM_ATTR_LOC_ID={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004c}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x2c, r4, 0x100, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0xfffff000, 0x66}}}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20008000}, 0x1) syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r2) r5 = openat$cgroup_ro(r2, &(0x7f0000000440)='memory.events.local\x00', 0x0, 0x0) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f00000004c0), r2) sendmsg$TIPC_NL_LINK_GET(r5, &(0x7f0000000600)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f0000000500)={0x8c, r6, 0x200, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_PUBL={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xf}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA={0x4}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x401}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}, @TIPC_NLA_NET_NODEID={0xc}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x20044080}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000680)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r5, &(0x7f0000000800)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0xddef0b01cdf782f9}, 0xc, &(0x7f00000007c0)={&(0x7f00000006c0)={0xc8, r4, 0x800, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x39}}}}, [@NL80211_ATTR_CQM={0x44, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x60}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xfff}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0xaa73}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x21}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x7}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x4f}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x2}]}, @NL80211_ATTR_CQM={0x24, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x54cbdd89}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x3b}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x9d98}]}, @NL80211_ATTR_CQM={0x2c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_RSSI_HYST={0x8}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x6b0}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x3}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x8}]}, @NL80211_ATTR_CQM={0xc, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x5}]}]}, 0xc8}}, 0x44000) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000840)={r5, r5, 0x4, r5}, 0x10) sendmsg$NL80211_CMD_DEL_PMK(r2, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x68, r4, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x3, 0x5f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}}, 0x8041) getsockopt$inet_mreqn(r5, 0x0, 0x24, &(0x7f0000000a00)={@empty, @multicast2, 0x0}, &(0x7f0000000a40)=0xc) sendmsg$nl_route(r2, &(0x7f0000000b40)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)=@bridge_dellink={0x44, 0x11, 0x400, 0x70bd29, 0x25dfdbff, {0x7, 0x0, 0x0, r8, 0x400, 0x2a8}, [@IFLA_CARRIER_CHANGES={0x8, 0x23, 0x7ff}, @IFLA_ADDRESS={0xa}, @IFLA_LINK={0x8}, @IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x1}]}, 0x44}, 0x1, 0x0, 0x0, 0x4080}, 0x41) sendmsg$NL80211_CMD_DEL_INTERFACE(r5, &(0x7f0000000c40)={&(0x7f0000000b80), 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x28, r4, 0x400, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r1}, @val={0xc, 0x99, {0x7, 0x7b}}}}, ["", ""]}, 0x28}}, 0x20008000) syz_genetlink_get_family_id$smc(&(0x7f0000000c80), r2) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, &(0x7f0000000d00)={r5}) syz_genetlink_get_family_id$smc(&(0x7f0000000cc0), r9) sendmsg$NL80211_CMD_STOP_NAN(r9, &(0x7f0000000e00)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x820}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x20, r4, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x9, 0x7e}}}}, [""]}, 0x20}, 0x1, 0x0, 0x0, 0x20044880}, 0x880) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001040)={'erspan0\x00', &(0x7f0000000f80)={'syztnl2\x00', r8, 0x20, 0x7800, 0x9, 0xf, {{0x1e, 0x4, 0x3, 0x6, 0x78, 0x67, 0x0, 0x1, 0x29, 0x0, @empty, @dev={0xac, 0x14, 0x14, 0x39}, {[@timestamp_addr={0x44, 0x4c, 0x5e, 0x1, 0x4, [{@private=0xa010100, 0xfffffe00}, {@multicast2, 0x6}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@multicast2, 0x101}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x6}, {@multicast2, 0x9}, {@multicast2, 0x7}, {@remote, 0x1}, {@loopback, 0x8}]}, @ra={0x94, 0x4, 0x1}, @lsrr={0x83, 0x13, 0xf5, [@loopback, @empty, @multicast2, @rand_addr=0x64010100]}]}}}}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001180)={{r5, 0xffffffffffffffff}, &(0x7f0000001100), &(0x7f0000001140)='%pi6 \x00'}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x0, &(0x7f0000000e40), &(0x7f0000000e80)='syzkaller\x00', 0x6, 0x86, &(0x7f0000000ec0)=""/134, 0x41100, 0x50, '\x00', r10, 0x0, r5, 0x8, &(0x7f0000001080)={0x9, 0x1}, 0x8, 0x10, &(0x7f00000010c0)={0x5, 0xd, 0xad0c, 0x8}, 0x10, 0x0, 0x0, 0x5, &(0x7f00000011c0)=[r11, r5], &(0x7f0000001200)=[{0x3, 0x3, 0x3, 0x6}, {0x2, 0x2, 0x1, 0x4}, {0x1, 0x4, 0x10, 0x9}, {0x4, 0x2, 0x8, 0x3}, {0x3, 0x1, 0xe, 0x5}], 0x10, 0xfffffffa, @void, @value}, 0x94) sendto$inet(r2, &(0x7f0000001340)="d58b666d7730f802b38afb9a4e7b813216dc4946f39e516f29c5dce551f0c8a73f82f354f161d4c5ef117ecb154728559173df09559da7b07c13c6f8e8d15ec13b346ea29d5cbe7b982705e8e65a7c824302c6de17c84842f00bbe1254909d37df68043f31cfcb2bb8fc8cfd0fed2aafa447384f", 0x74, 0x4004004, &(0x7f00000013c0)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000001400), r5) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001480)={0x0, r2, 0x0, 0xd, &(0x7f0000001440)='](%)/-/!$+#:\x00'}, 0x30) setsockopt$packet_rx_ring(r5, 0x107, 0x5, &(0x7f00000014c0)=@req={0x8, 0x3, 0xd, 0x2}, 0x10) unshare(0x40000) 1.082112694s ago: executing program 3 (id=283): r0 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000080)) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000340), 0x4) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x300040d5) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f0000000240)=0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) socket$inet(0x2, 0x80001, 0x84) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, 0x0, &(0x7f0000000080)) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x39}}]}, &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) socket$kcm(0x2, 0x200000000000001, 0x106) (async) setsockopt$sock_attach_bpf(r3, 0x1, 0x7, &(0x7f0000000340), 0x4) (async) sendmsg$inet(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa7}, 0x300040d5) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) (async) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) (async) close(r5) (async) getsockopt$PNPIPE_IFINDEX(r5, 0x113, 0x2, &(0x7f0000000180), &(0x7f0000000240)=0x4) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a00000700000061114c000000000085000000cf00000095"], &(0x7f0000000000)='GPL\x00', 0x6, 0x0, 0x0, 0x41000, 0x0, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) (async) 1.011163088s ago: executing program 1 (id=284): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000300)={r0, &(0x7f0000000280), 0x0}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x9c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x70, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x48ab0a1a1870d04a}]}}}, {0x38, 0x1, 0x0, 0x1, @match={{0xa}, @val={0x28, 0x2, 0x0, 0x1, [@NFTA_MATCH_INFO={0x10, 0x3, "bdf2713eae896bf08a6c6791"}, @NFTA_MATCH_NAME={0x9, 0x1, 'mark\x00'}, @NFTA_MATCH_REV={0x8, 0x2, 0x1, 0x0, 0x1}]}}}, {0x14, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xc4}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_TX_TS(r2, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x5d4a30f14e1b43c6}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_TSID={0x5}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_TSID={0x5, 0xd2, 0x1}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x50}, 0x1, 0x0, 0x0, 0x20010000}, 0x0) 961.401271ms ago: executing program 2 (id=285): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f00000009c0)=ANY=[@ANYBLOB="180000000000000000000000fcffffff850000007b00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x8, [@func={0x4, 0x0, 0x0, 0xc, 0x4}, @restrict, @func_proto, @func_proto]}, {0x0, [0x0, 0x0, 0x0, 0x2e, 0x3a6f5491e0ad3b4f, 0x5f]}}, 0x0, 0x50, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000100)=r3, 0x4) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b904021d080303000000e8fe03a1180015000600142603600e1208000f0000810401a80016040400014003000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) 839.323865ms ago: executing program 0 (id=286): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x40020000) r0 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_INFO(r0, 0x0, 0x40, &(0x7f0000000180)={'raw\x00', 0x0, [0x4000000, 0x8, 0x9f, 0xff, 0x10001]}, &(0x7f0000000200)=0x54) r1 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x10, 0x10, 0x8, [@var={0xe, 0x0, 0x0, 0xe, 0x1}]}, {0x0, [0x2e, 0x0, 0x30, 0x2e, 0x30, 0x5f]}}, &(0x7f0000000300)=""/121, 0x30, 0x79, 0x0, 0xfffffff8, 0x0, @void, @value}, 0x28) r5 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r5, 0x1000) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000700)={'hsr0\x00'}) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000740)={0x0}, &(0x7f0000000780)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f00000007c0)={r6, @in={{0x2, 0x4e20, @broadcast}}, 0x2, 0x4, 0x3, 0xd543, 0x72, 0x85, 0x6}, 0x9c) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000440)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x8bc, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x4, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000500)=@generic={&(0x7f00000004c0)='./file0\x00', 0x0, 0x10}, 0x18) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x1ff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x10, &(0x7f00000000c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xfffffffd}, [@exit, @printk={@s, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x8}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r2}}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x28, &(0x7f0000000180)=""/40, 0x40f00, 0x0, '\x00', r3, 0x0, r4, 0x8, &(0x7f00000003c0)={0x1, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x0, 0x6, 0x2, 0x761a8000}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r5, r7, r8, r9, r10], 