last executing test programs: 1m0.294393517s ago: executing program 4 (id=1157): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket(0x15, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001240)=""/219, 0xdb}], 0x1}, 0x12121) bind$tipc(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYRES16=r2, @ANYBLOB], 0x160}, 0x1, 0x0, 0x0, 0x40040}, 0x840) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r3, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x1001, @none}, 0xe) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x20000800, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0xbf) shutdown(r5, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) getsockopt$bt_hci(r5, 0x84, 0x1b, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0xa, 0x0) 51.267753638s ago: executing program 4 (id=1157): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket(0x15, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001240)=""/219, 0xdb}], 0x1}, 0x12121) bind$tipc(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYRES16=r2, @ANYBLOB], 0x160}, 0x1, 0x0, 0x0, 0x40040}, 0x840) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r3, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x1001, @none}, 0xe) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x20000800, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0xbf) shutdown(r5, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) getsockopt$bt_hci(r5, 0x84, 0x1b, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0xa, 0x0) 40.51377809s ago: executing program 4 (id=1157): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket(0x15, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001240)=""/219, 0xdb}], 0x1}, 0x12121) bind$tipc(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYRES16=r2, @ANYBLOB], 0x160}, 0x1, 0x0, 0x0, 0x40040}, 0x840) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r3, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x1001, @none}, 0xe) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x20000800, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0xbf) shutdown(r5, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) getsockopt$bt_hci(r5, 0x84, 0x1b, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0xa, 0x0) 28.964030007s ago: executing program 4 (id=1157): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket(0x15, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001240)=""/219, 0xdb}], 0x1}, 0x12121) bind$tipc(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYRES16=r2, @ANYBLOB], 0x160}, 0x1, 0x0, 0x0, 0x40040}, 0x840) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r3, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x1001, @none}, 0xe) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x20000800, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0xbf) shutdown(r5, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) getsockopt$bt_hci(r5, 0x84, 0x1b, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0xa, 0x0) 23.577923315s ago: executing program 1 (id=2383): pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) (async) vmsplice(r1, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) close(r1) (async) close(r1) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0x2}, {0x1, 0xe}}}, 0x24}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xc, 0xd, &(0x7f0000000880)=ANY=[@ANYBLOB="180000000400000000000000ffffffff18150000", @ANYRES32=r4, @ANYBLOB="0000000000000000b708000000000000735af8ff00000000bfa200000000000007020000f8c799233603000008100000b704000000000000850000001e000000850000000500000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) splice(r0, 0x0, r1, 0x0, 0x10500, 0x0) 23.170646591s ago: executing program 1 (id=2385): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xf6, &(0x7f0000000000), &(0x7f0000000240)=0x4) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000080)=@broute={'broute\x00', 0x20, 0x2, 0xa5c, [0x0, 0x0, 0x0, 0x0, 0x0, 0x400000000740], 0x0, &(0x7f0000000040), &(0x7f0000000740)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xfffffffffffffffc, 0x2, [{0x9, 0x0, 0xf6, 'nr0\x00', 'veth0_to_bridge\x00', 'pim6reg\x00', 'wg0\x00', @broadcast, [0xff, 0xff, 0xff, 0xff, 0xff, 0xff], @multicast, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x886, 0x886, 0x8fe, [@u32={{'u32\x00', 0x0, 0x7c0}, {{[{[{0xc4, 0x3}, {0x7, 0x2}, {0x0, 0x3}, {0xfffffff7, 0x2}, {0x200, 0x3}, {0x9}, {0x6, 0x1}, {0x3}, {0xffffffff, 0x2}, {0x6}, {0x5, 0x3}], [{0x8, 0x5}, {0x7fff, 0x5}, {0x8c9, 0x4}, {0xac, 0x3}, {0x3, 0x8}, {0x24c, 0xfffffffd}, {0xffffff80, 0xffffff37}, {0x4, 0x669}, {0x8}, {0xffff0000, 0x5}, {0x4, 0x8}], 0x4}, {[{0x1, 0x2}, {0x7b, 0x2}, {0x8, 0x3}, {0x6}, {0x3, 0x3}, {0x5, 0x2}, {0x3}, {0x0, 0x2}, {0x5, 0x2}, {0x101, 0x2}, {0xffff, 0x2}], [{0xc, 0xffffff7f}, {0x2}, {0x9, 0x9}, {0x2, 0x3}, {0x1, 0x8001}, {0x0, 0xf}, {0x3, 0x7}, {0x2, 0x6}, {0x6, 0x8001}, {0x0, 0x9}, {0x63, 0x4}], 0xb, 0x1}, {[{0x2, 0x3}, {0x5, 0x3}, {0x2}, {0x4, 0x3}, {0x75bca67d, 0x1}, {0xffff}, {0xce, 0x2}, {0x5c29}, {0x8}, {0xffffffff}, {0xfffffffb, 0x1}], [{0x3, 0x1}, {0x1, 0x8}, {0x9b, 0x1}, {0x2, 0xec2}, {0xfffffff7, 0x1}, {0x2, 0x7ff}, {0x6, 0x8}, {0x6, 0x5}, {0x3, 0x7}, {0x3, 0x80}, {0x7, 0xae}], 0x5, 0xb}, {[{0x1, 0x1}, {0x200}, {0x7}, {0x8, 0x3}, {0x4, 0x2}, {0x7fff, 0x2}, {0x1ff, 0x1}, {0xa4}, {0x400, 0x1}, {0x5, 0x2}, {0x58, 0x2}], [{0xbc6e313, 0x10000}, {0xcaae, 0x8}, {0x6, 0x10001}, {0x2, 0x10000}, {0x6, 0xffffffff}, {0xffff, 0x80000000}, {0x6, 0x6}, {0x6, 0xe738}, {0xf7f, 0x14d}, {0x2, 0x162a}, {0x1, 0x7}], 0x5}, {[{}, {0x5, 0x1}, {0x6, 0x3}, {0x0, 0x1}, {0x6, 0x3}, {0x7}, {0x1ff, 0x1}, {0x7, 0x1}, {0x6, 0x3}, {0x6, 0x3}, {0x1000}], [{0x8, 0x3ff}, {0x9, 0x8}, {0x6, 0x5b4a}, {0xc, 0x3}, {0xbe2, 0xafe8}, {0x5, 0x4}, {0x9, 0x8}, {0x101, 0x5}, {0x10, 0x5}, {0x40c2, 0x2}, {0x2, 0x400}], 0x6, 0x3}, {[{0x3}, {0x1, 0x3}, {0x7, 0x1}, {0x3, 0x1}, {0xcaa, 0x3}, {0x0, 0x2}, {0x4, 0x2}, {0x1, 0x2}, {0xf11, 0x2}, {0x3, 0x1}, {0x7}], [{0x7, 0xd5}, {0x9, 0x1}, {0xa, 0xd4}, {0x3a}, {0x9, 0xb8}, {0x9, 0x2}, {0x789c}, {0x1, 0x6757}, {0xa8c7, 0xab}, {0xee8f, 0x6}, {0xe, 0x61}], 0x6}, {[{0x4}, {0x1cc, 0x1}, {0xbde0000, 0x2}, {0x2, 0x2}, {0x6, 0x2}, {0x8}, {0x5a}, {0x101}, {0x7, 0x3}, {0x6}, {0x5, 0x3}], [{0x5, 0x16}, {0x12000000, 0x7f}, {0xffffffa4, 0x1000000}, {0x9}, {0x9}, {0x8, 0xfffffffa}, {0x3, 0x9}, {0x3, 0xaa93}, {0x1, 0x9}, {0x100, 0x2}, {0x80, 0x8}], 0x3, 0x3}, {[{0x3, 0x3}, {0x4, 0x3}, {0x9, 0x3}, {0x18000000}, {}, {0x78f, 0x1}, {0x8, 0x2}, {0x6, 0x3}, {0x9, 0x3}, {0x7, 0x2}, {0xe50d}], [{0xffff, 0x5}, {0x8, 0xffff}, {0x80}, {0x101, 0x9}, {0x7f}, {0x6, 0x10000}, {0x32b, 0xdc}, {0x3e6a}, {0x3, 0x36}, {0x5, 0x6}, {0x83, 0x9}], 0x1, 0x9}, {[{0x0, 0x1}, {0x7, 0x2}, {0xbdf, 0x2}, {0x8}, {0x6}, {0x8}, {0x8, 0x3}, {0x101}, {0x80}, {0x3, 0x1}, {0xe}], [{0x5, 0x10000}, {0xb80, 0x29b7}, {0x9000, 0x7}, {0x4, 0x7}, {0x5, 0x1}, {0x4, 0xb}, {0x7, 0x5}, {0x4, 0x51f7}, {0x6, 0x8}, {0x7, 0x4}, {0x8, 0x6}], 0x2, 0x1}, {[{0xa8b, 0x2}, {0x8, 0x1}, {0x5}, {0x101, 0x1}, {0x81, 0x2}, {0x7, 0x3}, {0x7, 0x2}, {0x1800000, 0x2}, {0x0, 0x3}, {0x9}, {0x9, 0x1}], [{0x6, 0x7}, {0x80, 0xfffffffe}, {0x2, 0x61}, {0x8, 0x80000000}, {0x9, 0x6}, {0x7, 0x8}, {0x1000, 0xb90c}, {0xff, 0x81}, {0xa39, 0x9}, {0xd, 0xffff}, {0x8001, 0xdc2}], 0xa, 0x2}, {[{0x8, 0x3}, {0x98}, {0x7, 0x1}, {0x1000, 0x3}, {0x3, 0x2}, {0x1}, {0x4}, {0xa8, 0x1}, {0x1ff, 0x3}, {0x401, 0x2}, {0x9, 0x3}], [{0x400, 0x6}, {0x7, 0x7fff}, {0x1, 0x9}, {0x7f, 0x5}, {0x4, 0xd}, {0x8, 0x2}, {0x9, 0x7}, {0x1}, {0x3, 0x7}, {0x10001, 0x7762745c}, {0x2, 0x6}], 0xb, 0x9}], 0x8, 0x1}}}, @cgroup0={{'cgroup\x00', 0x0, 0x8}, {{0x81, 0x1}}}], [], @common=@nflog={'nflog\x00', 0x50, {{0xa, 0x6, 0x7, 0x0, 0x0, "dd0aad2642d029cc9fe7bc07bd6341a3885a7d146f19c6b950375b50c39ef688edcb4148f40cce0548ab94863092232f45e3c04b7c6c1e951b4e07c6ec4e1a5a"}}}}, {0x5, 0x4, 0x22f0, 'veth1_to_team\x00', 'vxcan1\x00', 'syz_tun\x00', 'xfrm0\x00', @broadcast, [0x0, 0xff, 0xff, 0xff, 0xff], @broadcast, [0x0, 0xff, 0xff, 0xff], 0x9e, 0x9e, 0xce, [@state={{'state\x00', 0x0, 0x8}, {{0xfffffffb}}}], [], @common=@redirect={'redirect\x00', 0x8, {{0xffffffffffffffff}}}}]}, {0x0, '\x00', 0x2, 0xffffffffffffffff}]}, 0xad4) (async) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f67fe4)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x4f23, 0x6, @ipv4={'\x00', '\xff\xff', @remote}, 0xb}, 0x1c) syz_emit_ethernet(0x3a, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c200000000000000000008004500002c0000000000119078b000000018e000000100004e20001890780400"/59], 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@bloom_filter={0x1e, 0x7f, 0xffffffc1, 0x0, 0x222e, 0xffffffffffffffff, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x80000000, 0x5, @void, @value, @void, @value}, 0x48) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003e40)=ANY=[@ANYBLOB="d41b00003b0007010000000000000000027c00000400fc801000018054717f8008213700", @ANYRES32], 0x1bd4}}, 0xc000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'vcan0\x00'}) (async) r4 = socket(0x1, 0x803, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r4) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'bond0\x00'}) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b3f2}) (async) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x20702, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000080)={'syzkaller0\x00', 0xca58c30f81b6079f}) ioctl$TUNSETQUEUE(r7, 0x400454d9, &(0x7f0000000280)={'veth1_to_bridge\x00', 0x400}) (async) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000001480)={'geneve0\x00', 0x400}) (async) close(r7) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) sendmsg$IPSET_CMD_TEST(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="800000000b0601020000000000000000030000000900020073797a300000000005000100070000004c0008800c00078007001a00242e0000100007800c0018400000000000000009100007800c001b4000000000000000100c00078008000a400000ffff100007800c00028008000140ac1414aa0c000780080003"], 0x80}}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004"], 0x528}}, 0xc000) 22.877568437s ago: executing program 1 (id=2389): unshare(0x8000400) (async) setsockopt$inet_mreqsrc(0xffffffffffffffff, 0x0, 0x24, 0x0, 0x0) (async) r0 = socket(0x2, 0xa, 0x1000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000780)={r0, 0x28c0000, 0x8001, 0xebe9}) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f00000007c0)={'wg1\x00', 0x0}) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000840)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', r1, 0x0, 0xfffffff8, 0x0, 0x1, 0x0, @void, @value, @void, @value}, 0x50) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000140)={'filter\x00', 0x7, 0x4, 0x3c0, 0x2d8, 0x1f0, 0x0, 0x108, 0x2d8, 0x2d8, 0x4, 0x0, {[{{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0xa00}}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE2={0x28}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x410) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={0x1, 0xffffffffffffffff}, 0x4) r4 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000005c0)='memory.stat\x00', 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{0x1, 0xffffffffffffffff}, &(0x7f0000000680), &(0x7f00000006c0)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xd, 0x21, &(0x7f0000000a40)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @btf_id={0x18, 0x6, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x5, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r4}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xd}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r5}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @sock_ops, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, @void, @value}, 0x94) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x4, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="18020000339a00000000000000000000850000002e00000085000000d000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x0, 0x28, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_inet6_SIOCDELRT(r0, 0x890c, &(0x7f00000003c0)={@local, @private0={0xfc, 0x0, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x43}, 0x0, 0x1, 0xffff, 0x100, 0x3, 0xe00000}) socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0xffffffffffff8000, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x3000004, 0x3032, 0xffffffffffffffff, 0x0) unshare(0x22020600) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r8, 0x86, &(0x7f0000002600)}, 0x10) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000740)='./cgroup/syz1\x00', 0x200002, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r7, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) 22.63215816s ago: executing program 1 (id=2392): r0 = socket(0x1e, 0x4, 0x0) connect$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000006c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000180000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8fe00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b300000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001100)={0x2c, r4, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0x8, 0x34, @random="2a1cb3e2"}, @crypto_settings=[@NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_SAE_PASSWORD={0x4}]]}, 0x2c}, 0x1, 0x0, 0x0, 0x8894}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="5d5b0000000000001c001a8018000a8014000700fe88000000000000000000000000010114003500776731"], 0x50}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0x12, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="18000000000000000000000000000000711414000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$kcm(0xa, 0x922000000003, 0x11) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$GTP_CMD_NEWPDP(r7, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(r0, &(0x7f0000004400), 0x400000000000203, 0x0) 22.346879845s ago: executing program 1 (id=2394): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) socketpair(0x1e, 0x4, 0x0, &(0x7f0000002680)={0xffffffffffffffff}) sendmmsg(r2, &(0x7f0000005fc0)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000140)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, 0x0}}], 0x2, 0x200480c1) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000ec0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000480)={0x2c, r1, 0x1, 0x0, 0x25dfdbff, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_KEY={0x10, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0xc, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}]}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4080}, 0x810) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @batadv={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BATADV_ALGO_NAME={0x10, 0x1, 'BATMAN_IV'}]}}}]}, 0x44}}, 0x0) bpf$MAP_CREATE(0x24, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'/20, @ANYRES32, @ANYBLOB="0000000100"/20, @ANYRES32=0x0, @ANYRES32], 0x48) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) pipe(0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x20040810) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x80, 0x0) read$alg(0xffffffffffffffff, &(0x7f0000000140)=""/103, 0x67) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_DISABLE(r8, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)={0x14, r9, 0x41, 0x70bd27, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x24004001}, 0x804) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x19, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_DELETE_ELEM(0x4, 0x0, 0x0) sendmsg$GTP_CMD_GETPDP(r5, &(0x7f0000000300)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x5c, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@GTPA_TID={0xc, 0x3, 0x2}, @GTPA_FLOW={0x6, 0x6, 0x1}, @GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_O_TEI={0x8}, @GTPA_NET_NS_FD={0x8}, @GTPA_PEER_ADDRESS={0x8, 0x4, @local}, @GTPA_MS_ADDR6={0x14, 0xc, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000040}, 0x44) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)={0xa0, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x5b, 0xe, {{{}, {}, @broadcast, @broadcast, @random="b138179a5987"}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ibss_ssid}, @void, @val={0x3, 0x1, 0xb8}, @void, @void, @void, @void, @val={0x2a, 0x1, {0x0, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x1, 0x6, 0x0, {0x9, 0xc9, 0x0, 0x7, 0x0, 0x1, 0x0, 0x2, 0x1}, 0x8, 0xb, 0x4}}, @void, @val={0x71, 0x7, {0x0, 0x0, 0x1, 0x0, 0x2, 0x6, 0x61}}, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_FTM_RESPONDER={0x10, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x5, 0x2, "19"}]}]]}, 0xa0}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140707000000000000000005000000000000000108000a00", @ANYRES32], 0x58}}, 0x0) 21.997659938s ago: executing program 1 (id=2400): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x1e, 0x4, 0x0) unshare(0x400) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"6957608d766cfff5c3a665bd121a2d89", 0x0, 0x0, {0x4, 0x40000a}, {0x7, 0x5}, 0x5, [0x3, 0x3, 0x5, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x7, 0x80000000, 0x81, 0x10, 0x522586f, 0xfffffffffffffffb, 0x400000000000001]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r1) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0, 0x0, r1}, 0x10) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x385e9000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50125bd70000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="8f3e0000e0000001000000003c0000000000000086dd"], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000400200000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bca900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xffd, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 21.766811368s ago: executing program 32 (id=2400): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000fdffffff850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x1e, 0x4, 0x0) unshare(0x400) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000000c0)={"6957608d766cfff5c3a665bd121a2d89", 0x0, 0x0, {0x4, 0x40000a}, {0x7, 0x5}, 0x5, [0x3, 0x3, 0x5, 0x6, 0x0, 0x400, 0xffffffffffff0001, 0x2, 0x8, 0x7, 0x80000000, 0x81, 0x10, 0x522586f, 0xfffffffffffffffb, 0x400000000000001]}) poll(&(0x7f0000000000), 0x20000000000000b5, 0x9) r1 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0), 0x8) close(r1) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000005c0)={r1, r0, 0x0, r1}, 0x10) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x385e9000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005400e50125bd70000000000007000000", @ANYRES32, @ANYBLOB="20000100", @ANYRES32, @ANYBLOB="8f3e0000e0000001000000003c0000000000000086dd"], 0x38}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000400200000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bca900000000000055090100000000009500000000000000bf91000000000000b7020000020000008500000000000000b70000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0xffd, &(0x7f0000001e40)=""/4093, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 17.266875679s ago: executing program 4 (id=1157): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket(0x15, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001240)=""/219, 0xdb}], 0x1}, 0x12121) bind$tipc(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYRES16=r2, @ANYBLOB], 0x160}, 0x1, 0x0, 0x0, 0x40040}, 0x840) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r3, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x1001, @none}, 0xe) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x20000800, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0xbf) shutdown(r5, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) getsockopt$bt_hci(r5, 0x84, 0x1b, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0xa, 0x0) 6.58747457s ago: executing program 5 (id=2480): r0 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000001b518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0xfbfffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r3, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@ipv6_newnexthop={0x1c, 0x68, 0x5fb9a818fb7378e9, 0x0, 0x0, {}, [@NHA_BLACKHOLE={0x4}]}, 0x1c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x34}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=@newnexthop={0x24, 0x68, 0x1, 0x2, 0x7ffffffc, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x4000) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x0, 0x150, 0x150, 0x0, 0x90a, 0x388, 0x238, 0x238, 0x388, 0x238, 0xf, 0x0, {[{{@uncond, 0x500, 0x100, 0x160, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x0, 0x0, 0x8000000, 0x12c00, 0x7, 0x0, 0xac}}}]}, @common=@inet=@HMARK={0x60, 'HMARK\x00', 0x0, {@ipv4=@remote}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b8", @ANYRES32, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0xfffffffffffffda3, &(0x7f0000000180)={&(0x7f0000000200)=@delnexthop={0x20, 0x69, 0xb, 0x0, 0x0, {}, [{0x8, 0x1, 0x1}]}, 0x20}}, 0x4000000) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000080)={&(0x7f0000000200)={0x110, r10, 0x100, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xfffffff8, 0x5c}}}}, [@NL80211_ATTR_IE={0xee, 0x2a, [@link_id={0x65, 0x12, {@random="fd34adf6b87f", @broadcast}}, @preq={0x82, 0x62, {{0x1, 0x0, 0x1, 0x0, 0x1}, 0x2, 0xd, 0x7, @broadcast, 0x1, @value=@broadcast, 0xfffffff7, 0x100, 0x6, [{{0x1}, @device_a, 0x3}, {{0x1}, @device_b, 0x3}, {{0x0, 0x0, 0x1}, @device_a, 0x80000001}, {{0x1}, @device_b, 0x3}, {{0x1, 0x0, 0x1}, @broadcast, 0x5}, {{}, @device_b, 0x9}]}}, @cf={0x4, 0x6, {0x67, 0x8, 0x1ff, 0x8}}, @random={0x7, 0x68, "f348c84930819842606491d192641dac1be6f85f95715b7259163d43239088a6a37c19a012215a2d234253d821bf2f4bf920703aec9825abe4ac428f145280419563423b44fbe96cc60a7ff6fe0cfd6e86c2c045228a9038c99388be0ac0f86f7ae8749b70b5f992"}]}]}, 0x110}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) sendmsg$nl_route_sched(r9, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newqdisc={0x8c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xd}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x53, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x40000003, 0xe0, 0x0, 0x4c, 0x1, 0x7, 0x1ff, 0x9, 0x1}}}}, @TCA_STAB={0x34, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x6, 0xf0, 0xfffff818, 0x2, 0x2, 0xfffffff8, 0x7}}, {0x12, 0x2, [0x8, 0x80, 0x6, 0x3, 0x401, 0xfd, 0x7]}}]}]}, 0x8c}}, 0x0) 6.296635778s ago: executing program 2 (id=2483): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000280)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x9}, 0x1c) sendto$inet6(r1, 0x0, 0x0, 0x20008145, &(0x7f0000000040)={0xa, 0x4e23, 0x10, @local, 0xf5}, 0x18) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000140)=ANY=[@ANYBLOB="2105000b1e85b11c60b113000011"], 0x0) listen(r3, 0x18002) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x8e) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) pipe(&(0x7f0000000100)) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x1, 0x0, {0xa, 0x0, 0x80, 0x0, 0x0, 0x7}, [@IFAL_ADDRESS={0x14, 0x1, @mcast2}]}, 0x30}}, 0x4040090) writev(r7, &(0x7f00000000c0)=[{&(0x7f0000000000)="580000001400192340834b80040d8c560a067fbc45ff810500000000000058000b480400945f6400947e570028925a01000000000000008000f0fffeffe809000000fff5dd0000001000010002081000418e00000004fcff", 0x58}], 0x1) 6.170882905s ago: executing program 5 (id=2484): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002040)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000340)='syzkaller\x00', 0x4, 0x0, 0x0, 0x41000, 0xf, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0xa042, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x18, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000440)={'macsec0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_buf(r4, 0x6, 0x1a, 0x0, &(0x7f0000000000)) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)={0x18, r7, 0x1, 0x70bd2a, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000044}, 0x8000) sendto$inet6(r4, &(0x7f0000000480)="22f6242af80ddd124ab9ee9719ab33ec3dbc4993f813a222efe747599aa5e271f5bf9b9ffa7d932d7955707b2b3148f055280b3b5be0fc686b8902e4d4c429bef7ea38ecba5e76798520d3d80b73a44591e1e71fa31c7d2f35b3db130273484c46d49a2851961db943cc96b224d0fb0565f0e743536e7559361564d6d328533a07257ca458f477334018f67fee1ddaa290de985ffccbe3e9f402876946e64b021519a02b177084cb1f60985b52b16d5f4c5465d0792c0ba5bc97490e816543ff1171bdfbb7d5457688ffc21443eb7d5c51c98fd9c0901ae1131226692d933d9e6920e512893a077a9ef3bdd8939c466b624996178663316027a4", 0xfa, 0x4000000, &(0x7f0000000300)={0xa, 0x4e22, 0x8, @private1, 0x7f}, 0x1c) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_DISCONNECT(r5, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_DEAD_CONN_TIMEOUT={0xc}, @NBD_ATTR_SERVER_FLAGS={0xc, 0x5, 0x1}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0x5b5}, @NBD_ATTR_SOCKETS={0x14, 0x7, 0x0, 0x1, [{0x8, 0x1, r8}, {0x8, 0x1, r9}]}]}, 0x58}, 0x1, 0x0, 0x0, 0x804}, 0x400c045) syz_genetlink_get_family_id$nbd(&(0x7f00000002c0), r6) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r11 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002280)={&(0x7f0000002100)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0xb, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x2, 0x1000}}, @ptr={0x4, 0x0, 0x0, 0x2, 0x2}, @func={0x1, 0x0, 0x0, 