last executing test programs: 4.154837086s ago: executing program 1 (id=657): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r0, 0x29, 0xca, 0x0, 0x43) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r2 = epoll_create1(0x0) unshare(0x20000400) ppoll(&(0x7f0000000500)=[{r2}], 0x1, &(0x7f0000000400)={0x0, 0x3938700}, 0x0, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000002000000000000000200000d02000000000000000200000000000000000000000000000000000002"], &(0x7f0000000040)=""/202, 0x42, 0xca, 0x1}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000003c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0x3}, 0x50) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x328000, 0x800, 0x0, 0x1}, 0x20) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="20fd948488e47d058ab8ad89b894b818750000004e001fddb3d7aa6a703d336a578ed60d", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00'], 0x20}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000440)=ANY=[@ANYBLOB="b40000001800010000000000fedbdf250200000000010009000000000600150004000000900016808c0008808800018078000380"], 0xb4}, 0x1, 0x0, 0x0, 0x40084}, 0x0) 4.084631298s ago: executing program 1 (id=658): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8002}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000005c0)='sched_switch\x00', r2}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x3, 0x3, 0x2, 0x1, 0xb8}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) recvmmsg(r1, &(0x7f0000005c80), 0x400030f, 0x0, 0x0) unshare(0x22020600) listen(r1, 0xd3) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="9c0000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000007c0012800b00010067656e65766500006c00028005000400010000001400070000000000000000000000000000000001060005004e200000050003000000503a05000c000100000005000800000000001400070000000000000000000000ffff"], 0x9c}}, 0x0) 3.658276278s ago: executing program 2 (id=659): connect$inet6(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{}, {}, {}, {0x6}]}) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{0x0}, {&(0x7f0000001700)='\f', 0x1}], 0x2, 0x0, 0x0, 0x10}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYRES16=0x0], &(0x7f0000000000)='syzkaller\x00'}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0xfffffffd) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001000), 0x581, 0x40000000, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f00000002c0)={0x3, 0x1, 0x2, 0xff, 0xa4, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x1, @loopback, 0x2}]}, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000440), 0x2, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="5c00000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB], 0x5c}}, 0x0) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, 0x0, 0x0) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x20) sendmsg$nl_route(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=ANY=[@ANYBLOB="280000001200375f"], 0x28}, 0x1, 0x0, 0x0, 0x40010}, 0xc0) r7 = socket$kcm(0x2, 0xa, 0x2) r8 = bpf$ITER_CREATE(0x21, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(r5, 0x800454e1, &(0x7f0000000080)=r8) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r9 = socket(0x40000000015, 0x805, 0x0) getsockopt(r9, 0x114, 0x271b, 0x0, &(0x7f00000000c0)) write$tun(r5, &(0x7f00000001c0)=ANY=[@ANYBLOB="00000000ffffffffffffaaaaaaaaaabb08004500452c00000000002f9078ac1e0001e0000001000086dd00189078040000000000000086ddffff0000000027"], 0xfdef) 2.428095693s ago: executing program 1 (id=662): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="44000000090601020000000000000000000000000900020073797a310000000005000100070000001c0007800c00018008000140ffffffff0c000280080001527f000001"], 0x44}, 0x1, 0x0, 0x0, 0x10040047}, 0x240008c4) getsockopt$inet_tcp_int(r1, 0x6, 0x1, 0xfffffffffffffffd, &(0x7f0000000040)) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8983, &(0x7f0000000080)) r3 = socket(0x10, 0x803, 0x0) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000026c0)=@newtclass={0x24, 0x28, 0x200, 0x70bd2c, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x8, 0x6}, {0xf, 0x5}, {0x2, 0x7}}}, 0x24}}, 0x480c2) getsockname$packet(r3, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000700)=0x14) unshare(0x22020600) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x240003, 0x0) vmsplice(r6, 0x0, 0x0, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="4800000010000104000000020000000000000000", @ANYRES32=r5, @ANYBLOB="0000000000000000280012800b000100697036746e6c00001800028014000300ff020000000000"], 0x48}}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5000000010000104fcffffff0000000000000000", @ANYRES32=r5, @ANYBLOB="0025000000000000300012800b000100697036746e6c0000200002801400e9fffe8900000000000000000000000001010500040001000000"], 0x50}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000980)=ANY=[@ANYBLOB="527361fc06000000050000004d000000c5010100", @ANYRES32, @ANYBLOB="e800"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000050000000500"/24, @ANYRES32, @ANYBLOB="23179626f3e6673703688d958f0213b13f66eea98794ea2841ba30462af7a81f95a8e9d14ab732b6f19b68705e6721d8891dedd181ba80ebe6161286b3853c99a2ab27d8f4dde2910ffecc0c4f5efaf85b9658ddf04045c7158441d449f4f9ee1127b4d763710a4580cf32ac45bf5b98842b5946efb59af5a273d57e5446f5d3919580315a504f70c9c9f8a014068fe3951168c711b0bfff2a5e9ecb896725670e76de78c989b800867e4cbb8fed458e109dcdf87026c80ad67c4d402c1942a248926d0c5b44bc99907fecfba18227c8c369d72768a5d0010c"], 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000008c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x2c, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r8}, 0x18) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r10 = socket(0x400000000010, 0x3, 0x0) r11 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r10, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x1, {0x0, 0x0, 0x0, r12, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r10, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000300)=@newtfilter={0x134, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r12, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x104, 0x2, [@TCA_CGROUP_EMATCHES={0x100, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0xf4, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xf0, 0x1, 0x0, 0x0, {{0xe37, 0x9, 0x4}, [@TCA_EM_IPT_MATCH_DATA={0x4}, @TCA_EM_IPT_MATCH_DATA={0xc2, 0x5, "2749ee06725648f29cd63b6772c88c721fda4100d61006f39e93e153bb1e08a575bea346786f506fe7c5e294888869e96c700cc7edebc4fea584b13f65cceb6f496a4ea5bf0413a7bcda7240ec1a9ac273fb4d1578b664004e39d2db2e44a386690aa7dc9b7b11b613d85e744fe0e153cb901cce529a9702fc60580479fa35abb1982fb73a8e9c7aac1cf3014d66b51f7ce3c121376e549072522c26612da849c30642b01f502668b0307452d8f7ba73b55486c41c79fe2b85988394ceda"}, @TCA_EM_IPT_MATCH_NAME={0x8}, @TCA_EM_IPT_NFPROTO={0x5, 0x4, 0xa}, @TCA_EM_IPT_MATCH_DATA={0x6, 0x5, "489b"}]}}]}]}]}}]}, 0x134}, 0x1, 0x0, 0x0, 0x80}, 0x40010) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r3) 2.362362069s ago: executing program 4 (id=663): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) sendmsg$TIPC_NL_MEDIA_SET(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x5c}}, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x40009, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="5400000010000104000000000200000000000000", @ANYRES32=r3, @ANYBLOB="0000faffffff000034001280110001006272696467655f736c617665000000001c000580050021000000000006001f0000000000080022"], 0x54}}, 0x0) r4 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x401, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, 0x0, 0x103, 0x28820}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11, 0x118}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0xee42}]}}}, @IFLA_IFNAME={0x14, 0x3, 'bridge_slave_0\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x48801}, 0x48000) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) epoll_pwait(r4, &(0x7f0000000140)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r6, &(0x7f0000000100)={0x20000014}) pselect6(0x40, &(0x7f0000000000)={0xa, 0x80000001, 0x2, 0x10000000000006, 0x12, 0x8, 0x80000000, 0x8}, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2c, &(0x7f0000000040)={0x4, {{0x2, 0x4e21, @private=0xa010102}}, {{0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x2b}}}}, 0x108) 2.054729604s ago: executing program 0 (id=665): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r0) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000000c0)={&(0x7f0000002c00)=ANY=[@ANYBLOB="0b00b033f30000", @ANYRES16=r1, @ANYBLOB="00042dbd7000fddbdf25180000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000000000008000b000e00000006001600ff7f00000500120001000000060011000600000008000b00050000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000100000008000b00030000000600160001000000050012000100000006001100f6ff000008000b0004000000080001007063690011000200303030303a30303a31302e3000000000080003000100000008000b000500000006001600070000000500120000000000060011000400000008000b00030000000e0001006e657464657673696d0000000f0002006e657464657673696d300000080003000200000008000b000500000006001600ce00000005001200010000000600110001ff000008000b0015b80000080001007063690011000200303030303a30303a31302e3000000000080003000000000008000b000f000000060016000f0000000500120000000000060011000b00000008000b0000000000"], 0x19c}, 0x1, 0x0, 0x0, 0x800}, 0x1) recvmsg(0xffffffffffffffff, 0x0, 0x3f01) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4) socketpair$unix(0x1, 0x2, 0x0, 0x0) ioctl$TUNSETOFFLOAD(0xffffffffffffffff, 0xc004743e, 0x110e22ffe6) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000002b00)=@newqdisc={0xc4, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0xffff}}, [@TCA_STAB={0x84, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0xf, 0x0, 0x1, 0x8, 0x0, 0xfffffbff, 0x9, 0x8}}, {0x14, 0x2, [0x1, 0x6, 0x9, 0x9, 0x2, 0x7ff, 0x1, 0x4]}}, {{0x1c, 0x1, {0x4, 0x1, 0x9, 0x1a8f, 0x0, 0x4, 0x6, 0x2}}, {0x8, 0x2, [0x0, 0x3]}}, {{0x1c, 0x1, {0x1, 0x52, 0xe, 0x7, 0x1, 0x7, 0x0, 0x6}}, {0x10, 0x2, [0x0, 0x7, 0x2, 0x6, 0x3ff, 0x0]}}]}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @qdisc_kind_options=@q_pfifo={{0xa}, {0x8, 0x2, 0x3}}]}, 0xc4}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="340000003e0007010300000000000000017c0000040042800c00018006000600843b0000100002800c0009"], 0x34}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) recvmsg(r0, &(0x7f0000002a40)={&(0x7f0000000380)=@nfc, 0x80, &(0x7f00000028c0)=[{&(0x7f0000000400)=""/193, 0xc1}, {&(0x7f0000000500)=""/4096, 0x1000}, {&(0x7f0000001500)=""/235, 0xeb}, {&(0x7f0000001600)=""/201, 0xc9}, {&(0x7f0000001700)=""/4096, 0x1000}, {&(0x7f0000002700)=""/102, 0x66}, {&(0x7f0000002780)=""/19, 0x13}, {&(0x7f00000027c0)=""/211, 0xd3}], 0x8, &(0x7f0000002940)=""/218, 0xda}, 0x22000) 2.009133317s ago: executing program 2 (id=666): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x4000000000000, 0x200000000000000}}}, 0xb8}}, 0x2c000010) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB], 0xb8}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x300, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}}}, 0xb8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0412800b00010062726964676500000c00028006002700070000007fe994c19a6e92e16cad1a88fdf232370772082109a30389ebdb0178c54b404f3417909a287e6f38a499df14890320034d188ad551fecd4532cfb1f325ba2addae34c374120e4637b88bfce9a9c3ad302ccf521170fe7c00993834b5bf3b9cb2b4802116c3a9e422708bda369a819830db3d18315c1c6e17e66eb0f258a963166e5fee5505d8df50620e3275d3c65b06657c6c405455d736e6e42c0788d058cfb855d998672d5fe574"], 0x3c}}, 0x0) 1.882827287s ago: executing program 1 (id=667): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x18, 0x10, &(0x7f0000000340)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10000006}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000200)='GPL\x00', 0xe358, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000005c0)='tlb_flush\x00', r1, 0x0, 0x100000}, 0x18) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000080), 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b7030000e8ffffff850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000004c0)={'wlan1\x00'}) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r4, 0x0, 0x40001) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3}, 0x94) r5 = socket$rxrpc(0x21, 0x2, 0xa) socket$caif_stream(0x25, 0x1, 0x4) poll(&(0x7f0000000180)=[{r5, 0x2}], 0x1, 0x7f) setsockopt$sock_int(r5, 0x1, 0x7, &(0x7f0000000240), 0x4) accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x8918, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000080)={r0, 0x58, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCSIFDSTADDR(r2, 0x8918, &(0x7f00000000c0)={@local, 0x5e, r6}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(r4, 0x400c6615, &(0x7f0000000440)={0x0, @aes128, 0x0, @desc3}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000003c0)=ANY=[@ANYBLOB="9feb0100180018000000180000000bf000000f0000000000000f0000000003000000010000000000000297538200005f2e2e00005f0061a9ce2e0000000000"], 0x0, 0x40, 0x0, 0x1, 0x7fffffff}, 0x28) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c000000020681010000000000000000000000000500050002000000050001000700000005000400030000000900020073797a310000000011000300686173683a6e65742c6e6574"], 0x4c}, 0x1, 0x0, 0x0, 0x4040000}, 0x800) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x50}, 0x1, 0x0, 0x0, 0xd24f4d5778621d46}, 0x4) setsockopt$sock_int(r7, 0x1, 0x3c, &(0x7f0000003f00)=0xa, 0x4d) 1.814635464s ago: executing program 2 (id=668): pipe(&(0x7f0000001540)={0xffffffffffffffff, 0xffffffffffffffff}) (async) unshare(0x28000600) (async) r2 = socket$inet6(0xa, 0x3, 0x6) getsockopt$inet6_opts(r2, 0x3a, 0x39, 0x0, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000c80)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0xff58) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000058"], 0x0}, 0x94) (async) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x200}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000280)={r5, 0x2000300, 0xe, 0x0, &(0x7f0000000000)="63eced8e46dc3f0adf3389f7b986", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmmsg$inet(0xffffffffffffffff, 0x0, 0x0, 0xf5) (async) bpf$MAP_CREATE(0x300000000000000, 0x0, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000400), r6) r7 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r7, &(0x7f0000000100)={0x3, 0x0, &(0x7f0000000000)={0x0, 0xe0}, 0x1, 0x7}, 0x8800) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) splice(r3, 0x0, r1, 0x0, 0x406f413, 0x0) (async) r8 = socket(0x1000000000000010, 0x80802, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000380)={r0, 0x20, &(0x7f0000000340)={&(0x7f00000001c0)=""/176, 0xb0, 0x0, &(0x7f00000002c0)=""/81, 0x51}}, 