0x0, 0x10, 0x10000, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000016c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b, 0x842}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @loopback={0xe0}}]}}}]}, 0x48}}, 0x0) 789.941412ms ago: executing program 3 (id=287): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@newtaction={0x2e8, 0x30, 0x300, 0x71bd2d, 0x25dfdbff, {}, [{0x2d4, 0x1, [@m_gact={0x2a0, 0x110, 0x0, 0x0, {{0x9}, {0x4}, {0x271, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_sample={0x30, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc, 0x7, {0x1}}, {0xc}}}]}]}, 0x2e8}}, 0x20000800) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000900)={0x34, r1, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x20, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2a09}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8}]}]}]}, 0x34}}, 0x0) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async, rerun: 32) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'\x00', 0x5}) (async, rerun: 32) r5 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000540)={0x0, @broadcast}, &(0x7f0000000580)=0xc) sendmsg$nl_route(r5, &(0x7f0000000780)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000005c0)={&(0x7f00000006c0)=@ipv6_deladdrlabel={0x68, 0x49, 0x400, 0x70bd2a, 0x25dfdbfd, {0xa, 0x0, 0x38, 0x0, r6, 0x1}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x7}, @IFAL_ADDRESS={0x14, 0x1, @mcast1}, @IFAL_ADDRESS={0x14, 0x1, @empty}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000004}, 0x40040000) (async, rerun: 32) ioctl$TUNSETPERSIST(r2, 0x400454c9, 0x1) (rerun: 32) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@func_proto={0x0, 0x0, 0x0, 0xd, 0x2}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3}}, @typedef={0x4, 0x0, 0x0, 0x8, 0x3}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) ioctl$TUNSETLINK(r4, 0x400454cd, 0x308) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f00000000c0)=@req={0x8000, 0xb4f, 0x300, 0x1daf6}, 0x10) setsockopt$packet_rx_ring(r7, 0x107, 0x5, &(0x7f0000000040)=@req3, 0x1c) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001003b"], 0x1c}, 0x1, 0x0, 0x0, 0x4800}, 0x0) (async, rerun: 64) r9 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r10 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r10, 0x10e, 0xc, &(0x7f00000000c0)={0x9}, 0x10) (async) sendmsg$nl_route_sched(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@gettaction={0x1c, 0x5a, 0xc6b747b6bf1c6b95, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}]}, 0x1c}}, 0x0) (async, rerun: 64) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000880)={0x6c, r3, 0x8, 0x70bd25, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0xffff}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x7, 0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}]}]}, 0x6c}}, 0x0) (async, rerun: 64) r11 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[@ANYBLOB="563f00001900599c6d0e00009bd028ef8020ab0700040105"], 0xfe33) r12 = socket(0x10, 0x803, 0x0) sendto(r12, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r12, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x2c}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 682.913623ms ago: executing program 1 (id=288): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6tnl0\x00', &(0x7f0000000080)={'ip6tnl0\x00', 0x0, 0x4, 0x3, 0xb, 0x9, 0x52, @mcast2, @mcast1, 0x80, 0x8, 0x80000000, 0x7}}) r2 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000440)=0xc) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_pktinfo(r4, 0x0, 0x8, &(0x7f0000000400)={0x0, @multicast2, @multicast1}, &(0x7f00000004c0)=0xc) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=@ipv4_newrule={0x40, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IIFNAME={0x14, 0x3, 'vlan0\x00'}, @FRA_SRC={0x8, 0x2, @multicast1}, @FRA_FLOW={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newsa={0x204, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in6=@private2, 0x0, 0x0, 0x4e21, 0x2, 0xa, 0x0, 0x0, 0x3b, 0x0, 0xee00}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x401, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x0, 0x3500, 0x2, 0x4}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x60, "217d66d38547aa140db8a200000000c538c7cb7a"}}, @XFRMA_IF_ID={0x8, 0x1f, 0x3}, @policy={0xac, 0x7, {{@in6=@empty, @in=@local, 0x4e21, 0x8, 0x4e22, 0xd83, 0xa, 0x20, 0x0, 0x3b, r1, r3}, {0x6, 0x7, 0x4, 0xffffffffffff7ec5, 0x7, 0xebb, 0x5, 0x5}, {0x5, 0x8000, 0x3, 0xab4}, 0xe31, 0x6e6bbd, 0x0, 0x1, 0x0, 0x3}}]}, 0x204}, 0x1, 0x0, 0x0, 0x880}, 0x0) 585.235553ms ago: executing program 2 (id=289): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_MASTER={0x8, 0xa, r1}]}, 0x44}}, 0x0) unshare(0x2000000) r3 = accept4(r2, 0x0, &(0x7f0000000000), 0x80000) socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e20, @multicast1}, 0x2, 0x1, 0x3, 0x7}}, 0x26) socket$inet6_udplite(0xa, 0x2, 0x88) r6 = socket$inet_udplite(0x2, 0x2, 0x88) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_HASH_MODULUS={0x8, 0x4, 0x1, 0x0, 0x800}, @NFTA_HASH_LEN={0x8, 0x3, 0x1, 0x0, 0xba}, @NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_HASH_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000}, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000000c0)={'tunl0\x00', 0x0}) r9 = socket$netlink(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) read(r10, &(0x7f00000001c0)=""/64, 0x40) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={0x48, 0x2, 0x6, 0x3, 0x0, 0x0, {0x5}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0xfffffffe}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000050) sendmsg$IPSET_CMD_SAVE(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)={0x1c, 0x8, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r11 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r11, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x40}}, 0x0) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) 515.088807ms ago: executing program 3 (id=290): r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0xfef2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c200000000009500001200000000b609c5d8cc5a475dd466048a2af0057092bcc1631cb63d7cdb"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000003c0)={r1, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x9, &(0x7f0000000100)=0x4010, 0x4) close(0x3) 40.785416ms ago: executing program 3 (id=291): setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=ANY=[], 0x7c}}, 0x0) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[], 0x48}}, 0x40000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd50200000009"], 0x7c}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32], 0x34}}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x3000000, 0x0, 0x800}, 0x8080) r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_tracing={0x1a, 0x29, &(0x7f0000000700)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000000600000083000000bf0000000000000055090100000000009500000000000000b7080000000000007b8af8ff000080fbb70800000b000010000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ff", @ANYBLOB="0000000000000000b705008500000000000000278b4260399b930da78025af0469d82e2e6ae0c9a6e6299751d24002606dc4264e6425d2699df53b2e1dbaa86e290b8c8788f14334ec156d48fe2907b609e7b1593b3c5769aef4ef2860dbd2df4d7735bf3b2c5e4cc71c2cba4aaa932d89dd46305f80e06362459aaf286bc2ad59ead55fd5dabec69693bd966247b4480115106600afb5972465072ebfcae091424fa01b9927ac92d20d2b86953d617cc84a13a9080889a012e024b8707c7c528ccc3cb5a4ea2a0eb578f50ac8803e8a04d8b33f5e9e77307fbf7b0a19", @ANYRES32], 0x0, 0xe, 0x3b, &(0x7f0000000080)=""/59, 0x40f00, 0x1, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x169a0, 0xffffffffffffffff, 0x2, &(0x7f0000000300)=[0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x1], &(0x7f0000000340)=[{0x0, 0x4, 0x4, 0x6}, {0x10000002, 0x2, 0x0, 0x3}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r0, 0x0, 0x4d, 0x6e, &(0x7f0000000440)="15d4c1407a94870044be5992470874d1d7a41e1d097d8ce769e885209198ec130244a28a252cf6490b531ec29e021ada67f8b0f7b2a1b08a500375e79aacf5f2cf2ea9ca26ac74eff182dce987", &(0x7f00000004c0)=""/110, 0x9, 0x0, 0x14, 0x0, &(0x7f0000000540)="a31b61a67eb50f6874312e2c7ac2f49727627a50", &(0x7f0000000580), 0x0, 0x0, 0x607}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {0x0}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 1 (id=292): r0 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}, 0x20000}}, {{0xa, 0x0, 0x40000, @dev={0xfe, 0x80, '\x00', 0x26}}}}, 0x108) setsockopt$inet6_group_source_req(r0, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @loopback}}}, 0x108) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x4, 0x2, 0x0, 0x1, 0x4, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={r1, 0x58, &(0x7f0000000280)={0x0, 0x0}}, 0x10) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000e00)={r2}, 0xc) close(r3) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, 0x0) connect$inet(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000001d40)={0x0, 0x0, 0x0}, 0x44040) r4 = socket$vsock_stream(0x28, 0x1, 0x0) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r5, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) setsockopt$sock_linger(r5, 0x1, 0xd, &(0x7f0000000100)={0x1, 0x80000001}, 0x8) connect$inet(r5, &(0x7f0000000480)={0x2, 0x4e24, @local}, 0x10) close(r5) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x3c, 0x3, 0x6, 0x200, 0x0, 0x0, {0x7, 0x0, 0x1}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4}, 0x14) getsockopt(r4, 0x28, 0x2, &(0x7f00000012c0)=""/4096, &(0x7f0000000080)=0x1000) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) r6 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r6, 0x29, 0x2e, 0x0, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000500)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x38, 0x7, 0x6, 0x101, 0x0, 0x0, {0x3}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_FLAGS={0x8}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5d}]}, 0x38}, 0x1, 0x0, 0x0, 0x60000000}, 0x4) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001d40)=[{&(0x7f0000000100)=ANY=[@ANYBLOB="2c00000010008100000000000080000000000000", @ANYRES32=0x0, @ANYBLOB="0a043cbf", @ANYRES32, @ANYBLOB="0a001b"], 0x2c}], 0x1}, 