0xc, 0x2}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x2}, @float={0x3, 0x0, 0x0, 0x10, 0x10}]}, {0x0, [0x30, 0x61, 0x30, 0x5f, 0x0, 0x7f, 0x2e, 0x5f, 0x30]}}, &(0x7f0000002180)=""/250, 0x6b, 0xfa, 0x1, 0x7, 0x0, @void, @value}, 0x28) r12 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002080)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r11, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000000)={r10, r12}, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r13}]}, 0x4c}, 0x1, 0xba01}, 0x0) 6.035136596s ago: executing program 2 (id=2486): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socket$xdp(0x2c, 0x3, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = socket$inet6(0xa, 0x3, 0x9) ioctl$sock_SIOCINQ(r2, 0x541b, &(0x7f0000000300)) (async, rerun: 32) readv(r0, &(0x7f0000000000), 0x0) (async, rerun: 32) connect$unix(r0, &(0x7f0000000140)=@abs, 0x6e) 4.994808599s ago: executing program 3 (id=2490): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl0\x00', 0x0, 0x29, 0xa, 0x6, 0x3, 0xec87bb707f89db58, @mcast2, @private0, 0x40, 0x80, 0x7ff, 0x6}}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000180)=0x14) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f00000001c0)=0x0, &(0x7f0000000200)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000002c0)={'tunl0\x00', &(0x7f0000000240)={'sit0\x00', 0x0, 0x7, 0x40, 0xc0000, 0x1, {{0xa, 0x4, 0x2, 0x19, 0x28, 0x67, 0x0, 0x4, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@timestamp_addr={0x44, 0x14, 0x3b, 0x1, 0x2, [{@local, 0xc}, {@dev={0xac, 0x14, 0x14, 0x12}, 0xffffffe8}]}]}}}}}) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000380)={0x1, 0x58, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000004c0)={'erspan0\x00', &(0x7f00000003c0)={'ip_vti0\x00', 0x0, 0x700, 0x10, 0x6, 0x2, {{0x2a, 0x4, 0x1, 0x38, 0xa8, 0x67, 0x0, 0x4, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x1f}, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}, @rr={0x7, 0x13, 0x5e, [@dev={0xac, 0x14, 0x14, 0x4}, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0xb, 0xa6, [@remote, @remote]}, @timestamp_addr={0x44, 0x1c, 0x74, 0x1, 0x9, [{@remote, 0x40}, {@private=0xa010102, 0xa505}, {@broadcast, 0x9}]}, @timestamp_prespec={0x44, 0x34, 0x98, 0x3, 0x2, [{@private=0xa010102, 0x6}, {@local, 0x3}, {@multicast2, 0x5}, {@remote, 0xc691}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@multicast2, 0x2}]}, @noop, @ssrr={0x89, 0xb, 0x5f, [@rand_addr=0x64010100, @broadcast]}, @rr={0x7, 0x13, 0xc2, [@multicast2, @local, @broadcast, @local]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000500)={'team0\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000005c0)={'ip_vti0\x00', &(0x7f0000000540)={'gretap0\x00', 0x0, 0x0, 0x7, 0x8, 0x91, {{0xa, 0x4, 0x1, 0x6, 0x28, 0x65, 0x0, 0x1, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty, {[@timestamp={0x44, 0x14, 0x50, 0x0, 0x0, [0xd, 0x1ff, 0x8000000, 0x6]}]}}}}}) sendmsg$ETHTOOL_MSG_FEATURES_GET(r0, &(0x7f0000000780)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000740)={&(0x7f0000000600)={0x120, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x57277eb35b4b6996}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}]}, @HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x81}, 0x44810) r11 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001840)='cgroup.stat\x00', 0x0, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000001a40)={0xffffffffffffffff, 0x20, &(0x7f0000001a00)={&(0x7f00000018c0)=""/3, 0x3, 0x0, &(0x7f0000001900)=""/242, 0xf2}}, 0x10) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000001c80)={0x20, 0xf, &(0x7f0000001a80)=@raw=[@tail_call, @initr0={0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, @ldst={0x3, 0x1, 0x2, 0x8cd4d462b12ae766, 0xa, 0x6, 0xfffffffffffffff0}, @ringbuf_query, @generic={0x70, 0x7, 0x0, 0xb, 0x4}, @map_idx={0x18, 0xb, 0x5, 0x0, 0xc}], &(0x7f0000001b00)='syzkaller\x00', 0x365, 0x8d, &(0x7f0000001b40)=""/141, 0x861478a6ab706a57, 0x21, '\x00', r9, @netfilter, 0xffffffffffffffff, 0x8, &(0x7f0000001c00)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000001c40)={0x0, 0xc, 0x80, 0x5}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2da0e09b, @void, @value}, 0x94) r14 = bpf$MAP_CREATE(0x0, &(0x7f0000001d40)=@bloom_filter={0x1e, 0x4, 0x6, 0x4, 0x0, 0x1, 0x7, '\x00', r10, 0xffffffffffffffff, 0x5, 0x1, 0x0, 0x9, @void, @value, @void, @value}, 0x50) r15 = openat$cgroup_ro(r0, &(0x7f0000001dc0)='memory.swap.events\x00', 0x0, 0x0) r16 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000001e00)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x40, '\x00', r2, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r17 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000001e80)={r6, 0x5, 0x10}, 0xc) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001f40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001ec0), &(0x7f0000001f00)='%ps \x00'}, 0x20) r19 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001f80)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x4, '\x00', r5, 0xffffffffffffffff, 0x4, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) pipe(&(0x7f0000002000)={0xffffffffffffffff, 0xffffffffffffffff}) r21 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002080)=@o_path={&(0x7f0000002040)='./file0\x00', 0x0, 0x4018, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000002100)={0x6, 0x8, &(0x7f00000007c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x1}, [@jmp={0x5, 0x1, 0xf77b139142055d8e, 0x1b, 0xb, 0xffffffffffffffff, 0xfffffffffffffffc}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, 0x1}}]}, &(0x7f0000000800)='GPL\x00', 0x7f, 0x1000, &(0x7f0000000840)=""/4096, 0x41000, 0xc, '\x00', r7, @xdp=0x25, r11, 0x8, &(0x7f0000001880)={0x7, 0x4}, 0x8, 0x10, 0x0, 0x0, r12, r13, 0x0, &(0x7f00000020c0)=[r14, r15, r16, r17, r18, r19, r20, r21], 0x0, 0x10, 0x6, @void, @value}, 0x94) r22 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f00000021c0), &(0x7f0000002200)=0x10) shutdown(r22, 0x1) syz_genetlink_get_family_id$mptcp(&(0x7f0000002240), r20) socket$inet6(0xa, 0x2, 0x1) sendmsg$nl_crypto(r20, &(0x7f0000002400)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000023c0)={&(0x7f00000022c0)=@alg={0xe0, 0x10, 0x8, 0x70bd26, 0x25dfdbfb, {{'drbg_nopr_hmac_sha256\x00'}}}, 0xe0}, 0x1, 0x0, 0x0, 0x8005}, 0x880) r23 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002480), r11) sendmsg$NL80211_CMD_SET_WIPHY_NETNS(r11, &(0x7f0000002600)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f00000025c0)={&(0x7f0000002540)={0x64, r23, 0x100, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2f}, @void, @val={0xc, 0x99, {0x9, 0x11}}}}, [@NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WDEV={0xc, 0x99, {0x3, 0x1e}}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x26}, @NL80211_ATTR_NETNS_FD={0x8, 0xdb, r20}, @NL80211_ATTR_PID={0x8}, @NL80211_ATTR_WIPHY={0x8, 0x1, 0x3f}]}, 0x64}, 0x1, 0x0, 0x0, 0x4000800}, 0x890) 4.992578666s ago: executing program 2 (id=2491): r0 = socket$kcm(0x23, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={&(0x7f0000000000)=@phonet, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000080)="b8", 0x1ff48}], 0x1}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f0000000180), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$smc(&(0x7f0000000280), r3) getsockname$packet(r3, &(0x7f00000008c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000000)=0x14) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r5, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="31030000000000da4b000900000004000300", @ANYRES32=0x0, @ANYBLOB], 0x1c}}, 0x0) sendmsg$FOU_CMD_ADD(r1, &(0x7f0000000440)={0x0, 0xffffff7f, &(0x7f0000000340)={&(0x7f0000000180)=ANY=[@ANYBLOB='4A\x00\x00', @ANYRES16=r2, @ANYBLOB="090200000000000000000100000008000600ac1414aa08000b00", @ANYRES32=r4, @ANYBLOB="08000800e000000106000a004e200000"], 0x34}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000200)=0x14) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r7, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000680)=[@in={0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e24, @remote}]}, &(0x7f0000000080)=0x6a) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r7, 0x84, 0x66, &(0x7f00000001c0)={r8, 0x9}, &(0x7f00000002c0)=0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0b0400000000000000000200000058000480240001800b000100736f636b65740000140002800800024000000003080001400000000230000180080001006e6174002400028008000640000000030800054000000003080001400000000008000240000000020900010073797a30000000000900020073797a32"], 0xac}}, 0x0) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @dev, @local}, &(0x7f0000000280)=0xc) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000002c0)) syz_emit_ethernet(0x52, &(0x7f0000000380)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004c0000440000000000059078ac1414002a5fe740440c05030000030000000000830be0000001940200"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c00000090780000"], 0x0) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r10, 0x0, 0x60, &(0x7f0000000240)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={0xffffffffffffffff, 0xe0, &(0x7f00000004c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000000300)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x2, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x5b, &(0x7f00000003c0)=[{}, {}], 0x10, 0x10, &(0x7f0000000400), &(0x7f0000000440), 0x8, 0x10, 0x8, 0x8, &(0x7f0000000480)}}, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000640)={'wg1\x00'}) 4.910105262s ago: executing program 5 (id=2492): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000380)={0x1f, 0xffff}, 0x6) write(r0, &(0x7f0000000000)='\\\x00\x00\x00', 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0a0000000600000004000000b4"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r1}, &(0x7f0000000440), &(0x7f0000000480)}, 0x20) bpf$MAP_DELETE_ELEM(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000100), 0x20000000}, 0x20) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x4, 0x4, &(0x7f0000000500)=@framed={{0x18, 0x2, 0x0, 0x0, 0xffff}, [@call={0x85, 0x0, 0x0, 0x54}]}, &(0x7f0000000000)='syzkaller\x00', 0x1, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f00000000c0)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1007, &(0x7f0000000880)=""/4103, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xc6) 4.814876999s ago: executing program 2 (id=2493): r0 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000440)={'veth1_macvtap\x00', &(0x7f0000000000)=@ethtool_rxfh_indir={0x38, 0x3, [0x8, 0x310, 0xe]}}) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r2 = accept4$x25(0xffffffffffffffff, &(0x7f00000001c0)={0x9, @remote}, &(0x7f0000000200)=0x12, 0x80000) ioctl$SIOCX25SFACILITIES(r2, 0x89e3, &(0x7f0000000280)={0x19, 0x4000004, 0x4, 0x1, 0x4}) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x14, r1, 0x10, 0x70bd29, 0x25dfdbfd, {{}, {@void, @void}}, ["", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x240080c4}, 0x10) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000040)={'vxcan1\x00', 0x400}) 4.685530776s ago: executing program 5 (id=2495): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r1, 0x0, 0x482, &(0x7f0000000000)={0x11, @broadcast, 0x0, 0x0, 'none\x00', 0x0, 0xfffffffc}, 0x2c) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x34, 0x10, 0x437, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r4, 0x54583, 0x1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x4}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000000)={0x10003, 0x0, 0xd7c4, 0xfffffff9}, 0x10) write(r5, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) sendmmsg$inet(r0, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty}}}], 0x20}}], 0x1, 0x80) 4.661617239s ago: executing program 3 (id=2496): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=ANY=[@ANYBLOB="7c0900003d0007010000690896200000017c00000400fc800c00018006000600800a000058090280080018"], 0x97c}}, 0x4010) (async, rerun: 32) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001740)={0x20, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0xc, 0x18, 0x0, 0x1, [@generic="02ac0f000dac0f00"]}]}, 0x20}], 0x1}, 0x0) 4.546706785s ago: executing program 2 (id=2497): unshare(0x6a040000) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="18050000000000fe000000004b64ffec850000007d000000040000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0xc) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_SETPARAMS(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="080027bd7000ffdbdf252500000005002b000100000005002a000100000005002e21070000000c002cf00200aaaaaaaaaaaa05002b000000000006000400a2aa00003b5cad19efd9bda9e983c778ab24f339dfde405316b5dff9770ac3fa5b7506db5be0a9f3007999300c710225f052bb3f46fd3d59b6e993d44965284be6abf31f9d77f9da4b0ff9177fd5a0060024c2f56e14f310985244394b22aacdd0eab798e70b3935ef2abc69ec7e1191d147bf75d0"], 0x48}, 0x1, 0x0, 0x0, 0x4044000}, 0x4000) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), r1) (async) r3 = socket(0x18, 0x0, 0xffffffff) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@ipv4_newrule={0x28, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, [@FRA_TUN_ID={0xc, 0xc, 0x1, 0x0, 0xe000000000000000}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x40) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r6, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x338, 0x0, 0x68, 0x0, 0x0, 0x0, 0x2a0, 0x1f0, 0x1f0, 0x2a0, 0x1f0, 0x3, 0x0, {[{{@ip={@private, @broadcast, 0x0, 0x0, 'hsr0\x00', 'wg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@local, @broadcast, 0x0, 0x0, 'batadv_slave_1\x00'}, 0x0, 0x1e8, 0x208, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x7, 0x100, 0x20, 0x11, 0x3, 0x4, 0x1, 0x20, 0x18}, {0x1}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) (async) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x40, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x0, 0xb, 0x5}}}}]}, 0x40}}, 0x0) (async) sendmsg$NET_DM_CMD_START(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)={0x14, r2, 0x1, 0x70bd25}, 0x14}}, 0x0) r7 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000040), 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f00000000c0)={r7, r0, 0x0, r0}, 0x10) (async) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) clock_gettime(0x5, &(0x7f0000000700)) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x4001, 0x3, 0x1c0, 0x98, 0xb, 0x148, 0x0, 0x148, 0x128, 0x240, 0x240, 0x128, 0x215, 0x3, 0x0, {[{{@ip={@rand_addr=0x64010101, @local, 0x0, 0xff000000, 'macvtap0\x00', 'veth0_to_bond\x00'}, 0x2e8, 0x70, 0x98, 0x0, {0xff0f000000000000}}, @common=@unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x4, 0xc16}}}, {{@uncond, 0xec010000, 0x70, 0x90}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x220) (async) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r9, &(0x7f0000000180)={0x1a, 0x0, 0xfc, 0x8, 0x0, 0x0, @multicast}, 0x10) r10 = epoll_create1(0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, 0x0, 0x300}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4, 0x102}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x8044) (async, rerun: 32) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="1f00000000000000000000000010000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00<\x00'/28], 0x48) (rerun: 32) ppoll(&(0x7f0000000000)=[{r10, 0x2003}, {r10, 0xf401}, {}], 0x3, 0x0, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r10, 0x1, r12, &(0x7f0000000480)={0x68000005}) 4.531564427s ago: executing program 4 (id=1157): socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001c40)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000140)=@req3={0x7813, 0x3, 0x0, 0x81, 0x1ff, 0x1, 0x1}, 0x1c) r1 = socket$packet(0x11, 0x1, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x8001}, 0x4) sendmmsg(r0, &(0x7f00000030c0)=[{{0x0, 0xa9cc7003, &(0x7f0000000400)=[{&(0x7f00000000c0)="ee", 0x101d0}], 0x1}}], 0x400000000000181, 0x9200000000000000) socket(0x15, 0x5, 0x0) recvmsg$unix(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001240)=""/219, 0xdb}], 0x1}, 0x12121) bind$tipc(r0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_SET(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[@ANYRES16=r2, @ANYBLOB], 0x160}, 0x1, 0x0, 0x0, 0x40040}, 0x840) r3 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r3, 0x10c, 0x3, &(0x7f0000000040), 0x4) connect$llc(r3, &(0x7f00000004c0)={0x1a, 0x1, 0xc0, 0x1, 0x3f, 0x0, @remote}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r4, &(0x7f0000000000)={0x1f, 0x1001, @none}, 0xe) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xb, 0x3, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendto$inet6(r5, &(0x7f00000001c0)="c2", 0x1, 0x20000800, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0xbf) shutdown(r5, 0x1) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_BATCH(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) getsockopt$bt_hci(r5, 0x84, 0x1b, &(0x7f0000002140)=""/4092, &(0x7f0000001080)=0xffc) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_rdma(0x10, 0x3, 0x14) socket$inet(0x2, 0xa, 0x0) 2.514622366s ago: executing program 3 (id=2500): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0xd, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r1], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000880)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a0b040000000000000000020000000900010073797a31000000004dfc020073797a3100000000140000001100010000000100000000000000000a9e62a2e2e4630beef87228f22567bf7fd04d7e2386936ac9a57147a194e49a9bcedd5874e93980f02966e24726fbee3c7cacbd77cbbe464338de64dfd7062651d4662780a794f7f0f5546e09a87bbc6cc1d59fb2b56058a6d526def022b0163cf817a1064f6bd66e452ea8527428b81f7c966874802f3dd0d343be6c9f7a41f927609be3277913"], 0x54}}, 0x10) connect$inet6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x19) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000800)={0xffffffffffffffff, 0xe0, &(0x7f0000000700)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f00000002c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xa6, &(0x7f0000000580), 0x0, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x76, 0x8, 0x8, &(0x7f00000006c0)}}, 0x10) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000009c0)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000980)={&(0x7f0000000a00)=ANY=[@ANYBLOB="a000000098fad383d97b2b6822d5f38951af4e444546a50447b44a4f12de8e360f80b3a4c280000000", @ANYRES16=r0, @ANYBLOB="00032dbd7000fcdbdf25440000000c009900070000000c00000008006b000f000000040023800400bf000400080168005a80640002801900010012180c60160301180304240548046c6016051616040000000f000200434f491a0c4c36353e5430000d0001001b18480424303612180000000500020015000000070002001934450014000300ffff0600f500001401000038040087ff0400cc00"], 0xa0}, 0x1, 0x0, 0x0, 0x100000d1}, 0x4000000) connect$pppl2tp(r3, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) socket$inet6_udp(0xa, 0x2, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb010789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a9"], 0xfdef) r6 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r6, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) ioctl$sock_bt_hidp_HIDPCONNADD(0xffffffffffffffff, 0x400448c8, &(0x7f0000000340)={r5, r5, 0x3fb, 0x0, 0x0, 0x82, 0xca, 0x15c2, 0x5886, 0x9a8b, 0x0, 0x8, 'syz1\x00'}) connect$pppl2tp(r3, &(0x7f0000000840)=@pppol2tpv3={0x18, 0x1, {0x0, r1, {0x2, 0x4e20, @loopback}, 0x4, 0x0, 0x1}}, 0x2e) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r2, 0x0, 0x0, 0x800) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x2b8, 0x180, 0xa, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00', {}, {}, 0x21}, 0x0, 0x118, 0x180, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'lo\x00', {0x0, 0x0, 0x1ff, 0x0, 0x0, 0xed, 0x7}}}, @common=@inet=@multiport={{0x50}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) sendmmsg$alg(r7, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000c00)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b00)={0xa4, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x40, 0x7, 0x0, 0x1, [@IPSET_ATTR_PROTO={0x5, 0x7, 0x62}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x5}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x6}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x6}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x7}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0xa4}, 0x1, 0x0, 0x0, 0x80da0df3753871db}, 0x20004000) 2.301701724s ago: executing program 5 (id=2501): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0x12, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000061123c00000000009500000000000000dfcc5b32811c079b2d7f5064d172cb15e5e99402ed39efb7e3bcc505027f5ecddc4ce689998077e79a6cbf140c3dcca0260d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x80, 0x7800, 0x10001, 0x3, {{0x18, 0x4, 0x0, 0x1e, 0x60, 0x68, 0x0, 0x1d, 0x29, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @rand_addr=0x64010102, {[@end, @rr={0x7, 0x27, 0xe, [@dev={0xac, 0x14, 0x14, 0x3f}, @multicast2, @rand_addr=0x64010102, @broadcast, @multicast2, @dev={0xac, 0x14, 0x14, 0x44}, @empty, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x44}]}, @rr={0x7, 0x23, 0xdb, [@empty, @loopback, @empty, @local, @rand_addr=0x64010102, @dev={0xac, 0x14, 0x14, 0x40}, @broadcast, @remote]}]}}}}}) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000002c0)={r1, 0xffffffffffffffff}, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) socket$can_bcm(0x1d, 0x2, 0x2) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$inet(0x2, 0x2, 0x1) sendmsg$inet(r4, 0x0, 0x0) bind$inet(r4, &(0x7f0000000640)={0x2, 0x4e24, @empty}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000780)='blkio.bfq.avg_queue_size\x00', 0x0, 0x0) setsockopt$MRT_DEL_VIF(r5, 0x0, 0xcb, &(0x7f00000007c0)={0xffffffffffffffff, 0x4, 0x2, 0xffffff7f, @vifc_lcl_ifindex=r0, @local}, 0x10) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000980), 0x80, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), r5) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000880)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000940)={&(0x7f0000000800), 0xc, &(0x7f0000000900)={&(0x7f00000008c0)={0x30, r7, 0x200, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x3ff, 0x65}}}}, [@NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x28000051}, 0x40) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$inet6_mptcp(0xa, 0x1, 0x106) recvfrom$inet6(0xffffffffffffffff, &(0x7f00000005c0)=""/59, 0x3b, 0x1, &(0x7f0000000600)={0xa, 0x4e22, 0x5f, @local, 0xd}, 0x1c) write$tun(r6, &(0x7f0000000580)=ANY=[@ANYBLOB="1c0000000005000000cc"], 0x42) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000002c0)) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet6(0xa, 0x2, 0x0) socket$inet6(0xa, 0x2, 0x0) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB="1409eb88fd4bd921520200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000073010a000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x0, &(0x7f0000000000), &(0x7f0000000080)='syzkaller\x00', 0xd8, 0x0, 0x0, 0x40f00, 0x1d, '\x00', r0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x6, 0x4}, 0x8, 0x10, &(0x7f0000000280)={0x2, 0x10, 0x4, 0x5}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000380)=[r2], &(0x7f00000003c0)=[{0x1, 0x2, 0x0, 0x8}, {0x0, 0x3, 0x10, 0x4}, {0x2, 0x2, 0xd, 0x8}, {0x2, 0x4, 0xf, 0x6}, {0x2, 0x1, 0xa, 0x3}, {0x3, 0x4, 0x3, 0x8}, {0x3, 0x2, 0x5, 0x1}], 0x10, 0x401, @void, @value}, 0x94) 2.19621915s ago: executing program 0 (id=2502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)=ANY=[@ANYBLOB="50000000020601020000000000000000000000000900020073798f310000000015000300686173683a69702c706f72742c6e657400000000050004000000000005000500000000000500010006000000"], 0x50}}, 0x0) socket(0x11, 0x3, 0x3) socket$inet6_sctp(0xa, 0x1, 0x84) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) (async) pipe(&(0x7f0000000200)) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x300000d, 0x6052, r1, 0x1000) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) socket$packet(0x11, 0x2, 0x300) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000500)='suspend_resume\x00', r2, 0x0, 0x1}, 0x18) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000200)='afs_edit_dir\x00', r2}, 0x18) (rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x24, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) pipe(&(0x7f0000000240)) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000040)={'ip6_vti0\x00', &(0x7f00000001c0)={'syztnl1\x00', 0x0, 0x29, 0xc, 0x10, 0x9, 0x50, @mcast1, @mcast1, 0x8, 0x700, 0x0, 0x7e7dd29c}}) (async) socket$kcm(0x2, 0xa, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000580)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x6, [@typedef={0x4, 0x0, 0x0, 0x7, 0x4}, @enum={0x6}, @union={0x0, 0x1, 0x0, 0x5, 0x1, 0x0, [{0x0, 0x2}]}]}, {0x0, [0x0, 0x0, 0x0, 0xda]}}, &(0x7f0000000340)=""/142, 0x4e, 0x8e, 0x1, 0x0, 0x0, @void, @value}, 0x28) (async, rerun: 64) socket$inet6_sctp(0xa, 0x5, 0x84) 2.052598398s ago: executing program 0 (id=2503): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="0300000004000000040000000a00000000000000", @ANYRES32=0x1, @ANYBLOB="000000040000002055fea6bedb04d201000000000000800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00'}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r3, 0x29, 0x33, &(0x7f0000000000)=0x7, 0x4) getsockopt$inet6_buf(r3, 0x29, 0x6, &(0x7f00000000c0)=""/21, &(0x7f0000000080)=0x15) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYRESHEX], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x8, &(0x7f0000000080)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x5, 0x6a, 0xa, 0xff00}, [@call={0xc, 0x0, 0x0, 0x8e}, @exit, @map_fd, @jmp={0x5, 0x0, 0x8}]}, &(0x7f0000000140)='GPL\x00', 0x2, 0x95, &(0x7f0000000180)=""/149, 0x0, 0x1, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000a80)={0xffffffffffffffff, r6, 0x0, 0x6, &(0x7f0000000a40)='\'@@:&\x00'}, 0x30) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000b00)={0x9, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000ac0)=r7, 0x4) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000b40)={@ifindex, r4, 0x2f, 0x0, 0x0, @void, @value=r6}, 0x20) r8 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000280)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000000c0)={'gretap0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7fffffff, 0x0, 0x9}}}}]}, 0x44}}, 0x0) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r12 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x8, &(0x7f0000000b80)=ANY=[@ANYBLOB="1800000004000000000000000800000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000044d171ac8500850000000c000000b700000000000000950000000000000000000004b13775e1d862c2acf4d7f02438dc2fcd2e81cd83bc0c4249fe0c2c85341dca8ffbf8e20efe54b27f8256cb36f6319f9ca547dd0f666070529e8697ac6023804c1fa43e"], &(0x7f0000000580)='syzkaller\x00', 0x4, 0x46, &(0x7f00000005c0)=""/70, 0x40f00, 0x65, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000740)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000780)=[r0, r0, r0, r0], &(0x7f00000007c0)=[{0x2, 0x3, 0x10, 0x2}, {0x4, 0x5, 0x9, 0xc}, {0x4, 0x4, 0x7, 0x6}], 0x10, 0x80, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0x7, 0x21, &(0x7f0000000200)=@raw=[@map_idx_val={0x18, 0xa, 0x6, 0x0, 0xc, 0x0, 0x0, 0x0, 0xfffffffc}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0xcb}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @call={0x85, 0x0, 0x0, 0x2b}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @alu={0x4, 0x0, 0xb, 0x1, 0x0, 0x4, 0xfffffffffffffffc}], &(0x7f0000000040)='syzkaller\x00', 0x7, 0xdb, &(0x7f0000000400)=""/219, 0x41100, 0x60, '\x00', r10, @fallback=0x6, r11, 0x8, &(0x7f0000000180)={0x3, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x3, 0x10, 0x6, 0x401}, 0x10, 0xffffffffffffffff, r12, 0x9, 0x0, &(0x7f00000008c0)=[{0x1, 0x4, 0x10, 0xb}, {0x3, 0x5, 0x1, 0x3}, {0x2, 0x2, 0x5, 0x2}, {0x0, 0x3, 0x3, 0xa}, {0x3, 0x3, 0xb}, {0x3, 0x4, 0x1, 0x6}, {0x1, 0x5, 0x7, 0x3}, {0x1, 0x2, 0x5, 0x1}, {0x4, 0x2, 0x3, 0x1}], 0x10, 0x8, @void, @value}, 0x94) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000d40)='blkio.bfq.io_service_time\x00', 0x275a, 0x0) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) read(r13, 0x0, 0x0) r14 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x8, &(0x7f0000000100)=ANY=[@ANYBLOB="1803000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b503000000000000850000010c00090000000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=ANY=[@ANYBLOB="0500000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000fe000000000000000000000000001a5b491d80c90e3063cacd952e7ebe335378fc8502e80a594245b40d3cd827d682d4af7c18c73733a5d54a"], 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000d00)={r14, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffecf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd, 0x8, 0x0, 0x0}}, 0x10) 1.870844939s ago: executing program 3 (id=2504): r0 = socket$inet6(0xa, 0x6, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000400)=@acquire={0x1ac, 0x17, 0x301, 0x0, 0x0, {{@in=@broadcast}, @in6=@remote, {@in6=@ipv4={'\x00', '\xff\xff', @loopback}, @in6=@mcast1}, {{@in=@loopback, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}}, [@tmpl={0x84, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x2b}, 0x2, @in6=@ipv4={'\x00', '\xff\xff', @multicast1}, 0x0, 0x1}, {{@in=@multicast2, 0x0, 0x6c}, 0x2, @in=@empty}]}]}, 0x1ac}}, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x4e22, 0x39a, @empty, 0xffff}, 0x1c) r2 = epoll_create(0x2) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r0, &(0x7f0000000580)) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x401, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x103, 0x120a1}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bond={{0x9}, {0x4}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x44000}, 0x0) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x1, 0x3) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_REPLAY_PROTECT={0x5, 0xc, 0x1}]}}}]}, 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x11, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000f10000000000000020000018010000202070250000000000202020db8cf8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000ca00000095"], &(0x7f0000000400)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getsockopt$bt_rfcomm_RFCOMM_LM(r4, 0x12, 0x3, &(0x7f0000000080), &(0x7f00000000c0)=0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x20, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000100000000000000001000100811207000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x0, 0x0, 0x0, 0x58, '\x00', 0x0, @netfilter=0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xb269, @void, @value}, 0x94) 1.767539025s ago: executing program 0 (id=2505): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="17000000000000000400000003"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f00000001c0)='kmem_cache_free\x00', r1}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket$packet(0x11, 0x2, 0x300) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r3}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xa, 0x101, 0x7fff, 0xcc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) 1.319209803s ago: executing program 0 (id=2506): r0 = socket$inet6(0xa, 0x3, 0x8) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f280011800e000100636f6e6e6c696d6974000000140002800800024000001c00080001"], 0xac}}, 0x0) recvmmsg(r0, &(0x7f0000005dc0)=[{{0x0, 0x0, 0x0}}], 0x4000000000002b1, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e24, 0x2, @empty}, 0x1c) ioctl$int_in(r0, 0x5452, &(0x7f0000000180)=0xf) sendmmsg(r0, &(0x7f00000092c0), 0x4ff, 0x0) 362.973902ms ago: executing program 3 (id=2507): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)={0x14, 0x0, 0x4, 0xfffffffc, 0x2ddfdbff, {0x1, 0x6c00000000000000}}, 0x14}, 0x1, 0xf000, 0x0, 0x4004841}, 0x20040) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/mnt\x00') ioctl$BTRFS_IOC_RM_DEV(r1, 0x5000940b, &(0x7f0000001900)={{}, "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"}) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000007"], 0x118}], 0x1}, 0x0) 362.282018ms ago: executing program 0 (id=2508): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000004c00)={0x18, 0x2c, 0x8, 0x70bd27, 0x0, {0x5}, [@typed={0x4, 0xc}]}, 0x18}, 0x1, 0x0, 0x0, 0x2200c8e0}, 0x4000015) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r4, @ANYBLOB="00001700000000001c0037800b0001006970768a616e08000c0002800600010000000000050027"], 0x44}, 0x1, 0x0, 0x0, 0x50}, 0x0) sendmsg$nl_xfrm(r2, 0x0, 0x8010) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f0000001000)={'bridge0\x00', {0x2, 0x4e20, @private=0xa010100}}) r6 = socket(0x26, 0x80000, 0xd31) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000001080)=@nat={'nat\x00', 0x670, 0x5, 0x398, 0x0, 0x0, 0xffffffff, 0x110, 0x110, 0x300, 0x300, 0xffffffff, 0x300, 0x300, 0x5, 0x0, {[{{@uncond, 0x0, 0xc8, 0x110, 0x0, {}, [@common=@inet=@l2tp={{0x30}, {0x0, 0x40000, 0x2, 0x0, 0x6}}, @common=@ttl={{0x28}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4=@dev, @gre_key}}}, {{@uncond, 0x0, 0x70, 0x98, 0x0, {0x0, 0x7}}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x250}}, {{@uncond, 0x0, 0x70, 0xa8}, @SNAT0={0x38, 'SNAT\x00', 0x0, {0x1, {0x0, @local, @local, @gre_key, @gre_key}}}}, {{@uncond, 0x0, 0x70, 0xb0}, @common=@inet=@LOG={0x40, 'LOG\x00', 0x0, {0x1, 0x3, "d596aeacb7ccdc0169c1d865b82ad7084d1c88c6b7cec8c99cc89cb57cda"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3f8) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r9, &(0x7f0000000fc0)={&(0x7f0000000480), 0xc, &(0x7f0000000540)={&(0x7f0000000f00)={0x8c, r10, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}, @NLBL_UNLABEL_A_SECCTX={0x2d, 0x7, 'system_u:object_r:dhcpd_initrc_exec_t:s0\x00'}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_bond\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @remote}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @empty}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}]}, 0x8c}, 0x1, 0x0, 0x0, 0x4000}, 0x20000820) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=ANY=[@ANYBLOB='`\x00'/20, @ANYRES32=0x0, @ANYBLOB="05200000000000001400128009000100766c616e00000000040002802c0012800b00010069703667726500001c000280060010004e2300000800040009000000060011004e230000"], 0x60}, 0x1, 0xba01, 0x0, 0x20000080}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfc, 0x20000000}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x3, 0x4, 0x9}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r11, 0x8983, &(0x7f00000002c0)={0x0, 'gretap0\x00', {0x2}, 0xc}) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f0000000080)={0x0, @in6={{0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x2}}, 0x23c0, 0x5}, &(0x7f0000000140)=0x90) sendmsg$NFT_BATCH(r12, &(0x7f0000000440)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f0000000d00)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x1c, 0xb, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x23}]}, @NFT_MSG_DELCHAIN={0x13c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_USERDATA={0x66, 0xc, "0b6ee63bf63bb41d131b6e77db9c7a2a5934b7172afaa841390bcecc621acd1b2ca3360062824bc7fb110491904a10f55457647cf71d5188566160eaf264068c128e6cfa901a315e274bb04d5419244be97b74b33a94f6d590a243f8627300fe4e70"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0xc, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_COUNTERS={0x58, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x8}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xe2}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0xd}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x9}, @NFTA_COUNTER_PACKETS={0xc, 0x2, 0x1, 0x0, 0x5}, @NFTA_COUNTER_PACKETS={0xc}]}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffb}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x24, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x7e90643808bf12f0}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x35f0d893}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3fd68ed}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x2675a279}]}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWCHAIN={0x1c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x1dc}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$nl_xfrm(r6, &(0x7f0000000380)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000340)={&(0x7f0000000b40)=@getsadinfo={0x1a0, 0x23, 0x8, 0x70bd2d, 0x25dfdbfc, 0x0, [@address_filter={0x28, 0x1a, {@in=@multicast2, @in6=@mcast2, 0x0, 0x9, 0xa}}, @XFRMA_SET_MARK={0x8, 0x1d, 0x4}, @algo_comp={0x145, 0x3, {{'deflate\x00'}, 0x7e8, "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"}}, @srcaddr={0x14, 0xd, @in=@initdev={0xac, 0x1e, 0x1, 0x0}}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x40000}, 0x4001) r13 = socket$inet6_sctp(0xa, 0x5, 0x84) r14 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f00000004c0)=0x8) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r14, 0x84, 0x22, &(0x7f0000000280)={0x8000, 0x8006, 0x6, 0x3, r15}, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r13, 0x84, 0x1f, &(0x7f0000000140)={r15, @in6={{0xa, 0x4e20, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0x7f}}, 0x0, 0xd}, &(0x7f0000000200)=0x90) 245.902004ms ago: executing program 5 (id=2509): r0 = socket$packet(0x11, 0x3, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="80000000000201040000000000000000020000002400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001ffffffeb0008000200ac1414000c000280050001000000000024000180"], 0x80}}, 0x0) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0x51, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f0080048e0050000000000008877fbac141516e0000001440404feb180008903040000845013f2325f003901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r3 = socket(0x840000000002, 0x3, 0x100) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) (async) sendmmsg$inet(r3, &(0x7f0000001680)=[{{0x0, 0x0, 0x0}}, {{&(0x7f00000003c0)={0x2, 0x4e24, @broadcast}, 0x10, 0x0}}], 0x2, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r4) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000280)) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @random="e5db029ea53c"}) write$cgroup_devices(r2, &(0x7f0000000140)=ANY=[@ANYBLOB="1e000300008c71ef28ff4b"], 0xffdd) 172.96391ms ago: executing program 3 (id=2510): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000009c0)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01000000000000000000010000000800010000000000080008800400128008000200010000002c0004800500030000000000050003000000000005000300000000000500030000000000050003"], 0x58}}, 0x0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r0) r3 = socket(0x5, 0x3, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001100), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB="20010000", @ANYRES16=r6, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=r8, @ANYBLOB="47000e00800000000802110000000802110000015050505050500000000000000000000064000000000602020202020204060000000000000602000025030034003c040106b80400080026006c09000008000c006400000008000d0000000000a2000f00329c"], 0x120}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$NL80211_CMD_DEAUTHENTICATE(r3, &(0x7f0000001280)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001240)={&(0x7f0000001140)={0xd4, r4, 0x300, 0x70bd27, 0x25dfdbff, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1, 0x4b}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3ff}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_IE={0x94, 0x2a, [@ibss={0x6, 0x2, 0x5}, @random={0xf, 0x68, "1f37391b9a69b5d4eaad6dd49af2e5eae479db77c5312195552a7ce515bd16bf99f5057f312ceeeff1fb45be896d55ed65d1840b04a9252e635b65b67f3e3f65e03963d8ce270c4be0286dde7bb9af964ebf0b3d2200d7b4a79b7743c80d425b6d3ea0e4bea703b2"}, @mesh_id={0x72, 0x6}, @ssid={0x0, 0x18, @random="c50b24bec0450e5ee43d1bc49155786b3ea272e046841b6a"}]}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40c0}, 0x10) r9 = socket$inet6(0xa, 0x805, 0x0) recvmsg$can_j1939(r3, &(0x7f0000001540)={&(0x7f00000012c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f00000014c0)=[{&(0x7f0000001340)=""/24, 0x18}, {&(0x7f0000001380)=""/243, 0xf3}, {&(0x7f0000001480)}], 0x3, &(0x7f0000001500)=""/57, 0x39}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000080)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x0, 0x0, @private1}]}, &(0x7f00000002c0)=0x10) getsockopt$bt_hci(r9, 0x84, 0x3, &(0x7f0000000080)=""/4042, &(0x7f00000010c0)=0xfca) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) sendmsg$NFC_CMD_GET_TARGET(r0, &(0x7f0000000300)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x14, r2, 0x800, 0x70bd29, 0x25dfdbfe, {}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x20008000) r11 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_USER_AVC(r11, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000040)={&(0x7f00000000c0)={0x70, 0x453, 0x404, 0x70bd27, 0x25dfdbfb, "0aa30b79e1f806b535d0c7a047c88397539564b4b6b6ae5515543c5f53f9c24f690340ecae54bb4e56fd19ecb3f96ade4bddcd6c87d85b9707d0455d55cee2f9b559aa00abb2e5351a35084d49f0cb890bdb7087d608c9e2d8ebb26d9d", ["", "", "", ""]}, 0x70}, 0x1, 0x0, 0x0, 0x8001}, 0x4000040) socket$nl_sock_diag(0x10, 0x3, 0x4) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003d0007010000000000000000027c0000040000000c0001800600060088"], 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r12, &(0x7f0000001800)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000017c0)={&(0x7f0000001580)={0x238, r4, 0x20, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @val={0xc, 0x99, {0x1800, 0xb}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x200}, @NL80211_ATTR_FRAME_MATCH={0x9f, 0x5b, "3ec9bb320850d122266307548ec511aeaa7e53cd0b7e1ae32b8c897a552b48b55263b0acf67def1ae5e7edc92fd84e1211868c122ca5aef4299faa8da5dda460b37935f21d45cd30b66f4b10fbd908150d257319d51a87a9d7a4c6507625188e442a453a58079e14d07c5177e344f3b678e6e592c3dd5472d285097d6cab3118d72993af612fc5a37fa1e78751b309f554dff76baeaf18e523b3c2"}, @NL80211_ATTR_FRAME_MATCH={0x75, 0x5b, "36dcd476668e18a76ab2a5ad7264a02d5db40e342c71715efadd89dba472348d431a11bd6e1b93952d01185faeadf95c6685e8a3735259f35755f009bbe72e6889e052f3ffba7693d4cff9f18e993bb5bc1f7da954434359cfb82eec6b46f0d46f8934d0114c8c4cfe4cc9438f27e0ce92"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3ff}, @NL80211_ATTR_FRAME_MATCH={0x12, 0x5b, "c6f923f12ba43e595ee18a76c906"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xe5e3}, @NL80211_ATTR_FRAME_MATCH={0xbb, 0x5b, "61a89ca916ca7abf89b9de0d41030c2823d58ce6f1ce311997f003d6fcfbac187f1985a076ba2095e556ce1f5345fd70aef8313b4f4ffb3242498b5a3c91e9147033fa2699ef1e808b5ce2d2155f2f91bf3b8a8670b599d5ab4e5b8a2c69d871049f1613f1cca4006d102ab4c95ff9689d01bbe32383e14c6dd78328e73302f6e0ada46e994e104156694e9c5ad527b08b6ea2747a54b6e8f5c980d9323c3edfbb13596b742052616f00ca56fdda0df06da0395946f1b4"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x6}]}, 0x238}, 0x1, 0x0, 0x0, 0x8000}, 0x24004001) 6.778168ms ago: executing program 2 (id=2511): unshare(0x42000000) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0xfc, 0x10, 0x401, 0x4002, 0x0, {0x0, 0x0, 0xffff, 0x0, 0xd108}, [@IFLA_LINKINFO={0xc8, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xb8, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xc}}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}, @IFLA_VLAN_EGRESS_QOS={0x64, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x4b7b}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xbf, 0x400}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x1ff}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x5, 0x12}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x4}}]}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x4}, @IFLA_VLAN_INGRESS_QOS={0x34, 0x4, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x7, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x8, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xfc, 0x1}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0xa4}}]}]}}}, @IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}]}, 0xfc}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x769f00b363895638, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$l2tp(0x2, 0x2, 0x73) unshare(0x62040200) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c000280080001400000000808000340000001"], 0xc4}}, 0x20050800) r2 = socket(0x40000000015, 0x5, 0x0) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r2, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r4, 0x10e, 0x1, &(0x7f0000000040)=0x16, 0x4) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)=ANY=[@ANYBLOB='6m\x00\x00', @ANYRES16=r5, @ANYBLOB="01072bbd70000000000005000000"], 0x14}, 0x1, 0x0, 0x0, 0x20004074}, 0x0) socket(0x15, 0x5, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r6) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000009c0)=ANY=[@ANYBLOB="70010000", @ANYRES16=r7, @ANYBLOB="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"], 0x170}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) bind$rds(r2, &(0x7f00000001c0)={0x2, 0x4e24, @broadcast}, 0x10) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x89f1, &(0x7f0000010640)={'bond0\x00', 0x0}) sendmsg$TIPC_NL_MON_SET(r4, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000140)={&(0x7f00000005c0)={0x15c, r7, 0x4, 0x70bd2b, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x44, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x1ff, @private1={0xfc, 0x1, '\x00', 0x1}, 0xffff}}, {0x14, 0x2, @in={0x2, 0x4e21, @remote}}}}]}, @TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0xa8c27c42ddb3b6fe, 0x2, 0x4}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x10001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_MEDIA={0xcc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8}]}, @TIPC_NLA_MEDIA_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1c}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x200}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x97}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7ff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x100}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xca99}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xbb}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x15c}, 0x1, 0x0, 0x0, 0x40}, 0x8000) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[], 0x7c}}, 0x0) sendto$inet(r2, 0x0, 0x0, 0x0, 0x0, 0x0) 0s ago: executing program 0 (id=2512): r0 = syz_init_net_socket$ax25(0x3, 0x3, 0xc4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) setsockopt$ax25_SO_BINDTODEVICE(r0, 0x101, 0x19, &(0x7f0000000180)=@bpq0, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="050000000600000008000000ae"], 0x50) r2 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0d00000002000000040000000240000005000000", @ANYRES32=r2, @ANYBLOB="0000000000000000000000020000000000000000", @ANYRES32=0x0, @ANYRESOCT=r2, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\b\x00'/21], 0x50) socket$inet6_sctp(0xa, 0x1, 0x84) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3, 0x0, 0xfffffffffffffffe}, 0x18) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="38000000111401"], 0x38}}, 0x40) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r6, &(0x7f0000000340)=[{{&(0x7f0000000240)={0xa, 0x4e21, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f00000003c0)=[{&(0x7f00000002c0)="14", 0x1}], 0x1}}, {{&(0x7f0000000300)={0xa, 0x4e20, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x8}, 0x1c, &(0x7f00000001c0)=[{&(0x7f0000000800)="ff", 0x1}], 0x1}}], 0x2, 0x931766f6119eed40) shutdown(r6, 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x5}, &(0x7f0000000040)=0x8) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000ac0), r5) sendmsg$NLBL_CALIPSO_C_REMOVE(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000d80)={0x1c, r7, 0x1, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x4040) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, 0xffffffffffffffff, 0xd568b000) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x3, 0x0, 0x0, &(0x7f0000000080)='GPL\x00', 0x5, 0xbb, &(0x7f000000cf3d)=""/187, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_inet_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000000)={'vlan1\x00', {0x2, 0x4e21, @broadcast}}) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) shutdown(r9, 0x1) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x30, 0x0, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x1400000, 0x0, 0xc3072, 0xffffffffffffffff, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000010001000900000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r10, &(0x7f0000000080), &(0x7f0000001540)=""/155}, 0x20) kernel console output (not intermixed with test programs): 89155][T12929] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.598088][T12929] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.607304][T12929] geneve4: entered promiscuous mode [ 314.612786][T12929] geneve4: entered allmulticast mode [ 314.627364][T12929] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.640974][T12929] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.653883][T12929] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.664000][T12929] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.417289][T12889] chnl_net:caif_netlink_parms(): no params data found [ 315.755722][T12889] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.774399][T12889] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.788155][T12889] bridge_slave_0: entered allmulticast mode [ 315.798054][T12889] bridge_slave_0: entered promiscuous mode [ 315.831610][T12889] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.838772][T12889] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.883068][T12889] bridge_slave_1: entered allmulticast mode [ 315.907207][T12889] bridge_slave_1: entered promiscuous mode [ 315.997578][T12889] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 316.037542][T12889] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 316.216206][T12889] team0: Port device team_slave_0 added [ 316.232026][T12967] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1871'. [ 316.279471][T12889] team0: Port device team_slave_1 added [ 316.325939][T12970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1872'. [ 