0x10) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001100)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000200000000000c00095000000000000002ba728041598d6fbd30cb599e83d24a3aa81d36b26fb0b71d0e6adfefcf1d8f7faf75e0f226bd99eea7960717142fa9ea4318123741c4a0e168c1886d0d4d94f2f4e345c652fbc16ee988e6e0dc8cedf3ce99fbfbf9b0a4def23d410f6296b32a334388107200759cda9036b4e369a9e152ddcc7f05a5f3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c3b35967deabe802f5ab3e89bd6c662ed4048d3b3e22278d00031e5388ee5c867ddd58211d6ececb0cd2b6d357b85a0218ce740068725837074e098ee207d2f73902fbcfcf49822775985bf32d715f5888b24efa000000000000ffffffdf000000000000000000000089a7b9b00000000000000000000000000000b27cf3d1848a54d7132be1ffb0adf9deab29ea3323aa9fdfb52faf449c3bfd09000000b91ab219efdebb7b3de8f67581cf796a1d4223b9ff7ffcad3f6c962b9f292324b7ab7f91a31cf41ab11f12fb1e0a494034127de7c6592df1a6c64d8f20a67745409e011f1264d43e153b3d34899f40159e800ea2474b544035a30b23bcee46762c2093bcc9eae5dff5adbdee3e980026c96f80ee1a74e04bde740750fa4d9aaa705989b8e673e3296e52d337c56abf1128744bab6677fcb78e313841ec309baed0495f06d058a75fa4c81e5c9f42d9383e41d277b10392a912ffaf6f658f3fadd16286744f839c3f128f8f92d0992239eafce5c1b3f97a297c9e49a0c3510ef74080e6d1e0c8a868a353409e34d3e82279637598f37ad380a447483cac394c7bbdcd0e3b1c39b6e00916de48a4e70f03cc4146a77af02c1d4cef5379da860aed8477dfa8ceefb405005c6977c78cdbf37704ec73755539280b064bda154910fe050038ec9e47de89298b7bf4d769ccc18eede00e8ca5457870eb30d211e23ccc8e06cd58b61799257ab55ff413c86ba9affb12ec757c7234c270246c87a901160e6c07bc6cf8809c3a0d46ff7f008000000000ad1e1f493354b2822b98371d000000167d78e65b90eba0768e825972ea3b774a1467c89fa0f82e8440105051e5510a33dcda5e143fbfff161c12ca389cbe4c51b3fa00675cd1b66c5fd9c26a54d43fa050645bd9109b7e7131421c0f39113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a84a4e3344b155cc20f49e298727340e97cdefb40e56e9cfad973347d0de7ba4754ff231a1b033d8f931ba3442b2c7c503f3d0e7ab0e958adb862822e40009995ae166deb9856291a43a6f7eb2e32cefbf46306f2ef79b8d4c2ff030000000000000007b82e6044f643068cd47ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c99220002af8c5e53d52c83ac3fa7c3a3ee6c08384865b66d2b4dcb5dd9cba16b64ebbbf8702ae12c77e6e34991a225c120a3c950942fe0bc9f2a1a7506d35e5b439edeb7088aeda890cf8a4a6f31ba6d9b8cb098f935bdcbb29fd0f1a342c9eed00000000ab6648a9dea0b6c91996d65da6c24a702a86c814459f3cdaaf99000000000000000000bfb32c826563c518d0ad23bc83ba3f3757210a057eff7615c868bd7d74233da1a3b56d4e04a7ec4792b1c4cffddbbdcfdd23ab5268f1b3d08ebb8ce498cbaaf5aaab812201d1aba3d70471fcd9b466569f3ef72f39d87fcccab514fc02b70be8629c9b73ce7bc4be7f8be71cb7b2d0a4acff8f6abe7dbad64dfa44966945d93c33b038ce0d890f851811e387723a25dda119f64b35e71c5400000000000000000000000000000034c751ebdf3f20a95b817ea3df3d6c0002a41783058e56c70afe8016b3dd9dc7785b36e609f173cc6b893ecd138289709839747837d6a6283b3452c57a5d44cacd363589845637071320921d22c1663964eddec902fc7cc33158bc306d8c3bdae8108a23d2dc96a5cdb518f58832ec0906aaec43659c79c8ad37b0f961f3beaa3e02f7762c5dd633d13b5e487e996597b2ab42c898b7dd8390e13b395aacce4683e55bcfe8c17615257364365fd48bd77da79e52ce9adfe6dca9c42c4d719347f39ef006c2df747ee6adb7cd04faf05c36de72354c64ebaf28a3de18607ebc4b70f50f71dae565749568a23319232dc213342fb472e98c9a412199ce7976bee5eaf40e60cb3fbe8b92dae5008e92d17d05ce74ffffe74ae71d5b8bd43a4e0bf0390335aa489689f5e3a4ac5adca96caab658b43cd499d95d3876c220d147ad1d0e626621d88f1370982f663793cac52ea0d14e595ff1f56427a0a813bb3b84d31d021eeea8faeff25bb66f5940d08a5509a66fc43962bcb2f7415bc38e355e80ec935aa6fe2d74bd475d89449fb46320fee40faff2fd005549fe6a042bd95decfde5e166971935f4cfd9c9e5bfd2d803644f4e5b7e6dc1a7a35df7134e2fad79269bf24bea4eb0213068e3054d9e4a8d1a9eb032cb390e2016d0ce10549728cb4732dc5adab16fa19ac70780b29e079be27c95d3dd2bd91a584c46d84d430fc6ea31ce0ba62fa27be9f6bc435203da7c3a5d68bf4dd4f81cbfaa1c87a15b9272853c9837db930952dca667194b71815a9eb49b495360dcdf31e0e560857d0541a916d6b5469ac1b36babc5a91e1d58925f20d9d5f8a0da3c30711b0d101cabceffbe072be69613ea0003c6e9bb5cd2413c8ddc17cfa319cf7aaeed0ffb07a08f8fb439f709dfe0732fe42192819870bdd87d5f612ade03540a28be446095269d9ea5a60bba1f2462f9921f2a731dbcf1d03964ea1e4f79514914d37877f57617b60fa2b58aa694fcb023024653c4b73efb12a57ffc6f8943262b77be933051e12bd4d768a422ea652d45b04a9c43b5c97fc3edea7002d51a0a74889334ee"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x29}, 0x48) setsockopt$sock_attach_bpf(r8, 0x1, 0x32, &(0x7f0000000000)=r9, 0x4) sendmsg(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="5500000018007fd500fe01b2a4a280930a06000000a843089100fe800c00080008001100080000002d000f009b2c136ef75afb83de448daa72540d8102d2c55327c43ab82286ef1fdd20642383656d4d2449155037", 0x55}], 0x1}, 0x0) (async, rerun: 32) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) (rerun: 32) sendmsg$nl_xfrm(r10, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000940)=@newsa={0xfc, 0x1a, 0x7, 0x70bd25, 0x0, {{@in6=@mcast2, @in6=@mcast1, 0xffff, 0xa, 0x0, 0x0, 0x2, 0x0, 0x0, 0x2, 0x0, 0xee00}, {@in6=@mcast1, 0x20, 0x3c}, @in6=@empty, {0x0, 0x0, 0x2, 0x31, 0x0, 0x2}, {0x0, 0x200000, 0x7, 0xffffffffffffffff}, {0x40000, 0x0, 0xae8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x70}, [@sec_ctx={0xc, 0x8, {0x8, 0x8, 0x0, 0x8}}]}, 0xfc}}, 0x0) 1.728087776s ago: executing program 0 (id=669): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtaction={0x70, 0x30, 0x0, 0x870bd2d, 0x0, {0x9}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_RATE={0x8, 0x3, 0x5}, @TCA_SAMPLE_RATE={0x8}, @TCA_SAMPLE_PARMS={0x18, 0x2, {0x8, 0x4000000, 0x0, 0x1ff}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x5}}}}]}]}, 0x70}}, 0x20048000) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.memory_pressure\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000001, 0x12, r0, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f00000001c0)={@broadcast, @loopback, 0x0}, &(0x7f0000000200)=0xc) sendmsg$DCCPDIAG_GETSOCK(r0, &(0x7f0000000280)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x11d4, 0x13, 0x100, 0x70bd28, 0x25dfdbfc, {0x8, 0x8, 0xf2, 0x0, {0x4e23, 0x4e22, [0x2, 0x2000000, 0x48ad, 0x17], [0x3, 0x10001, 0x2, 0xde4], r1, [0x81, 0x4]}, 0x3, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x47, 0x1, "10b1c4e6129cd339519c180da4fa49e9db4334090e6eed07d64148560c8e6fce7f208e5f99ef65912e36e5f36bf10cdce22f855cdffe95a00867fe9894437e331f3b2f"}, @INET_DIAG_REQ_BYTECODE={0x1004, 0x1, "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"}, @INET_DIAG_REQ_BYTECODE={0x50, 0x1, "c0e1e0e1e1bc52dfe227e24c2ff6cce27382e7796def5e5501ad0ee6434681eaab2348062c597cf29c728253371e2eca4b1c1a5199d7b2677200ded2c8bbabedb667884e9b8b679807d24d4e"}, @INET_DIAG_REQ_BYTECODE={0xc0, 0x1, "bc352b039f0d34014fa013e4cdf77663e8f4b66e452fb90268eef9eb63d2275106b98e479301e53b871716d4de752990524bd5215b0204d10283c1d8e55500eaa6ae237299ac9b60763841c41d2200e2f1a89076b1bd0385e75e33e1c6c1c739b6e1c177838772cb22f831090c5fcb6b28f70e96c5d045336d6aa178ef32a1fb2e7ff8563ab2cf4c9d05b8d3559f54acd75b8b393810499d0e33866dbfcf1d2cb89f4b095677d2fcf6afb79aa6a1fd93438ba6e9f165f0b781e10bec"}, @INET_DIAG_REQ_BYTECODE={0x2a, 0x1, "2db86cabd0379753390d61456e236083209af029d487ce49b19426a40f27811a253cc8034de6"}]}, 0x11d4}, 0x1, 0x0, 0x0, 0x40}, 0x4044000) r2 = socket(0x1a, 0x5, 0x0) bind$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r4, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0xc) r5 = socket$inet6_sctp(0xa, 0x801, 0x84) sendmmsg$inet6(r5, &(0x7f0000002800)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x22}, 0x5}, 0x1c, &(0x7f0000000040)=[{&(0x7f0000000100)="4128dbde38f7", 0x6}], 0x1}}], 0x1, 0xc010) (async) shutdown(r5, 0x1) (async, rerun: 32) getsockopt$bt_hci(r5, 0x84, 0x1, &(0x7f0000002840)=""/4067, &(0x7f0000001580)=0xfffffffffffffefe) (async, rerun: 32) connect$inet6(r5, &(0x7f00000002c0)={0xa, 0x4e22, 0x3, @local, 0x6}, 0x1c) (async) setsockopt$inet_mreqsrc(r4, 0x0, 0x28, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) close(0x3) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00'}) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = socket(0x10, 0x3, 0x0) (rerun: 32) write(r7, &(0x7f0000000000)="240000001a005f0400f9f4070009040180200000200000000000000008001e0040000000", 0x24) (async) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="9000000010000305000000000000000000000700", @ANYRES32=0x0, @ANYBLOB="996e06004d4c0700540012800800010068737200480002800500030008000000050003000500000005000300fd00000008000200", @ANYRES32=r3, @ANYBLOB="08000100", @ANYRES32=r6], 0x90}, 0x1, 0x0, 0x0, 0x800}, 0x0) 1.595709603s ago: executing program 1 (id=670): r0 = socket$inet6(0xa, 0x4, 0x7) r1 = socket$inet(0x2, 0x802, 0x1) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000007040)=ANY=[], 0x94}, 0x1, 0x0, 0x0, 0x1}, 0x4040028) ioctl$FS_IOC_GET_ENCRYPTION_NONCE(r0, 0x8010661b, &(0x7f0000000280)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={0x0}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000240)={0x2b, 0x0, '\x00', [@ra={0x5, 0x2, 0x35b}]}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x33, &(0x7f0000000000)=0x80000000, 0x4) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x4e20, @local}, 0x10) getsockopt$inet_int(r3, 0x0, 0x6, &(0x7f00000000c0), 0x0) r4 = socket$netlink(0x10, 0x3, 0x4) writev(r4, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001400192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd000000", 0x48}], 0x1) r5 = socket$netlink(0x10, 0x3, 0x10) r6 = socket$netlink(0x10, 0x3, 0x10) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000240)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x40}, {0x6}]}, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r6, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r6, 0x1, 0x8, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000100)="5d8daf20a82f7b52428b54469099bb6b63bc2cbfa4dbe13585de32eab91a2b157a381db65ec263482c6c5c12ba128006bd650a42752c66c446cb79a844917d4f489afc004860abefa9dc14a9dfb3209ec7ce20a580f7aee6526c364d2f4be4d86bb667f6cce78f3ffa3288682c893d9f6afe311515f233768c884f10467d0e2c61635948b1515ea6979cb601bf912de705448120732e0e9a4c695c48098f311c08462642883a0b8802906185482bc24f71f794415e572d9ef9c21532d26bd3eb7c6a04d6c897d1a4a560df19d0b1e45bc65519f73181dcd4c412b88cfc22d2f7fe8b30bf1eb0c7c5d700d4d2229fff6651c4ffcce6d4b1", 0xf7, 0x40, &(0x7f0000000200)={0xa, 0x4e24, 0x100, @mcast1, 0x6682}, 0x1c) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r8, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) 1.518974s ago: executing program 2 (id=671): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0x20, 0x1402, 0x1, 0x70bd2e, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_NET_NS_FD={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x44011}, 0x20040810) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0x3, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) r3 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) write$tun(r0, &(0x7f0000000300)={@val={0x8, 0x800}, @val={0x7, 0x0, 0x0, 0x0, 0x1c}, @ipv4=@udp={{0x6, 0x4, 0x3, 0x1b, 0xb4, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1c}, {[@timestamp={0x44, 0x4, 0x1c, 0x0, 0x6}]}}, {0x4e20, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "31150048d5e06bdc339f0b82e56e05e9a3f461bd8f05c60ff304e7fee8a3221b", "b54970b8807c69e8aba2815e90ed451c3c1a9dff75f0f264e44cbb999c8f292e5aa143fd63ea1886e0cd425df0d8e5e7", "2bed86cd87cd326b66a3ca343e29e347dc61214ad793ad9f48b4d287", {"b15c14be998215153aaf76bbf0aead9a", "5cd7bcd4dc8e1acb0a78f4793cfd119c"}}}}}, 0xc2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000070000000cd6b24bb500000a00000000002e5fa02e5f00"], &(0x7f00000000c0)=""/92, 0x2b, 0x5c, 0x0, 0x4}, 0x28) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000180)) 1.423527305s ago: executing program 0 (id=672): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="3000000019d30001002cbd7000000000001c140000fe030001000000882102a1e5fe410c38eb60dcfcebf5aa640bc295bbbd"], 0x30}}, 0x0) 1.350177466s ago: executing program 3 (id=673): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000010101010000000000000000020000002400018014000180080001007f00000108000200000000000400028005000100010000000c001980080001000d"], 0x44}, 0x1, 0x0, 0x0, 0x1}, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r2, 0x0, 0x13, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @local, 0x6}, 0x1c) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000000c0)=ANY=[@ANYRES32, @ANYRESOCT=r1, @ANYBLOB="070000000000000000000000cad8a7f814708413363cab776dca", @ANYRES32, @ANYBLOB, @ANYRES64=0x0], 0x20) r3 = socket(0x28, 0x1, 0x0) connect$packet(r3, &(0x7f0000000500)={0x28, 0xe0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x14) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) accept$unix(r3, &(0x7f0000000540)=@abs, &(0x7f0000000200)=0x6e) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x3, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x3, 0x0, 0x1, 0x0, 0x0, 0x0, 0x3}}, &(0x7f0000000080)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41000}, 0x94) write(r4, &(0x7f0000000040)="18000000010005", 0x7) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="130000004f0039"], 0x24}, 0x1, 0x0, 0x0, 0x4004840}, 0x0) sendmsg$kcm(r1, &(0x7f0000000b00)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000180)="460918ef3d01ff4a644bf0cac57dbd1ee6457e810f4148cd5cd6772be11403d8da5fa838f0a6ecb70a09e5297fb6b8c54775c08188cf431aad066ebb849af9c8bdf9909f3c01e8c13757d97e20b292dd42a35f0231e55af88073324cc9b1d6", 0x5f}, {&(0x7f0000000000)="1400000024000b94f01845288200eb141fb220cf", 0x14}, {&(0x7f0000000240)="519f190c37037a9dec855a"}, {&(0x7f0000000280)="8c0b14d1bf141ab0114cb6122f3a2fd74729cc2d7d88ca8fd0762cff1c89a30d797885797f3293da5ecc7eb687deb223fea5c3a510684f4154c24014d07f69e6460e1f86e7eea194a2926cc89b46f49fd914bcd3fcf9f6df3bc05a1cbb8e172ac9af"}, {&(0x7f0000000300)="48d9ec47841139e026c47fff5e6dd8f7a9ff31cdcd7a1e2afbc4d4bf91689a2ee511a59e58f4c3f469f49cf14c996cf783f07716191a21"}], 0x2, 0x0, 0xa}, 0x0) 1.348794475s ago: executing program 4 (id=674): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_open_procfs$namespace(0x0, &(0x7f00000000c0)='ns/net\x00') r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[@ANYBLOB="18000000000000000000000000000000180000002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xb, &(0x7f0000000580)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r3, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r2, 0x3, 0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x44) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYRESHEX=r0, @ANYRES16=r0, @ANYRES32=r3, @ANYRES64=r1, @ANYRESHEX, @ANYRES8=r2], 0x7c}}, 0x1) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x2a4}}, 0x4048010) 1.194595892s ago: executing program 0 (id=675): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0xc, &(0x7f0000000040)=0x8, 0x4) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="380000001a0001000000000000000a0080"], 0x38}}, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r2, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000500)='signal_generate\x00', r3}, 0x18) bpf$MAP_CREATE(0x0, 0x0, 0x48) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) socket$netlink(0x10, 0x3, 0x0) r4 = socket$inet6(0xa, 0x2, 0x0) socket$kcm(0x10, 0x2, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r5, &(0x7f0000000000)=[{&(0x7f00000000c0)="89c9157afde08ea4387f", 0xa}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$inet6_IPV6_DSTOPTS(r6, 0x29, 0x3b, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r7, 0x29, 0xd0, &(0x7f0000000080)=0xa, 0x4) r8 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000000)={0xa, 0xe22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x2}, 0x1c) connect$inet6(r8, &(0x7f0000000140)={0xa, 0x4e20, 0x4, @remote, 0xb}, 0x1c) syz_emit_ethernet(0x46, &(0x7f0000000300)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6001010000101170617670d81000aaa361349de3bd00fe8000000000000000000000000000000000000000000000014e200e2200109078a20600018000000073dd2e00fffadd47e561d513a148dedb963f15ba4aec0559198ea4233f54b04d390a65a30fce7be7e9fa937fa24bfeaa01906bc3684ee779792d51e321bc3ed7dac1398daaad69882ccd410000dd67b99b98b77daaf26c58b1b4d9f7b1e2f3590e6ffc4963f7170d413df08c9ef2c7e248305300000000000000"], 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_udp_int(r4, 0x11, 0x68, &(0x7f0000000080)=0xa40, 0x4) 1.190713493s ago: executing program 4 (id=676): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x3, 0x16, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x13, '\x00', 0x0, @sched_cls}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x24000000}, 0x0) socket$alg(0x26, 0x5, 0x0) recvmsg$unix(0xffffffffffffffff, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, 0x0, 0x20000891) r2 