0x0) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000580), r0) sendmsg$TIPC_CMD_SET_LINK_TOL(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x4012208}, 0xc, &(0x7f0000000600)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="10082dbd7000fedbd888f66aac7e5db14958d34fdf25010000000000000007410000001c0018020000006574683a76657468"], 0x38}, 0x1, 0x0, 0x0, 0x40000}, 0x4004800) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newqdisc={0x54, 0x10, 0x1, 0x0, 0x10000000, {0x0, 0x0, 0x0, 0x0, {0x1}, {}, {0xe}}, [@TCA_INGRESS_BLOCK={0x8}, @TCA_STAB={0x28, 0x8, 0x0, 0x1, [{{0x1c, 0x1a, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.91' (ED25519) to the list of known hosts. [ 69.331009][ T5822] cgroup: Unknown subsys name 'net' [ 69.526028][ T5822] cgroup: Unknown subsys name 'cpuset' [ 69.534442][ T5822] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 70.943852][ T5822] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.375989][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.382375][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 75.025384][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 75.033399][ T5845] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.034272][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 75.041386][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.049083][ T5850] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 75.061199][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 75.070276][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 75.077380][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 75.085864][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 75.093742][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 75.102020][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.109532][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 75.120836][ T5853] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.127460][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 75.129483][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.143498][ T5853] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 75.143644][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 75.150840][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.164821][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.165710][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.179903][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.180608][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.196582][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.204295][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.213056][ T5853] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.673721][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 75.767374][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 75.971697][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 75.996733][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.004583][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.011889][ T5833] bridge_slave_0: entered allmulticast mode [ 76.019236][ T5833] bridge_slave_0: entered promiscuous mode [ 76.027309][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.034665][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.041778][ T5832] bridge_slave_0: entered allmulticast mode [ 76.048800][ T5832] bridge_slave_0: entered promiscuous mode [ 76.070876][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 76.083999][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.091169][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.098373][ T5833] bridge_slave_1: entered allmulticast mode [ 76.105413][ T5833] bridge_slave_1: entered promiscuous mode [ 76.126890][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.134086][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.141178][ T5832] bridge_slave_1: entered allmulticast mode [ 76.148962][ T5832] bridge_slave_1: entered promiscuous mode [ 76.251231][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.264686][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.320603][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.371006][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.380559][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 76.425101][ T5833] team0: Port device team_slave_0 added [ 76.470830][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.478254][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.485976][ T5839] bridge_slave_0: entered allmulticast mode [ 76.493601][ T5839] bridge_slave_0: entered promiscuous mode [ 76.503378][ T5833] team0: Port device team_slave_1 added [ 76.509426][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.516631][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.524084][ T5839] bridge_slave_1: entered allmulticast mode [ 76.531024][ T5839] bridge_slave_1: entered promiscuous mode [ 76.608454][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.616243][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.623493][ T5835] bridge_slave_0: entered allmulticast mode [ 76.630428][ T5835] bridge_slave_0: entered promiscuous mode [ 76.641335][ T5832] team0: Port device team_slave_0 added [ 76.680836][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.688100][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.695480][ T5835] bridge_slave_1: entered allmulticast mode [ 76.702600][ T5835] bridge_slave_1: entered promiscuous mode [ 76.711273][ T5832] team0: Port device team_slave_1 added [ 76.725237][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.732470][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.759300][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.773804][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.821228][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.828336][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.854588][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.868173][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.940490][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.950359][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.957981][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.984169][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.996947][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.004018][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.029962][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.041157][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.048418][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.055902][ T5846] bridge_slave_0: entered allmulticast mode [ 77.062936][ T5846] bridge_slave_0: entered promiscuous mode [ 77.070765][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.077962][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.085149][ T5846] bridge_slave_1: entered allmulticast mode [ 77.093717][ T5846] bridge_slave_1: entered promiscuous mode [ 77.114130][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.132939][ T5838] Bluetooth: hci0: command tx timeout [ 77.188894][ T5839] team0: Port device team_slave_0 added [ 77.197550][ T5839] team0: Port device team_slave_1 added [ 77.219162][ T5835] team0: Port device team_slave_0 added [ 77.230503][ T5833] hsr_slave_0: entered promiscuous mode [ 77.237616][ T5833] hsr_slave_1: entered promiscuous mode [ 77.270188][ T5835] team0: Port device team_slave_1 added [ 77.279689][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.292413][ T5838] Bluetooth: hci1: command tx timeout [ 77.292877][ T5849] Bluetooth: hci4: command tx timeout [ 77.297879][ T5842] Bluetooth: hci2: command tx timeout [ 77.303608][ T5849] Bluetooth: hci3: command tx timeout [ 77.364223][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.388340][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.397139][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.424024][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.436058][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.443070][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.469068][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.508029][ T5832] hsr_slave_0: entered promiscuous mode [ 77.514426][ T5832] hsr_slave_1: entered promiscuous mode [ 77.520442][ T5832] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.528723][ T5832] Cannot create hsr debugfs directory [ 77.553103][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.560069][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.586099][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.620267][ T5846] team0: Port device team_slave_0 added [ 77.628997][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.635986][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.662312][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.721788][ T5846] team0: Port device team_slave_1 added [ 77.759137][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.766186][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.792438][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.840069][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.849000][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.876432][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.961604][ T5839] hsr_slave_0: entered promiscuous mode [ 77.968043][ T5839] hsr_slave_1: entered promiscuous mode [ 77.975000][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.982659][ T5839] Cannot create hsr debugfs directory [ 78.013810][ T5835] hsr_slave_0: entered promiscuous mode [ 78.020016][ T5835] hsr_slave_1: entered promiscuous mode [ 78.026416][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.034914][ T5835] Cannot create hsr debugfs directory [ 78.085256][ T5846] hsr_slave_0: entered promiscuous mode [ 78.091475][ T5846] hsr_slave_1: entered promiscuous mode [ 78.098536][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.106157][ T5846] Cannot create hsr debugfs directory [ 78.411522][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 78.470485][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 78.521370][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 78.531956][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 78.610755][ T5832] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 78.635185][ T5832] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 78.658188][ T5832] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 78.675235][ T5832] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 