316.351991][T12970] netlink: 'syz.2.1872': attribute type 13 has an invalid length. [ 316.427943][T12889] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 316.435248][T12889] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.462206][T12889] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 316.497236][T12889] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 316.510592][T12889] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 316.553723][T12889] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 316.569046][T12981] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1875'. [ 316.589807][T12976] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1873'. [ 316.610403][ T54] Bluetooth: hci3: command tx timeout [ 316.630692][T12981] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1875'. [ 316.676336][T12976] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.693361][T12976] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.704660][T12976] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.717290][T12976] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.734191][T12976] geneve4: entered promiscuous mode [ 316.739731][T12976] geneve4: entered allmulticast mode [ 316.749803][T12976] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.764642][T12976] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.774199][T12976] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.783563][T12976] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.871429][T12889] hsr_slave_0: entered promiscuous mode [ 316.877904][T12889] hsr_slave_1: entered promiscuous mode [ 317.114213][T12996] pim6reg: entered allmulticast mode [ 317.404794][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.467957][T13002] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1882'. [ 317.649469][T13008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1885'. [ 317.660693][T13012] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1885'. [ 317.788840][T12889] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 317.801049][T12889] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 317.814162][T12889] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 317.831997][T12889] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 317.878669][T13019] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1888'. [ 317.901136][T13019] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1888'. [ 318.016424][T12889] 8021q: adding VLAN 0 to HW filter on device bond0 [ 318.056620][T12889] 8021q: adding VLAN 0 to HW filter on device team0 [ 318.078448][T10261] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.085664][T10261] bridge0: port 1(bridge_slave_0) entered forwarding state [ 318.113136][T13025] geneve4: entered promiscuous mode [ 318.118638][T13025] geneve4: entered allmulticast mode [ 318.169279][T10269] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.176508][T10269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 318.493434][T12889] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.629832][T13050] bridge0: entered allmulticast mode [ 318.680202][ T54] Bluetooth: hci3: command tx timeout [ 318.846949][T12889] veth0_vlan: entered promiscuous mode [ 318.876674][T12889] veth1_vlan: entered promiscuous mode [ 318.949699][T12889] veth0_macvtap: entered promiscuous mode [ 318.996600][T12889] veth1_macvtap: entered promiscuous mode [ 319.068339][T13074] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.078348][T13074] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.088997][T13074] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.111304][T13074] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.125728][T13074] geneve4: entered promiscuous mode [ 319.132858][T13074] geneve4: entered allmulticast mode [ 319.147217][T13074] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.157057][T13074] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.166884][T13074] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.176022][T13074] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.213225][T12889] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 319.282910][T12889] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.311623][T12889] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.331308][T12889] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.344727][T12889] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.353816][T12889] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.494637][T10252] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.517540][T10252] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.568715][ T3492] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.606757][ T3492] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.686189][T13097] lo speed is unknown, defaulting to 1000 [ 319.715030][T13097] lo speed is unknown, defaulting to 1000 [ 320.037114][T13113] IPVS: length: 78 != 13088928 [ 320.085686][T13112] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 320.260256][T13122] netlink: 'syz.0.1914': attribute type 10 has an invalid length. [ 320.260350][T13123] batman_adv: batadv0: Interface deactivated: team0 [ 320.285823][T13123] team0: left allmulticast mode [ 320.329073][T13123] batman_adv: batadv0: Removing interface: team0 [ 320.347948][T13123] 8021q: adding VLAN 0 to HW filter on device team0 [ 320.358769][T13126] xt_TCPMSS: Only works on TCP SYN packets [ 320.372065][T13123] bond0: (slave team0): Enslaving as an active interface with an up link [ 320.541543][T13130] sctp: [Deprecated]: syz.3.1916 (pid 13130) Use of int in max_burst socket option. [ 320.541543][T13130] Use struct sctp_assoc_value instead [ 320.608432][T13130] sctp: [Deprecated]: syz.3.1916 (pid 13130) Use of int in max_burst socket option. [ 320.608432][T13130] Use struct sctp_assoc_value instead [ 321.043314][T13144] netlink: 'syz.0.1922': attribute type 5 has an invalid length. [ 321.109231][T13150] IPVS: set_ctl: invalid protocol: 135 172.20.20.187:20003 [ 321.354463][ T54] Bluetooth: hci4: link tx timeout [ 321.359728][ T54] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 321.725225][T10269] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 321.774804][T13183] vxcan3: entered promiscuous mode [ 321.786983][T13185] netlink: 'syz.1.1935': attribute type 4 has an invalid length. [ 321.817232][T13185] netlink: 'syz.1.1935': attribute type 11 has an invalid length. [ 321.830059][T13185] __nla_validate_parse: 9 callbacks suppressed [ 321.830081][T13185] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1935'. [ 322.426600][T10269] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.498022][T10269] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.587205][T10269] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.677422][T10269] bridge_slave_1: left allmulticast mode [ 322.684199][T10269] bridge_slave_1: left promiscuous mode [ 322.689896][T10269] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.698757][T10269] bridge_slave_0: left allmulticast mode [ 322.704551][T10269] bridge_slave_0: left promiscuous mode [ 322.710476][T10269] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.160499][T13196] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1937'. [ 323.275445][T13200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1940'. [ 323.371499][T10269] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.400144][ T5843] Bluetooth: hci4: command 0x0406 tx timeout [ 323.437626][T10269] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.478871][T10269] bond0 (unregistering): Released all slaves [ 323.527930][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 323.539050][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 323.550275][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 323.564928][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 323.566708][T13211] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1943'. [ 323.594576][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 323.600912][T13214] ªªªªªª: renamed from gre0 (while UP) [ 323.631909][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 323.779419][T13219] netlink: 'syz.1.1945': attribute type 10 has an invalid length. [ 323.849895][T13210] lo speed is unknown, defaulting to 1000 [ 323.857825][T13210] lo speed is unknown, defaulting to 1000 [ 323.969144][T13218] lo speed is unknown, defaulting to 1000 [ 324.010780][T13229] smc: net device bond0 applied user defined pnetid SYZ2 [ 324.055206][T13229] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ2 [ 324.269708][T13218] lo speed is unknown, defaulting to 1000 [ 324.787256][T13255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1954'. [ 325.304996][T13210] chnl_net:caif_netlink_parms(): no params data found [ 325.458676][T13274] openvswitch: netlink: IP tunnel dst address not specified [ 325.458988][T10269] hsr_slave_0: left promiscuous mode [ 325.489545][T10269] hsr_slave_1: left promiscuous mode [ 325.520818][T10269] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 325.528430][T10269] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 325.562662][T10269] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 325.580169][T10269] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 325.626621][T10269] veth1_macvtap: left promiscuous mode [ 325.647554][T10269] veth0_macvtap: left promiscuous mode [ 325.659636][T10269] veth1_vlan: left promiscuous mode [ 325.665407][T10269] veth0_vlan: left promiscuous mode [ 325.723940][ T54] Bluetooth: hci3: command tx timeout [ 325.806839][T13286] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1961'. [ 326.239030][T10269] team0 (unregistering): Port device team_slave_1 removed [ 326.287907][T10269] team0 (unregistering): Port device team_slave_0 removed [ 326.786449][T13298] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1965'. [ 326.795909][T13299] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1965'. [ 327.404178][T13210] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.422009][T13210] bridge0: port 1(bridge_slave_0) entered disabled state [ 327.429291][T13210] bridge_slave_0: entered allmulticast mode [ 327.459173][T13210] bridge_slave_0: entered promiscuous mode [ 327.539820][T13210] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.548640][T13210] bridge0: port 2(bridge_slave_1) entered disabled state [ 327.557052][T13210] bridge_slave_1: entered allmulticast mode [ 327.564625][T13210] bridge_slave_1: entered promiscuous mode [ 327.656887][T13210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 327.683927][T13210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 327.764630][T13210] team0: Port device team_slave_0 added [ 327.790230][T13210] team0: Port device team_slave_1 added [ 327.806039][ T54] Bluetooth: hci3: command tx timeout [ 327.893399][T13338] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1974'. [ 327.909864][T13338] netlink: 'syz.3.1974': attribute type 1 has an invalid length. [ 327.918090][T13338] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1974'. [ 327.949317][T13339] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1974'. [ 327.974662][T13343] netlink: 312 bytes leftover after parsing attributes in process `syz.3.1974'. [ 327.984961][T13210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.998721][T13210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.047325][T13210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.053795][T13341] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 328.087917][T13339] geneve1: left promiscuous mode [ 328.094129][T13339] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 328.141363][T13343] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 328.171378][T13210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.180965][T13210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.207302][T13210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 328.219686][T13354] xt_TCPMSS: Only works on TCP SYN packets [ 328.299263][T13354] lo speed is unknown, defaulting to 1000 [ 328.312354][T13210] hsr_slave_0: entered promiscuous mode [ 328.324338][T13210] hsr_slave_1: entered promiscuous mode [ 328.346945][T13354] lo speed is unknown, defaulting to 1000 [ 328.353203][T13358] pim6reg9: entered allmulticast mode [ 328.435294][T13365] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1982'. [ 328.637322][T13369] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1983'. [ 329.376048][T13384] netlink: 'syz.1.1987': attribute type 1 has an invalid length. [ 329.443318][T13388] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1987'. [ 329.536098][T13384] bond2: entered promiscuous mode [ 329.554407][T13391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1989'. [ 329.582218][T13384] 8021q: adding VLAN 0 to HW filter on device bond2 [ 329.648405][T13388] batadv1: entered allmulticast mode [ 329.677223][T13388] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 329.706166][T13388] bond2: (slave batadv1): making interface the new active one [ 329.744683][T13388] batadv1: entered promiscuous mode [ 329.778273][T13396] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 329.800850][T13396] netlink: 'syz.2.1993': attribute type 2 has an invalid length. [ 329.838102][T13399] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1991'. [ 329.865644][T13388] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 329.880182][ T54] Bluetooth: hci3: command tx timeout [ 329.996407][T13408] netlink: 340 bytes leftover after parsing attributes in process `syz.3.1995'. [ 330.035657][T13210] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 330.055680][T13210] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 330.122611][T13210] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 330.180633][T13210] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 330.379374][T13424] @ÿ: renamed from veth0_vlan [ 330.486479][T13210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.547764][T13210] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.587794][T10252] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.594994][T10252] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.667124][ T3492] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.674353][ T3492] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.687911][T13443] rdma_op ffff888142f0d1f0 conn xmit_rdma 0000000000000000 [ 330.714404][T13435] xt_CT: No such helper "netbios-ns" [ 330.769795][T13442] 8021q: adding VLAN 0 to HW filter on device team1 [ 330.889438][T13446] lo speed is unknown, defaulting to 1000 [ 330.900935][T13446] lo speed is unknown, defaulting to 1000 [ 331.224264][T13210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.937158][T13210] veth0_vlan: entered promiscuous mode [ 331.960243][ T54] Bluetooth: hci3: command tx timeout [ 331.974479][T13210] veth1_vlan: entered promiscuous mode [ 332.146292][T13510] mac80211_hwsim hwsim4 syzkaller0: entered promiscuous mode [ 332.153935][T13510] mac80211_hwsim hwsim4 syzkaller0: entered allmulticast mode [ 332.177694][T13210] veth0_macvtap: entered promiscuous mode [ 332.224266][T13210] veth1_macvtap: entered promiscuous mode [ 332.328341][T13210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.378973][T13210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.414760][T13210] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.434693][T13210] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.453392][T13210] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.465865][T13210] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.479781][T13432] x_tables: duplicate entry at hook 2 [ 332.803687][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.843424][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.945588][T10026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.011828][T10026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.110332][T13537] netlink: 'syz.0.2024': attribute type 10 has an invalid length. [ 333.120533][T13537] wlan1: mtu less than device minimum [ 333.172081][T13537] macvtap0: entered promiscuous mode [ 333.177453][T13537] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 333.230604][T13537] macvtap0: entered allmulticast mode [ 333.236057][T13537] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 333.634461][T13537] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 333.680153][T13537] mac80211_hwsim hwsim3 wlan1: left promiscuous mode [ 333.808230][T13551] __nla_validate_parse: 8 callbacks suppressed [ 333.808252][T13551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2026'. [ 333.860600][T13559] batadv_slave_1: entered promiscuous mode [ 333.872174][T13559] batadv_slave_1: entered allmulticast mode [ 333.941657][T13559] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 334.326677][T13579] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2034'. [ 334.516526][T13590] netlink: 'syz.1.2038': attribute type 3 has an invalid length. [ 334.575008][T13597] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2039'. [ 334.731498][T13601] macvlan4: entered promiscuous mode [ 334.736855][T13601] bridge0: entered promiscuous mode [ 334.754140][T13601] bridge0: port 1(macvlan4) entered blocking state [ 334.786407][T13601] bridge0: port 1(macvlan4) entered disabled state [ 334.811810][T13601] macvlan4: entered allmulticast mode [ 334.821881][T13601] macvlan4: left allmulticast mode [ 334.833338][T13601] bridge0: left promiscuous mode [ 335.083432][T10252] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.202149][T10252] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.281654][T10252] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.368144][T10252] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.472694][T10252] bridge_slave_1: left allmulticast mode [ 335.478405][T10252] bridge_slave_1: left promiscuous mode [ 335.484370][T10252] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.493077][T10252] bridge_slave_0: left allmulticast mode [ 335.498758][T10252] bridge_slave_0: left promiscuous mode [ 335.505037][T10252] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.888761][T10252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 335.899838][T10252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 335.913159][T10252] bond0 (unregistering): Released all slaves [ 336.279189][T10252] hsr_slave_0: left promiscuous mode [ 336.289266][T10252] hsr_slave_1: left promiscuous mode [ 336.295425][T10252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.305932][T10252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.371212][T10252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.378907][T10252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.479529][T10252] veth1_macvtap: left promiscuous mode [ 336.500073][T10252] veth0_macvtap: left promiscuous mode [ 336.505774][T10252] veth1_vlan: left promiscuous mode [ 336.564864][T10252] veth0_vlan: left promiscuous mode [ 336.670438][T13641] netlink: 'syz.0.2052': attribute type 6 has an invalid length. [ 336.918029][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 336.930195][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 336.938325][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 336.946489][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 336.954233][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 336.961746][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 337.344839][T10252] team0 (unregistering): Port device team_slave_1 removed [ 337.396331][T10252] team0 (unregistering): Port device team_slave_0 removed [ 337.864151][T13623] netlink: 280 bytes leftover after parsing attributes in process `syz.2.2048'. [ 337.895994][T13639] netlink: 'syz.3.2051': attribute type 4 has an invalid length. [ 337.924507][T13645] lo speed is unknown, defaulting to 1000 [ 337.942576][T13645] lo speed is unknown, defaulting to 1000 [ 338.104218][T13654] netlink: 'syz.2.2053': attribute type 10 has an invalid length. [ 338.141644][T13656] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2054'. [ 338.174844][T13654] team0: Port device wlan1 added [ 338.453477][T13661] siw: device registration error -23 [ 338.527840][T13669] netlink: 44 bytes leftover after parsing attributes in process `syz.3.2059'. [ 338.709821][T13676] xt_CT: You must specify a L4 protocol and not use inversions on it [ 338.805511][T13645] chnl_net:caif_netlink_parms(): no params data found [ 338.990288][T13692] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2063'. [ 339.000146][ T5843] Bluetooth: hci3: command tx timeout [ 339.061127][T13694] netlink: 'syz.3.2065': attribute type 1 has an invalid length. [ 339.063991][T13679] veth5: left promiscuous mode [ 339.080328][T13679] ip6tnl2: left promiscuous mode [ 339.085381][T13679] ip6tnl2: left allmulticast mode [ 339.097154][T13679] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.105830][T13679] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.114614][T13679] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.123163][T13679] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.145850][T13679] vti0: left promiscuous mode [ 339.190587][ T5917] lo speed is unknown, defaulting to 1000 [ 339.249321][T13698] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.258175][T13698] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.267054][T13698] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.275619][T13698] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 339.288625][T13698] bond1: (slave geneve3): making interface the new active one [ 339.315134][T13698] bond1: (slave geneve3): Enslaving as an active interface with an up link [ 339.327843][T13645] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.339594][T13645] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.347174][T13706] netlink: 'syz.2.2068': attribute type 1 has an invalid length. [ 339.355498][T13645] bridge_slave_0: entered allmulticast mode [ 339.362785][T13706] netlink: 240 bytes leftover after parsing attributes in process `syz.2.2068'. [ 339.375428][T13645] bridge_slave_0: entered promiscuous mode [ 339.400617][T13645] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.415413][T13645] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.448840][T13709] x_tables: duplicate underflow at hook 3 [ 339.450221][T13645] bridge_slave_1: entered allmulticast mode [ 339.455810][T13709] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 339.497410][T13645] bridge_slave_1: entered promiscuous mode [ 339.592513][T13645] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.613791][T13645] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.650909][T13716] pim6reg1: entered promiscuous mode [ 339.669476][T13716] pim6reg1: entered allmulticast mode [ 339.697970][T13719] netlink: 'syz.0.2073': attribute type 142 has an invalid length. [ 339.725024][T13645] team0: Port device team_slave_0 added [ 339.752819][T13645] team0: Port device team_slave_1 added [ 339.859495][T13645] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 339.870073][T13645] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.906625][T13645] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 339.932619][T13645] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 339.940144][T13645] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 339.967323][T13645] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.001933][T13728] IPv6: sit1: Disabled Multicast RS [ 340.028233][T13645] hsr_slave_0: entered promiscuous mode [ 340.039103][T13726] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2075'. [ 340.053931][T13645] hsr_slave_1: entered promiscuous mode [ 340.689310][T13757] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2085'. [ 340.886363][T13645] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 340.907335][T13645] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 340.926750][T13645] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 340.941171][T13645] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 341.038118][T13645] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.063520][T13645] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.074652][T10265] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.080889][ T5843] Bluetooth: hci3: command 0x041b tx timeout [ 341.081798][T10265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.103279][T10026] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.110556][T10026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.140421][T13645] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 341.151297][T13645] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.344151][T13775] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2090'. [ 341.363836][T13778] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2100'. [ 341.372902][T13778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2100'. [ 341.382546][T13778] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2100'. [ 341.449369][T13645] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.543187][T13788] macsec0: entered promiscuous mode [ 341.569635][T13788] macsec0: left promiscuous mode [ 341.743140][T13802] xt_HMARK: spi-set and port-set can't be combined [ 341.847041][T13645] veth0_vlan: entered promiscuous mode [ 341.891780][T13645] veth1_vlan: entered promiscuous mode [ 341.906096][T13806] netlink: 'syz.0.2097': attribute type 10 has an invalid length. [ 341.911530][T13805] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 341.971859][T13645] veth0_macvtap: entered promiscuous mode [ 342.013543][T13645] veth1_macvtap: entered promiscuous mode [ 342.056500][T13645] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.073249][T13645] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.087368][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2099'. [ 342.097653][T13645] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.119701][T13645] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.133576][T13645] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.147835][T13645] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.219268][T13813] syzkaller0: entered promiscuous mode [ 342.225071][T13813] syzkaller0: entered allmulticast mode [ 343.160264][ T54] Bluetooth: hci3: command 0x041b tx timeout [ 344.491367][T13827] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2104'. [ 344.502687][T13827] erspan0: entered promiscuous mode [ 344.508540][T13829] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2104'. [ 344.545250][ T3492] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.570152][ T3492] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.681652][T10026] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.710319][T10026] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.823357][T13851] FAULT_INJECTION: forcing a failure. [ 344.823357][T13851] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 344.867537][T13851] CPU: 0 UID: 0 PID: 13851 Comm: syz.1.2109 Not tainted 6.14.0-rc6-syzkaller-01215-ga1e36ec36356 #0 [ 344.867570][T13851] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 344.867584][T13851] Call Trace: [ 344.867591][T13851] [ 344.867601][T13851] dump_stack_lvl+0x241/0x360 [ 344.867644][T13851] ? __pfx_dump_stack_lvl+0x10/0x10 [ 344.867668][T13851] ? __pfx__printk+0x10/0x10 [ 344.867691][T13851] ? __pfx_lock_release+0x10/0x10 [ 344.867732][T13851] should_fail_ex+0x40a/0x550 [ 344.867769][T13851] _copy_from_user+0x2d/0xb0 [ 344.867799][T13851] copy_msghdr_from_user+0xae/0x680 [ 344.867836][T13851] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 344.867866][T13851] ? __fget_files+0x2a/0x410 [ 344.867900][T13851] ? __fget_files+0x2a/0x410 [ 344.867941][T13851] __sys_sendmsg+0x209/0x350 [ 344.867971][T13851] ? __pfx___sys_sendmsg+0x10/0x10 [ 344.868009][T13851] ? do_sys_openat2+0x17a/0x1d0 [ 344.868067][T13851] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 344.868106][T13851] ? do_syscall_64+0x100/0x230 [ 344.868137][T13851] ? do_syscall_64+0xb6/0x230 [ 344.868173][T13851] do_syscall_64+0xf3/0x230 [ 344.868200][T13851] ? clear_bhb_loop+0x35/0x90 [ 344.868232][T13851] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 344.868261][T13851] RIP: 0033:0x7fbcafb8d169 [ 344.868285][T13851] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 344.868302][T13851] RSP: 002b:00007fbcad9d5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 344.868332][T13851] RAX: ffffffffffffffda RBX: 00007fbcafda6080 RCX: 00007fbcafb8d169 [ 344.868348][T13851] RDX: 0000000020004000 RSI: 00004000000001c0 RDI: 0000000000000003 [ 344.868361][T13851] RBP: 00007fbcad9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 344.868374][T13851] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 344.868386][T13851] R13: 0000000000000001 R14: 00007fbcafda6080 R15: 00007ffc389b2cf8 [ 344.868416][T13851] [ 345.105767][T13853] ipip1: entered promiscuous mode [ 345.174321][T13860] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2113'. [ 345.189071][T13860] ªªªªªªo]Uü.