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000300)={'vxcan1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000000)={0x1d, r4}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="0e000335d726d400", @ANYRES16=r6, @ANYBLOB="250300000000000000001600000014000180100001006574683a76657468305f746f5f68737200000000"], 0x5f}}, 0x0) sendmsg$TIPC_NL_SOCK_GET(0xffffffffffffffff, &(0x7f0000001c40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001c00)={&(0x7f0000001cc0)={0x264, r6, 0x200, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x3}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xfffffffd}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x9c}]}, @TIPC_NLA_PUBL={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000001}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1000}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'rose0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x40, @rand_addr=' \x01\x00', 0x800}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x71a94c49}}}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'erspan0\x00'}}]}, @TIPC_NLA_SOCK={0x60, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x7b}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3bce}]}, @TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x9}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x8001}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}]}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xbb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}]}, @TIPC_NLA_LINK={0xb8, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x4}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x12}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x81}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe01}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4d}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x448a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xe0ab}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xf}]}]}]}, 0x264}, 0x1, 0x0, 0x0, 0x8800}, 0x24004094) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), r2) sendmsg$BATADV_CMD_GET_BLA_BACKBONE(r1, &(0x7f0000000880)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x24, r7, 0x1, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x8}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x4811}, 0x4) setsockopt$CAN_RAW_FILTER(r3, 0x65, 0x1, &(0x7f00000000c0), 0xf00) r8 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vxcan1\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@getchain={0x24, 0x11, 0x839, 0x70bd25, 0x3, {0x0, 0x0, 0x0, r9, {0x7, 0x1}, {0xffff}, {0x1}}}, 0x24}}, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGPGRP(r10, 0x8904, &(0x7f0000001c80)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r11, 0x8933, &(0x7f0000000840)={'batadv_slave_0\x00', 0x0}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r12, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0xfffffffffffffff5}, 0x90) sendmsg$nl_route(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000d00)=@bridge_dellink={0x6c, 0x11, 0x100, 0x70bd27, 0x25dfdbfc, {0x7, 0x0, 0x0, r9, 0x212b6, 0x44009}, [@IFLA_NUM_TX_QUEUES={0x8, 0x1f, 0x10001}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0x163c}, @IFLA_IFALIAS={0x14, 0x14, 'veth0_to_bond\x00'}, @IFLA_CARRIER={0x5, 0x21, 0x5}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x2}, @IFLA_PHYS_PORT_ID={0x4}, @IFLA_TXQLEN={0x8, 0xd, 0x1}, @IFLA_PHYS_PORT_ID={0x5, 0x22, '\f'}, @IFLA_IFALIASn={0x4}]}, 0x6c}, 0x1, 0x0, 0x0, 0x8050}, 0x4008000) 1.11726195s ago: executing program 3 (id=677): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x36}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x17}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@newlink={0x40, 0x10, 0x403, 0x70bd25, 0x100000, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa, 0x1, @remote}]}, 0x40}, 0x1, 0x0, 0x0, 0x24000804}, 0x8000) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xe, 0x0, &(0x7f0000000300)="0101000071a78326c799dbe888a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.018592768s ago: executing program 0 (id=678): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/18], 0x48) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000002c0)={0xffffffffffffffff, 0x20, &(0x7f0000000280)={&(0x7f0000000a40)=""/4096, 0x1000, 0x0, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000020000000900010073797a300000000048000000030a01010000000000000000020000000900010073797a30000000000900030073797a320000ad00080007006e61740014000480080001"], 0xa4}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r4, &(0x7f00000000c0), 0x9) bpf$MAP_CREATE(0x0, 0x0, 0x48) r5 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x0, 0x0) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r6}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x10, &(0x7f0000000740)=ANY=[@ANYBLOB="180000005107001400000000000000018f5218d83880d37eb7080000000000007b8af8ff00000000b7dd4e3b080000fcffffff7b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRESOCT=r5, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000001a80)=ANY=[@ANYBLOB="02000000040000000100000022bf000000000000", @ANYRES32, @ANYBLOB="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", @ANYRES32], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{r7, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)}, 0x20) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0), &(0x7f00000000c0), 0xffffd6c0, r8}, 0x38) sendfile(r4, r2, 0x0, 0x10000) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="18000000a77a6441356d4602caf4839500b2aba438ba087bfa5363821d17b161", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000000feffffb703000008000000b70400000000000085000000550000009500000000000000"], &(0x7f0000000300)='syzkaller\x00', 0x5b8c, 0x0, 0x0, 0x41000, 0x20, '\x00', 0x0, @xdp, r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x1, 0x3, &(0x7f0000000000)=@framed, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0}, 0x94) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000003fc0), &(0x7f0000004000)=0xc) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000500)={@private2={0xfc, 0x2, '\x00', 0x1}, 0x3, 0x1, 0xff, 0x1, 0x4, 0xd}, 0x20) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r2}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r10) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000700)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="00000080", @ANYRES16=r11, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r12, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r10], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0x6, &(0x7f0000001a40)=ANY=[@ANYRESDEC=r9, @ANYRESOCT=r0, @ANYBLOB], &(0x7f0000000080)='GPL\x00', 0x7, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x1, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r1}, 0x94) r13 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r13, 0x89f1, &(0x7f0000000a00)={'sit0\x00', &(0x7f00000000c0)=@ethtool_cmd={0x3a, 0x40009, 0x0, 0x400, 0x2, 0x0, 0x8, 0xfe, 0x0, 0x9, 0x0, 0x20000, 0x0, 0x0, 0x0, 0x45, [0xfff, 0x2]}}) 1.015640176s ago: executing program 2 (id=679): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="580000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="46060900000000802800128009000100766c616e00000000180002800c0002001f0000001f000000060001000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2], 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000061042c000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xbd, &(0x7f000000cf3d)=""/189, 0x0, 0x1, '\x00', r2, @fallback=0x18, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x94) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000004c0)={0xffffffffffffffff, 0x82a8, 0x14}, 0xc) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001a40)=ANY=[@ANYBLOB="1000000014000100"], 0x14}}, 0x0) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r5, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write$tun(r5, &(0x7f00000004c0)={@val={0x0, 0x88a8}, @val={0x0, 0x0, 0x19, 0x7, 0x101, 0x3}, @ipv6=@tcp={0x2, 0x6, '4\be', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0x1d}, @dev={0xfe, 0x80, '\x00', 0x2d}, {[], {{0x4e22, 0x4e24, 0x41424344, 0x41424344, 0x1, 0x0, 0x5, 0x40, 0x2, 0x0, 0x3}}}}}, 0x4a) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, r3, 0xe, '\x00', r2, 0xffffffffffffffff, 0x4, 0x5, 0x3}, 0x50) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000480)={r6, &(0x7f0000000140)="80d6ec7b52a9214cffb82242caee4c503d9e7fb2bbdbcadd31f72c8ac2518cdc836768970ba3db53542dd46a2afde24d95c893638d3c35e782c60c52332ecc2737b99b650b8961d0db26f2f842a81d40be8692e85b01d85aabdd9b5e6344eb87f7337620b90a087501d4ad6803418572a2e8c0bfd4204c6899ef787abc0c4d264164f60513e664ca7ab305728ca07f39635dc3bfa97baa4efb12da18346c19298e6d788b5e1f55efc1635838deb7e2e278727d02a2e0875e485789c49f00bf60ffa1dee00770b863951f48509bd202", &(0x7f0000000240)=@udp6=r7, 0x4}, 0x20) syz_emit_ethernet(0x11c, &(0x7f00000002c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000280)={0x0, 0x4, [0x22, 0xf3c, 0x835, 0xc34]}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r6, &(0x7f0000000000)="310b2a09308b21799f13ae96e4e68c6edb8a93a1ec501cf0e73758dd91c98dc68b27c7434e985462e53ef10e9672e7297dd82fbf852292c86a3ae417fcd2"}, 0x20) 944.761061ms ago: executing program 3 (id=680): r0 = socket$caif_seqpacket(0x25, 0x5, 0x1) listen(r0, 0x7fff) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x5, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4000, 0x0, 0x0, 0x0, 0x9}, [@call={0x85, 0x0, 0x0, 0x2f}, @call={0x85, 0x0, 0x0, 0x7}]}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) 881.403156ms ago: executing program 4 (id=681): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x50, 0x10, 0x44b, 0x70bd29, 0x0, {0x7a, 0x0, 0x0, 0x0, 0x1a009, 0x8006}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xfffffda7, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}, @IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x1}]}}}, @IFLA_ADDRESS={0xa, 0x1, @local}]}, 0x50}}, 0x20000000) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r4, 0x1, 0x3c, &(0x7f0000000040)={0x200000000000001}, 0x8) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newtaction={0x74, 0x30, 0x48b, 0x0, 0x0, {}, [{0x60, 0x1, [@m_simple={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x3d45, 0x0, 0x20000000, 0x7fff, 0xe}}, @TCA_DEF_DATA={0x12, 0x3, '[)-%(@-\'\\-#\xca*\x00'}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x3}}}}]}]}, 0x74}}, 0x0) 742.964037ms ago: executing program 3 (id=682): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) (async) sendmsg$nl_route(r1, 0x0, 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) (async) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000100)=0xfefffff9, 0x4) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) sendto$netrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(0xffffffffffffffff, 0x6, 0x16, &(0x7f00000001c0)=[@sack_perm], 0x1) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'veth0_vlan\x00', 0x0}) gettid() (async) gettid() socket$nl_generic(0x10, 0x3, 0x10) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x1, 0x3}, 0x6) (async) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000200)={0x1f, 0x1, 0x3}, 0x6) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) r5 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@can_newroute={0x30, 0x18, 0x8, 0x70bd2b, 0x25dfdbfe, {0x1d, 0x1, 0x4}, [@CGW_DST_IF={0x8, 0xa, r4}, @CGW_FILTER={0xc, 0xb, {{0x4, 0x0, 0x1}, {0x2, 0x1, 0x1}}}, @CGW_DST_IF={0x8, 0xa, r4}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x2, 0x10, &(0x7f0000000040)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffff5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x8300, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 508.85442ms ago: executing program 4 (id=683): r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f00000001c0)=ANY=[], 0x50) (async) socket$netlink(0x10, 0x3, 0x9) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) close(r1) r2 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) bind$ax25(r2, &(0x7f0000000100)={{0x3, @null, 0x1}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null]}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r2) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8b19, &(0x7f0000000000)={'wlan0\x00', @random="7cf1e97c9e4f"}) (async) r3 = socket$alg(0x26, 0x5, 0x0) (async) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r4, &(0x7f0000000140)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) (async) sendmmsg$inet6(r4, &(0x7f0000000e80)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c, &(0x7f0000000880)=[{&(0x7f00000003c0)="e3", 0x1}], 0x1}}], 0x1, 0x0) (async) shutdown(r4, 0x1) (async) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000040)={0x7, 0x7, 0xc, 0x9, 0x0, 0xc, 0x4, 0x6, 0x8, 0x2, 0xa1, 0x4, 0x3, 0x80}, 0xe) (async) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) (async) r5 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000540)=[{&(0x7f0000000800)="ebe3a0e979501a148a0d0b129e6cfd164772219d205e81f4a7f71c1926aae1efd7e005ed863f045cfe6cb55b5bb9fa6935849e6098ed884e7ccb12b672c9f097ca4fe035bbb00400304c09b0294272df", 0x50}], 0x1}], 0x1, 0x40800) (async) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}], 0x1}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) (async) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) ioctl$sock_netdev_private(r7, 0x8914, &(0x7f0000000000)) (async) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r8, 0x890b, &(0x7f0000000380)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x6, @null, @bpq0, 0x0, [@bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) (async) r9 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r9, &(0x7f0000000040)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, 0x1, @null}, 0x1c) (async) connect$rose(r9, &(0x7f0000000100)=@full={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, 0x0, [@default, @null, @null, @default, @bcast, @default]}, 0x40) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000600)=ANY=[@ANYBLOB="18080000b00000000000000004000400851000000600000018100000", @ANYRES32=r0, @ANYBLOB="0000000000000000660000000110000018000000f8ffffff00000048910000009500000000000000360a00000000000018010000202078250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a0000000000008500000006000000000000000000000028ce73416a4bc9c98fd5d40a23a8b93a9de6c743bae4a3d04e8c793de0a5218dc251ea6a76ebc5a20595c2317c9a7f87ebdc1a0f438103da495322bf68a57714d9cbdd8130136629b83a7668", @ANYRES32=0x0], &(0x7f0000000000)='GPL\x00', 0xa, 0x42, &(0x7f0000000340)=""/222, 0x0, 0x8, '\x00', 0x0, 0x0, r1}, 0x94) 424.13287ms ago: executing program 3 (id=684): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000001080)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000020000003900000008000300", @ANYRES32=r5, @ANYBLOB="24005a80200004801400050018002948d1b5062009abbdf006008803050004"], 0x40}, 0x1, 0x0, 0x0, 0x200440c0}, 0x0) sendmsg$NL80211_CMD_SET_KEY(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x58, r4, 0x300, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x2, 0x6e}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac05}, @NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x2}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}]}, 0x58}, 0x1, 0x0, 0x0, 0x24040010}, 0x0) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r6, @ANYBLOB="310300000000fbdbdf250b000000040003"], 0x1c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000000) (async) r7 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000040)=@generic={&(0x7f00000000c0)='./file0\x00'}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r7}, 0x94) 190.416695ms ago: executing program 4 (id=685): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000080)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_PORT_SELF={0xc, 0x19, 0x0, 0x1, [@IFLA_PORT_VF={0x8, 0x1, 0xf}]}, @IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xd572}]}, 0x34}, 0x1, 0x0, 0x0, 0x60}, 0x40) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000002f80)={0x0, 0x0, &(0x7f0000002f40)={&(0x7f0000002fc0)=@newtaction={0xac, 0x30, 0x1, 0x70bd2d, 0x0, {}, [{0x98, 0x1, [@m_bpf={0x44, 0x2, 0x0, 0x0, {{0x8}, {0x1c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1, 0x3ff, 0xf, 0x401, 0x6}}]}, {0x4}, {0xc}, {0xc}}}, @m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PARMS={0x18}, @TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0x9}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4040000}, 0x40c0) sendto$packet(r1, &(0x7f00000000c0)="ced54356a519e7039734c4b994a081f214413827243dafc26c44cef27dee2dc95a47d3959990e3d2d4a1d6f7fc46c6fa619f15dfaf9c5076f838d01ca936fcaebc03afe84fc6b90a02003b945d62373c6ae3a6fca2fd9fc4efe1ac60a0fb493934332a46b256ec196815b859470ed46af8055b422b213da58a60eec71d1e", 0x7e, 0x801, 0x0, 0x0) 187.361409ms ago: executing program 3 (id=686): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) getsockopt$bt_rfcomm_RFCOMM_CONNINFO(r4, 0x12, 0x2, 0x0, &(0x7f0000000100)) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x3}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)={0x2cc, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x113, 0xe, {{{}, {0xfce}, @device_a, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x2d, 0x1a, {0x300, 0x1, 0x4, 0x0, {0x7, 0x3, 0x0, 0x8, 0x0, 0x1}, 0x300, 0x3, 0x1}}, @void, @void, @val={0x76, 0x6, {0x4, 0x80, 0x7, 0x6}}, [{0xdd, 0xc5, "52ea3cb4238275d8e2a44c41a65136351c2846ba44759252b5d3a04b389922d834e51f2dd6933562afc56ee819f723ef3a796aa41ab6f0a2d1b28d08aeb3021abe676ddac2b6080f4bcffb34852778ee86a02513331a4b09b4ee5084c96a1fb276218e0f6645f373c306b38cd383d809ce49cd8812656b2b282d555818e2acde53c7b1d7fa68f5484054bd4b72bedb63121dd0b9424619aeb82c29ad609999611c49b12f657f5110ee5834a51fba9233e4bfcbf8df39ef48d7a66891e8b2aab65b786ca10f"}]}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}, @NL80211_ATTR_IE_ASSOC_RESP={0x4}], @NL80211_ATTR_TX_RATES={0x18c, 0x5a, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x267, 0x1000, 0x0, 0x58c, 0x0, 0x1, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0xc4, 0x1, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0xfff, 0xfffa, 0x5, 0x6, 0x4, 0x9, 0x603]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x328b, 0x1, 0x4, 0x6, 0x89d, 0x6, 0xfff]}}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0xb, 0x30, 0x5, 0x18, 0xc, 0xb, 0x48, 0x8, 0x30, 0x6c, 0x16, 0x18, 0x18, 0x1b]}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x4, 0x5}, {0x4, 0x5}, {0x2, 0x7}, {0x2, 0x3}, {0x1, 0x2}, {0x2, 0x3}, {0x3}, {0x0, 0x8}, {0x0, 0x3}, {0x6, 0x7}, {0x1, 0xa}, {0x4, 0x3}, {0x1, 0x8}, {0x6, 0xa}, {0x4, 0x7}, {0x4, 0x3}, {0x1, 0x6}, {0x6, 0x8}, {0x5, 0x4}, {0x5, 0x9}, {0x7, 0x5}, {0x7, 0x6}, {0x2, 0x9}, {0x3, 0x7}, {0x6, 0xa}, {0x2, 0x3}, {0x7}, {0x1, 0x4}, {0x2}, {0x5, 0x7}, {0x0, 0x5}, {0x0, 0x1}, {0x5, 0x8}, {0x2, 0x6}, {0x3, 0x5}, {0x3, 0xa}, {0x5, 0x3}, {0x1, 0xa}, {0x4, 0xa}, {0x1, 0x7}, {0x1, 0x7}, {0x3, 0x3}, {0x3, 0x8}, {0x2, 0x6}, {0x7, 0x5}, {0x4, 0x6}, {0x7, 0x9}, {0x0, 0x1}, {0x6, 0x9}, {0x3, 0x3}, {0x0, 0x5}, {0x4, 0x1}, {0x2, 0x5}, {0x5, 0x6}, {0x4, 0x13}, {0x5, 0x9}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x200, 0x3ff, 0x1, 0x100, 0x9, 0x1, 0x1f84]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x6, 0x8}, {0x2, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2ba, 0xd, 0x2, 0x6e, 0x5, 0x2, 0xfffc, 0x101]}}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0x60, 0x4, 0x1]}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_2GHZ={0x98, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x80, 0x80, 0x8, 0x8, 0x2bec, 0x614, 0x401, 0x5]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7f, 0x6, 0x5, 0xcb1, 0xffff, 0x9, 0x0, 0xfffc]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x9, 0xfff, 0x8, 0x9, 0x6, 0x8]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x4f, 0x2, [{0x5, 0x8}, {0x3, 0x5}, {0x1, 0x8}, {0x5, 0xa}, {0x3, 0x8}, {0x4, 0x8}, {0x6, 0xa}, {0x1, 0x7}, {0x3, 0x4}, {0x7, 0x3}, {0x0, 0x7}, {0x5, 0x8}, {0x4, 0x1}, {0x1}, {0x2, 0x6}, {0x5, 0x8}, {0x3, 0x4}, {0x5, 0x6}, {0x6, 0x2}, {0x1, 0x3}, {0x4, 0x7}, {0x4, 0xa}, {0x2, 0xa}, {0x6, 0x7}, {0x5, 0x8}, {0x0, 0x2}, {0x7, 0x4}, {0x0, 0x5}, {0x4, 0x8}, {0x0, 0x3}, {0x2, 0x9}, {0x6, 0x2}, {0x1, 0x7}, {0x0, 0x5}, {0x1, 0x2}, {0x3, 0x9}, {0x2, 0x1}, {0x4, 0x8}, {0x1, 0x2}, {0x7, 0x8}, {0x4, 0x4}, {0x1, 0x4}, {0x6, 0x2}, {0x5, 0x1}, {0x7, 0x8}, {0x0, 0x5}, {}, {0x0, 0x1}, {0x0, 0x1}, {0x3, 0x4}, {0x5, 0x3}, {0x6}, {0x2, 0x2}, {0x4, 0x1}, {0x0, 0x7}, {0x5, 0x2}, {0x4, 0x7}, {0x3, 0x4}, {0x0, 0x7}, {0x1, 0x4}, {0x5, 0x9}, {0x6, 0x5}, {0x6, 0x6}, {0x5, 0x5}, {0x2, 0x9}, {0x5, 0x4}, {0x2, 0x3}, {0x7, 0x2}, {0x0, 0x1}, {0x0, 0x9}, {0x3, 0x6}, {0x3, 0x1}, {0x5, 0x2}, {0x0, 0x1}, {0x4, 0x3}]}]}]}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x2cc}, 0x1, 0x0, 0x0, 0x40025}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000080)={0x1a0, 0x0, 0x21, 0x70bd2b, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x101, 0xe}}}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_MATCH={0x8, 0x5b, "ab61a8be"}, @NL80211_ATTR_FRAME_TYPE={0x6}, @NL80211_ATTR_FRAME_MATCH={0xc1, 0x5b, "470edc74656c6b6d3cb7f10c9db48f771149c17919b68ce7eaef4a5a6865acaaa733d9225eb84a4ad3fb1bfa061e298322b2f0c6d9051f3fa1c3fa9f6a6e355792c19f29b38807413a228b720dc73dae09ec60e14a7014fafc5cd341031f8c434c5ccb49ca337710038969beb837f989eb4f89264095836c97b0fd716ba78164e2deabf54920527b813c8a7bb086a9dac356670c21c5103b9dac8fddb40b360ae866fa8d60b638ea79ed82ad64ebc0b49412f1847f27da023519d54ddd"}, @NL80211_ATTR_FRAME_MATCH={0x92, 0x5b, "028039a34e1efe252bfab6ce68c8a92563020e21dfdaa93769e45031abb8306f20c15d4597076ded88966d00343f8fcb915c014627cc031cca9cae8a09e8d7128de16cc378522adc3e1a93ff6b5a0507b63eba480aa14a278235e232bd9985a8d3969ee56ad5e46e0af74fd81cc0f6f71b00000d38cfa069df5c6e10f51029e5c0c71a36d2bf06c080805b181eab"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x3582}]}, 0x1a0}, 0x1, 0x0, 0x0, 0x1}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000380)={0x3c, r6, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80c1}, 0x0) 112.423158ms ago: executing program 2 (id=687): r0 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r0, &(0x7f0000000080)={0xa, 0xe64, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, 0x202}, 0x1c) (async) r1 = socket(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000040)=0x9, 0x4) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f0000000180)=0x8000, 0x4) (async, rerun: 32) r2 = socket$kcm(0x2, 0x1000000000000005, 0x0) (rerun: 32) sendmsg$inet(r2, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x20, @rand_addr=0xa9fe0000}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000080)='r', 0x1}], 0x1, &(0x7f0000007880)=[@ip_tos_u8={{0x11, 0x34000, 0x11}}, @ip_retopts={{0x10, 0x84}}], 0x28}, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0xe64, 0x3, @empty, 0x2}, 0x1c) (async) syz_emit_ethernet(0x3b6, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], 0x0) 41.299586ms ago: executing program 1 (id=688): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000700)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000900)={0x18, 0x13, &(0x7f0000000b80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@btf_id={0x18, 0x9, 0x3, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x89}}}, &(0x7f0000000080)='GPL\x00', 0x9, 0x0, 0x0, 0x41100}, 0x94) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x73, &(0x7f0000000080)={r3, 0x1, 0x10, 0xfff, 0x55b}, &(0x7f00000000c0)=0x18) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team0\x00', 0x0}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x58, 0x58, 0x9, [@float={0x7, 0x0, 0x0, 0x10, 0x4}, @func_proto={0x0, 0x8, 0x0, 0xd, 0x0, [{0x1, 0x5}, {0x2, 0x3}, {0x3, 0x3}, {0x2, 0x5}, {0x1, 0x3}, {0x2, 0x5}, {0xc, 0x4}, {0x2, 0x2}]}]}, {0x0, [0x30, 0x30, 0x2e, 0x30, 0x0, 0x61, 0x30]}}, &(0x7f00000001c0)=""/189, 0x79, 0xbd, 0x0, 0x1}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x5, 0x3, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x1}}, &(0x7f0000000a40)='syzkaller\x00', 0x8, 0x85, &(0x7f0000000a80)=""/133, 0x41100, 0x65, '\x00', r4, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x2, 0x1, 0xe, 0x3}, 0x10, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x4}, 0x94) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x80000000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r5, 0x0, 0x4}, 0x18) unshare(0x2a020400) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r6}, 0x10) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000300)={0x1b, 0x0, 0x0, 0x1df3, 0x0, 0x1, 0x5, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1}, 0x50) r7 = bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={0x0, 0xffffffffffffffff, 0x0, 0x7}, 0x18) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r8, 0x6, 0x22, &(0x7f0000000000)=0x1, 0x4) sendmmsg$inet(r8, &(0x7f0000000f40)=[{{&(0x7f0000000040)={0x2, 0x0, @remote}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000100)='\x00', 0x1}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x2, 0x2400c042) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000) bpf$BPF_BTF_GET_NEXT_ID(0x17, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x41100, 0x20, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(0xffffffffffffffff, &(0x7f0000003500)=[{0x0}, {0x0}, {0x0}], 0x3) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{r7}, 0x0, &(0x7f0000000480)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000380)={0x0}, 0x1, 0x0, 0x0, 0x64000041}, 0x44885) 0s ago: executing program 0 (id=689): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="0f00000004000000040000001200000000000000", @ANYRES32, @ANYBLOB="0000e4ffff092fc62158a33504d3d67e67ce2ea5a3e68edf6f7d00"/41, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002e00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="05"], 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r1}, 0x20) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r4, &(0x7f0000000440)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f0000000300)={&(0x7f0000000500)={0x30, r5, 0x10, 0x70bd2c, 0x25dfdbff, {}, [@NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'ip6tnl0\x00'}, @NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x80) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_int(r6, &(0x7f00000000c0)='cgroup.max.depth\x00', 0x2, 0x0) sendfile(r7, r7, 0x0, 0x9) sendmsg$inet(r0, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) r8 = socket$phonet_pipe(0x23, 0x5, 0x2) bind$phonet(r8, &(0x7f0000000040)={0x23, 0x85, 0x5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000069000010000000004000050018010000696c6c2500000000002020207b1af8ff00000000bfa1000000000000070100fef7ffffffb702000008000000b703000064000000850000001000000095"], &(0x7f0000000040)='syzkaller\x00', 0x5, 0xfcc, &(0x7f0000001e00)=""/4044, 0x100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xbd}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.154' (ED25519) to the list of known hosts. [ 80.641517][ T5823] cgroup: Unknown subsys name 'net' [ 80.809730][ T5823] cgroup: Unknown subsys name 'cpuset' [ 80.818875][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.576814][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 85.271722][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.286599][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.294737][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.319243][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.328268][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.336564][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.344168][ T5847] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.355789][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.364014][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.372025][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.379614][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.387863][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.396584][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.398346][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.410835][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.411975][ T5838] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.421013][ T5850] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.434254][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.434654][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.443081][ T5838] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.495273][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.510134][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.510968][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.537774][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.547303][ T5848] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 86.133244][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 86.422303][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 86.446854][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 86.521316][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 86.559136][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.567077][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.574411][ T5833] bridge_slave_0: entered allmulticast mode [ 86.581888][ T5833] bridge_slave_0: entered promiscuous mode [ 86.636863][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.644040][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.651647][ T5833] bridge_slave_1: entered allmulticast mode [ 86.659953][ T5833] bridge_slave_1: entered promiscuous mode [ 86.698527][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 86.802057][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.866987][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.954952][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.964595][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.976517][ T5837] bridge_slave_0: entered allmulticast mode [ 86.984774][ T5837] bridge_slave_0: entered promiscuous mode [ 87.034822][ T5833] team0: Port device team_slave_0 added [ 87.042494][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.051457][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.058853][ T5840] bridge_slave_0: entered allmulticast mode [ 87.068236][ T5840] bridge_slave_0: entered promiscuous mode [ 87.077371][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.084557][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.093102][ T5844] bridge_slave_0: entered allmulticast mode [ 87.102164][ T5844] bridge_slave_0: entered promiscuous mode [ 87.110117][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.118516][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.126231][ T5837] bridge_slave_1: entered allmulticast mode [ 87.134342][ T5837] bridge_slave_1: entered promiscuous mode [ 87.156444][ T5833] team0: Port device team_slave_1 added [ 87.162987][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.170546][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.178401][ T5840] bridge_slave_1: entered allmulticast mode [ 87.190903][ T5840] bridge_slave_1: entered promiscuous mode [ 87.198557][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.210336][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.217685][ T5844] bridge_slave_1: entered allmulticast mode [ 87.230356][ T5844] bridge_slave_1: entered promiscuous mode [ 87.402007][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.427613][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.434596][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.461115][ T5847] Bluetooth: hci2: command tx timeout [ 87.467216][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.483956][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.496422][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.508350][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.516494][ T5847] Bluetooth: hci0: command tx timeout [ 87.517701][ T5848] Bluetooth: hci1: command tx timeout [ 87.524558][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.538651][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.546405][ T5846] bridge_slave_0: entered allmulticast mode [ 87.553526][ T5846] bridge_slave_0: entered promiscuous mode [ 87.563015][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.570445][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.596855][ T5848] Bluetooth: hci3: command tx timeout [ 87.596954][ T5847] Bluetooth: hci4: command tx timeout [ 87.602582][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.621043][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.632438][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.670711][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.678389][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.685562][ T5846] bridge_slave_1: entered allmulticast mode [ 87.693141][ T5846] bridge_slave_1: entered promiscuous mode [ 87.800010][ T5840] team0: Port device team_slave_0 added [ 87.810093][ T5840] team0: Port device team_slave_1 added [ 87.818161][ T5844] team0: Port device team_slave_0 added [ 87.839886][ T5837] team0: Port device team_slave_0 added [ 87.849701][ T5837] team0: Port device team_slave_1 added [ 87.858234][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.871583][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.895919][ T5844] team0: Port device team_slave_1 added [ 87.977409][ T5833] hsr_slave_0: entered promiscuous mode [ 87.983793][ T5833] hsr_slave_1: entered promiscuous mode [ 88.022413][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.029521][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.055873][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.068030][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.075012][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.101081][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.126554][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.133901][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.160391][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.173665][ T5846] team0: Port device team_slave_0 added [ 88.188907][ T5846] team0: Port device team_slave_1 added [ 88.208906][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.216367][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.243561][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.282191][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.289385][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.315936][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.359007][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.366373][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.392427][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.433523][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.440594][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.466998][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.480296][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.487436][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.513613][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.560999][ T5840] hsr_slave_0: entered promiscuous mode [ 88.567644][ T5840] hsr_slave_1: entered promiscuous mode [ 88.573720][ T5840] debugfs: 'hsr0' already exists in 'hsr' [ 88.579689][ T5840] Cannot create hsr debugfs directory [ 88.794521][ T5837] hsr_slave_0: entered promiscuous mode [ 88.802001][ T5837] hsr_slave_1: entered promiscuous mode [ 88.808683][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 88.814419][ T5837] Cannot create hsr debugfs directory [ 88.825612][ T5846] hsr_slave_0: entered promiscuous mode [ 88.832132][ T5846] hsr_slave_1: entered promiscuous mode [ 88.838409][ T5846] debugfs: 'hsr0' already exists in 'hsr' [ 88.844148][ T5846] Cannot create hsr debugfs directory [ 88.883933][ T5844] hsr_slave_0: entered promiscuous mode [ 88.890706][ T5844] hsr_slave_1: entered promiscuous mode [ 88.897537][ T5844] debugfs: 'hsr0' already exists in 'hsr' [ 88.903299][ T5844] Cannot create hsr debugfs directory [ 89.448755][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.463765][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.477063][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.502260][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.515972][ T5847] Bluetooth: hci2: command tx timeout [ 89.603389][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.610398][ T5847] Bluetooth: hci0: command tx timeout [ 89.610968][ T5848] Bluetooth: hci1: command tx timeout [ 89.630624][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.643310][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.655411][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.675938][ T5848] Bluetooth: hci3: command tx timeout [ 89.676413][ T5847] Bluetooth: hci4: command tx timeout [ 89.804958][ T5837] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 89.820414][ T5837] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 89.847960][ T5837] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 89.860475][ T5837] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 89.922125][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.963107][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 89.993687][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 90.007587][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 90.026885][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.049670][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 90.098769][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.106202][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.172936][ T5844] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 90.193230][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.200403][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.210976][ T5844] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 90.223694][ T5844] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 90.245302][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.256921][ T5844] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 90.352657][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.405562][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.413084][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.468253][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.475512][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.635602][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.662927][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.708487][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.751590][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.758921][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.802533][ T3461] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.809790][ T3461] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.878399][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.890267][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.942021][ T3461] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.949302][ T3461] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.994960][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.002178][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.061278][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.110958][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.140882][ T3430] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.148109][ T3430] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.172049][ T3430] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.179249][ T3430] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.232101][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.284703][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 91.335501][ T5833] veth0_vlan: entered promiscuous mode [ 91.439500][ T5833] veth1_vlan: entered promiscuous mode [ 91.589511][ T5840] veth0_vlan: entered promiscuous mode [ 91.605981][ T5847] Bluetooth: hci2: command tx timeout [ 91.638934][ T5840] veth1_vlan: entered promiscuous mode [ 91.679710][ T5847] Bluetooth: hci0: command tx timeout [ 91.686061][ T5847] Bluetooth: hci1: command tx timeout [ 91.720467][ T5833] veth0_macvtap: entered promiscuous mode [ 91.758977][ T5847] Bluetooth: hci3: command tx timeout [ 91.760785][ T5848] Bluetooth: hci4: command tx timeout [ 91.790428][ T5833] veth1_macvtap: entered promiscuous mode [ 91.805344][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.911923][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.948533][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.002357][ T43] cfg80211: failed to load regulatory.db [ 92.013624][ T5840] veth0_macvtap: entered promiscuous mode [ 92.024566][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.060444][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.096457][ T2126] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.119772][ T5840] veth1_macvtap: entered promiscuous mode [ 92.150014][ T2126] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.185253][ T49] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.199495][ T49] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.314671][ T5846] veth0_vlan: entered promiscuous mode [ 92.327759][ T5844] veth0_vlan: entered promiscuous mode [ 92.355479][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.406592][ T5844] veth1_vlan: entered promiscuous mode [ 92.423571][ T5846] veth1_vlan: entered promiscuous mode [ 92.437645][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.456515][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.472581][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.490277][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.513645][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.526693][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.569466][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.609202][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.617646][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.721085][ T5844] veth0_macvtap: entered promiscuous mode [ 92.742976][ T5846] veth0_macvtap: entered promiscuous mode [ 92.751040][ T5837] veth0_vlan: entered promiscuous mode [ 92.765955][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 92.778880][ T5844] veth1_macvtap: entered promiscuous mode [ 92.809214][ T5846] veth1_macvtap: entered promiscuous mode [ 92.831703][ T5837] veth1_vlan: entered promiscuous mode [ 92.864495][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.889434][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.897802][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.911666][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.954879][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 92.972133][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.052247][ T12] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.061554][ T12] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.087594][ T12] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.124134][ T12] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.124193][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.143418][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.250396][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.322382][ T2126] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.355786][ T2126] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.413499][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.425931][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.456555][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.534449][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.577331][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.610121][ T5837] veth0_macvtap: entered promiscuous mode [ 93.665528][ T5837] veth1_macvtap: entered promiscuous mode [ 93.676377][ T5848] Bluetooth: hci2: command tx timeout [ 93.756556][ T5848] Bluetooth: hci1: command tx timeout [ 93.757514][ T5847] Bluetooth: hci0: command tx timeout [ 93.769671][ T3461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.782696][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.799230][ T3461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.837381][ T5847] Bluetooth: hci4: command tx timeout [ 93.837541][ T5848] Bluetooth: hci3: command tx timeout [ 93.920861][ T5963] Zero length message leads to an empty skb [ 93.943160][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.064109][ T3430] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.089969][ T3430] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.138000][ T3430] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.163654][ T3430] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.243268][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.268854][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.575464][ T3461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.609515][ T3461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.628039][ T5984] netlink: 'syz.3.4': attribute type 2 has an invalid length. [ 94.702701][ T5984] k›*·]‘: entered promiscuous mode [ 94.835950][ T5985] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 94.969970][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.021540][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.502548][ T6013] netlink: 'syz.0.15': attribute type 1 has an invalid length. [ 95.619300][ T6014] team0: Port device geneve2 added [ 95.689148][ T6020] netlink: 20 bytes leftover after parsing attributes in process `syz.4.16'. [ 95.773675][ T6023] netlink: 16 bytes leftover after parsing attributes in process `syz.3.17'. [ 96.209493][ T6033] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 96.314473][ T6039] Driver unsupported XDP return value 0 on prog (id 9) dev N/A, expect packet loss! [ 96.344692][ T6041] netlink: 4 bytes leftover after parsing attributes in process `syz.3.23'. [ 96.500092][ T6048] netlink: 20 bytes leftover after parsing attributes in process `syz.2.24'. [ 96.729174][ T6052] netlink: 12 bytes leftover after parsing attributes in process `syz.1.26'. [ 96.873569][ T6058] netlink: 'syz.0.29': attribute type 1 has an invalid length. [ 96.921919][ T6058] netlink: 224 bytes leftover after parsing attributes in process `syz.0.29'. [ 97.693644][ T6074] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.841146][ T6082] netlink: 'syz.2.33': attribute type 4 has an invalid length. [ 97.857895][ T6082] netlink: 152 bytes leftover after parsing attributes in process `syz.2.33'. [ 97.947477][ T6082] Ã: renamed from bond0 (while UP) [ 98.020110][ T6084] tipc: Started in network mode [ 98.035477][ T6084] tipc: Node identity 1ad2eb31f889, cluster identity 4711 [ 98.053782][ T6084] tipc: Enabled bearer , priority 0 [ 98.086095][ T6084] syzkaller0: entered promiscuous mode [ 98.091632][ T6084] syzkaller0: entered allmulticast mode [ 98.422328][ T6084] tipc: Resetting bearer [ 98.439413][ T6087] netlink: 152 bytes leftover after parsing attributes in process `syz.1.34'. [ 98.477086][ T6083] tipc: Resetting bearer [ 98.550099][ T6083] tipc: Disabling bearer [ 98.658062][ T6100] netlink: 16 bytes leftover after parsing attributes in process `syz.2.36'. [ 99.102820][ T6113] trusted_key: syz.4.40 sent