78.713897][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 78.728713][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 78.740761][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 78.769693][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.863839][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 78.897189][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 78.908802][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 78.920258][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 79.017585][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.050612][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 79.076470][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 79.087141][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.129806][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.174022][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.206733][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.222496][ T5849] Bluetooth: hci0: command tx timeout [ 79.241298][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.254387][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.261740][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.286250][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.309239][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.316458][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.325972][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.333148][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.357724][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.371306][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.372455][ T5849] Bluetooth: hci3: command tx timeout [ 79.378465][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.391266][ T5853] Bluetooth: hci1: command tx timeout [ 79.399909][ T5853] Bluetooth: hci4: command tx timeout [ 79.406377][ T5849] Bluetooth: hci2: command tx timeout [ 79.437872][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.445063][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.478610][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.485806][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.550789][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.637639][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.713803][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.720972][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.751499][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.758687][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.788027][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.921616][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.021323][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.041470][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.048704][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.110067][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.117251][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.201905][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.216511][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.244741][ T5835] veth0_vlan: entered promiscuous mode [ 80.280244][ T5835] veth1_vlan: entered promiscuous mode [ 80.303670][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.415591][ T5833] veth0_vlan: entered promiscuous mode [ 80.436031][ T5835] veth0_macvtap: entered promiscuous mode [ 80.461780][ T5835] veth1_macvtap: entered promiscuous mode [ 80.471028][ T5832] veth0_vlan: entered promiscuous mode [ 80.480584][ T5833] veth1_vlan: entered promiscuous mode [ 80.524960][ T5832] veth1_vlan: entered promiscuous mode [ 80.555134][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.566025][ T5846] veth0_vlan: entered promiscuous mode [ 80.587655][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.603971][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.614478][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.624980][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.634300][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.657438][ T5846] veth1_vlan: entered promiscuous mode [ 80.691028][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.744386][ T5832] veth0_macvtap: entered promiscuous mode [ 80.782963][ T5832] veth1_macvtap: entered promiscuous mode [ 80.807610][ T5833] veth0_macvtap: entered promiscuous mode [ 80.848867][ T5846] veth0_macvtap: entered promiscuous mode [ 80.879267][ T5833] veth1_macvtap: entered promiscuous mode [ 80.913736][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.922059][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.930641][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.943621][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.958165][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.967089][ T5846] veth1_macvtap: entered promiscuous mode [ 80.991621][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.007165][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.017271][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.027754][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.039016][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.084866][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.098138][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.114920][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.125917][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.140498][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.153507][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.164082][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.176056][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.190636][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.200552][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.211722][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.221088][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.237694][ T5832] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.246508][ T5832] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.255469][ T5832] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.264584][ T5832] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.283241][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.292800][ T5853] Bluetooth: hci0: command tx timeout [ 81.300382][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.310444][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.320982][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.330841][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.341677][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.354369][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.367896][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.376135][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.392245][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.403694][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.414548][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.425704][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.435576][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.446032][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.456243][ T5853] Bluetooth: hci4: command tx timeout [ 81.458250][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.461637][ T5853] Bluetooth: hci2: command tx timeout [ 81.474662][ T5849] Bluetooth: hci3: command tx timeout [ 81.474726][ T5842] Bluetooth: hci1: command tx timeout [ 81.516177][ T5846] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.526177][ T5846] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.535740][ T5846] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.544820][ T5846] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.591270][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 81.699789][ T5839] veth0_vlan: entered promiscuous mode [ 81.751545][ T5839] veth1_vlan: entered promiscuous mode [ 81.831734][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.844583][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.949186][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.968637][ T5839] veth0_macvtap: entered promiscuous mode [ 81.974556][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.032283][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.040137][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.080210][ T5839] veth1_macvtap: entered promiscuous mode [ 82.157060][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.181992][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.215306][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.225914][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.248132][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.261331][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.275857][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.291410][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.305381][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.316720][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.330080][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.345008][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.361261][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.441867][ T5922] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.464489][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.475180][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.485521][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.496379][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.506799][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.517255][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.527156][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.539999][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.550978][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.562210][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.576164][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.600009][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.612225][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.620992][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.630339][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.666333][ T5922] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.806022][ T5922] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 