ž: renamed from lo (while UP) [ 345.707128][T13876] netlink: 'syz.0.2119': attribute type 4 has an invalid length. [ 345.712888][T13874] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2118'. [ 345.733692][T13874] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.748724][T13874] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.757679][T13874] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.771354][T13874] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.780451][T13874] geneve4: entered promiscuous mode [ 345.785741][T13874] geneve4: entered allmulticast mode [ 345.794070][T13874] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.803572][T13874] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.812612][T13874] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.821627][T13874] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.998047][T10252] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.257734][T10252] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.349599][T10252] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.429127][T10252] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.508569][T10252] bridge_slave_1: left allmulticast mode [ 346.514881][T10252] bridge_slave_1: left promiscuous mode [ 346.521225][T10252] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.529880][T10252] bridge_slave_0: left allmulticast mode [ 346.535964][T10252] bridge_slave_0: left promiscuous mode [ 346.542312][T10252] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.872757][T10252] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.884250][T10252] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.894447][T10252] bond0 (unregistering): Released all slaves [ 347.248218][T10252] hsr_slave_0: left promiscuous mode [ 347.259367][T10252] hsr_slave_1: left promiscuous mode [ 347.267879][T10252] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.280211][T10252] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.288487][T10252] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.296301][T10252] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.386318][T10252] veth1_macvtap: left promiscuous mode [ 347.401892][T10252] veth0_macvtap: left promiscuous mode [ 347.415031][T10252] veth1_vlan: left promiscuous mode [ 347.430398][T10252] veth0_vlan: left promiscuous mode [ 347.889889][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 347.902211][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 347.910611][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 347.920072][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 347.929905][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 347.937388][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 348.203821][T10252] team0 (unregistering): Port device team_slave_1 removed [ 348.245863][T10252] team0 (unregistering): Port device team_slave_0 removed [ 348.756823][T13912] lo speed is unknown, defaulting to 1000 [ 348.855080][T13920] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2127'. [ 348.879668][T13912] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 348.901470][T13921] FAULT_INJECTION: forcing a failure. [ 348.901470][T13921] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 348.905320][T13920] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2127'. [ 348.927760][T13921] CPU: 1 UID: 0 PID: 13921 Comm: syz.3.2128 Not tainted 6.14.0-rc6-syzkaller-01215-ga1e36ec36356 #0 [ 348.927790][T13921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 348.927803][T13921] Call Trace: [ 348.927810][T13921] [ 348.927818][T13921] dump_stack_lvl+0x241/0x360 [ 348.927849][T13921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 348.927872][T13921] ? __pfx__printk+0x10/0x10 [ 348.927904][T13921] ? __pfx_lock_release+0x10/0x10 [ 348.927944][T13921] should_fail_ex+0x40a/0x550 [ 348.927981][T13921] _copy_from_user+0x2d/0xb0 [ 348.928011][T13921] ____sys_sendmsg+0x30b/0x860 [ 348.928044][T13921] ? __pfx_____sys_sendmsg+0x10/0x10 [ 348.928066][T13921] ? __fget_files+0x2a/0x410 [ 348.928100][T13921] ? __fget_files+0x2a/0x410 [ 348.928157][T13921] __sys_sendmsg+0x269/0x350 [ 348.928188][T13921] ? __pfx___sys_sendmsg+0x10/0x10 [ 348.928225][T13921] ? do_sys_openat2+0x17a/0x1d0 [ 348.928284][T13921] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 348.928318][T13921] ? do_syscall_64+0x100/0x230 [ 348.928349][T13921] ? do_syscall_64+0xb6/0x230 [ 348.928379][T13921] do_syscall_64+0xf3/0x230 [ 348.928406][T13921] ? clear_bhb_loop+0x35/0x90 [ 348.928439][T13921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 348.928467][T13921] RIP: 0033:0x7f00a838d169 [ 348.928486][T13921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 348.928505][T13921] RSP: 002b:00007f00a920a038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 348.928527][T13921] RAX: ffffffffffffffda RBX: 00007f00a85a6080 RCX: 00007f00a838d169 [ 348.928543][T13921] RDX: 0000000020004000 RSI: 00004000000001c0 RDI: 0000000000000003 [ 348.928557][T13921] RBP: 00007f00a920a090 R08: 0000000000000000 R09: 0000000000000000 [ 348.928569][T13921] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 348.928582][T13921] R13: 0000000000000001 R14: 00007f00a85a6080 R15: 00007ffc224ce1d8 [ 348.928613][T13921] [ 349.378621][T13928] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2130'. [ 349.415298][T13928] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.442177][T13928] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.459578][T13928] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.468155][T13928] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.476716][T13928] geneve4: entered promiscuous mode [ 349.482606][T13928] geneve4: entered allmulticast mode [ 349.508037][T13928] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.518297][T13928] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.527657][T13928] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.536149][T13928] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.568637][T13937] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2133'. [ 349.678401][T13912] chnl_net:caif_netlink_parms(): no params data found [ 349.898229][T13912] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.930198][T13912] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.950436][T13912] bridge_slave_0: entered allmulticast mode [ 349.957794][T13912] bridge_slave_0: entered promiscuous mode [ 349.966225][T13912] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.975485][T13912] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.983063][T13912] bridge_slave_1: entered allmulticast mode [ 349.990615][T13912] bridge_slave_1: entered promiscuous mode [ 350.029773][T13959] sock: sock_set_timeout: `syz.1.2140' (pid 13959) tries to set negative timeout [ 350.040274][ T54] Bluetooth: hci3: command tx timeout [ 350.059140][T13912] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.094703][T13912] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.182397][T13912] team0: Port device team_slave_0 added [ 350.192679][T13912] team0: Port device team_slave_1 added [ 350.285458][T13912] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.300067][T13912] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.414530][T13912] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.458706][T13912] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.500074][T13912] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.540106][T13912] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.667134][T13981] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2145'. [ 350.715526][T13912] hsr_slave_0: entered promiscuous mode [ 350.738415][T13912] hsr_slave_1: entered promiscuous mode [ 350.942608][T13989] FAULT_INJECTION: forcing a failure. [ 350.942608][T13989] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 350.968643][T13989] CPU: 0 UID: 0 PID: 13989 Comm: syz.1.2148 Not tainted 6.14.0-rc6-syzkaller-01215-ga1e36ec36356 #0 [ 350.968675][T13989] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 350.968688][T13989] Call Trace: [ 350.968695][T13989] [ 350.968703][T13989] dump_stack_lvl+0x241/0x360 [ 350.968745][T13989] ? __pfx_dump_stack_lvl+0x10/0x10 [ 350.968768][T13989] ? __pfx__printk+0x10/0x10 [ 350.968795][T13989] ? snprintf+0xda/0x120 [ 350.968819][T13989] should_fail_ex+0x40a/0x550 [ 350.968856][T13989] _copy_to_user+0x31/0xb0 [ 350.968887][T13989] simple_read_from_buffer+0xca/0x150 [ 350.968920][T13989] proc_fail_nth_read+0x1e9/0x250 [ 350.968955][T13989] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 350.968989][T13989] ? rw_verify_area+0x243/0x630 [ 350.969012][T13989] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 350.969045][T13989] vfs_read+0x1f8/0xb40 [ 350.969069][T13989] ? fdget_pos+0x254/0x320 [ 350.969102][T13989] ? __pfx___mutex_lock+0x10/0x10 [ 350.969129][T13989] ? __pfx_vfs_read+0x10/0x10 [ 350.969149][T13989] ? do_sys_openat2+0x17a/0x1d0 [ 350.969183][T13989] ? __fget_files+0x2a/0x410 [ 350.969217][T13989] ? __fget_files+0x395/0x410 [ 350.969244][T13989] ? __fget_files+0x2a/0x410 [ 350.969286][T13989] ksys_read+0x18f/0x2b0 [ 350.969312][T13989] ? __pfx_ksys_read+0x10/0x10 [ 350.969336][T13989] ? do_syscall_64+0x100/0x230 [ 350.969366][T13989] ? do_syscall_64+0xb6/0x230 [ 350.969397][T13989] do_syscall_64+0xf3/0x230 [ 350.969424][T13989] ? clear_bhb_loop+0x35/0x90 [ 350.969458][T13989] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 350.969486][T13989] RIP: 0033:0x7fbcafb8bb7c [ 350.969505][T13989] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 350.969522][T13989] RSP: 002b:00007fbcad9d5030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 350.969545][T13989] RAX: ffffffffffffffda RBX: 00007fbcafda6080 RCX: 00007fbcafb8bb7c [ 350.969560][T13989] RDX: 000000000000000f RSI: 00007fbcad9d50a0 RDI: 0000000000000004 [ 350.969573][T13989] RBP: 00007fbcad9d5090 R08: 0000000000000000 R09: 0000000000000000 [ 350.969586][T13989] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 350.969598][T13989] R13: 0000000000000001 R14: 00007fbcafda6080 R15: 00007ffc389b2cf8 [ 350.969630][T13989] [ 351.227992][T13990] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2147'. [ 351.606665][T14011] netlink: 'syz.3.2155': attribute type 10 has an invalid length. [ 351.626218][T14011] 8021q: adding VLAN 0 to HW filter on device team0 [ 351.644385][T14011] bond0: (slave team0): Enslaving as an active interface with an up link [ 351.678593][T14010] rdma_rxe: rxe_newlink: failed to add team_slave_0 [ 351.904113][T13912] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 351.919748][T13912] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 351.949747][T14022] netlink: 96 bytes leftover after parsing attributes in process `syz.0.2159'. [ 351.961003][T13912] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 351.988841][T13912] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 352.034796][T14025] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2160'. [ 352.055316][T14025] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.071576][T14025] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.085516][T14025] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.094652][T14025] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 352.128624][T14025] geneve4: entered promiscuous mode [ 352.135213][ T5843] Bluetooth: hci3: command tx timeout [ 352.140534][T14025] geneve4: entered allmulticast mode [ 352.164302][T14025] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.175305][T14025] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.189656][T14025] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.198770][T14025] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 352.352847][T13912] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.386231][T13912] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.449843][T13912] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 352.465284][T13912] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 352.501281][T10269] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.508454][T10269] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.553330][T10269] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.560562][T10269] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.616605][T14051] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2166'. [ 352.827919][T14060] netlink: 'syz.2.2168': attribute type 3 has an invalid length. [ 352.864350][T14064] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2169'. [ 352.888861][T14060] macvlan4: entered promiscuous mode [ 352.898616][T14060] macvlan4: entered allmulticast mode [ 352.906752][T14060] team0: Device macvlan4 is already an upper device of the team interface [ 352.935407][T14064] gretap0: entered promiscuous mode [ 352.944792][T14064] gretap0: left promiscuous mode [ 353.016094][T13912] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.041571][T14066] lo speed is unknown, defaulting to 1000 [ 353.091331][T14066] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 353.171133][T14075] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-tlb(5) [ 353.586705][T13912] veth0_vlan: entered promiscuous mode [ 353.595072][T14085] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2174'. [ 353.605243][T13912] veth1_vlan: entered promiscuous mode [ 353.699071][T13912] veth0_macvtap: entered promiscuous mode [ 353.736336][T13912] veth1_macvtap: entered promiscuous mode [ 353.773518][T13912] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.816773][T13912] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.846323][T13912] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.860662][T13912] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.869609][T13912] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 353.878520][T13912] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.010889][T10248] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.022531][T10248] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.038398][T14086] siw: device registration error -23 [ 354.151011][T10248] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.166070][T10248] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.200183][ T5843] Bluetooth: hci3: command tx timeout [ 354.371529][T14062] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2167'. [ 354.445040][T14062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.454194][T14062] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.470285][T14062] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 354.488521][T10846] lo speed is unknown, defaulting to 1000 [ 354.742304][T14111] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2180'. [ 354.956821][T14113] lo speed is unknown, defaulting to 1000 [ 354.973391][T14113] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 355.317658][T14122] x_tables: duplicate underflow at hook 1 [ 355.354733][T14123] x_tables: duplicate underflow at hook 1 [ 355.388506][T14124] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073357230079) [ 355.460256][T14124] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 355.899302][T10261] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.207771][T10261] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.268039][T10261] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.345428][T10261] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 356.428340][T10261] bridge_slave_1: left allmulticast mode [ 356.435063][T10261] bridge_slave_1: left promiscuous mode [ 356.441604][T10261] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.451308][T10261] bridge_slave_0: left allmulticast mode [ 356.456986][T10261] bridge_slave_0: left promiscuous mode [ 356.462918][T10261] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.934197][T10261] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.993217][T10261] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.014915][T10261] bond0 (unregistering): Released all slaves [ 357.032105][T14136] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2186'. [ 357.045579][T14136] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.056139][T14136] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.067175][T14134] siw: device registration error -23 [ 357.072891][T14136] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.083790][T14136] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 357.093189][T14136] geneve4: entered promiscuous mode [ 357.109227][T14136] geneve4: entered allmulticast mode [ 357.116772][T14136] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.126451][T14136] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.143165][T14136] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.155452][T14149] dccp_invalid_packet: P.Data Offset(0) too small [ 357.156657][T14136] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 357.229544][T14150] 8021q: VLANs not supported on ip6gre0 [ 357.266743][T14148] tipc: Enabled bearer , priority 0 [ 357.297327][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.308024][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.316072][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.330945][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.338708][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 357.346139][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.411242][T14139] tipc: Disabling bearer [ 357.586625][T14161] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2194'. [ 357.616586][T14151] lo speed is unknown, defaulting to 1000 [ 357.646907][T14151] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 358.071288][T14184] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2199'. [ 358.196448][T14190] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2202'. [ 358.237187][T14190] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.253913][T14190] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.265130][T14190] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.278924][T14190] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.291722][T14190] geneve4: entered promiscuous mode [ 358.297554][T14190] geneve4: entered allmulticast mode [ 358.314295][T14192] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 358.323038][T14190] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.339809][T14190] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.367242][T14190] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.376044][T14190] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 358.504695][T10261] hsr_slave_0: left promiscuous mode [ 358.514703][T10261] hsr_slave_1: left promiscuous mode [ 358.523592][T10261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.541306][T10261] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.562131][T10261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.569590][T10261] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.626313][T10261] veth1_macvtap: left promiscuous mode [ 358.631989][T10261] veth0_macvtap: left promiscuous mode [ 358.637550][T10261] veth1_vlan: left promiscuous mode [ 358.649561][T10261] veth0_vlan: left promiscuous mode [ 359.189732][T14218] xt_TPROXY: Can be used only with -p tcp or -p udp [ 359.322170][T10261] team0 (unregistering): Port device team_slave_1 removed [ 359.375410][T10261] team0 (unregistering): Port device team_slave_0 removed [ 359.400251][ T5843] Bluetooth: hci3: command tx timeout [ 359.493346][T14220] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 359.919291][T14208] pimreg: entered allmulticast mode [ 359.929209][T14197] lo speed is unknown, defaulting to 1000 [ 359.941504][T14214] pimreg: left allmulticast mode [ 359.983186][T14197] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 360.183687][T14233] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2213'. [ 360.309001][T14234] sysfs: cannot create duplicate filename '/class/ieee80211/!寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}zR' [ 360.320222][T14234] CPU: 1 UID: 0 PID: 14234 Comm: syz.0.2213 Not tainted 6.14.0-rc6-syzkaller-01215-ga1e36ec36356 #0 [ 360.320249][T14234] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 360.320271][T14234] Call Trace: [ 360.320278][T14234] [ 360.320286][T14234] dump_stack_lvl+0x241/0x360 [ 360.320320][T14234] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.320343][T14234] ? __pfx__printk+0x10/0x10 [ 360.320369][T14234] ? __kmalloc_cache_noprof+0x243/0x390 [ 360.320398][T14234] ? sysfs_warn_dup+0x51/0xa0 [ 360.320429][T14234] sysfs_warn_dup+0x8e/0xa0 [ 360.320454][T14234] sysfs_do_create_link_sd+0xbe/0x110 [ 360.320483][T14234] device_add_class_symlinks+0x1c5/0x250 [ 360.320508][T14234] device_add+0x553/0xbf0 [ 360.320535][T14234] wiphy_register+0x1922/0x2650 [ 360.320579][T14234] ? __pfx_wiphy_register+0x10/0x10 [ 360.320605][T14234] ? minstrel_ht_alloc+0x84b/0x940 [ 360.320643][T14234] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 360.320680][T14234] ieee80211_register_hw+0x35d9/0x42e0 [ 360.320716][T14234] ? ieee80211_register_hw+0x15e1/0x42e0 [ 360.320746][T14234] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 360.320779][T14234] ? __asan_memset+0x23/0x50 [ 360.320801][T14234] ? __hrtimer_init+0x170/0x250 [ 360.320828][T14234] mac80211_hwsim_new_radio+0x2a89/0x49f0 [ 360.320890][T14234] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 360.320918][T14234] ? trace_kmalloc+0x1f/0xd0 [ 360.320943][T14234] ? __kmalloc_node_track_caller_noprof+0x2a8/0x4c0 [ 360.320974][T14234] ? kstrndup+0xbb/0x150 [ 360.321016][T14234] hwsim_new_radio_nl+0xece/0x2290 [ 360.321059][T14234] ? __pfx___nla_validate_parse+0x10/0x10 [ 360.321088][T14234] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 360.321153][T14234] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 360.321188][T14234] genl_rcv_msg+0xb1f/0xec0 [ 360.321222][T14234] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.321286][T14234] ? __pfx_lock_acquire+0x10/0x10 [ 360.321317][T14234] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 360.321346][T14234] ? __pfx___might_resched+0x10/0x10 [ 360.321385][T14234] netlink_rcv_skb+0x206/0x480 [ 360.321417][T14234] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.321443][T14234] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 360.321509][T14234] genl_rcv+0x28/0x40 [ 360.321529][T14234] netlink_unicast+0x7f6/0x990 [ 360.321567][T14234] ? __pfx_netlink_unicast+0x10/0x10 [ 360.321593][T14234] ? __virt_addr_valid+0x45f/0x530 [ 360.321614][T14234] ? __phys_addr_symbol+0x2f/0x70 [ 360.321634][T14234] ? __check_object_size+0x47a/0x730 [ 360.321668][T14234] netlink_sendmsg+0x8de/0xcb0 [ 360.321713][T14234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.321749][T14234] ? aa_sock_msg_perm+0x91/0x160 [ 360.321788][T14234] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.321817][T14234] __sock_sendmsg+0x221/0x270 [ 360.321850][T14234] ____sys_sendmsg+0x53a/0x860 [ 360.321885][T14234] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.321908][T14234] ? __fget_files+0x2a/0x410 [ 360.321943][T14234] ? __fget_files+0x2a/0x410 [ 360.321984][T14234] __sys_sendmsg+0x269/0x350 [ 360.322008][T14234] ? __pfx_futex_wake+0x10/0x10 [ 360.322043][T14234] ? __pfx___sys_sendmsg+0x10/0x10 [ 360.322119][T14234] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.322152][T14234] ? do_syscall_64+0x100/0x230 [ 360.322183][T14234] ? do_syscall_64+0xb6/0x230 [ 360.322214][T14234] do_syscall_64+0xf3/0x230 [ 360.322240][T14234] ? clear_bhb_loop+0x35/0x90 [ 360.322279][T14234] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.322306][T14234] RIP: 0033:0x7fadbd18d169 [ 360.322325][T14234] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.322343][T14234] RSP: 002b:00007fadbafd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 360.322366][T14234] RAX: ffffffffffffffda RBX: 00007fadbd3a6080 RCX: 00007fadbd18d169 [ 360.322380][T14234] RDX: 0000000000000000 RSI: 0000400000000040 RDI: 0000000000000009 [ 360.322392][T14234] RBP: 00007fadbd20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 360.322416][T14234] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 360.322427][T14234] R13: 0000000000000000 R14: 00007fadbd3a6080 R15: 00007ffd83832608 [ 360.322476][T14234] [ 360.803791][T14151] chnl_net:caif_netlink_parms(): no params data found [ 360.811005][T14251] netlink: 256 bytes leftover after parsing attributes in process `syz.0.2217'. [ 360.883361][T14251] netlink: 'syz.0.2217': attribute type 32 has an invalid length. [ 360.926362][T14253] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2216'. [ 361.093998][T14265] netlink: 'syz.0.2221': attribute type 1 has an invalid length. [ 361.158228][T14151] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.173568][T14151] bridge0: port 1(bridge_slave_0) entered disabled state [ 361.185969][T14151] bridge_slave_0: entered allmulticast mode [ 361.195379][T14151] bridge_slave_0: entered promiscuous mode [ 361.203898][T14151] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.211203][T14151] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.218536][T14151] bridge_slave_1: entered allmulticast mode [ 361.226024][T14151] bridge_slave_1: entered promiscuous mode [ 361.318528][T14151] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.331222][T14151] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.456803][T14151] team0: Port device team_slave_0 added [ 361.483848][ T5843] Bluetooth: hci3: command tx timeout [ 361.514038][T14151] team0: Port device team_slave_1 added [ 361.657258][T14151] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.664747][T14151] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.698045][T14151] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.721919][T14151] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.729057][T14151] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.756585][T14151] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.935820][T14151] hsr_slave_0: entered promiscuous mode [ 361.952887][T14286] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2228'. [ 361.986831][T14151] hsr_slave_1: entered promiscuous mode [ 362.110434][T14293] syzkaller0: entered promiscuous mode [ 362.115969][T14293] syzkaller0: entered allmulticast mode [ 362.188410][T14293] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2231'. [ 362.211939][T14299] rdma_op ffff888029c6e1f0 conn xmit_rdma 0000000000000000 [ 362.232125][T14300] xt_hashlimit: size too large, truncated to 1048576 [ 362.240679][T14299] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2234'. [ 362.332098][T14303] netlink: 724 bytes leftover after parsing attributes in process `syz.3.2232'. [ 362.362131][T14304] netlink: 'syz.0.2235': attribute type 46 has an invalid length. [ 362.391225][T14306] xt_hashlimit: size too large, truncated to 1048576 [ 362.740467][T14323] netlink: 'syz.3.2239': attribute type 1 has an invalid length. [ 362.826369][T14327] netlink: 'syz.0.2238': attribute type 1 has an invalid length. [ 362.875292][T14330] xt_nfacct: accounting object `syz1' does not exists [ 362.878353][T14322] bond6: (slave gretap1): making interface the new active one [ 362.896719][T14322] bond6: (slave gretap1): Enslaving as an active interface with an up link [ 363.053011][T14151] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 363.075430][T14151] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 363.094759][T14340] netlink: 7 bytes leftover after parsing attributes in process `syz.1.2245'. [ 363.097191][T14151] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 363.111274][T14339] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2245'. [ 363.140426][T14151] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 363.287287][T14151] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.324701][T14151] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.346679][T10265] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.353906][T10265] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.389323][T10261] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.396568][T10261] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.433783][T14354] netlink: 64138 bytes leftover after parsing attributes in process `syz.3.2248'. [ 363.570242][ T5843] Bluetooth: hci3: command tx timeout [ 363.829796][T14151] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.877703][T14372] x_tables: duplicate underflow at hook 2 [ 364.067160][T14384] lo speed is unknown, defaulting to 1000 [ 364.077735][T14384] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 364.145614][T14151] veth0_vlan: entered promiscuous mode [ 364.185133][T14151] veth1_vlan: entered promiscuous mode [ 364.255153][T14151] veth0_macvtap: entered promiscuous mode [ 364.282770][T14151] veth1_macvtap: entered promiscuous mode [ 364.330651][T14151] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 364.356203][T14151] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 364.380302][T14393] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.389255][T14393] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.398633][T14393] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.412287][T14393] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.430416][T14393] geneve4: entered promiscuous mode [ 364.453591][T14393] geneve4: entered allmulticast mode [ 364.468863][T14393] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.488693][T14393] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.501783][T14393] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.511077][T14393] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 364.545608][T14151] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.554556][T14151] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.563660][T14151] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.572601][T14151] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 364.710502][T10265] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.743692][T10265] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.801992][T10269] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 364.822219][T10269] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 364.940230][T14386] siw: device registration error -23 [ 365.641414][T14426] netlink: 'syz.1.2264': attribute type 2 has an invalid length. [ 365.660935][T14426] __nla_validate_parse: 6 callbacks suppressed [ 365.660956][T14426] netlink: 132 bytes leftover after parsing attributes in process `syz.1.2264'. [ 365.867886][T14432] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2270'. [ 365.877522][T14432] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2270'. [ 365.952889][T10258] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.511103][T10258] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.867871][T10258] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.927705][T10258] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.019212][T10258] bridge_slave_1: left allmulticast mode [ 367.025979][T10258] bridge_slave_1: left promiscuous mode [ 367.031934][T10258] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.041409][T10258] bridge_slave_0: left allmulticast mode [ 367.047095][T10258] bridge_slave_0: left promiscuous mode [ 367.053937][T10258] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.428571][T10258] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 367.443711][T10258] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 367.454072][T10258] bond0 (unregistering): Released all slaves [ 367.534959][T14437] xt_hashlimit: max too large, truncated to 1048576 [ 367.563156][T14437] No such timeout policy "syz1" [ 367.584783][T14439] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2271'. [ 367.607604][T14445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2274'. [ 367.620959][T14439] nbd: illegal input index 16744192 [ 367.637112][T14445] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2274'. [ 367.796137][T14450] batadv_slave_1: left promiscuous mode [ 367.807424][T14450] batadv_slave_1: left allmulticast mode [ 367.825900][T14450] syzkaller0: left promiscuous mode [ 367.834817][T14450] syzkaller0: left allmulticast mode [ 367.852217][T14450] ip6erspan0: left promiscuous mode [ 367.956618][T14450] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.966411][T14450] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.975905][T14450] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 367.985153][T14450] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 368.031475][T14450] bond2: left promiscuous mode [ 368.036793][T14450] batadv1: left promiscuous mode [ 368.049426][T14450] batadv1: left allmulticast mode [ 368.192028][T14455] bridge0: port 1(gretap0) entered blocking state [ 368.199326][T14455] bridge0: port 1(gretap0) entered disabled state [ 368.214767][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 368.224815][T14455] gretap0: entered allmulticast mode [ 368.225499][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 368.239013][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 368.246394][T14455] gretap0: entered promiscuous mode [ 368.254367][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 368.262376][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 368.269884][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 368.388625][T14465] lo speed is unknown, defaulting to 1000 [ 368.399058][T14465] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 368.454924][T14475] netlink: 72 bytes leftover after parsing attributes in process `syz.0.2281'. [ 368.494885][T14479] netlink: 'syz.1.2282': attribute type 7 has an invalid length. [ 368.708041][T14483] bridge0: entered promiscuous mode [ 368.717723][T14483] macvlan0: entered promiscuous mode [ 368.738449][T14483] bridge0: port 1(macvlan0) entered blocking state [ 368.763675][T14483] bridge0: port 1(macvlan0) entered disabled state [ 368.763845][T14487] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2285'. [ 368.783040][T14483] macvlan0: entered allmulticast mode [ 368.788477][T14483] bridge0: entered allmulticast mode [ 368.819588][T14483] macvlan0: left allmulticast mode [ 368.839817][T14483] bridge0: left allmulticast mode [ 368.852261][T14483] bridge0: left promiscuous mode [ 368.892912][T10258] hsr_slave_0: left promiscuous mode [ 368.904315][T10258] hsr_slave_1: left promiscuous mode [ 368.910376][T10258] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 368.917826][T10258] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 368.941030][T10258] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 368.948892][T10258] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 368.993400][T14497] Unsupported ieee802154 address type: 0 [ 369.023965][T10258] veth1_macvtap: left promiscuous mode [ 369.029643][T10258] veth0_macvtap: left promiscuous mode [ 369.036108][T10258] veth1_vlan: left promiscuous mode [ 369.041613][T10258] veth0_vlan: left promiscuous mode [ 369.388862][T14520] netlink: 1272 bytes leftover after parsing attributes in process `syz.0.2292'. [ 369.744667][T10258] team0 (unregistering): Port device team_slave_1 removed [ 369.795759][T10258] team0 (unregistering): Port device team_slave_0 removed [ 370.245844][T14494] syzkaller0: entered promiscuous mode [ 370.251957][T14494] syzkaller0: entered allmulticast mode [ 370.360201][ T54] Bluetooth: hci3: command tx timeout [ 370.450823][T14526] netlink: 'syz.3.2293': attribute type 16 has an invalid length. [ 370.458711][T14526] netlink: 'syz.3.2293': attribute type 17 has an invalid length. [ 370.542304][T14526] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 370.781258][T14542] batadv_slave_1: entered promiscuous mode [ 370.787241][T14542] batadv_slave_1: entered allmulticast mode [ 370.812506][T14542] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 370.878605][T14465] chnl_net:caif_netlink_parms(): no params data found [ 370.897117][T14546] openvswitch: netlink: IPv4 tun info is not correct [ 371.149223][T14465] bridge0: port 1(bridge_slave_0) entered blocking state [ 371.170595][T14465] bridge0: port 1(bridge_slave_0) entered disabled state [ 371.205682][T14465] bridge_slave_0: entered allmulticast mode [ 371.220908][T14569] netlink: 60 bytes leftover after parsing attributes in process `syz.1.2300'. [ 371.241429][T14465] bridge_slave_0: entered promiscuous mode [ 371.248511][T14569] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2300'. [ 371.260386][T14570] netlink: 20 bytes leftover after parsing attributes in process `syz.2.2301'. [ 371.268289][T14569] netlink: 'syz.1.2300': attribute type 2 has an invalid length. [ 371.298167][T14465] bridge0: port 2(bridge_slave_1) entered blocking state [ 371.308618][T14465] bridge0: port 2(bridge_slave_1) entered disabled state [ 371.318320][T14465] bridge_slave_1: entered allmulticast mode [ 371.326052][T14465] bridge_slave_1: entered promiscuous mode [ 371.411566][T14465] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 371.435287][T14576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.451952][T14465] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 371.645846][T14582] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 371.672743][T14465] team0: Port device team_slave_0 added [ 371.688655][T14465] team0: Port device team_slave_1 added [ 371.743333][T14465] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 371.794718][T14465] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.870071][T14465] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 371.892490][T14465] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 371.899485][T14465] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 371.999531][T14465] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.039480][T14601] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2312'. [ 372.049039][T14593] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2310'. [ 372.130336][T14465] hsr_slave_0: entered promiscuous mode [ 372.139038][T14465] hsr_slave_1: entered promiscuous mode [ 372.283027][T14608] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2311'. [ 372.423277][T14612] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2311'. [ 372.441380][ T54] Bluetooth: hci3: command tx timeout [ 372.442425][T14609] dummy0: entered promiscuous mode [ 372.453891][T14611] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2314'. [ 372.482473][T14612] nbd: socks must be embedded in a SOCK_ITEM attr [ 372.570504][T14611] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.579524][T14611] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.588644][T14611] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.597708][T14611] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.606722][T14611] geneve4: entered promiscuous mode [ 372.612761][T14611] geneve4: entered allmulticast mode [ 372.625357][T14611] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.643485][T14611] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.656844][T14611] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 372.673563][T14611] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.044405][T14619] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2317'. [ 373.054543][T14620] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2316'. [ 373.465646][T14465] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 373.517794][T14635] gretap0: left allmulticast mode [ 373.542675][T14635] gretap0: left promiscuous mode [ 373.586839][T14635] bridge0: port 1(gretap0) entered disabled state [ 373.619097][T14635] team0: Port device vxlan0 removed [ 373.647927][T14635] bond2: (slave batadv1): Releasing active interface [ 373.664149][T14465] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 373.710185][T14465] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 373.729648][T14465] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 373.906747][T14652] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 373.969127][T14465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.009041][T14465] 8021q: adding VLAN 0 to HW filter on device team0 [ 374.035047][T10029] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.042393][T10029] bridge0: port 1(bridge_slave_0) entered forwarding state [ 374.082458][T10257] bridge0: port 2(bridge_slave_1) entered blocking state [ 374.089612][T10257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.515082][T14465] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.522191][ T54] Bluetooth: hci3: command tx timeout [ 374.605268][T14672] lo speed is unknown, defaulting to 1000 [ 374.678570][T14672] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 374.984130][T14465] veth0_vlan: entered promiscuous mode [ 375.012979][T14465] veth1_vlan: entered promiscuous mode [ 375.075600][T14690] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 375.122724][T14691] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input9 [ 375.151706][T14465] veth0_macvtap: entered promiscuous mode [ 375.193339][T14465] veth1_macvtap: entered promiscuous mode [ 375.215887][T14691] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 375.228653][T14690] gretap0: entered promiscuous mode [ 375.243251][T14698] warn_alloc: 1 callbacks suppressed [ 375.243270][T14698] syz.2.2339: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 375.264543][T14698] CPU: 0 UID: 0 PID: 14698 Comm: syz.2.2339 Not tainted 6.14.0-rc6-syzkaller-01215-ga1e36ec36356 #0 [ 375.264571][T14698] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 375.264593][T14698] Call Trace: [ 375.264601][T14698] [ 375.264610][T14698] dump_stack_lvl+0x241/0x360 [ 375.264642][T14698] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.264666][T14698] ? __pfx__printk+0x10/0x10 [ 375.264693][T14698] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 375.264722][T14698] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 375.264754][T14698] warn_alloc+0x278/0x410 [ 375.264778][T14698] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 375.264801][T14698] ? __pfx_warn_alloc+0x10/0x10 [ 375.264824][T14698] ? kasan_save_track+0x3f/0x80 [ 375.264846][T14698] ? __kasan_kmalloc+0x98/0xb0 [ 375.264871][T14698] ? xsk_setsockopt+0x4aa/0x810 [ 375.264902][T14698] ? do_sock_setsockopt+0x3af/0x720 [ 375.264942][T14698] ? __x64_sys_setsockopt+0x1ee/0x280 [ 375.264963][T14698] ? do_syscall_64+0xf3/0x230 [ 375.264989][T14698] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.265027][T14698] __vmalloc_node_range_noprof+0x126/0x1380 [ 375.265081][T14698] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 375.265108][T14698] ? __kasan_kmalloc+0x98/0xb0 [ 375.265138][T14698] vmalloc_user_noprof+0x74/0x80 [ 375.265161][T14698] ? xskq_create+0xb6/0x170 [ 375.265204][T14698] xskq_create+0xb6/0x170 [ 375.265228][T14698] xsk_init_queue+0xa1/0x100 [ 375.265252][T14698] xsk_setsockopt+0x4aa/0x810 [ 375.265288][T14698] ? __pfx_xsk_setsockopt+0x10/0x10 [ 375.265321][T14698] ? __pfx_aa_sk_perm+0x10/0x10 [ 375.265356][T14698] ? aa_sock_opt_perm+0x79/0x120 [ 375.265394][T14698] ? __pfx_xsk_setsockopt+0x10/0x10 [ 375.265427][T14698] do_sock_setsockopt+0x3af/0x720 [ 375.265459][T14698] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 375.265489][T14698] ? __fget_files+0x395/0x410 [ 375.265520][T14698] ? __fget_files+0x2a/0x410 [ 375.265560][T14698] __x64_sys_setsockopt+0x1ee/0x280 [ 375.265593][T14698] do_syscall_64+0xf3/0x230 [ 375.265621][T14698] ? clear_bhb_loop+0x35/0x90 [ 375.265655][T14698] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 375.265695][T14698] RIP: 0033:0x7fc5b558d169 [ 375.265714][T14698] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 375.265732][T14698] RSP: 002b:00007fc5b63a5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 375.265755][T14698] RAX: ffffffffffffffda RBX: 00007fc5b57a5fa0 RCX: 00007fc5b558d169 [ 375.265771][T14698] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 375.265784][T14698] RBP: 00007fc5b560e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 375.265798][T14698] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 375.265811][T14698] R13: 0000000000000000 R14: 00007fc5b57a5fa0 R15: 00007ffe01c0ebd8 [ 375.265845][T14698] [ 375.265854][T14698] Mem-Info: [ 375.286668][T14465] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 375.287115][T14698] active_anon:8936 inactive_anon:0 isolated_anon:0 [ 375.287115][T14698] active_file:1968 inactive_file:38445 isolated_file:0 [ 375.287115][T14698] unevictable:768 dirty:133 writeback:0 [ 375.287115][T14698] slab_reclaimable:11854 slab_unreclaimable:110212 [ 375.287115][T14698] mapped:30585 shmem:3017 pagetables:737 [ 375.287115][T14698] sec_pagetables:0 bounce:0 [ 375.287115][T14698] kernel_misc_reclaimable:0 [ 375.287115][T14698] free:1320142 free_pcp:1246 free_cma:0 [ 375.437582][T14465] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 375.616290][T14698] Node 0 active_anon:38644kB inactive_anon:0kB active_file:7872kB inactive_file:153704kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:133340kB dirty:532kB writeback:0kB shmem:13232kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:13120kB pagetables:3148kB sec_pagetables:0kB all_unreclaimable? no [ 375.661488][T14698] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 375.702423][T14698] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 375.731722][T14698] lowmem_reserve[]: 0 2489 2490 2490 2490 [ 375.737630][T14698] Node 0 DMA32 free:1350920kB boost:0kB min:34168kB low:42708kB high:51248kB reserved_highatomic:0KB active_anon:40008kB inactive_anon:0kB active_file:7872kB inactive_file:153388kB unevictable:1536kB writepending:528kB present:3129332kB managed:2549716kB mlocked:0kB bounce:0kB free_pcp:2564kB local_pcp:952kB free_cma:0kB [ 375.798720][T14698] lowmem_reserve[]: 0 0 0 0 0 [ 375.808380][T14698] Node 0 Normal free:4kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:316kB unevictable:0kB writepending:4kB present:1048580kB managed:364kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 375.856696][T14698] lowmem_reserve[]: 0 0 0 0 0 [ 375.875742][T14698] Node 1 Normal free:3910588kB boost:0kB min:55728kB low:69660kB high:83592kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:300kB local_pcp:300kB free_cma:0kB [ 375.913830][T14698] lowmem_reserve[]: 0 0 0 0 0 [ 375.919471][T14698] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 375.932945][T14698] Node 0 DMA32: 2*4kB (ME) 20*8kB (ME) 10*16kB (ME) 204*32kB (UME) 179*64kB (UME) 81*128kB (UME) 43*256kB (UME) 36*512kB (UME) 16*1024kB (UM) 7*2048kB (UME) 308*4096kB (UM) = 1350408kB [ 375.952898][T14698] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 375.966395][T14698] Node 1 Normal: 199*4kB (UE) 32*8kB (UME) 42*16kB (UME) 180*32kB (UME) 86*64kB (UME) 28*128kB (UME) 15*256kB (UME) 10*512kB (UM) 2*1024kB (UM) 0*2048kB 948*4096kB (UM) = 3910588kB [ 376.002924][T14698] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.027209][T14698] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 