an empty control message without MSG_MORE. [ 99.526987][ T6130] netlink: 44 bytes leftover after parsing attributes in process `syz.1.43'. [ 99.609090][ T6136] netlink: 'syz.4.45': attribute type 9 has an invalid length. [ 99.779983][ T6140] netlink: 'syz.3.47': attribute type 8 has an invalid length. [ 99.996346][ T13] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.019357][ T13] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.076913][ T13] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.122321][ T13] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 100.267238][ T6160] netlink: 'syz.4.51': attribute type 4 has an invalid length. [ 100.509356][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.518173][ T6160] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.796934][ T6180] __nla_validate_parse: 3 callbacks suppressed [ 100.796955][ T6180] netlink: 12 bytes leftover after parsing attributes in process `syz.3.56'. [ 100.870958][ T6180] netlink: 4 bytes leftover after parsing attributes in process `syz.3.56'. [ 100.938325][ T6160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 100.946760][ T6182] netlink: 16 bytes leftover after parsing attributes in process `syz.2.58'. [ 100.976856][ T6160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.006933][ T6184] netlink: 4 bytes leftover after parsing attributes in process `syz.0.59'. [ 101.730646][ T49] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.744133][ T49] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.768168][ T49] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.788559][ T49] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.840283][ T6209] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_bridge, syncid = 512, id = 0 [ 101.862114][ T6201] IPVS: stopping backup sync thread 6209 ... [ 101.878344][ T6206] netdevsim netdevsim1: Direct firmware load for .. failed with error -2 [ 101.905928][ T6206] netdevsim netdevsim1: Falling back to sysfs fallback for: .. [ 101.928983][ T78] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.940110][ T78] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.958305][ T78] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 101.979424][ T78] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.166204][ T6216] pim6reg1: entered allmulticast mode [ 102.175342][ T6216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 102.186336][ T6216] netlink: 28 bytes leftover after parsing attributes in process `syz.3.65'. [ 102.207497][ T13] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.234047][ T6224] netlink: 4 bytes leftover after parsing attributes in process `syz.3.65'. [ 102.316325][ T6224] netlink: 28 bytes leftover after parsing attributes in process `syz.3.65'. [ 102.604932][ T6237] netlink: 32 bytes leftover after parsing attributes in process `syz.0.70'. [ 102.780480][ T6239] netlink: 24 bytes leftover after parsing attributes in process `syz.4.71'. [ 102.785045][ T6244] syz.3.73 uses obsolete (PF_INET,SOCK_PACKET) [ 103.147244][ T6259] Can't find ip_set type bitmap:ip [ 103.373866][ T6266] pim6reg: entered allmulticast mode [ 103.578479][ T6272] IPVS: stopping backup sync thread 6274 ... [ 103.584645][ T6274] IPVS: sync thread started: state = BACKUP, mcast_ifn = bond0, syncid = 8, id = 0 [ 116.157651][ T6304] __nla_validate_parse: 6 callbacks suppressed [ 116.157670][ T6304] netlink: 724 bytes leftover after parsing attributes in process `syz.4.88'. [ 116.197097][ T6304] netlink: 83 bytes leftover after parsing attributes in process `syz.4.88'. [ 116.202162][ T6310] netlink: 12 bytes leftover after parsing attributes in process `syz.0.84'. [ 116.241280][ T6308] netlink: 44 bytes leftover after parsing attributes in process `syz.0.84'. [ 116.254853][ T6308] netlink: 44 bytes leftover after parsing attributes in process `syz.0.84'. [ 116.270699][ T6308] netlink: 44 bytes leftover after parsing attributes in process `syz.0.84'. [ 116.280243][ T6308] netlink: 44 bytes leftover after parsing attributes in process `syz.0.84'. [ 117.730882][ T6371] netlink: 'syz.2.99': attribute type 1 has an invalid length. [ 117.750291][ T6371] netlink: 'syz.2.99': attribute type 10 has an invalid length. [ 117.783425][ T6371] netlink: 236 bytes leftover after parsing attributes in process `syz.2.99'. [ 118.057666][ T6384] netlink: 8 bytes leftover after parsing attributes in process `syz.3.102'. [ 118.098065][ T6384] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 118.117915][ T6384] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 118.181969][ T6390] netlink: 24 bytes leftover after parsing attributes in process `syz.4.103'. [ 118.211220][ T6385] vlan2: entered promiscuous mode [ 118.221699][ T6385] bond0: entered promiscuous mode [ 118.235498][ T6385] bond_slave_0: entered promiscuous mode [ 118.246363][ T6385] bond_slave_1: entered promiscuous mode [ 118.252718][ T6385] vlan2: entered allmulticast mode [ 118.258751][ T6385] bond0: entered allmulticast mode [ 118.264031][ T6385] bond_slave_0: entered allmulticast mode [ 118.276089][ T6385] bond_slave_1: entered allmulticast mode [ 118.288624][ T6386] tipc: Started in network mode [ 118.296373][ T6386] tipc: Node identity 26319de7a571, cluster identity 4711 [ 118.310491][ T6386] tipc: Enabled bearer , priority 0 [ 118.381451][ T6386] tipc: Resetting bearer [ 118.392406][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 118.400880][ T6408] gre0: entered promiscuous mode [ 118.411923][ T6408] gre0: entered allmulticast mode [ 118.436948][ T6379] tipc: Disabling bearer [ 119.034940][ T5888] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 119.044862][ T6179] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 119.189396][ T6451] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.407411][ T6467] netlink: 'syz.0.117': attribute type 3 has an invalid length. [ 119.453312][ T6469] netlink: 'syz.2.122': attribute type 1 has an invalid length. [ 119.549334][ T6458] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.557238][ T6458] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.662268][ T6473] netlink: 'syz.4.123': attribute type 29 has an invalid length. [ 119.702388][ T6479] netlink: 'syz.4.123': attribute type 29 has an invalid length. [ 119.882182][ T6494] netlink: 'syz.4.128': attribute type 1 has an invalid length. [ 120.118095][ T6494] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.136393][ T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 120.144602][ T49] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 120.160755][ T6499] IPVS: set_ctl: invalid protocol: 137 172.20.20.187:20004 [ 120.206803][ T6502] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.218826][ T6502] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 120.232243][ T6502] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 120.725944][ T10] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 121.314428][ T6569] __nla_validate_parse: 77 callbacks suppressed [ 121.314449][ T6569] netlink: 248 bytes leftover after parsing attributes in process `syz.4.144'. [ 121.498848][ T6578] netlink: 32 bytes leftover after parsing attributes in process `syz.0.146'. [ 121.513537][ T6582] netlink: 28 bytes leftover after parsing attributes in process `syz.2.147'. [ 121.645589][ T6582] bond0 (unregistering): Released all slaves [ 121.747070][ T6586] netlink: 28 bytes leftover after parsing attributes in process `syz.2.147'. [ 121.859996][ T6588] netlink: 280 bytes leftover after parsing attributes in process `syz.4.149'. [ 121.890078][ T6590] tipc: Enabled bearer , priority 0 [ 121.910311][ T6590] syzkaller0: entered promiscuous mode [ 121.940512][ T6590] syzkaller0: entered allmulticast mode [ 122.049408][ T6594] tipc: Resetting bearer [ 122.161617][ T6563] netlink: 20 bytes leftover after parsing attributes in process `syz.1.141'. [ 122.215925][ T6590] tipc: Resetting bearer [ 122.246144][ T6597] netlink: 80 bytes leftover after parsing attributes in process `syz.1.141'. [ 122.329678][ T6590] tipc: Disabling bearer [ 122.656552][ T6618] syzkaller1: entered promiscuous mode [ 122.662097][ T6618] syzkaller1: entered allmulticast mode [ 122.759990][ T6617] netlink: 40 bytes leftover after parsing attributes in process `syz.2.154'. [ 122.790676][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.2.154'. [ 123.267093][ T6641] netlink: 76 bytes leftover after parsing attributes in process `syz.3.162'. [ 123.726578][ T6661] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 123.815794][ T6661] bond1: entered promiscuous mode [ 123.821112][ T6661] bond1: entered allmulticast mode [ 123.826768][ T6661] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.015878][ T6676] ieee802154 phy0 wpan0: encryption failed: -22 [ 124.155970][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 125.135401][ T6714] warning: `syz.3.180' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 125.309940][ T6724] netlink: 'syz.4.183': attribute type 5 has an invalid length. [ 125.380941][ T6740] wg1 speed is unknown, defaulting to 1000 [ 125.382291][ T6733] syzkaller0: entered promiscuous mode [ 125.395055][ T6733] syzkaller0: entered allmulticast mode [ 125.409088][ T6740] wg1 speed is unknown, defaulting to 1000 [ 125.417086][ T6740] wg1 speed is unknown, defaulting to 1000 [ 125.587192][ T6740] infiniband syz1: set active [ 125.592964][ T6740] infiniband syz1: added wg1 [ 125.593196][ T43] wg1 speed is unknown, defaulting to 1000 [ 125.636085][ T6740] RDS/IB: syz1: added [ 125.640760][ T6740] smc: adding ib device syz1 with port count 1 [ 125.648906][ T6740] smc: ib device syz1 port 1 has pnetid [ 125.656229][ T43] wg1 speed is unknown, defaulting to 1000 [ 125.664383][ T6740] wg1 speed is unknown, defaulting to 1000 [ 125.853995][ T6740] wg1 speed is unknown, defaulting to 1000 [ 126.139757][ T6754] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 126.226901][ T6760] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 126.330732][ T6761] wireguard0: entered promiscuous mode [ 126.337620][ T6761] wireguard0: entered allmulticast mode [ 126.411122][ T6769] __nla_validate_parse: 2 callbacks suppressed [ 126.411143][ T6769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.191'. [ 126.443687][ T6769] netlink: 28 bytes leftover after parsing attributes in process `syz.2.191'. [ 126.466011][ T6740] wg1 speed is unknown, defaulting to 1000 [ 126.744146][ T6740] wg1 speed is unknown, defaulting to 1000 [ 127.326325][ T6764] wg1 speed is unknown, defaulting to 1000 [ 127.480386][ T6787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.195'. [ 127.587158][ T6789] netlink: 'syz.3.196': attribute type 26 has an invalid length. [ 127.606599][ T6792] tap0: tun_chr_ioctl cmd 1074025677 [ 127.613554][ T6792] tap0: linktype set to 769 [ 127.775423][ T6776] wg1 speed is unknown, defaulting to 1000 [ 128.240015][ T6814] netlink: 248 bytes leftover after parsing attributes in process `syz.3.202'. [ 128.381043][ T6740] wg1 speed is unknown, defaulting to 1000 [ 128.537820][ T6821] netlink: 'syz.3.204': attribute type 6 has an invalid length. [ 128.596679][ T6821] dummy0: entered promiscuous mode [ 128.615826][ T6821] dummy0: entered allmulticast mode [ 128.631312][ T6821] openvswitch: netlink: Unexpected mask (mask=440, allowed=10048) [ 128.690489][ T6824] netlink: 'syz.4.205': attribute type 1 has an invalid length. [ 128.906918][ T6829] netlink: 'syz.3.206': attribute type 4 has an invalid length. [ 129.398195][ T6850] batadv0: entered promiscuous mode [ 129.427865][ T6850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 129.475233][ T6854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.214'. [ 129.997753][ T6851] wg1 speed is unknown, defaulting to 1000 [ 130.434002][ T6874] netlink: 20 bytes leftover after parsing attributes in process `syz.1.219'. [ 130.754454][ T6887] netlink: 24 bytes leftover after parsing attributes in process `syz.4.222'. [ 130.786352][ T6887] netlink: 20 bytes leftover after parsing attributes in process `syz.4.222'. [ 130.795302][ T6887] netlink: 8 bytes leftover after parsing attributes in process `syz.4.222'. [ 131.011248][ T6882] wg1 speed is unknown, defaulting to 1000 [ 131.190229][ T6895] netlink: 20 bytes leftover after parsing attributes in process `syz.4.224'. [ 131.292436][ T6899] tipc: Started in network mode [ 131.324997][ T6899] tipc: Node identity aaaaaaaaaa3a, cluster identity 4711 [ 131.349763][ T6899] tipc: Enabled bearer , priority 10 [ 131.424767][ T6903] gretap1: entered promiscuous mode [ 131.446887][ T6903] gretap1: entered allmulticast mode [ 131.602602][ T6911] netlink: 'syz.2.228': attribute type 25 has an invalid length. [ 131.627597][ T6911] netlink: 'syz.2.228': attribute type 7 has an invalid length. [ 131.875017][ T6916] netlink: 'syz.0.230': attribute type 8 has an invalid length. [ 131.931316][ T6895] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 131.966369][ T6918] __nla_validate_parse: 1 callbacks suppressed [ 131.966390][ T6918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.231'. [ 132.083807][ T6920] netlink: 12 bytes leftover after parsing attributes in process `syz.4.233'. [ 132.315944][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 132.467188][ T43] tipc: Node number set to 9480874 [ 132.663772][ T6947] netlink: 'syz.4.239': attribute type 13 has an invalid length. [ 132.692199][ T6947] netlink: 'syz.4.239': attribute type 17 has an invalid length. [ 132.835689][ T6953] netlink: 12 bytes leftover after parsing attributes in process `syz.3.240'. [ 132.911854][ T6956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.243'. [ 132.937056][ T6956] netlink: 28 bytes leftover after parsing attributes in process `syz.0.243'. [ 132.970830][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.977966][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.999480][ T6962] netlink: 'syz.3.240': attribute type 30 has an invalid length. [ 133.068789][ T6965] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.144854][ T6947] 8021q: adding VLAN 0 to HW filter on device bond0 [ 133.155411][ T6947] 8021q: adding VLAN 0 to HW filter on device team0 [ 133.172156][ T6947] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 133.217336][ T6940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.247287][ T6956] team0: entered promiscuous mode [ 133.252947][ T6956] team_slave_0: entered promiscuous mode [ 133.259781][ T6956] team_slave_1: entered promiscuous mode [ 133.265987][ T6956] geneve2: entered promiscuous mode [ 133.275475][ T6956] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 133.308077][ T6940] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.446513][ T5848] Bluetooth: hci0: command 0x080f tx timeout [ 133.753243][ T6995] netdevsim netdevsim0 ÿÿÿÿÿÿ: renamed from netdevsim0 (while UP) [ 133.785365][ T6997] netlink: 256 bytes leftover after parsing attributes in process `syz.1.253'. [ 133.982436][ T7004] wg1 speed is unknown, defaulting to 1000 [ 134.847050][ T7037] netlink: 14 bytes leftover after parsing attributes in process `syz.2.260'. [ 135.559896][ T7037] Ã (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.590486][ T7037] Ã (unregistering): (slave bond_slave_1): Releasing backup interface [ 135.662357][ T7037] Ã (unregistering): Released all slaves [ 135.713888][ T7041] veth1_macvtap: left promiscuous mode [ 135.735714][ T7041] macsec0: entered promiscuous mode [ 135.768688][ T7043] bridge: RTM_NEWNEIGH with invalid state 0x1 [ 135.942452][ T7061] sctp: [Deprecated]: syz.2.265 (pid 7061) Use of int in maxseg socket option. [ 135.942452][ T7061] Use struct sctp_assoc_value instead [ 136.142074][ T7065] netlink: 'syz.3.266': attribute type 1 has an invalid length. [ 136.178110][ T7065] netlink: 224 bytes leftover