82.820215][ T5932] syz.1.2 uses obsolete (PF_INET,SOCK_PACKET) [ 82.880539][ T5934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 82.898189][ T5934] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1'. [ 82.917120][ T5934] rdma_op ffff88802c3569f0 conn xmit_rdma 0000000000000000 [ 83.009178][ T5922] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.199644][ T5944] netlink: 'syz.2.3': attribute type 39 has an invalid length. [ 83.381430][ T5953] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8'. [ 83.424113][ T5842] Bluetooth: hci0: command tx timeout [ 83.507303][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 83.520018][ T1341] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.531562][ T1341] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.542347][ T5842] Bluetooth: hci2: command tx timeout [ 83.547781][ T5842] Bluetooth: hci3: command tx timeout [ 83.553691][ T5842] Bluetooth: hci1: command tx timeout [ 83.559135][ T5842] Bluetooth: hci4: command tx timeout [ 83.649818][ T5942] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (134217729), value rounded to 0 ms [ 83.753203][ T5949] netlink: 'syz.0.8': attribute type 6 has an invalid length. [ 83.770974][ T5949] netlink: 'syz.0.8': attribute type 7 has an invalid length. [ 83.778874][ T5949] netlink: 'syz.0.8': attribute type 8 has an invalid length. [ 83.808387][ T5948] bridge0: entered promiscuous mode [ 83.817139][ T5948] bridge0: port 3(macsec1) entered blocking state [ 83.828547][ T5948] bridge0: port 3(macsec1) entered disabled state [ 83.835705][ T5948] macsec1: entered allmulticast mode [ 83.842296][ T5948] bridge0: entered allmulticast mode [ 83.908871][ T5948] macsec1: left allmulticast mode [ 83.933271][ T5948] bridge0: left allmulticast mode [ 84.024807][ T5948] bridge0: left promiscuous mode [ 84.388216][ T1142] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.410314][ T1142] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.500765][ T5922] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.527765][ T5922] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.585608][ T5922] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.603862][ T5922] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.729282][ T6000] netlink: 20 bytes leftover after parsing attributes in process `syz.3.11'. [ 84.981245][ T6001] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 85.020878][ T6003] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 85.048906][ T6003] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 85.072800][ T6009] netlink: 32 bytes leftover after parsing attributes in process `syz.3.11'. [ 85.341363][ T6016] tipc: Started in network mode [ 85.351302][ T6016] tipc: Node identity , cluster identity 4711 [ 85.373698][ T6016] tipc: Failed to set node id, please configure manually [ 85.420386][ T6016] tipc: Enabling of bearer rejected, failed to enable media [ 85.477286][ T6021] : renamed from bond0 (while UP) [ 86.008201][ T6023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.14'. [ 86.036741][ T6023] netlink: 4 bytes leftover after parsing attributes in process `syz.0.14'. [ 86.038087][ T6025] netlink: 'syz.1.15': attribute type 27 has an invalid length. [ 86.067163][ T6023] netlink: 10 bytes leftover after parsing attributes in process `syz.0.14'. [ 86.133630][ T6023] nbd: socks must be embedded in a SOCK_ITEM attr [ 86.201579][ T6025] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.209864][ T6025] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.285373][ T6033] netlink: del zone limit has 4 unknown bytes [ 86.399072][ T6025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.414735][ T6025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.558342][ T6025] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.583226][ T6025] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.612141][ T6025] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.631245][ T6025] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.746821][ T977] cfg80211: failed to load regulatory.db [ 86.827082][ T6027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.859725][ T6027] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.896261][ T6027] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 87.051446][ T6031] bond1: entered allmulticast mode [ 87.226878][ T6025] syz.1.15 (6025) used greatest stack depth: 19256 bytes left [ 87.238988][ T6039] ¾x9ÿ: renamed from bridge_slave_0 (while UP) [ 87.259576][ T6039] netlink: 252 bytes leftover after parsing attributes in process `syz.4.19'. [ 87.634390][ T6052] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 87.690559][ T6052] netlink: 'syz.4.23': attribute type 37 has an invalid length. [ 87.990350][ T6061] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (134217729), value rounded to 0 ms [ 88.130571][ T6064] netlink: 'syz.0.24': attribute type 39 has an invalid length. [ 88.438594][ T6080] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.635311][ T6067] bridge0: entered promiscuous mode [ 88.744659][ T6067] bridge0: port 3(macsec1) entered blocking state [ 88.818299][ T6067] bridge0: port 3(macsec1) entered disabled state [ 88.895465][ T6067] macsec1: entered allmulticast mode [ 88.941532][ T6067] bridge0: entered allmulticast mode [ 89.077623][ T6067] macsec1: left allmulticast mode [ 89.106480][ T6067] bridge0: left allmulticast mode [ 89.128747][ T6112] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0001 with DS=0x2 [ 89.160040][ T6067] bridge0: left promiscuous mode [ 89.160785][ T6112] netlink: 16 bytes leftover after parsing attributes in process `syz.1.33'. [ 89.220158][ T6100] tipc: Started in network mode [ 89.238984][ T6100] tipc: Node identity ac14140f, cluster identity 4711 [ 89.297022][ T6100] tipc: New replicast peer: 255.255.255.255 [ 89.326990][ T6100] tipc: Enabled bearer , priority 10 [ 89.351929][ T6105] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 89.374924][ T6105] tipc: Disabling bearer [ 89.387031][ T6118] netlink: 16 bytes leftover after parsing attributes in process `syz.3.36'. [ 89.400394][ T6106] netlink: 'syz.1.33': attribute type 29 has an invalid length. [ 89.415585][ T6118] netlink: 12 bytes leftover after parsing attributes in process `syz.3.36'. [ 89.489319][ T6113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.33'. [ 89.543735][ T6113] netlink: 20 bytes leftover after parsing attributes in process `syz.1.33'. [ 89.703643][ T6128] netlink: 84 bytes leftover after parsing attributes in process `syz.4.37'. [ 89.883421][ T6142] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 90.004136][ T6143] netlink: 12 bytes leftover after parsing attributes in process `syz.2.42'. [ 90.086375][ T6146] bond0: entered promiscuous mode [ 90.112604][ T6146] bond_slave_0: entered promiscuous mode [ 90.119348][ T6146] bond_slave_1: entered promiscuous mode [ 90.144250][ T6146] batadv0: entered promiscuous mode [ 90.170694][ T6146] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 90.198474][ T6152] bond0: entered promiscuous mode [ 90.214378][ T6152] bond_slave_0: entered promiscuous mode [ 90.246197][ T6152] bond_slave_1: entered promiscuous mode [ 90.260705][ T6152] batadv0: entered promiscuous mode [ 90.296545][ T6152] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 90.345189][ T6152] Cannot create hsr debugfs directory [ 90.351874][ T6160] netlink: 8 bytes leftover after parsing attributes in process `syz.4.46'. [ 90.372255][ T6152] hsr1: Slave B (batadv0) is not up; please bring it up to get a fully working HSR network [ 90.415127][ T6152] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 90.702638][ T6172] netlink: 'syz.4.48': attribute type 10 has an invalid length. [ 90.719973][ T6167] sctp: [Deprecated]: syz.1.47 (pid 6167) Use of struct sctp_assoc_value in delayed_ack socket option. [ 90.719973][ T6167] Use struct sctp_sack_info instead [ 90.760636][ T6172] team0: Device dummy0 failed to register rx_handler [ 91.146036][ T6183] netlink: 'syz.1.50': attribute type 27 has an invalid length. [ 91.476452][ T6191] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.483906][ T6191] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.540740][ T6172] syz.4.48 (6172) used greatest stack depth: 19192 bytes left [ 91.905866][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 91.970310][ T6191] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.221114][ T6191] netdevsim netdevsim3 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.232462][ T6191] netdevsim netdevsim3 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.271979][ T6191] netdevsim netdevsim3 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.282237][ T5913] IPVS: starting estimator thread 0... [ 92.297124][ T6191] netdevsim netdevsim3 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 92.377797][ T6214] Zero length message leads to an empty skb [ 92.382289][ T6226] IPVS: using max 29 ests per chain, 69600 per kthread [ 92.545638][ T6232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.58'. [ 92.706945][ T6242] netlink: 'syz.1.61': attribute type 1 has an invalid length. [ 93.524914][ T6268] vcan0: Master is either lo or non-ether device [ 93.999360][ T6284] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.042214][ T6284] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.067941][ T6284] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.092626][ T6284] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.122585][ T6286] tipc: Started in network mode [ 94.141078][ T6286] tipc: Node identity ac14142f, cluster identity 4711 [ 94.152913][ T6286] tipc: New replicast peer: 0.0.0.0 [ 94.175141][ T6286] tipc: Enabled bearer , priority 10 [ 94.198704][ T6289] __nla_validate_parse: 3 callbacks suppressed [ 94.198719][ T6289] netlink: 32 bytes leftover after parsing attributes in process `syz.3.72'. [ 94.351001][ T6297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.73'. [ 94.775426][ T6308] af_packet: tpacket_rcv: packet too big, clamped from 65340 to 3696. macoff=96 [ 95.293000][ T5885] tipc: Node number set to 2886997039 [ 95.320902][ T6333] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.389911][ T6321] netlink: 112 bytes leftover after parsing attributes in process `syz.3.80'. [ 95.523389][ T6333] netlink: 8 bytes leftover after parsing attributes in process `syz.0.83'. [ 