376.037958][T14698] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 376.049894][T14698] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 376.061344][T14698] 44655 total pagecache pages [ 376.066754][T14698] 0 pages in swap cache [ 376.072032][T14698] Free swap = 124996kB [ 376.076319][T14698] Total swap = 124996kB [ 376.087040][T14698] 2097051 pages RAM [ 376.110005][T14698] 0 pages HighMem/MovableOnly [ 376.118271][T14698] 427900 pages reserved [ 376.127322][T14698] 0 pages cma reserved [ 376.152931][T14465] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.166366][T14465] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.175868][T14465] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.188442][T14465] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.231543][T14722] __nla_validate_parse: 4 callbacks suppressed [ 376.231563][T14722] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2345'. [ 376.237903][T14723] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.384674][T14725] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.2346'. [ 376.397951][T14725] openvswitch: netlink: Flow actions attr not present in new flow. [ 376.500436][T14727] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2347'. [ 376.516139][T10029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.555499][T10029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.601859][ T54] Bluetooth: hci3: command tx timeout [ 376.781915][T10263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 376.810967][T10263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 376.869825][T14747] team0: Mode changed to "activebackup" [ 377.032438][T14751] macsec0: entered allmulticast mode [ 377.166847][T14755] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 377.282544][T14765] lo speed is unknown, defaulting to 1000 [ 377.301497][T14765] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 377.416389][T10029] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.596897][T10029] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.850682][T10029] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.042154][T10029] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.155501][T10029] bridge_slave_1: left allmulticast mode [ 378.162077][T10029] bridge_slave_1: left promiscuous mode [ 378.167767][T10029] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.177909][T10029] bridge_slave_0: left allmulticast mode [ 378.183932][T10029] bridge_slave_0: left promiscuous mode [ 378.190215][T10029] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.548361][T10029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.559314][T10029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.569743][T10029] bond0 (unregistering): Released all slaves [ 378.846321][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.919252][T10029] hsr_slave_0: left promiscuous mode [ 378.939702][T10029] hsr_slave_1: left promiscuous mode [ 378.957762][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.965661][T10029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.975142][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.982812][T10029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.008526][T10029] veth1_macvtap: left promiscuous mode [ 379.014105][T10029] veth0_macvtap: left promiscuous mode [ 379.019644][T10029] veth1_vlan: left promiscuous mode [ 379.025214][T10029] veth0_vlan: left promiscuous mode [ 379.323094][T14777] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2358'. [ 379.333670][T14778] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 379.835156][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 379.855752][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 379.865246][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 379.885209][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 379.903706][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 379.912743][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 380.112492][T10029] team0 (unregistering): Port device team_slave_1 removed [ 380.180684][T10029] team0 (unregistering): Port device team_slave_0 removed [ 380.457529][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2364'. [ 380.466739][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2364'. [ 380.475946][T14798] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2364'. [ 380.773076][T14794] lo speed is unknown, defaulting to 1000 [ 380.779852][T14794] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 381.008781][T14802] lo speed is unknown, defaulting to 1000 [ 381.149834][T14802] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 381.630876][T14829] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2373'. [ 381.645250][T14829] netlink: 32 bytes leftover after parsing attributes in process `syz.3.2373'. [ 381.733958][T14835] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2374'. [ 381.752512][T14794] chnl_net:caif_netlink_parms(): no params data found [ 381.803032][T14838] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2374'. [ 381.887320][T14833] A link change request failed with some changes committed already. Interface veth0_virt_wifi may have been left with an inconsistent configuration, please check. [ 381.960297][ T54] Bluetooth: hci3: command tx timeout [ 381.982387][T14851] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2377'. [ 381.994376][T14794] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.002552][T14794] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.009773][T14794] bridge_slave_0: entered allmulticast mode [ 382.016829][T14794] bridge_slave_0: entered promiscuous mode [ 382.027519][T14852] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2378'. [ 382.064004][T14850] veth0: left promiscuous mode [ 382.069148][T14850] veth1: left promiscuous mode [ 382.099630][T14850] wg1: left promiscuous mode [ 382.106968][T14850] wg2: left promiscuous mode [ 382.112097][T14850] veth0_to_bridge: left promiscuous mode [ 382.117982][T14850] veth1_to_bridge: left promiscuous mode [ 382.124198][T14850] veth0_to_bond: left promiscuous mode [ 382.129811][T14850] veth1_to_bond: left promiscuous mode [ 382.136015][T14850] bond_slave_1: left promiscuous mode [ 382.142458][T14850] veth0_to_team: left promiscuous mode [ 382.148076][T14850] team_slave_0: left promiscuous mode [ 382.157557][T14850] veth1_to_team: left promiscuous mode [ 382.166057][T14850] team_slave_1: left promiscuous mode [ 382.171926][T14850] veth0_to_batadv: left promiscuous mode [ 382.177740][T14850] batadv_slave_0: left promiscuous mode [ 382.183575][T14850] veth1_to_batadv: left promiscuous mode [ 382.189294][T14850] batadv_slave_1: left promiscuous mode [ 382.195215][T14850] xfrm0: left promiscuous mode [ 382.200329][T14850] veth0_to_hsr: left promiscuous mode [ 382.205964][T14850] veth1_to_hsr: left promiscuous mode [ 382.211870][T14850] hsr0: left promiscuous mode [ 382.216689][T14850] veth1_virt_wifi: left promiscuous mode [ 382.222867][T14850] veth0_virt_wifi: left promiscuous mode [ 382.228620][T14850] net veth1_virt_wifi virt_wifi0: left promiscuous mode [ 382.235964][T14850] vlan0: left promiscuous mode [ 382.241019][T14850] macvlan1: left promiscuous mode [ 382.246150][T14850] ipvlan0: left promiscuous mode [ 382.251397][T14850] ipvlan1: left promiscuous mode [ 382.256739][T14850] macsec0: left promiscuous mode [ 382.262041][T14850] geneve0: left promiscuous mode [ 382.267227][T14850] mac80211_hwsim hwsim4 wlan0: left promiscuous mode [ 382.275168][T14850] mac80211_hwsim hwsim5 wlan1: left promiscuous mode [ 382.282191][T14850] geneve2: left promiscuous mode [ 382.287180][T14850] geneve2: left allmulticast mode [ 382.293173][T14850] gtp0: left promiscuous mode [ 382.297902][T14850] gtp0: left allmulticast mode [ 382.303975][T14850] mac80211_hwsim hwsim4 syzkaller0: left promiscuous mode [ 382.311319][T14850] mac80211_hwsim hwsim4 syzkaller0: left allmulticast mode [ 382.319114][T14850] ip6gre1: left promiscuous mode [ 382.326263][T14850] macvlan4: left promiscuous mode [ 382.333906][T14850] ipip1: left promiscuous mode [ 382.355242][T14794] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.363883][T14794] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.371362][T14794] bridge_slave_1: entered allmulticast mode [ 382.378158][T14794] bridge_slave_1: entered promiscuous mode [ 382.499562][T14794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.560379][T14794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.723274][T14794] team0: Port device team_slave_0 added [ 382.735863][T14794] team0: Port device team_slave_1 added [ 382.827130][T14794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.854290][T14794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.911541][T14794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.959743][T14794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.962153][T14864] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2382'. [ 382.972625][T14794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 383.002555][T14794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.075872][ T30] audit: type=1800 audit(1741988649.774:3): pid=14878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.2384" name="memory.events" dev="tmpfs" ino=2696 res=0 errno=0 [ 383.109586][T14878] netlink: 'syz.2.2384': attribute type 1 has an invalid length. [ 383.142703][ T30] audit: type=1804 audit(1741988649.794:4): pid=14878 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.2384" name="memory.events" dev="tmpfs" ino=2696 res=1 errno=0 [ 383.170401][T14880] netlink: 7084 bytes leftover after parsing attributes in process `syz.1.2385'. [ 383.233663][T14882] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.2385'. [ 383.280148][T14882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 383.340897][T14794] hsr_slave_0: entered promiscuous mode [ 383.347342][T14794] hsr_slave_1: entered promiscuous mode [ 383.447966][T14890] x_tables: unsorted entry at hook 1 [ 383.640449][T14895] syzkaller1: entered promiscuous mode [ 383.658442][T14900] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2391'. [ 383.659190][T14895] syzkaller1: entered allmulticast mode [ 383.748655][T14902] wg1: entered promiscuous mode [ 383.756766][T14902] wg1: entered allmulticast mode [ 384.040287][ T54] Bluetooth: hci3: command tx timeout [ 384.255881][T14919] netlink: 'syz.3.2397': attribute type 1 has an invalid length. [ 384.284561][T14919] bond2: entered promiscuous mode [ 384.290140][T14919] 8021q: adding VLAN 0 to HW filter on device bond2 [ 384.302310][T14920] batadv0: entered promiscuous mode [ 384.307534][T14920] batadv0: entered allmulticast mode [ 384.315671][T14920] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.324324][T14920] bond2: (slave batadv0): making interface the new active one [ 384.342695][T14920] bond2: (slave batadv0): Enslaving as an active interface with an up link [ 384.418221][T14919] batadv1: entered promiscuous mode [ 384.437889][T14919] batadv1: entered allmulticast mode [ 384.467053][T14919] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 384.484870][T14919] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 384.502951][T14921] netlink: 'syz.0.2398': attribute type 7 has an invalid length. [ 384.772201][T14794] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 384.801439][T14794] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 384.849348][T14794] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 384.873198][T14794] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 384.950835][T14937] lo speed is unknown, defaulting to 1000 [ 384.958695][T14937] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 385.157063][T14794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.235065][T14794] 8021q: adding VLAN 0 to HW filter on device team0 [ 385.315297][T14950] lo speed is unknown, defaulting to 1000 [ 385.327947][T10257] bridge0: port 1(bridge_slave_0) entered blocking state [ 385.335147][T10257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 385.357805][ T5843] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 385.376572][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 385.376985][T10257] bridge0: port 2(bridge_slave_1) entered blocking state [ 385.390855][T10257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 385.399150][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 385.420627][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 385.448346][ T5843] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 385.460522][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 385.573956][T14950] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 385.587871][T14953] lo speed is unknown, defaulting to 1000 [ 385.644321][T14960] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.680081][T14960] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.695192][T14960] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.714190][T14960] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 385.745972][T14960] geneve4: entered promiscuous mode [ 385.756137][T14960] geneve4: entered allmulticast mode [ 385.781313][T14960] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.792027][T14960] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.820358][T14960] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.830533][T14960] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.120191][ T54] Bluetooth: hci3: command tx timeout [ 386.163428][T14794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 386.200243][T14953] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 386.310530][T14972] ip6gretap2: entered promiscuous mode [ 386.323286][T14972] ip6gretap2: entered allmulticast mode [ 386.569962][T14977] lo speed is unknown, defaulting to 1000 [ 386.642508][T14977] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 386.976913][T14794] veth0_vlan: entered promiscuous mode [ 386.998912][T14794] veth1_vlan: entered promiscuous mode [ 387.156802][T14794] veth0_macvtap: entered promiscuous mode [ 387.192249][T14794] veth1_macvtap: entered promiscuous mode [ 387.297103][T14794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 387.469298][T14794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 387.518384][T14794] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.529092][T14794] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.568407][ T54] Bluetooth: hci1: command tx timeout [ 387.569985][T14794] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.600025][T14794] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.649018][T14953] chnl_net:caif_netlink_parms(): no params data found [ 388.065984][T14953] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.073735][T14953] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.081257][T14953] bridge_slave_0: entered allmulticast mode [ 388.088171][T14953] bridge_slave_0: entered promiscuous mode [ 388.106467][T14999] pimreg3: entered allmulticast mode [ 388.120920][T14953] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.157305][T14953] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.171547][T14953] bridge_slave_1: entered allmulticast mode [ 388.192296][T14953] bridge_slave_1: entered promiscuous mode [ 388.218299][ T54] Bluetooth: hci3: command tx timeout [ 388.290202][T10025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.330700][T10025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.420472][T14953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.435970][T14953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.519105][T10263] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 388.528119][T10263] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 388.545625][T14953] team0: Port device team_slave_0 added [ 388.562657][T14953] team0: Port device team_slave_1 added [ 388.651740][T14953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.667902][T14953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.694764][T14953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.713807][T15006] No such timeout policy "syz0" [ 388.721498][T14953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.734335][T14953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.775930][T14953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.817857][T15006] __nla_validate_parse: 10 callbacks suppressed [ 388.817879][T15006] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2417'. [ 388.952287][T14953] hsr_slave_0: entered promiscuous mode [ 388.958803][T14953] hsr_slave_1: entered promiscuous mode [ 388.977524][T14953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 388.997339][T14953] Cannot create hsr debugfs directory [ 389.192466][T10029] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.297845][T10029] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.422540][T14953] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 389.432536][T14953] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 389.468320][T10029] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.481827][T14953] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 389.504555][T14953] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 389.569495][T14953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.591101][T14953] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.617342][T10029] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.639302][T10257] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.646445][T10257] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.653898][ T54] Bluetooth: hci1: command tx timeout [ 389.655721][T10257] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.666521][T10257] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.783912][T10029] bridge_slave_1: left allmulticast mode [ 389.789612][T10029] bridge_slave_1: left promiscuous mode [ 389.795982][T10029] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.805953][T10029] bridge_slave_0: left allmulticast mode [ 389.812053][T10029] bridge_slave_0: left promiscuous mode [ 389.817791][T10029] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.195941][T10029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 390.211687][T10029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 390.227567][T10029] bond0 (unregistering): Released all slaves [ 390.380721][T14953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.637759][T14953] veth0_vlan: entered promiscuous mode [ 390.676786][T14953] veth1_vlan: entered promiscuous mode [ 390.737623][T14953] veth0_macvtap: entered promiscuous mode [ 390.755828][T10029] hsr_slave_0: left promiscuous mode [ 390.766871][T10029] hsr_slave_1: left promiscuous mode [ 390.773492][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 390.781258][T10029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 390.789055][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 390.796937][T10029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.824162][T10029] veth1_macvtap: left promiscuous mode [ 390.829715][T10029] veth0_macvtap: left promiscuous mode [ 390.835433][T10029] veth1_vlan: left promiscuous mode [ 390.842840][T10029] veth0_vlan: left promiscuous mode [ 391.441390][ T5843] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 391.451982][ T5843] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 391.471227][ T5843] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 391.488464][ T5843] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 391.530067][ T5843] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 391.539028][ T5843] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 391.722176][ T5843] Bluetooth: hci1: command tx timeout [ 391.883057][T10029] team0 (unregistering): Port device team_slave_1 removed [ 391.944102][T10029] team0 (unregistering): Port device team_slave_0 removed [ 392.439045][T14953] veth1_macvtap: entered promiscuous mode [ 392.452715][T15029] lo speed is unknown, defaulting to 1000 [ 392.527034][T15029] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 392.563791][T14953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.623258][T14953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.675376][T15039] lo speed is unknown, defaulting to 1000 [ 392.683867][T14953] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.694703][T14953] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.708282][T14953] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.717239][T14953] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.808688][T15039] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 393.111827][T10247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.120478][T10247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.230173][T10257] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.253723][T10257] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.418216][T15063] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input10 [ 393.432766][T15066] Bluetooth: MGMT ver 1.23 [ 393.561611][ T54] Bluetooth: hci3: command tx timeout [ 393.674012][T15077] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2401'. [ 393.750050][T15077] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2401'. [ 393.810704][ T54] Bluetooth: hci1: command tx timeout [ 393.972005][T15084] bond0: (slave team0): Releasing backup interface [ 394.052761][T15084] bond0: (slave veth0_to_bond): Releasing backup interface [ 394.108113][T15084] bond4: (slave ip6gretap1): Releasing backup interface [ 394.120553][T15084] bond4: (slave ip6gretap1): the permanent HWaddr of slave - c2:a8:bf:8e:e1:bb - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 394.173791][T15084] bond4: (slave veth5): Releasing backup interface [ 394.217896][T15084] bond6: (slave gretap1): Releasing active interface [ 394.276838][T15089] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2432'. [ 394.309824][T15091] netlink: 28 bytes leftover after parsing attributes in process `syz.5.2433'. [ 394.382061][T15086] vlan1: entered allmulticast mode [ 394.387256][T15086] bond0: entered allmulticast mode [ 394.440551][T15100] netlink: 'syz.2.2434': attribute type 10 has an invalid length. [ 394.448430][T15100] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2434'. [ 394.559289][T15039] chnl_net:caif_netlink_parms(): no params data found [ 394.575735][T15100] @ÿ: left promiscuous mode [ 394.595788][T15100] @ÿ: entered promiscuous mode [ 394.632272][T15100] @ÿ: entered allmulticast mode [ 394.668913][T15100] bridge0: port 1(7@ÿ) entered blocking state [ 394.741269][T15100] bridge0: port 1(7@ÿ) entered disabled state [ 394.789352][T15100] A link change request failed with some changes committed already. Interface 7@ÿ may have been left with an inconsistent configuration, please check. [ 394.829827][T15111] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2436'. [ 395.006773][T15111] geneve2: entered promiscuous mode [ 395.023844][T15111] geneve2: entered allmulticast mode [ 395.081231][T10247] wlan1: Trigger new scan to find an IBSS to join [ 395.391724][T15039] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.398873][T15039] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.416977][T15039] bridge_slave_0: entered allmulticast mode [ 395.437105][T15039] bridge_slave_0: entered promiscuous mode [ 395.464721][T15039] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.490092][T15039] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.498897][T15039] bridge_slave_1: entered allmulticast mode [ 395.542340][T15039] bridge_slave_1: entered promiscuous mode [ 395.640557][ T54] Bluetooth: hci3: command 0x041b tx timeout [ 395.643006][T15039] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 395.705721][T15039] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 395.736267][T15128] netlink: 'syz.2.2441': attribute type 16 has an invalid length. [ 395.744676][T15128] netlink: 'syz.2.2441': attribute type 17 has an invalid length. [ 395.926375][T15128] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.954373][T15128] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 396.176123][T15039] team0: Port device team_slave_0 added [ 396.254565][T15039] team0: Port device team_slave_1 added [ 396.441807][T15039] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 396.458387][T15039] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.488688][T15039] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 396.517143][T15039] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 396.535654][T15039] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 396.565463][T15039] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.725683][T15175] xt_TCPMSS: Only works on TCP SYN packets [ 396.822116][T15039] hsr_slave_0: entered promiscuous mode [ 396.823790][T15178] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 396.833086][T15039] hsr_slave_1: entered promiscuous mode [ 397.254267][T15197] lo speed is unknown, defaulting to 1000 [ 397.276915][T15197] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 397.500480][T15212] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2463'. [ 397.559247][T15210] sctp: [Deprecated]: syz.0.2462 (pid 15210) Use of int in max_burst socket option deprecated. [ 397.559247][T15210] Use