after parsing attributes in process `syz.3.266'. [ 136.229805][ T7071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.266'. [ 136.350798][ T7079] netlink: 20 bytes leftover after parsing attributes in process `syz.1.270'. [ 136.752322][ T7092] Bluetooth: MGMT ver 1.23 [ 136.944309][ T7108] openvswitch: netlink: IP tunnel dst address not specified [ 136.949007][ T7110] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 136.994315][ T7107] __nla_validate_parse: 2 callbacks suppressed [ 136.994336][ T7107] netlink: 4 bytes leftover after parsing attributes in process `syz.4.280'. [ 136.999495][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.4.280'. [ 137.081750][ T7116] netlink: 12 bytes leftover after parsing attributes in process `syz.2.282'. [ 137.171762][ T7119] netlink: 148 bytes leftover after parsing attributes in process `syz.0.281'. [ 137.247597][ T7119] netlink: 66 bytes leftover after parsing attributes in process `syz.0.281'. [ 137.389150][ T7131] netlink: 8 bytes leftover after parsing attributes in process `syz.3.285'. [ 137.401355][ T7131] netlink: 24 bytes leftover after parsing attributes in process `syz.3.285'. [ 137.420902][ T7130] netlink: 'syz.2.286': attribute type 10 has an invalid length. [ 137.580923][ T7133] veth1: mtu greater than device maximum [ 137.945071][ T7154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.294'. [ 137.966114][ T7155] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 138.002355][ T7158] x_tables: ip6_tables: policy.0 match: invalid size 312 (kernel) != (user) 0 [ 138.085848][ T7165] netlink: 'syz.4.297': attribute type 15 has an invalid length. [ 138.224185][ T43] IPVS: starting estimator thread 0... [ 138.302838][ T7167] netlink: 108 bytes leftover after parsing attributes in process `syz.4.297'. [ 138.336071][ T7174] IPVS: using max 26 ests per chain, 62400 per kthread [ 138.666236][ T7191] smc: net device bond0 applied user defined pnetid SYZ2 [ 138.781657][ T7201] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 139.062527][ T7220] Bluetooth: MGMT ver 1.23 [ 139.080360][ T7220] geneve2: entered promiscuous mode [ 139.304842][ T7227] wg1 speed is unknown, defaulting to 1000 [ 139.781129][ T7229] smc: net device bond0 applied user defined pnetid SYZ2 [ 139.978635][ T7232] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 139.997809][ T7232] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 140.032945][ T7224] wg1 speed is unknown, defaulting to 1000 [ 140.191941][ T7237] Bluetooth: MGMT ver 1.23 [ 140.557945][ T7251] syzkaller0: entered promiscuous mode [ 140.563481][ T7251] syzkaller0: entered allmulticast mode [ 140.741668][ T7257] gre0: left promiscuous mode [ 140.747834][ T7257] gre0: left allmulticast mode [ 140.896068][ T7257] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.903957][ T7257] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.193964][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.224190][ T7257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.456500][ T7257] vlan2: left promiscuous mode [ 141.461602][ T7257] vlan2: left allmulticast mode [ 141.467283][ T7257] bond0: left allmulticast mode [ 141.472190][ T7257] bond_slave_0: left allmulticast mode [ 141.478168][ T7257] bond_slave_1: left allmulticast mode [ 141.529869][ T5898] wg1 speed is unknown, defaulting to 1000 [ 141.537276][ T7277] smc: net device netdevsim0 applied user defined pnetid SYZ2 [ 141.544939][ T6179] netdevsim netdevsim0 ÿÿÿÿÿÿ: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.562632][ T5898] syz1: Port: 1 Link DOWN [ 141.562962][ T6179] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.619745][ T5898] wg1 speed is unknown, defaulting to 1000 [ 141.626573][ T36] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.645087][ T36] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 141.712049][ T7287] openvswitch: netlink: Flow actions attr not present in new flow. [ 142.390043][ T7318] dvmrp1: entered allmulticast mode [ 142.681974][ T7326] __nla_validate_parse: 5 callbacks suppressed [ 142.681995][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 142.708365][ T7326] netlink: 'syz.0.339': attribute type 2 has an invalid length. [ 142.716251][ T7326] netlink: 8 bytes leftover after parsing attributes in process `syz.0.339'. [ 143.136443][ T7336] netlink: 20 bytes leftover after parsing attributes in process `syz.1.341'. [ 143.298864][ T7341] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 143.316164][ T7339] syzkaller0: entered allmulticast mode [ 143.343845][ T7341] netlink: 40 bytes leftover after parsing attributes in process `syz.3.343'. [ 143.355702][ T7341] netlink: 4 bytes leftover after parsing attributes in process `syz.3.343'. [ 143.476983][ T7343] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.344'. [ 143.501312][ T5898] IPVS: starting estimator thread 0... [ 143.549740][ T7334] syz.4.340 (7334) used greatest stack depth: 19320 bytes left [ 143.571616][ T7343] netlink: 8 bytes leftover after parsing attributes in process `syz.1.344'. [ 143.605827][ T7350] IPVS: using max 27 ests per chain, 64800 per kthread [ 143.871929][ T7360] netlink: 'syz.0.349': attribute type 1 has an invalid length. [ 143.889079][ T7360] netlink: 92 bytes leftover after parsing attributes in process `syz.0.349'. [ 143.996656][ T36] wlan1: Trigger new scan to find an IBSS to join [ 144.052841][ T7343] syz.1.344 (7343) used greatest stack depth: 17864 bytes left [ 144.091288][ T7368] IPv6: Can't replace route, no match found [ 144.156386][ T5848] Bluetooth: hci4: command tx timeout [ 144.270607][ T7382] openvswitch: netlink: Message has 4 unknown bytes. [ 144.290893][ T7381] tipc: Enabled bearer , priority 0 [ 144.303669][ T7378] syzkaller0: entered promiscuous mode [ 144.309315][ T7378] syzkaller0: entered allmulticast mode [ 144.319137][ T7378] sch_tbf: burst 127 is lower than device syzkaller0 mtu (1514) ! [ 144.335520][ T7382] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_tx_wq": -EINTR [ 144.416884][ T7378] tipc: Resetting bearer [ 144.568286][ T7373] tipc: Resetting bearer [ 144.701443][ T7407] netlink: 20 bytes leftover after parsing attributes in process `syz.3.355'. [ 144.714982][ T7373] tipc: Disabling bearer [ 144.763115][ T7410] netlink: 8 bytes leftover after parsing attributes in process `syz.0.359'. [ 144.850597][ T6179] netdevsim netdevsim0 ÿÿÿÿÿÿ: set [0, 0] type 1 family 0 port 8472 - 0 [ 144.951307][ T49] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.038156][ T49] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.147955][ T49] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.195360][ T7423] ip6gre1: entered allmulticast mode [ 145.573312][ T6179] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.630250][ T6179] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.650716][ T6179] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 145.677648][ T78] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.975570][ T7465] wg1 speed is unknown, defaulting to 1000 [ 146.368572][ T7481] sctp: [Deprecated]: syz.1.382 (pid 7481) Use of int in max_burst socket option deprecated. [ 146.368572][ T7481] Use struct sctp_assoc_value instead [ 146.505396][ T7488] syz.4.384 uses old SIOCAX25GETINFO [ 147.037731][ T78] wlan1: Trigger new scan to find an IBSS to join [ 147.232286][ T7501] wg1 speed is unknown, defaulting to 1000 [ 147.289766][ T7513] ieee802154 phy1 wpan1: encryption failed: -22 [ 147.561755][ T7518] sctp: [Deprecated]: syz.4.392 (pid 7518) Use of struct sctp_assoc_value in delayed_ack socket option. [ 147.561755][ T7518] Use struct sctp_sack_info instead [ 148.156020][ T7520] syzkaller0: entered promiscuous mode [ 148.161717][ T7520] syzkaller0: entered allmulticast mode [ 148.176644][ T7522] nbd: must specify an index to disconnect [ 148.231094][ T7522] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 148.315951][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 148.762628][ T7538] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 148.811204][ T7538] __nla_validate_parse: 13 callbacks suppressed [ 148.811224][ T7538] netlink: 24 bytes leftover after parsing attributes in process `syz.0.400'. [ 148.833342][ T7543] sctp: [Deprecated]: syz.3.401 (pid 7543) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.833342][ T7543] Use struct sctp_sack_info instead [ 148.909547][ T7545] sctp: [Deprecated]: syz.3.401 (pid 7545) Use of struct sctp_assoc_value in delayed_ack socket option. [ 148.909547][ T7545] Use struct sctp_sack_info instead [ 149.244096][ T7560] batadv_slave_1: entered promiscuous mode [ 149.285066][ T7556] batadv_slave_1: left promiscuous mode [ 149.631516][ T9] IPVS: starting estimator thread 0... [ 149.735776][ T7586] IPVS: using max 23 ests per chain, 55200 per kthread [ 149.866203][ T5898] hid-generic 0005:16C0:5507.0001: hidraw0: BLUETOOTH HID v0.8d Device [syz0] on aa:aa:aa:aa:aa:aa [ 149.999516][ T3430] wlan1: Trigger new scan to find an IBSS to join [ 150.420434][ T7624] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_cmd_wq": -EINTR [ 150.739818][ T7638] wg1 speed is unknown, defaulting to 1000 [ 150.939927][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.065986][ T7649] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 151.366015][ T7656] batadv_slave_1: entered promiscuous mode [ 151.383437][ T7655] batadv_slave_1: left promiscuous mode [ 151.497707][ T7658] Bluetooth: MGMT ver 1.23 [ 151.595357][ T7666] syzkaller0: entered promiscuous mode [ 151.615687][ T7666] syzkaller0: entered allmulticast mode [ 151.678944][ T7673] netlink: 'syz.0.439': attribute type 4 has an invalid length. [ 151.954919][ T7690] netlink: 72 bytes leftover after parsing attributes in process `syz.0.441'. [ 152.425115][ T7696] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 152.437104][ T7696] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 152.852898][ T5906] IPVS: starting estimator thread 0... [ 152.869440][ T7717] bridge_slave_0: left allmulticast mode [ 152.875143][ T7717] bridge_slave_0: left promiscuous mode [ 152.876599][ T7720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.449'. [ 152.896647][ T7717] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.913567][ T7717] bridge_slave_1: left allmulticast mode [ 152.935478][ T7717] bridge_slave_1: left promiscuous mode [ 152.949205][ T7717] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.957180][ T7718] IPVS: using max 26 ests per chain, 62400 per kthread [ 152.974039][ T7717] bond0: (slave bond_slave_0): Releasing backup interface [ 152.997187][ T7717] bond0: (slave bond_slave_1): Releasing backup interface [ 153.012146][ T7717] team0: Port device team_slave_0 removed [ 153.024659][ T7717] team0: Port device team_slave_1 removed [ 153.034017][ T7717] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.051501][ T7717] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.339005][ T7732] netlink: 'syz.3.453': attribute type 1 has an invalid length. [ 153.412263][ T7732] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.506805][ T7738] 8021q: adding VLAN 0 to HW filter on device bond3 [ 153.514033][ T7738] bond3: (slave vxcan3): The slave device specified does not support setting the MAC address [ 153.526869][ T7738] bond3: (slave vxcan3): Error -95 calling set_mac_address [ 153.729850][ T7754] syzkaller0: entered promiscuous mode [ 153.738944][ T7754] syzkaller0: entered allmulticast mode [ 153.748467][ T7754] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 154.109874][ T7772] bond0: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 154.429078][ T7795] tipc: Enabling of bearer rejected, failed to enable media [ 154.598410][ T7802] netlink: 32 bytes leftover after parsing attributes in process `syz.1.469'. [ 154.954355][ T7816] wg1 speed is unknown, defaulting to 1000 [ 155.510016][ T7841] netlink: 8 bytes leftover after parsing attributes in process `syz.2.477'. [ 155.551304][ T7843] netlink: 8 bytes leftover after parsing attributes in process `syz.3.478'. [ 155.579213][ T7843] netlink: 2 bytes leftover after parsing attributes in process `syz.3.478'. [ 155.659882][ T7846] netlink: 28 bytes leftover after parsing attributes in process `syz.3.478'. [ 155.906277][ T7821] netlink: 'syz.4.474': attribute type 13 has an invalid length. [ 156.144614][ T7817] wg1 speed is unknown, defaulting to 1000 [ 156.301248][ T7872] dvmrp0: entered allmulticast mode [ 156.334760][ T7871] netlink: 16 bytes leftover after parsing attributes in process `syz.2.483'. [ 156.345779][ T7871] netlink: 92 bytes leftover after parsing attributes in process `syz.2.483'. [ 156.382462][ T7876] raw_sendmsg: syz.3.482 forgot to set AF_INET. Fix it! [ 156.594964][ T7878] netlink: 8 bytes leftover after parsing attributes in process `syz.2.485'. [ 156.821471][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.488'. [ 156.835770][ T7887] netlink: 12 bytes leftover after parsing attributes in process `syz.3.488'. [ 157.345567][ T7904] netlink: 'syz.3.496': attribute type 22 has an invalid length. [ 157.629152][ T7912] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-tlb(5) [ 159.754347][ T7948] tipc: Started in network mode [ 159.772381][ T7948] tipc: Node identity 66ec79f56591, cluster identity 4711 [ 159.800976][ T7948] tipc: Enabled bearer , priority 0 [ 159.827190][ T7950] syzkaller0: entered promiscuous mode [ 159.840471][ T7960] netlink: 'syz.3.507': attribute type 1 has an invalid length. [ 159.853394][ T7950] syzkaller0: entered allmulticast mode [ 159.877398][ T7957] netlink: 'syz.3.507': attribute type 1 has an invalid length. [ 159.940841][ T7950] tipc: Resetting bearer [ 160.026281][ T7967] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 160.033717][ T7967] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 160.057449][ T7966] __nla_validate_parse: 4 callbacks suppressed [ 160.057468][ T7966] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.506'. [ 160.120636][ T7950] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.506'. [ 160.138157][ T7967] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.151923][ T7967] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.186131][ T7976] netlink: 'syz.0.510': attribute type 10 has an invalid length. [ 160.194092][ T7976] netlink: 40 bytes leftover after parsing attributes in process `syz.0.510'. [ 160.304040][ T7976] dummy0: entered promiscuous mode [ 160.309830][ T7976] dummy0: entered allmulticast mode [ 160.321220][ T7976] bridge0: port 3(dummy0) entered blocking state [ 160.328301][ T7976] bridge0: port 3(dummy0) entered disabled state [ 160.391292][ T7946] tipc: Resetting bearer [ 160.826496][ T9] tipc: Node number set to 58554869 [ 160.833982][ T7946] tipc: Disabling bearer [ 161.072579][ T8009] netlink: 'syz.2.516': attribute type 13 has an invalid length. [ 161.147522][ T8010] netlink: 24 bytes leftover after parsing attributes in process `syz.2.516'. [ 161.270475][ T8021] wg1 speed is unknown, defaulting to 1000 [ 161.291220][ T8023] netlink: 240 bytes leftover after parsing attributes in process `syz.2.521'. [ 161.320404][ T8023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.521'. [ 161.333086][ T8023] netlink: 32 bytes leftover after parsing attributes in process `syz.2.521'. [ 161.343431][ T8023] netlink: 28 bytes leftover after parsing attributes in process `syz.2.521'. [ 161.353171][ T8023] netlink: 32 bytes leftover after parsing attributes in process `syz.2.521'. [ 161.366775][ T8027] netlink: 'syz.4.518': attribute type 1 has an invalid length. [ 161.375593][ T8027] netlink: 120 bytes leftover after parsing attributes in process `syz.4.518'. [ 161.508694][ T8030] netlink: 'syz.2.524': attribute type 29 has an invalid length. [ 161.565579][ T8034] team0: Device gtp0 is of