96.449170][ T6383] netlink: 'syz.0.98': attribute type 10 has an invalid length. [ 96.575081][ T6383] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 96.822764][ T6408] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 97.750085][ T6442] netlink: 'syz.4.115': attribute type 3 has an invalid length. [ 98.407742][ T6458] netlink: 256 bytes leftover after parsing attributes in process `syz.3.117'. [ 98.522628][ T6465] netlink: 'syz.2.120': attribute type 10 has an invalid length. [ 98.588911][ T6465] team0: Device hsr_slave_0 failed to register rx_handler [ 98.806767][ T6468] team0 (unregistering): Port device team_slave_0 removed [ 98.816410][ T6484] netlink: 'syz.2.125': attribute type 2 has an invalid length. [ 98.825750][ T6484] netlink: 'syz.2.125': attribute type 1 has an invalid length. [ 98.835509][ T6468] team0 (unregistering): Port device team_slave_1 removed [ 98.887962][ T6480] netlink: 'syz.2.125': attribute type 4 has an invalid length. [ 98.913452][ T6482] netlink: 'syz.4.124': attribute type 4 has an invalid length. [ 99.116808][ T6490] Bluetooth: hci4: Opcode 0x0401 failed: -4 [ 99.201009][ T6496] netlink: 'syz.3.127': attribute type 1 has an invalid length. [ 99.223022][ T6496] netlink: 28 bytes leftover after parsing attributes in process `syz.3.127'. [ 99.351029][ T6503] vxcan2: entered promiscuous mode [ 99.379676][ T6511] netlink: 8 bytes leftover after parsing attributes in process `syz.4.130'. [ 99.391424][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.130'. [ 99.587398][ T6521] tipc: Can't bind to reserved service type 2 [ 99.679402][ T6524] netlink: 'syz.2.136': attribute type 2 has an invalid length. [ 99.711473][ T6524] netlink: 224 bytes leftover after parsing attributes in process `syz.2.136'. [ 99.729170][ T6526] netlink: 'syz.1.134': attribute type 4 has an invalid length. [ 99.730295][ T6527] netlink: 76 bytes leftover after parsing attributes in process `syz.4.135'. [ 99.752986][ T6524] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 99.769754][ T6527] nbd: illegal input index 65508 [ 99.787141][ T6524] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 99.920759][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 99.931981][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 99.942816][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 99.953245][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 99.968456][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.2.136'. [ 100.709612][ T6555] lo: entered promiscuous mode [ 100.959586][ T6566] Cannot find set identified by id 0 to match [ 101.132554][ T5842] Bluetooth: hci4: command 0x0401 tx timeout [ 101.135263][ T6573] veth1_vlan: entered allmulticast mode [ 101.205561][ T6573] team0: Device veth1_vlan failed to register rx_handler [ 101.709453][ T6608] validate_nla: 2 callbacks suppressed [ 101.709481][ T6608] netlink: 'syz.1.157': attribute type 1 has an invalid length. [ 101.949900][ T6624] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20001 - 0 [ 102.014251][ T6624] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20001 - 0 [ 102.199039][ T6624] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20001 - 0 [ 102.207998][ T6624] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20001 - 0 [ 102.390956][ T6638] netlink: 'syz.2.163': attribute type 5 has an invalid length. [ 103.040411][ T6662] sysfs: cannot create duplicate filename '/class/ieee80211/!å' [ 103.050162][ T6662] CPU: 1 UID: 0 PID: 6662 Comm: syz.3.169 Not tainted 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 PREEMPT(full) [ 103.050184][ T6662] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 103.050197][ T6662] Call Trace: [ 103.050204][ T6662] [ 103.050211][ T6662] dump_stack_lvl+0x241/0x360 [ 103.050249][ T6662] ? __pfx_dump_stack_lvl+0x10/0x10 [ 103.050272][ T6662] ? __pfx__printk+0x10/0x10 [ 103.050294][ T6662] ? kernfs_path_from_node+0x2b/0x250 [ 103.050316][ T6662] ? kernfs_path_from_node+0x217/0x250 [ 103.050336][ T6662] sysfs_warn_dup+0x8e/0xa0 [ 103.050361][ T6662] sysfs_do_create_link_sd+0xbe/0x110 [ 103.050389][ T6662] device_add_class_symlinks+0x1c5/0x250 [ 103.050416][ T6662] device_add+0x553/0xbf0 [ 103.050445][ T6662] wiphy_register+0x193c/0x2660 [ 103.050482][ T6662] ? __pfx_wiphy_register+0x10/0x10 [ 103.050501][ T6662] ? minstrel_ht_alloc+0x85a/0x950 [ 103.050532][ T6662] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 103.050562][ T6662] ieee80211_register_hw+0x35e9/0x42d0 [ 103.050602][ T6662] ? ieee80211_register_hw+0x1611/0x42d0 [ 103.050635][ T6662] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 103.050681][ T6662] ? __hrtimer_setup+0x17f/0x200 [ 103.050700][ T6662] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 103.050728][ T6662] mac80211_hwsim_new_radio+0x2adc/0x4a60 [ 103.050783][ T6662] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 103.050803][ T6662] ? trace_kmalloc+0x1f/0xd0 [ 103.050822][ T6662] ? __kmalloc_node_track_caller_noprof+0x2b2/0x4d0 [ 103.050845][ T6662] ? kstrndup+0xbb/0x150 [ 103.050876][ T6662] hwsim_new_radio_nl+0xed0/0x2290 [ 103.050911][ T6662] ? __pfx___nla_validate_parse+0x10/0x10 [ 103.050939][ T6662] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 103.050997][ T6662] ? genl_family_rcv_msg_attrs_parse+0x1d4/0x290 [ 103.051029][ T6662] genl_rcv_msg+0xb38/0xf00 [ 103.051061][ T6662] ? __pfx_genl_rcv_msg+0x10/0x10 [ 103.051079][ T6662] ? stack_trace_save+0x11a/0x1d0 [ 103.051105][ T6662] ? __pfx_stack_trace_save+0x10/0x10 [ 103.051131][ T6662] ? stack_depot_save_flags+0x44/0x940 [ 103.051149][ T6662] ? stack_trace_snprint+0x71/0xf0 [ 103.051191][ T6662] ? __lock_acquire+0xad5/0xd80 [ 103.051210][ T6662] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 103.051248][ T6662] netlink_rcv_skb+0x208/0x480 [ 103.051267][ T6662] ? __pfx_genl_rcv_msg+0x10/0x10 [ 103.051290][ T6662] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 103.051332][ T6662] ? netlink_deliver_tap+0x2e/0x1b0 [ 103.051356][ T6662] genl_rcv+0x28/0x40 [ 103.051375][ T6662] netlink_unicast+0x7f8/0x9a0 [ 103.051410][ T6662] ? __pfx_netlink_unicast+0x10/0x10 [ 103.051436][ T6662] ? skb_put+0x114/0x1f0 [ 103.051461][ T6662] netlink_sendmsg+0x8c3/0xcd0 [ 103.051493][ T6662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.051516][ T6662] ? aa_sock_msg_perm+0x91/0x160 [ 103.051545][ T6662] ? __pfx_netlink_sendmsg+0x10/0x10 [ 103.051560][ T6662] __sock_sendmsg+0x221/0x270 [ 103.051588][ T6662] ____sys_sendmsg+0x523/0x860 [ 103.051620][ T6662] ? __pfx_____sys_sendmsg+0x10/0x10 [ 103.051638][ T6662] ? __fget_files+0x2a/0x420 [ 103.051671][ T6662] ? __fget_files+0x2a/0x420 [ 103.051705][ T6662] __sys_sendmsg+0x271/0x360 [ 103.051732][ T6662] ? __pfx___sys_sendmsg+0x10/0x10 [ 103.051816][ T6662] ? do_syscall_64+0xb6/0x230 [ 103.051838][ T6662] do_syscall_64+0xf3/0x230 [ 103.051857][ T6662] ? clear_bhb_loop+0x45/0xa0 [ 103.051878][ T6662] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 103.051898][ T6662] RIP: 0033:0x7fcf0db8e169 [ 103.051916][ T6662] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 103.051929][ T6662] RSP: 002b:00007fcf0e90e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 103.051947][ T6662] RAX: ffffffffffffffda RBX: 00007fcf0ddb6080 RCX: 00007fcf0db8e169 [ 103.051959][ T6662] RDX: 0000000000000300 RSI: 0000200000000040 RDI: 0000000000000005 [ 103.051969][ T6662] RBP: 00007fcf0dc10a68 R08: 0000000000000000 R09: 0000000000000000 [ 103.051979][ T6662] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 103.051989][ T6662] R13: 0000000000000000 R14: 00007fcf0ddb6080 R15: 00007ffc231d1598 [ 103.052019][ T6662] [ 103.485542][ T5838] Bluetooth: hci4: command 0x0401 tx timeout [ 103.803085][ T6670] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 103.849830][ T6677] sctp: [Deprecated]: syz.0.173 (pid 6677) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.849830][ T6677] Use struct sctp_sack_info instead [ 104.329296][ T6705] __nla_validate_parse: 56 callbacks suppressed [ 104.329321][ T6705] netlink: 16 bytes leftover after parsing attributes in process `syz.4.180'. [ 104.404197][ T6710] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 104.730837][ T6724] netlink: 44 bytes leftover after parsing attributes in process `syz.4.186'. [ 105.186352][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.2.190'. [ 105.248073][ T6753] netlink: 44 bytes leftover after parsing attributes in process `syz.4.191'. [ 105.527315][ T6768] ipvlan2: entered allmulticast mode [ 105.550083][ T6768] macsec0: entered allmulticast mode [ 105.558213][ T6768] veth1_macvtap: entered allmulticast mode [ 105.568116][ T6774] netlink: 'syz.1.195': attribute type 58 has an invalid length. [ 105.576070][ T6774] netlink: 20 bytes leftover after parsing attributes in process `syz.1.195'. [ 105.776318][ T6781] netlink: 'syz.4.196': attribute type 4 has an invalid length. [ 105.796855][ T6782] netlink: 'syz.4.196': attribute type 4 has an invalid length. [ 105.821314][ T6781] netlink: 'syz.4.196': attribute type 8 has an invalid length. [ 106.067364][ T6794] ¾x9ÿ: left allmulticast mode [ 106.089790][ T6794] ¾x9ÿ: left promiscuous mode [ 106.110229][ T6794] bridge0: port 1(1¾x9ÿ) entered disabled state [ 106.136053][ T6798] netlink: 'syz.4.201': attribute type 10 has an invalid length. [ 106.176886][ T6794] bridge_slave_1: left allmulticast mode [ 106.220111][ T6794] bridge_slave_1: left promiscuous mode [ 106.269250][ T6794] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.310458][ T6813] netlink: 120 bytes leftover after parsing attributes in process `syz.4.201'. [ 106.370792][ T6794] bond0: (slave bond_slave_0): Releasing backup interface [ 106.420061][ T6794] bond_slave_0: left promiscuous mode [ 106.459189][ T6794] bond0: (slave bond_slave_1): Releasing backup interface [ 106.487845][ T6794] bond_slave_1: left promiscuous mode [ 106.591770][ T6794] team0: Port device team_slave_0 removed [ 106.607729][ T6794] team0: Port device team_slave_1 removed [ 106.614586][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.624071][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.633289][ T6794] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 106.640772][ T6794] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.689259][ T6798] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 106.716576][ T6798] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 