struct sctp_assoc_value instead [ 397.643140][T15039] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 397.664344][T15039] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 397.702914][T15039] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 397.730230][ T5843] Bluetooth: hci3: command 0x041b tx timeout [ 397.745794][T15039] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 397.875056][T15225] netlink: 1004 bytes leftover after parsing attributes in process `syz.2.2467'. [ 397.935854][T15039] 8021q: adding VLAN 0 to HW filter on device bond0 [ 398.049496][T15039] 8021q: adding VLAN 0 to HW filter on device team0 [ 398.073681][T10247] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.080905][T10247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 398.135770][T10247] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.142986][T10247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 398.146684][T10030] wlan1: Trigger new scan to find an IBSS to join [ 398.705600][T15255] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2473'. [ 398.765471][T15255] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2473'. [ 398.798581][T15039] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.871749][T15255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2473'. [ 398.965978][T15255] lo speed is unknown, defaulting to 1000 [ 398.982878][T15262] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2475'. [ 398.999153][T15255] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 399.001174][T15262] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 399.040098][T15262] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 399.223069][T15269] netlink: 'syz.5.2476': attribute type 5 has an invalid length. [ 399.296526][T15269] tipc: Enabling of bearer rejected, failed to enable media [ 399.435790][T15039] veth0_vlan: entered promiscuous mode [ 399.467328][T15039] veth1_vlan: entered promiscuous mode [ 399.571722][T15039] veth0_macvtap: entered promiscuous mode [ 399.603604][T15039] veth1_macvtap: entered promiscuous mode [ 399.640510][T15275] __nla_validate_parse: 3 callbacks suppressed [ 399.640529][T15275] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2479'. [ 399.642576][T15039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 399.700026][T15039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.751493][T15039] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 399.776634][T15039] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 399.800033][ T5843] Bluetooth: hci3: command 0x041b tx timeout [ 399.801423][T15039] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 399.845119][T15039] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 399.905655][T15278] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2480'. [ 399.940581][T15278] netlink: 39 bytes leftover after parsing attributes in process `syz.5.2480'. [ 399.998058][T15039] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.033579][T15039] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.070065][T15039] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.078830][T15039] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.232363][T15258] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2473'. [ 400.640107][T10030] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.649204][T10030] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.748901][T10029] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.758863][T15305] netlink: 'syz.0.2487': attribute type 2 has an invalid length. [ 400.788459][T10029] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.867263][T15305] fþ: entered promiscuous mode [ 400.951941][T15309] netlink: 'syz.3.2488': attribute type 2 has an invalid length. [ 400.993648][T15309] netlink: 244 bytes leftover after parsing attributes in process `syz.3.2488'. [ 401.027190][T15309] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 401.034537][T15309] IPv6: NLM_F_CREATE should be set when creating new route [ 401.041853][T15309] IPv6: NLM_F_CREATE should be set when creating new route [ 401.161372][T10029] wlan1: Trigger new scan to find an IBSS to join [ 401.301640][T15315] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2489'. [ 401.355945][T15319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2491'. [ 401.408628][T15319] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 401.686207][T15332] lo speed is unknown, defaulting to 1000 [ 401.705665][T15336] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 401.722456][T15332] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 401.836320][T15340] lo speed is unknown, defaulting to 1000 [ 401.978623][T10029] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.143007][T10276] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.163596][T10029] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.199431][T15340] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 402.311249][T10029] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.361908][ T26] IPVS: starting estimator thread 0... [ 402.412036][T10029] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 402.450435][T15347] IPVS: using max 25 ests per chain, 60000 per kthread [ 402.621191][T10029] bridge_slave_1: left allmulticast mode [ 402.626902][T10029] bridge_slave_1: left promiscuous mode [ 402.648936][T10029] bridge0: port 2(bridge_slave_1) entered disabled state [ 402.667062][T10029] bridge_slave_0: left allmulticast mode [ 402.674721][T10029] bridge_slave_0: left promiscuous mode [ 402.680843][T10029] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.079400][T10029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 403.094459][T10029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 403.106788][T10029] bond0 (unregistering): Released all slaves [ 403.917109][T15353] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 404.031264][T15356] No such timeout policy "syz0" [ 404.226561][T10029] hsr_slave_0: left promiscuous mode [ 404.290091][T10029] hsr_slave_1: left promiscuous mode [ 404.330811][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 404.338305][T10029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 404.393511][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 404.408679][ T54] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 404.420068][T10029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 404.421167][ T54] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 404.437486][ T54] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 404.447252][ T54] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 404.455971][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 404.468935][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 404.529985][T10029] veth1_macvtap: left promiscuous mode [ 404.535636][T10029] veth0_macvtap: left promiscuous mode [ 404.555440][T10029] veth1_vlan: left promiscuous mode [ 404.562705][T10029] veth0_vlan: left promiscuous mode [ 405.279561][T10029] team0 (unregistering): Port device team_slave_1 removed [ 405.328147][T10029] team0 (unregistering): Port device team_slave_0 removed [ 405.896380][T15367] lo speed is unknown, defaulting to 1000 [ 405.916100][T15367] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 406.001944][T15379] netlink: 260 bytes leftover after parsing attributes in process `syz.3.2507'. [ 406.071175][T15383] xt_l2tp: v2 sid > 0xffff: 262144 [ 406.278426][T15390] [ 406.280888][T15390] ====================================================== [ 406.288018][T15390] WARNING: possible circular locking dependency detected [ 406.295069][T15390] 6.14.0-rc6-syzkaller-01215-ga1e36ec36356 #0 Not tainted [ 406.302200][T15390] ------------------------------------------------------ [ 406.309240][T15390] syz.3.2510/15390 is trying to acquire lock: [ 406.315324][T15390] ffff888061564d28 (&dev_instance_lock_key#12){+.+.}-{4:4}, at: dev_set_mac_address+0x2a/0x50 [ 406.325645][T15390] [ 406.325645][T15390] but task is already holding lock: [ 406.333058][T15390] ffff888052e14d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 406.342778][T15390] [ 406.342778][T15390] which lock already depends on the new lock. [ 406.342778][T15390] [ 406.353215][T15390] [ 406.353215][T15390] the existing dependency chain (in reverse order) is: [ 406.362258][T15390] [ 406.362258][T15390] -> #2 (&dev_instance_lock_key#2){+.+.}-{4:4}: [ 406.370720][T15390] lock_acquire+0x1ed/0x550 [ 406.375765][T15390] __mutex_lock+0x19c/0x1010 [ 406.380888][T15390] __dev_open+0x5cb/0x8a0 [ 406.385755][T15390] netif_open+0xae/0x1b0 [ 406.390527][T15390] dev_open+0x13e/0x260 [ 406.395202][T15390] team_add_slave+0xabe/0x28a0 [ 406.400494][T15390] do_set_master+0x579/0x730 [ 406.405639][T15390] do_setlink+0xfee/0x40f0 [ 406.410577][T15390] rtnl_newlink+0x15a6/0x1d90 [ 406.415782][T15390] rtnetlink_rcv_msg+0x791/0xcf0 [ 406.421265][T15390] netlink_rcv_skb+0x206/0x480 [ 406.426557][T15390] netlink_unicast+0x7f6/0x990 [ 406.431851][T15390] netlink_sendmsg+0x8de/0xcb0 [ 406.437143][T15390] __sock_sendmsg+0x221/0x270 [ 406.442352][T15390] ____sys_sendmsg+0x53a/0x860 [ 406.447642][T15390] __sys_sendmsg+0x269/0x350 [ 406.452753][T15390] do_syscall_64+0xf3/0x230 [ 406.457785][T15390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.464212][T15390] [ 406.464212][T15390] -> #1 (team->team_lock_key#5){+.+.}-{4:4}: [ 406.472397][T15390] lock_acquire+0x1ed/0x550 [ 406.477436][T15390] __mutex_lock+0x19c/0x1010 [ 406.482564][T15390] team_set_mac_address+0x122/0x280 [ 406.488289][T15390] netif_set_mac_address+0x327/0x510 [ 406.494099][T15390] do_setlink+0xaa6/0x40f0 [ 406.499038][T15390] rtnl_newlink+0x15a6/0x1d90 [ 406.504244][T15390] rtnetlink_rcv_msg+0x791/0xcf0 [ 406.509726][T15390] netlink_rcv_skb+0x206/0x480 [ 406.515017][T15390] netlink_unicast+0x7f6/0x990 [ 406.520307][T15390] netlink_sendmsg+0x8de/0xcb0 [ 406.525600][T15390] __sock_sendmsg+0x221/0x270 [ 406.530826][T15390] __sys_sendto+0x363/0x4c0 [ 406.535857][T15390] __x64_sys_sendto+0xde/0x100 [ 406.541139][T15390] do_syscall_64+0xf3/0x230 [ 406.546163][T15390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.552589][T15390] [ 406.552589][T15390] -> #0 (&dev_instance_lock_key#12){+.+.}-{4:4}: [ 406.561114][T15390] validate_chain+0x18ef/0x5920 [ 406.566510][T15390] __lock_acquire+0x1397/0x2100 [ 406.571893][T15390] lock_acquire+0x1ed/0x550 [ 406.576922][T15390] __mutex_lock+0x19c/0x1010 [ 406.582040][T15390] dev_set_mac_address+0x2a/0x50 [ 406.587498][T15390] bond_set_mac_address+0x28e/0x830 [ 406.593224][T15390] netif_set_mac_address+0x327/0x510 [ 406.599033][T15390] do_setlink+0xaa6/0x40f0 [ 406.603985][T15390] rtnl_newlink+0x15a6/0x1d90 [ 406.609191][T15390] rtnetlink_rcv_msg+0x791/0xcf0 [ 406.614671][T15390] netlink_rcv_skb+0x206/0x480 [ 406.619972][T15390] netlink_unicast+0x7f6/0x990 [ 406.625268][T15390] netlink_sendmsg+0x8de/0xcb0 [ 406.630576][T15390] __sock_sendmsg+0x221/0x270 [ 406.635783][T15390] ____sys_sendmsg+0x53a/0x860 [ 406.641073][T15390] __sys_sendmsg+0x269/0x350 [ 406.646195][T15390] do_syscall_64+0xf3/0x230 [ 406.651226][T15390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.657643][T15390] [ 406.657643][T15390] other info that might help us debug this: [ 406.657643][T15390] [ 406.667867][T15390] Chain exists of: [ 406.667867][T15390] &dev_instance_lock_key#12 --> team->team_lock_key#5 --> &dev_instance_lock_key#2 [ 406.667867][T15390] [ 406.683118][T15390] Possible unsafe locking scenario: [ 406.683118][T15390] [ 406.690564][T15390] CPU0 CPU1 [ 406.695925][T15390] ---- ---- [ 406.701290][T15390] lock(&dev_instance_lock_key#2); [ 406.706497][T15390] lock(team->team_lock_key#5); [ 406.713972][T15390] lock(&dev_instance_lock_key#2); [ 406.721717][T15390] lock(&dev_instance_lock_key#12); [ 406.727011][T15390] [ 406.727011][T15390] *** DEADLOCK *** [ 406.727011][T15390] [ 406.735150][T15390] 2 locks held by syz.3.2510/15390: [ 406.740341][T15390] #0: ffffffff8fed6cc8 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0xc4c/0x1d90 [ 406.749414][T15390] #1: ffff888052e14d28 (&dev_instance_lock_key#2){+.+.}-{4:4}, at: do_setlink+0xa94/0x40f0 [ 406.759525][T15390] [ 406.759525][T15390] stack backtrace: [ 406.765409][T15390] CPU: 1 UID: 0 PID: 15390 Comm: syz.3.2510 Not tainted 6.14.0-rc6-syzkaller-01215-ga1e36ec36356 #0 [ 406.765430][T15390] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 406.765442][T15390] Call Trace: [ 406.765448][T15390] [ 406.765455][T15390] dump_stack_lvl+0x241/0x360 [ 406.765478][T15390] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.765496][T15390] ? __pfx__printk+0x10/0x10 [ 406.765516][T15390] print_circular_bug+0x13a/0x1b0 [ 406.765538][T15390] check_noncircular+0x36a/0x4a0 [ 406.765559][T15390] ? __pfx_check_noncircular+0x10/0x10 [ 406.765578][T15390] ? lockdep_lock+0x123/0x2b0 [ 406.765607][T15390] validate_chain+0x18ef/0x5920 [ 406.765633][T15390] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 406.765653][T15390] ? __pfx_validate_chain+0x10/0x10 [ 406.765674][T15390] ? debug_object_assert_init+0x2dd/0x4b0 [ 406.765704][T15390] ? mark_lock+0x9a/0x360 [ 406.765721][T15390] ? __lock_acquire+0x1397/0x2100 [ 406.765751][T15390] ? mark_lock+0x9a/0x360 [ 406.765767][T15390] __lock_acquire+0x1397/0x2100 [ 406.765799][T15390] lock_acquire+0x1ed/0x550 [ 406.765823][T15390] ? dev_set_mac_address+0x2a/0x50 [ 406.765844][T15390] ? __pfx_lock_acquire+0x10/0x10 [ 406.765870][T15390] ? __pfx___might_resched+0x10/0x10 [ 406.765893][T15390] ? dev_set_mac_address+0x42/0x50 [ 406.765910][T15390] ? __pfx_lock_release+0x10/0x10 [ 406.765937][T15390] __mutex_lock+0x19c/0x1010 [ 406.765963][T15390] ? dev_set_mac_address+0x2a/0x50 [ 406.765980][T15390] ? notifier_call_chain+0x3cc/0x3f0 [ 406.766005][T15390] ? __mutex_unlock_slowpath+0x227/0x800 [ 406.766028][T15390] ? dev_set_mac_address+0x2a/0x50 [ 406.766045][T15390] ? __pfx___mutex_lock+0x10/0x10 [ 406.766066][T15390] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 406.766091][T15390] ? net_generic+0x1f/0x240 [ 406.766111][T15390] ? net_generic+0x1f0/0x240 [ 406.766132][T15390] dev_set_mac_address+0x2a/0x50 [ 406.766150][T15390] bond_set_mac_address+0x28e/0x830 [ 406.766176][T15390] ? __pfx_bond_set_mac_address+0x10/0x10 [ 406.766197][T15390] ? hsr_netdev_notify+0x295/0xb50 [ 406.766225][T15390] ? notifier_call_chain+0x15a/0x3f0 [ 406.766249][T15390] ? notifier_call_chain+0x3cc/0x3f0 [ 406.766274][T15390] netif_set_mac_address+0x327/0x510 [ 406.766296][T15390] ? __pfx_netif_set_mac_address+0x10/0x10 [ 406.766317][T15390] ? rcu_is_watching+0x15/0xb0 [ 406.766336][T15390] ? trace_kmalloc+0x1f/0xd0 [ 406.766358][T15390] ? do_setlink+0x7a7/0x40f0 [ 406.766377][T15390] do_setlink+0xaa6/0x40f0 [ 406.766403][T15390] ? __pfx_do_setlink+0x10/0x10 [ 406.766425][T15390] ? __pfx___might_resched+0x10/0x10 [ 406.766448][T15390] ? __pfx___mutex_trylock_common+0x10/0x10 [ 406.766469][T15390] ? rcu_is_watching+0x15/0xb0 [ 406.766487][T15390] ? trace_contention_end+0x3c/0x120 [ 406.766506][T15390] ? __mutex_lock+0x397/0x1010 [ 406.766528][T15390] ? __pfx_aa_get_newest_label+0x10/0x10 [ 406.766557][T15390] ? rtnl_newlink+0xc4c/0x1d90 [ 406.766582][T15390] ? __pfx___mutex_lock+0x10/0x10 [ 406.766607][T15390] ? ns_capable+0x8a/0xf0 [ 406.766626][T15390] ? rtnl_link_get_net_capable+0x168/0x340 [ 406.766644][T15390] rtnl_newlink+0x15a6/0x1d90 [ 406.766669][T15390] ? stack_depot_save_flags+0x37/0x940 [ 406.766703][T15390] ? __pfx_rtnl_newlink+0x10/0x10 [ 406.766727][T15390] ? __netlink_deliver_tap+0x561/0x7f0 [ 406.766753][T15390] ? __pfx_validate_chain+0x10/0x10 [ 406.766770][T15390] ? __sock_sendmsg+0x221/0x270 [ 406.766793][T15390] ? ____sys_sendmsg+0x53a/0x860 [ 406.766810][T15390] ? __sys_sendmsg+0x269/0x350 [ 406.766828][T15390] ? do_syscall_64+0xf3/0x230 [ 406.766848][T15390] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.766881][T15390] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 406.766907][T15390] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 406.766936][T15390] ? mark_lock+0x9a/0x360 [ 406.766957][T15390] ? __lock_acquire+0x1397/0x2100 [ 406.766995][T15390] ? __pfx_lock_release+0x10/0x10 [ 406.767026][T15390] ? __pfx_rtnl_newlink+0x10/0x10 [ 406.767052][T15390] rtnetlink_rcv_msg+0x791/0xcf0 [ 406.767077][T15390] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 406.767103][T15390] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 406.767131][T15390] ? ref_tracker_free+0x643/0x7e0 [ 406.767150][T15390] netlink_rcv_skb+0x206/0x480 [ 406.767175][T15390] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 406.767201][T15390] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 406.767234][T15390] ? netlink_deliver_tap+0x2e/0x1b0 [ 406.767259][T15390] netlink_unicast+0x7f6/0x990 [ 406.767285][T15390] ? __pfx_netlink_unicast+0x10/0x10 [ 406.767306][T15390] ? __virt_addr_valid+0x45f/0x530 [ 406.767323][T15390] ? __phys_addr_symbol+0x2f/0x70 [ 406.767338][T15390] ? __check_object_size+0x47a/0x730 [ 406.767363][T15390] netlink_sendmsg+0x8de/0xcb0 [ 406.767393][T15390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.767421][T15390] ? aa_sock_msg_perm+0x91/0x160 [ 406.767448][T15390] ? __pfx_netlink_sendmsg+0x10/0x10 [ 406.767472][T15390] __sock_sendmsg+0x221/0x270 [ 406.767498][T15390] ____sys_sendmsg+0x53a/0x860 [ 406.767520][T15390] ? __pfx_____sys_sendmsg+0x10/0x10 [ 406.767539][T15390] ? __fget_files+0x2a/0x410 [ 406.767565][T15390] ? __fget_files+0x2a/0x410 [ 406.767593][T15390] __sys_sendmsg+0x269/0x350 [ 406.767611][T15390] ? __pfx_futex_wake+0x10/0x10 [ 406.767638][T15390] ? __pfx___sys_sendmsg+0x10/0x10 [ 406.767675][T15390] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 406.767702][T15390] ? do_syscall_64+0x100/0x230 [ 406.767725][T15390] ? do_syscall_64+0xb6/0x230 [ 406.767747][T15390] do_syscall_64+0xf3/0x230 [ 406.767768][T15390] ? clear_bhb_loop+0x35/0x90 [ 406.767793][T15390] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.767816][T15390] RIP: 0033:0x7f00a838d169 [ 406.767831][T15390] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.767847][T15390] RSP: 002b:00007f00a922b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 406.767864][T15390] RAX: ffffffffffffffda RBX: 00007f00a85a5fa0 RCX: 00007f00a838d169 [ 406.767877][T15390] RDX: 0000000000040880 RSI: 0000400000000000 RDI: 0000000000000007 [ 406.767889][T15390] RBP: 00007f00a840e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 406.767899][T15390] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 406.767909][T15390] R13: 0000000000000000 R14: 00007f00a85a5fa0 R15: 00007ffc224ce1d8 [ 406.767929][T15390] [ 407.410177][ T5843] Bluetooth: hci3: command tx timeout [ 407.417454][T15390] bond0: entered promiscuous mode [ 407.455639][T15390] bond_slave_0: entered promiscuous mode [ 407.461529][T15390] bond_slave_1: entered promiscuous mode [ 407.467401][T15390] team0: entered promiscuous mode [ 407.472750][T15390] team_slave_0: entered promiscuous mode [ 407.479239][T15390] team_slave_1: entered promiscuous mode [ 407.480671][ T30] audit: type=1107 audit(1741988674.154:5): pid=15389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=' [ 407.480671][ T30] £ yáøµ5ÐÇ Gȃ—S•d´¶¶®UT<_SùÂOi@ì®T»NVýì³ùjÞKÝÍl‡Ø[—ÐE]UÎâùµYª' [ 407.508336][T15397] vlan0: entered promiscuous mode [ 407.533106][T15396] lo speed is unknown, defaulting to 1000 [ 407.539615][T15396] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 407.654711][T15367] chnl_net:caif_netlink_parms(): no params data found [ 407.732952][T15367] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.748781][T15367] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.759467][T15367] bridge_slave_0: entered allmulticast mode [ 407.766410][T15367] bridge_slave_0: entered promiscuous mode [ 407.773992][T15367] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.781254][T15367] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.788468][T15367] bridge_slave_1: entered allmulticast mode [ 407.795334][T15367] bridge_slave_1: entered promiscuous mode [ 407.872011][T15367] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.883204][T15367] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.932487][T15397] lo speed is unknown, defaulting to 1000 [ 407.933986][T15367] team0: Port device team_slave_0 added [ 407.945885][T15367] team0: Port device team_slave_1 added [ 407.954457][T15396] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2511'. [ 407.976147][T15397] ªªªªªªo]Uü.ž speed is unknown, defaulting to 1000 [ 407.977089][T15367] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 407.990160][T15367] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.016188][T15367] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.028246][T15367] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.035513][T15367] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.061991][T15367] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.107403][T15367] hsr_slave_0: entered promiscuous mode [ 408.115633][T15367] hsr_slave_1: entered promiscuous mode [ 408.464508][T15367] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 408.474616][T15367] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 408.483990][T15367] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 408.499007][T15367] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 408.519376][T15367] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.526601][T15367] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.533974][T15367] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.541107][T15367] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.552997][T10030] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.562558][T10030] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.599847][T15367] 8021q: adding VLAN 0 to HW filter on device bond0 [ 408.617414][T15367] 8021q: adding VLAN 0 to HW filter on device team0 [ 408.644484][T10276] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.651612][T10276] bridge0: port 1(bridge_slave_0) entered forwarding state [ 408.663553][T10030] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.670679][T10030] bridge0: port 2(bridge_slave_1) entered forwarding state [ 408.851447][T15367] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.996760][T15367] veth0_vlan: entered promiscuous mode [ 409.006646][T15367] veth1_vlan: entered promiscuous mode [ 409.025468][T15367] veth0_macvtap: entered promiscuous mode [ 409.034563][T15367] veth1_macvtap: entered promiscuous mode [ 409.046997][T15367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 409.058117][T15367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.068885][T15367] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.080045][T15367] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 409.093874][T15367] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 409.105261][T15367] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.115542][T15367] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.124492][T15367] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.133333][T15367] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.142300][T15367] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.166196][T15367] ieee80211 phy71: Selected rate control algorithm 'minstrel_ht' [ 409.189775][T10029] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.191398][T15367] ieee80211 phy72: Selected rate control algorithm 'minstrel_ht' [ 409.208126][T10029] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 409.229334][T10247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 409.237353][T10247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 410.934332][T10029] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.585020][T10029] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.645202][T10029] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.707830][T10029] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.794754][T10029] bridge_slave_1: left allmulticast mode [ 412.802741][T10029] bridge_slave_1: left promiscuous mode [ 412.808450][T10029] bridge0: port 2(bridge_slave_1) entered disabled state [ 412.820937][T10029] bridge_slave_0: left allmulticast mode [ 412.826765][T10029] bridge_slave_0: left promiscuous mode [ 412.832646][T10029] bridge0: port 1(bridge_slave_0) entered disabled state [ 412.953990][T10029] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 412.967835][T10029] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 412.977944][T10029] bond0 (unregistering): Released all slaves [ 413.406966][T10029] hsr_slave_0: left promiscuous mode [ 413.413138][T10029] hsr_slave_1: left promiscuous mode [ 413.418902][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 413.426561][T10029] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 413.434500][T10029] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 413.442028][T10029] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 413.451903][T10029] veth1_macvtap: left promiscuous mode [ 413.457425][T10029] veth0_macvtap: left promiscuous mode [ 413.463222][T10029] veth1_vlan: left promiscuous mode [ 413.468511][T10029] veth0_vlan: left promiscuous mode [ 413.608104][T10029] team0 (unregistering): Port device team_slave_1 removed [ 413.624103][T10029] team0 (unregistering): Port device team_slave_0 removed