107.127570][ T6836] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 107.255129][ T6849] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 107.347820][ T6849] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 107.820313][ T6875] SET target dimension over the limit! [ 107.867916][ T6879] netlink: 300 bytes leftover after parsing attributes in process `syz.0.220'. [ 107.877913][ T6877] syz_tun: entered allmulticast mode [ 108.049182][ T6876] syz_tun: left allmulticast mode [ 108.527862][ T6903] netlink: 4 bytes leftover after parsing attributes in process `syz.1.225'. [ 109.553852][ T6919] A link change request failed with some changes committed already. Interface syz_tun may have been left with an inconsistent configuration, please check. [ 109.595569][ T6919] netlink: 28 bytes leftover after parsing attributes in process `syz.3.230'. [ 109.621993][ T6919] Bluetooth: MGMT ver 1.23 [ 110.010465][ T6935] netlink: 20 bytes leftover after parsing attributes in process `syz.4.236'. [ 110.052279][ T6937] tipc: Started in network mode [ 110.057176][ T6937] tipc: Node identity 2007, cluster identity 4711 [ 110.073926][ T6937] tipc: Node number set to 8199 [ 110.239019][ T6944] netlink: 'syz.2.241': attribute type 58 has an invalid length. [ 110.263077][ T6944] netlink: 20 bytes leftover after parsing attributes in process `syz.2.241'. [ 110.426858][ T6959] netlink: 248 bytes leftover after parsing attributes in process `syz.0.239'. [ 110.615930][ T6970] RDS: rds_bind could not find a transport for 100:806:aaaa:aaaa:aaaa::, load rds_tcp or rds_rdma? [ 110.672507][ T6959] netlink: 20 bytes leftover after parsing attributes in process `syz.0.239'. [ 110.699067][ T6970] ip6gre1: entered promiscuous mode [ 110.730870][ T5885] IPVS: starting estimator thread 0... [ 110.731329][ T6959] netlink: 'syz.0.239': attribute type 4 has an invalid length. [ 110.742316][ T6979] IPVS: set_ctl: invalid protocol: 25956 105.110.107.0:0 [ 110.840627][ T6966] x_tables: unsorted underflow at hook 2 [ 110.872363][ T6980] IPVS: using max 36 ests per chain, 86400 per kthread [ 112.001411][ T7033] netlink: 60 bytes leftover after parsing attributes in process `syz.0.258'. [ 112.023123][ T7033] unsupported nlmsg_type 40 [ 112.091290][ T7042] netlink: 224 bytes leftover after parsing attributes in process `syz.1.263'. [ 112.597904][ T5983] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.753709][ T5983] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.980076][ T5983] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.997508][ T7075] syz.3.270: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 113.004110][ T7078] netlink: 8 bytes leftover after parsing attributes in process `syz.1.269'. [ 113.013859][ T7077] netlink: 12 bytes leftover after parsing attributes in process `syz.0.268'. [ 113.030506][ T7078] netlink: 32 bytes leftover after parsing attributes in process `syz.1.269'. [ 113.066117][ T7075] CPU: 0 UID: 0 PID: 7075 Comm: syz.3.270 Not tainted 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 PREEMPT(full) [ 113.066143][ T7075] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.066154][ T7075] Call Trace: [ 113.066160][ T7075] [ 113.066167][ T7075] dump_stack_lvl+0x241/0x360 [ 113.066199][ T7075] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.066222][ T7075] ? __pfx__printk+0x10/0x10 [ 113.066244][ T7075] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 113.066269][ T7075] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 113.066290][ T7075] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 113.066316][ T7075] warn_alloc+0x27c/0x410 [ 113.066334][ T7075] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 113.066360][ T7075] ? __pfx_warn_alloc+0x10/0x10 [ 113.066376][ T7075] ? kasan_save_track+0x3f/0x80 [ 113.066393][ T7075] ? __kasan_kmalloc+0x9d/0xb0 [ 113.066413][ T7075] ? xsk_setsockopt+0x449/0x840 [ 113.066435][ T7075] ? do_sock_setsockopt+0x3b1/0x710 [ 113.066463][ T7075] ? __x64_sys_setsockopt+0x1ee/0x280 [ 113.066481][ T7075] ? do_syscall_64+0xf3/0x230 [ 113.066499][ T7075] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.066525][ T7075] __vmalloc_node_range_noprof+0x128/0x1390 [ 113.066578][ T7075] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 113.066608][ T7075] ? __kasan_kmalloc+0x9d/0xb0 [ 113.066632][ T7075] vmalloc_user_noprof+0x74/0x80 [ 113.066656][ T7075] ? xskq_create+0xb6/0x170 [ 113.066670][ T7075] xskq_create+0xb6/0x170 [ 113.066688][ T7075] xsk_init_queue+0xa1/0x100 [ 113.066715][ T7075] xsk_setsockopt+0x449/0x840 [ 113.066742][ T7075] ? __pfx_xsk_setsockopt+0x10/0x10 [ 113.066766][ T7075] ? __pfx_aa_sk_perm+0x10/0x10 [ 113.066790][ T7075] ? aa_sock_opt_perm+0x79/0x120 [ 113.066817][ T7075] ? __pfx_xsk_setsockopt+0x10/0x10 [ 113.066838][ T7075] do_sock_setsockopt+0x3b1/0x710 [ 113.066864][ T7075] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 113.066881][ T7075] ? __fget_files+0x2a/0x420 [ 113.066909][ T7075] ? __fget_files+0x39d/0x420 [ 113.066930][ T7075] ? __fget_files+0x2a/0x420 [ 113.066962][ T7075] __x64_sys_setsockopt+0x1ee/0x280 [ 113.066989][ T7075] do_syscall_64+0xf3/0x230 [ 113.067008][ T7075] ? clear_bhb_loop+0x45/0xa0 [ 113.067028][ T7075] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.067044][ T7075] RIP: 0033:0x7fcf0db8e169 [ 113.067059][ T7075] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.067072][ T7075] RSP: 002b:00007fcf0e92f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 113.067089][ T7075] RAX: ffffffffffffffda RBX: 00007fcf0ddb5fa0 RCX: 00007fcf0db8e169 [ 113.067101][ T7075] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 113.067111][ T7075] RBP: 00007fcf0dc10a68 R08: 0000000000000004 R09: 0000000000000000 [ 113.067121][ T7075] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.067132][ T7075] R13: 0000000000000000 R14: 00007fcf0ddb5fa0 R15: 00007ffc231d1598 [ 113.067160][ T7075] [ 113.067167][ T7075] Mem-Info: [ 113.224338][ T7076] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 113.312135][ T7075] active_anon:8035 inactive_anon:0 isolated_anon:0 [ 113.312135][ T7075] active_file:1438 inactive_file:38315 isolated_file:0 [ 113.312135][ T7075] unevictable:768 dirty:68 writeback:0 [ 113.312135][ T7075] slab_reclaimable:9707 slab_unreclaimable:102913 [ 113.312135][ T7075] mapped:29674 shmem:4317 pagetables:937 [ 113.312135][ T7075] sec_pagetables:0 bounce:0 [ 113.312135][ T7075] kernel_misc_reclaimable:0 [ 113.312135][ T7075] free:1345654 free_pcp:886 free_cma:0 [ 113.458721][ T7075] Node 0 active_anon:33940kB inactive_anon:0kB active_file:5752kB inactive_file:153184kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:120696kB dirty:268kB writeback:0kB shmem:17532kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11988kB pagetables:3748kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 113.522531][ T7075] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 113.591514][ T7075] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 113.597096][ T5983] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.676210][ T7075] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 113.682033][ T7075] Node 0 DMA32 free:1423772kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:38732kB inactive_anon:0kB active_file:5752kB inactive_file:153092kB unevictable:1536kB writepending:268kB present:3129332kB managed:2547412kB mlocked:0kB bounce:0kB free_pcp:6528kB local_pcp:4732kB free_cma:0kB [ 113.683297][ T7078] warning: `syz.1.269' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 113.734557][ T7075] lowmem_reserve[]: 0 0 0 0 0 [ 113.749689][ T7075] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:92kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 113.839323][ T7075] lowmem_reserve[]: 0 0 0 0 0 [ 113.860140][ T7075] Node 1 Normal free:3910948kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:228kB local_pcp:36kB free_cma:0kB [ 113.914577][ T7075] lowmem_reserve[]: 0 0 0 0 0 [ 113.935930][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.936195][ T7075] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 113.962123][ T7075] Node 0 DMA32: 3*4kB (U) 26*8kB (UE) 17*16kB (UE) 336*32kB (UE) 508*64kB (UE) 149*128kB (UE) 47*256kB (U) 29*512kB (UME) 19*1024kB (UME) 5*2048kB (UME) 316*4096kB (M) = 1413740kB [ 113.981325][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.986132][ T7075] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 114.010255][ T7075] Node 1 Normal: 235*4kB (UME) 61*8kB (UME) 43*16kB (UME) 231*32kB (UME) 106*64kB (UME) 31*128kB (UME) 12*256kB (UME) 9*512kB (UM) 4*1024kB (UME) 2*2048kB (UE) 946*4096kB (M) = 3910948kB [ 114.029643][ T7075] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.039258][ T7075] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.039809][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 114.048755][ T7075] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.048774][ T7075] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.048788][ T7075] 46930 total pagecache pages [ 114.048806][ T7075] 0 pages in swap cache [ 114.048813][ T7075] Free swap = 124996kB [ 114.048821][ T7075] Total swap = 124996kB [ 114.048831][ T7075] 2097051 pages RAM [ 114.048839][ T7075] 0 pages HighMem/MovableOnly [ 114.048846][ T7075] 428540 pages reserved [ 114.048854][ T7075] 0 pages cma reserved [ 114.124263][ T7078] xt_hashlimit: size too large, truncated to 1048576 [ 114.124295][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 114.139675][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.688464][ T7125] raw_sendmsg: syz.3.276 forgot to set AF_INET. Fix it! [ 114.901091][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.2.277'. [ 115.226409][ T5983] bond0 (unregistering): left promiscuous mode [ 115.232811][ T5983] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 115.241246][ T5983] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 115.260084][ T5983] bond0 (unregistering): Released all slaves [ 115.279776][ T5983] bond1 (unregistering): Released all slaves [ 115.578267][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.0.281'. [ 115.875028][ T7165] Driver unsupported XDP return value 0 on prog (id 87) dev N/A, expect packet loss! [ 115.938943][ T7099] chnl_net:caif_netlink_parms(): no params data found [ 116.005931][ T7166] netlink: 160 bytes leftover after parsing attributes in process `syz.2.285'. [ 116.174617][ T5838] Bluetooth: hci3: command tx timeout [ 116.474211][ T7183] macvtap1: entered promiscuous mode [ 116.479564][ T7183] vlan0: entered promiscuous mode [ 116.533413][ T7183] macvtap1: entered allmulticast mode [ 116.538835][ T7183] vlan0: entered allmulticast mode [ 116.549642][ T7183] veth0_vlan: entered allmulticast mode [ 116.582749][ T7183] vlan0: left allmulticast mode [ 116.587758][ T7183] veth0_vlan: left allmulticast mode [ 116.599951][ T7183] vlan0: left promiscuous mode [ 116.769007][ T7176] netlink: 40 bytes leftover after parsing attributes in process `syz.0.286'. [ 116.787953][ T5983] batadv0: left promiscuous mode [ 116.819358][ T5983] hsr_slave_0: left promiscuous mode [ 116.825805][ T5983] hsr_slave_1: left promiscuous mode [ 116.839919][ T5983] veth1_macvtap: left allmulticast mode [ 116.847497][ T5983] veth1_macvtap: left promiscuous mode [ 116.854557][ T5983] veth0_macvtap: left promiscuous mode [ 116.860694][ T5983] veth0_vlan: left promiscuous mode [ 116.960224][ T5983] [ 116.962581][ T5983] ====================================================== [ 116.969593][ T5983] WARNING: possible circular locking dependency detected [ 116.976592][ T5983] 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 Not tainted [ 116.983685][ T5983] ------------------------------------------------------ [ 116.990698][ T5983] kworker/u8:13/5983 is trying to acquire lock: [ 116.996926][ T5983] ffff888035bf8e00 (team->team_lock_key#3){+.+.}-{4:4}, at: team_vlan_rx_kill_vid+0x36/0xe0 [ 117.007000][ T5983] [ 117.007000][ T5983] but task is already holding lock: [ 117.014349][ T5983] ffff888035972d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2500 [ 117.025914][ T5983] [ 117.025914][ T5983] which lock already depends on the new lock. [ 117.025914][ T5983] [ 117.036299][ T5983] [ 117.036299][ T5983] the existing dependency chain (in reverse order) is: [ 117.045298][ T5983] [ 117.045298][ T5983] -> #1 (&dev_instance_lock_key#3){+.+.}-{4:4}: [ 117.053741][ T5983] lock_acquire+0x116/0x2f0 [ 117.058756][ T5983] __mutex_lock+0x1a5/0x10c0 [ 117.063860][ T5983] dev_set_mtu+0x11c/0x270 [ 117.068783][ T5983] team_add_slave+0x83b/0x28b0 [ 117.074055][ T5983] do_set_master+0x579/0x730 [ 117.079157][ T5983] do_setlink+0xf76/0x4390 [ 117.084079][ T5983] rtnl_newlink+0x17e2/0x1fe0 [ 117.089259][ T5983] rtnetlink_rcv_msg+0x80f/0xd70 [ 117.094702][ T5983] netlink_rcv_skb+0x208/0x480 [ 117.099973][ T5983] netlink_unicast+0x7f8/0x9a0 [ 117.105243][ T5983] netlink_sendmsg+0x8c3/0xcd0 [ 117.110510][ T5983] __sock_sendmsg+0x221/0x270 [ 117.115697][ T5983] ____sys_sendmsg+0x523/0x860 [ 117.120967][ T5983] __sys_sendmsg+0x271/0x360 [ 117.126063][ T5983] do_syscall_64+0xf3/0x230 [ 117.131072][ T5983] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 117.137466][ T5983] [ 117.137466][ T5983] -> #0 (team->team_lock_key#3){+.+.}-{4:4}: [ 117.145623][ T5983] validate_chain+0xa69/0x24e0 [ 117.150895][ T5983] __lock_acquire+0xad5/0xd80 [ 117.156077][ T5983] lock_acquire+0x116/0x2f0 [ 117.161084][ T5983] __mutex_lock+0x1a5/0x10c0 [ 117.166192][ T5983] team_vlan_rx_kill_vid+0x36/0xe0 [ 117.171830][ T5983] vlan_vid_del+0x483/0x770 [ 117.176850][ T5983] vlan_device_event+0x23c/0x1e00 [ 117.182394][ T5983] notifier_call_chain+0x1a5/0x3f0 [ 117.188018][ T5983] dev_close_many+0x33e/0x4c0 [ 117.193209][ T5983] unregister_netdevice_many_notify+0x628/0x2500 [ 117.200053][ T5983] default_device_exit_batch+0x7ff/0x880 [ 117.206193][ T5983] ops_undo_list+0x47f/0x8b0 [ 117.211293][ T5983] cleanup_net+0x530/0x940 [ 117.216224][ T5983] process_scheduled_works+0xac3/0x18e0 [ 117.222277][ T5983] worker_thread+0x870/0xd50 [ 117.227379][ T5983] kthread+0x7b7/0x940 [ 117.231961][ T5983] ret_from_fork+0x4b/0x80 [ 117.236883][ T5983] ret_from_fork_asm+0x1a/0x30 [ 117.242161][ T5983] [ 117.242161][ T5983] other info that might help us debug this: [ 117.242161][ T5983] [ 117.252378][ T5983] Possible unsafe locking scenario: [ 117.252378][ T5983] [ 117.259810][ T5983] CPU0 CPU1 [ 117.265157][ T5983] ---- ---- [ 117.270506][ T5983] lock(&dev_instance_lock_key#3); [ 117.275706][ T5983] lock(team->team_lock_key#3); [ 117.283174][ T5983] lock(&dev_instance_lock_key#3); [ 117.290891][ T5983] lock(team->team_lock_key#3); [ 117.295822][ T5983] [ 117.295822][ T5983] *** DEADLOCK *** [ 117.295822][ T5983] [ 117.303950][ T5983] 5 locks held by kworker/u8:13/5983: [ 117.309303][ T5983] #0: ffff88801bef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x990/0x18e0 [ 117.320171][ T5983] #1: ffffc90004a97c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9cb/0x18e0 [ 117.330683][ T5983] #2: ffffffff900f1b50 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x100/0x940 [ 117.340075][ T5983] #3: ffffffff900fe688 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xde/0x880 [ 117.350069][ T5983] #4: ffff888035972d30 (&dev_instance_lock_key#3){+.+.}-{4:4}, at: unregister_netdevice_many_notify+0x5a1/0x2500 [ 117.362071][ T5983] [ 117.362071][ T5983] stack backtrace: [ 117.368048][ T5983] CPU: 0 UID: 0 PID: 5983 Comm: kworker/u8:13 Not tainted 6.15.0-rc1-syzkaller-00368-gbbfc077d4572 #0 PREEMPT(full) [ 117.368066][ T5983] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 117.368082][ T5983] Workqueue: netns cleanup_net [ 117.368102][ T5983] Call Trace: [ 117.368109][ T5983] [ 117.368119][ T5983] dump_stack_lvl+0x241/0x360 [ 117.368139][ T5983] ? __pfx_dump_stack_lvl+0x10/0x10 [ 117.368155][ T5983] ? __pfx__printk+0x10/0x10 [ 117.368171][ T5983] ? print_lock+0x171/0x1a0 [ 117.368186][ T5983] print_circular_bug+0x2e1/0x300 [ 117.368203][ T5983] check_noncircular+0x142/0x160 [ 117.368220][ T5983] validate_chain+0xa69/0x24e0 [ 117.368243][ T5983] __lock_acquire+0xad5/0xd80 [ 117.368257][ T5983] lock_acquire+0x116/0x2f0 [ 117.368268][ T5983] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 117.368287][ T5983] __mutex_lock+0x1a5/0x10c0 [ 117.368309][ T5983] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 117.368325][ T5983] ? __cancel_work+0x24c/0x390 [ 117.368341][ T5983] ? team_vlan_rx_kill_vid+0x36/0xe0 [ 117.368354][ T5983] ? __cancel_work+0x2f0/0x390 [ 117.368368][ T5983] ? __pfx___mutex_lock+0x10/0x10 [ 117.368381][ T5983] ? __pfx___cancel_work+0x10/0x10 [ 117.368396][ T5983] ? do_raw_spin_unlock+0x13c/0x8b0 [ 117.368415][ T5983] team_vlan_rx_kill_vid+0x36/0xe0 [ 117.368430][ T5983] vlan_vid_del+0x483/0x770 [ 117.368449][ T5983] vlan_device_event+0x23c/0x1e00 [ 117.368467][ T5983] ? br_device_event+0x28f/0xae0 [ 117.368478][ T5983] ? __pfx_phonet_device_notify+0x10/0x10 [ 117.368495][ T5983] ? __pfx_vlan_device_event+0x10/0x10 [ 117.368510][ T5983] ? __pfx_br_device_event+0x10/0x10 [ 117.368520][ T5983] ? raw_notifier+0x9d/0x740 [ 117.368531][ T5983] ? isotp_notifier+0xa4/0x6b0 [ 117.368545][ T5983] ? cgw_notifier+0xd8/0x3b0 [ 117.368557][ T5983] ? packet_notifier+0x76/0xa30 [ 117.368577][ T5983] notifier_call_chain+0x1a5/0x3f0 [ 117.368594][ T5983] dev_close_many+0x33e/0x4c0 [ 117.368607][ T5983] ? __pfx_dev_close_many+0x10/0x10 [ 117.368621][ T5983] unregister_netdevice_many_notify+0x628/0x2500 [ 117.368641][ T5983] ? lockdep_hardirqs_on+0x9d/0x150 [ 117.368654][ T5983] ? __local_bh_enable_ip+0x168/0x200 [ 117.368668][ T5983] ? batadv_tt_local_remove+0x119/0x230 [ 117.368686][ T5983] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 117.368697][ T5983] ? batadv_tt_local_remove+0x119/0x230 [ 117.368714][ T5983] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 117.368735][ T5983] ? unregister_netdevice_queue+0x2c4/0x400 [ 117.368753][ T5983] ? batadv_meshif_destroy_netlink+0x1e6/0x270 [ 117.368770][ T5983] default_device_exit_batch+0x7ff/0x880 [ 117.368786][ T5983] ? __pfx_default_device_exit_batch+0x10/0x10 [ 117.368799][ T5983] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 117.368818][ T5983] ? cfg802154_pernet_exit+0xc3/0xe0 [ 117.368835][ T5983] ? __pfx_default_device_exit_batch+0x10/0x10 [ 117.368848][ T5983] ops_undo_list+0x47f/0x8b0 [ 117.368862][ T5983] ? __pfx_ops_undo_list+0x10/0x10 [ 117.368877][ T5983] cleanup_net+0x530/0x940 [ 117.368891][ T5983] ? __pfx_cleanup_net+0x10/0x10 [ 117.368906][ T5983] ? process_scheduled_works+0x9cb/0x18e0 [ 117.368918][ T5983] process_scheduled_works+0xac3/0x18e0 [ 117.368940][ T5983] ? __pfx_process_scheduled_works+0x10/0x10 [ 117.368956][ T5983] ? assign_work+0x367/0x3d0 [ 117.368969][ T5983] worker_thread+0x870/0xd50 [ 117.368988][ T5983] ? __kthread_parkme+0x1a8/0x200 [ 117.369002][ T5983] ? __pfx_worker_thread+0x10/0x10 [ 117.369016][ T5983] kthread+0x7b7/0x940 [ 117.369032][ T5983] ? __pfx_worker_thread+0x10/0x10 [ 117.369045][ T5983] ? __pfx_kthread+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 117.369061][ T5983] ? __pfx_kthread+0x10/0x10 [ 117.369075][ T5983] ? __pfx_kthread+0x10/0x10 [ 117.369090][ T5983] ? __pfx_kthread+0x10/0x10 [ 117.369109][ T5983] ? _raw_spin_unlock_irq+0x23/0x50 [ 117.369127][ T5983] ? lockdep_hardirqs_on+0x9d/0x150 [ 117.369138][ T5983] ? __pfx_kthread+0x10/0x10 [ 117.369153][ T5983] ret_from_fork+0x4b/0x80 [ 117.369165][ T5983] ? __pfx_kthread+0x10/0x10 [ 117.369185][ T5983] ret_from_fork_asm+0x1a/0x30 [ 117.369200][ T5983] [ 117.756737][ T7207] netlink: 'syz.1.292': attribute type 27 has an invalid length. [ 118.255175][ T7190] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 118.255933][ T7099] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wg0": -EINTR [ 118.265801][ T5838] Bluetooth: hci3: command tx timeout [ 118.414178][ T7207] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 118.421349][ T7207] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 118.445707][ T7207] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.458916][ T7207] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.468022][ T7207] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.479297][ T7207] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.490219][ T7207] netdevsim netdevsim1 netdevsim0: unset [1, 1] type 2 family 0 port 20001 - 0 [ 118.507789][ T7207] netdevsim netdevsim1 netdevsim1: unset [1, 1] type 2 family 0 port 20001 - 0 [ 118.516855][ T7207] netdevsim netdevsim1 netdevsim2: unset [1, 1] type 2 family 0 port 20001 - 0 [ 118.526128][ T7207] netdevsim netdevsim1 netdevsim3: unset [1, 1] type 2 family 0 port 20001 - 0 [ 119.608959][ T5833] syz-executor (5833) used greatest stack depth: 19168 bytes left