different type [ 163.789604][ T8123] wg1 speed is unknown, defaulting to 1000 [ 163.829527][ T8126] geneve2: entered promiscuous mode [ 163.834946][ T8126] geneve2: entered allmulticast mode [ 163.850450][ T12] netdevsim netdevsim3 netdevsim0: set [1, 1] type 2 family 0 port 45947 - 0 [ 163.860835][ T12] netdevsim netdevsim3 netdevsim0: set [1, 2] type 2 family 0 port 41361 - 0 [ 163.873254][ T12] netdevsim netdevsim3 netdevsim1: set [1, 1] type 2 family 0 port 45947 - 0 [ 163.888618][ T12] netdevsim netdevsim3 netdevsim1: set [1, 2] type 2 family 0 port 41361 - 0 [ 163.910857][ T12] netdevsim netdevsim3 netdevsim2: set [1, 1] type 2 family 0 port 45947 - 0 [ 163.930421][ T12] netdevsim netdevsim3 netdevsim2: set [1, 2] type 2 family 0 port 41361 - 0 [ 163.958040][ T12] netdevsim netdevsim3 netdevsim3: set [1, 1] type 2 family 0 port 45947 - 0 [ 163.982824][ T12] netdevsim netdevsim3 netdevsim3: set [1, 2] type 2 family 0 port 41361 - 0 [ 164.221841][ T8129] wg1 speed is unknown, defaulting to 1000 [ 165.160325][ T8160] tipc: Cannot configure node identity twice [ 165.439410][ T8135] netlink: 'syz.3.550': attribute type 6 has an invalid length. [ 166.348637][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.366165][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.660276][ T8199] __nla_validate_parse: 6 callbacks suppressed [ 166.660296][ T8199] netlink: 59 bytes leftover after parsing attributes in process `syz.4.569'. [ 166.668733][ T8201] syzkaller1: entered promiscuous mode [ 166.684211][ T8201] syzkaller1: entered allmulticast mode [ 166.723588][ T8199] netlink: 24 bytes leftover after parsing attributes in process `syz.4.569'. [ 166.735392][ T8198] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 166.744172][ T8198] bridge1: entered allmulticast mode [ 166.979178][ T8210] netlink: 'syz.0.572': attribute type 8 has an invalid length. [ 167.121978][ T8223] netlink: 8 bytes leftover after parsing attributes in process `syz.0.576'. [ 167.265565][ T8229] vxcan2: entered promiscuous mode [ 167.312165][ T8223] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 167.405322][ T8234] tipc: Enabled bearer , priority 0 [ 167.416781][ T8234] syzkaller0: entered promiscuous mode [ 167.422299][ T8234] syzkaller0: entered allmulticast mode [ 167.479796][ T8234] tipc: Resetting bearer [ 167.546734][ T8239] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 167.571089][ T8233] tipc: Resetting bearer [ 167.602867][ T8233] tipc: Disabling bearer [ 167.714832][ T8249] netlink: 24 bytes leftover after parsing attributes in process `syz.3.584'. [ 167.763166][ T8239] batadv_slave_0: entered promiscuous mode [ 167.774647][ T8249] netlink: 4 bytes leftover after parsing attributes in process `syz.3.584'. [ 167.796457][ T8239] netlink: 12 bytes leftover after parsing attributes in process `syz.4.581'. [ 167.850964][ T8239] netlink: 428 bytes leftover after parsing attributes in process `syz.4.581'. [ 167.903303][ T8239] netlink: 32 bytes leftover after parsing attributes in process `syz.4.581'. [ 168.172217][ T8277] vlan2: entered promiscuous mode [ 168.181992][ T8277] vlan2: entered allmulticast mode [ 168.200838][ T8277] hsr_slave_1: entered allmulticast mode [ 168.241190][ T8279] netlink: 32 bytes leftover after parsing attributes in process `syz.3.595'. [ 168.611105][ T8294] Bluetooth: MGMT ver 1.23 [ 169.145848][ T8312] atomic_op ffff888058726198 conn xmit_atomic 0000000000000000 [ 169.818292][ T8325] gretap1: entered promiscuous mode [ 170.316799][ T8344] netlink: 'syz.2.613': attribute type 7 has an invalid length. [ 170.333020][ T8340] netlink: 'syz.4.611': attribute type 10 has an invalid length. [ 170.341374][ T8344] netlink: 'syz.2.613': attribute type 3 has an invalid length. [ 170.397448][ T8340] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 170.852115][ T8364] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 171.047603][ T8361] wg1 speed is unknown, defaulting to 1000 [ 171.081666][ T8375] IPv6: Can't replace route, no match found [ 171.425161][ T8382] netlink: 'syz.0.624': attribute type 1 has an invalid length. [ 171.508006][ T8386] bond2: entered promiscuous mode [ 171.520829][ T8386] bond2: entered allmulticast mode [ 171.527189][ T8386] 8021q: adding VLAN 0 to HW filter on device bond2 [ 171.541012][ T8368] wg1 speed is unknown, defaulting to 1000 [ 171.616375][ T8382] bridge2: entered promiscuous mode [ 171.623242][ T8382] bridge2: entered allmulticast mode [ 171.629743][ T8382] bond2: (slave bridge2): Enslaving as a backup interface with an up link [ 171.719273][ T2126] bond2: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 171.744706][ T8388] __nla_validate_parse: 10 callbacks suppressed [ 171.744726][ T8388] netlink: 244 bytes leftover after parsing attributes in process `syz.3.626'. [ 171.787351][ T8367] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 171.880136][ T6179] netdevsim netdevsim0 ÿÿÿÿÿÿ: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.896114][ T6179] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.015567][ T6179] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.039532][ T6179] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 172.078777][ T8377] wg1 speed is unknown, defaulting to 1000 [ 172.422279][ T8398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.628'. [ 172.874716][ T8410] netlink: 20 bytes leftover after parsing attributes in process `syz.0.632'. [ 172.994349][ T8411] pimreg3: entered allmulticast mode [ 174.362435][ T8434] openvswitch: netlink: IP tunnel dst address not specified [ 174.718865][ T8442] netlink: 'syz.4.642': attribute type 10 has an invalid length. [ 174.748007][ T8442] netlink: 40 bytes leftover after parsing attributes in process `syz.4.642'. [ 174.811824][ T8442] team0: Port device geneve0 added [ 174.830088][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.883678][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.923141][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 174.953115][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.005071][ T8454] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.645'. [ 175.054224][ T8454] netlink: zone id is out of range [ 175.057056][ T8459] netlink: 212376 bytes leftover after parsing attributes in process `syz.3.645'. [ 175.091803][ T8459] netlink: 236 bytes leftover after parsing attributes in process `syz.3.645'. [ 175.098632][ T8457] sctp: [Deprecated]: syz.4.648 (pid 8457) Use of int in maxseg socket option. [ 175.098632][ T8457] Use struct sctp_assoc_value instead [ 175.101186][ T8459] netlink: 1 bytes leftover after parsing attributes in process `syz.3.645'. [ 175.119122][ T8454] netlink: zone id is out of range [ 175.146663][ T8460] netlink: 20 bytes leftover after parsing attributes in process `syz.1.647'. [ 175.201023][ T8454] netlink: zone id is out of range [ 175.210818][ T8454] netlink: zone id is out of range [ 175.217188][ T8454] netlink: get zone limit has 8 unknown bytes [ 175.231652][ T8462] netlink: 4 bytes leftover after parsing attributes in process `syz.2.649'. [ 175.745430][ T8471] netlink: 'syz.2.652': attribute type 1 has an invalid length. [ 175.793580][ T8471] 8021q: adding VLAN 0 to HW filter on device bond1 [ 176.020137][ T8475] bond1: (slave veth3): Enslaving as an active interface with a down link [ 176.054132][ T8471] vlan4: entered allmulticast mode [ 176.059564][ T8471] veth1: entered allmulticast mode [ 176.065942][ T8471] veth1: entered promiscuous mode [ 176.074414][ T8471] veth1: left promiscuous mode [ 176.082992][ T8471] bond1: (slave vlan4): making interface the new active one [ 176.092224][ T8471] veth1: entered promiscuous mode [ 176.102997][ T8471] vlan4: entered promiscuous mode [ 176.111901][ T8471] bond1: (slave vlan4): Enslaving as an active interface with an up link [ 176.152673][ T8470] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 176.171865][ T8477] wg1 speed is unknown, defaulting to 1000 [ 176.716342][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 177.923346][ T12] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 177.941076][ T12] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 177.961659][ T12] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 177.980635][ T8503] bridge0: port 3(dummy0) entered disabled state [ 177.996665][ T8503] batman_adv: batadv0: Adding interface: dummy0 [ 178.002972][ T8503] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 178.033590][ T8503] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 178.068394][ T8506] __nla_validate_parse: 2 callbacks suppressed [ 178.068416][ T8506] netlink: 8 bytes leftover after parsing attributes in process `syz.2.659'. [ 178.135108][ T12] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 178.219572][ T8512] netlink: 20 bytes leftover after parsing attributes in process `syz.1.662'. [ 178.482947][ T8526] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.503238][ T8525] netlink: 104 bytes leftover after parsing attributes in process `syz.2.666'. [ 178.513553][ T8525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.666'. [ 178.691384][ T8530] netlink: 'syz.1.667': attribute type 1 has an invalid length. [ 178.695958][ T8532] netlink: 'syz.2.668': attribute type 15 has an invalid length. [ 178.725585][ T8530] netlink: 4 bytes leftover after parsing attributes in process `syz.1.667'. [ 179.131009][ T8548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.132634][ T8555] netlink: 44 bytes leftover after parsing attributes in process `syz.4.674'. [ 179.189896][ T8548] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 179.224989][ T8547] syzkaller1: entered promiscuous mode [ 179.230732][ T8547] syzkaller1: entered allmulticast mode [ 179.348869][ T8548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.366045][ T8548] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 179.466485][ T8569] netlink: 8 bytes leftover after parsing attributes in process `syz.0.678'. [ 179.549160][ T8548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.581962][ T8548] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 179.585757][ T8577] netlink: 20 bytes leftover after parsing attributes in process `syz.4.681'. [ 179.678411][ T8548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.689243][ T8548] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 180.144807][ T6179] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 180.180504][ T6179] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 180.238903][ T6179] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 180.267848][ T6179] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 180.315875][ C0] ip6_tunnel: ip6gretap1 xmit: Local address not yet configured! [ 180.356758][ T12] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 180.377830][ T12] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 180.402030][ T12] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 180.423407][ T12] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 180.438603][ T8596] ------------[ cut here ]------------ [ 180.444441][ T8596] WARNING: CPU: 1 PID: 8596 at net/mac80211/rate.c:53 rate_control_rate_init+0x64a/0x6e0 [ 180.454490][ T8596] Modules linked in: [ 180.458597][ T8596] CPU: 1 UID: 0 PID: 8596 Comm: syz.3.686 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 180.470213][ T8596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.480753][ T8596] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 180.487142][ T8596] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 8a 8c 00 cc e8 62 8e d9 f6 90 0f 0b 90 eb e1 e8 57 8e d9 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 180.507087][ T8596] RSP: 0018:ffffc9001b0cef70 EFLAGS: 00010287 [ 180.513207][ T8596] RAX: ffffffff8ae62259 RBX: ffff888032da8000 RCX: 0000000000080000 [ 180.521337][ T8596] RDX: ffffc9000c0bc000 RSI: 000000000000032f RDI: 0000000000000330 [ 180.529539][ T8596] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8ae61d73 [ 180.537836][ T8596] R10: dffffc0000000000 R11: ffffed10065b5031 R12: 1ffff110065b500a [ 180.545898][ T8596] R13: ffff888028b70e40 R14: 0000000000000001 R15: ffffffff8ae61d73 [ 180.553945][ T8596] FS: 00007f8a15a116c0(0000) GS:ffff888125d80000(0000) knlGS:0000000000000000 [ 180.562965][ T8596] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 180.569688][ T8596] CR2: 000000110c356ca4 CR3: 000000002719c000 CR4: 00000000003526f0 [ 180.577735][ T8596] Call Trace: [ 180.581040][ T8596] [ 180.584004][ T8596] rate_control_rate_init_all_links+0x109/0x1a0 [ 180.590381][ T8596] sta_apply_auth_flags+0x1c2/0x400 [ 180.595815][ T8596] sta_apply_parameters+0xe4b/0x15b0 [ 180.601151][ T8596] ieee80211_add_station+0x424/0x6a0 [ 180.606590][ T8596] rdev_add_station+0x108/0x290 [ 180.611482][ T8596] nl80211_new_station+0x1755/0x1b70 [ 180.616940][ T8596] ? __pfx_nl80211_new_station+0x10/0x10 [ 180.622609][ T8596] ? netdev_run_todo+0xe1d/0xea0 [ 180.627762][ T8596] ? nl80211_pre_doit+0x4f1/0x930 [ 180.633019][ T8596] genl_family_rcv_msg_doit+0x215/0x300 [ 180.638995][ T8596] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 180.645214][ T8596] ? bpf_lsm_capable+0x9/0x20 [ 180.650076][ T8596] ? security_capable+0x7e/0x2e0 [ 180.655054][ T8596] genl_rcv_msg+0x60e/0x790 [ 180.659704][ T8596] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.664768][ T8596] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 180.670302][ T8596] ? __pfx_nl80211_new_station+0x10/0x10 [ 180.676112][ T8596] ? __pfx_nl80211_post_doit+0x10/0x10 [ 180.681605][ T8596] ? __asan_memcpy+0x40/0x70 [ 180.686377][ T8596] ? __pfx_ref_tracker_free+0x10/0x10 [ 180.691794][ T8596] netlink_rcv_skb+0x205/0x470 [ 180.696719][ T8596] ? __lock_acquire+0xab9/0xd20 [ 180.701603][ T8596] ? __pfx_genl_rcv_msg+0x10/0x10 [ 180.706888][ T8596] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 180.712241][ T8596] ? down_read+0x1ad/0x2e0 [ 180.716795][ T8596] genl_rcv+0x28/0x40 [ 180.720810][ T8596] netlink_unicast+0x82c/0x9e0 [ 180.725788][ T8596] ? __pfx_netlink_unicast+0x10/0x10 [ 180.731104][ T8596] ? netlink_sendmsg+0x642/0xb30 [ 180.736369][ T8596] ? skb_put+0x11b/0x210 [ 180.740647][ T8596] netlink_sendmsg+0x805/0xb30 [ 180.745443][ T8596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.750901][ T8596] ? aa_sock_msg_perm+0x94/0x160 [ 180.756038][ T8596] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 180.761367][ T8596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 180.766806][ T8596] __sock_sendmsg+0x219/0x270 [ 180.771521][ T8596] ____sys_sendmsg+0x505/0x830 [ 180.776429][ T8596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 180.781769][ T8596] ? import_iovec+0x74/0xa0 [ 180.786366][ T8596] ___sys_sendmsg+0x21f/0x2a0 [ 180.791073][ T8596] ? __pfx____sys_sendmsg+0x10/0x10 [ 180.796399][ T8596] ? __fget_files+0x2a/0x420 [ 180.801010][ T8596] ? __fget_files+0x3a0/0x420 [ 180.805793][ T8596] __x64_sys_sendmsg+0x19b/0x260 [ 180.810766][ T8596] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 180.816309][ T8596] ? rcu_is_watching+0x15/0xb0 [ 180.821132][ T8596] ? do_syscall_64+0xbe/0x3b0 [ 180.825909][ T8596] do_syscall_64+0xfa/0x3b0 [ 180.830461][ T8596] ? lockdep_hardirqs_on+0x9c/0x150 [ 180.835741][ T8596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.842025][ T8596] ? clear_bhb_loop+0x60/0xb0 [ 180.846807][ T8596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.852727][ T8596] RIP: 0033:0x7f8a14b8eb69 [ 180.857311][ T8596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.877069][ T8596] RSP: 002b:00007f8a15a11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 180.885521][ T8596] RAX: ffffffffffffffda RBX: 00007f8a14db5fa0 RCX: 00007f8a14b8eb69 [ 180.893569][ T8596] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 180.901631][ T8596] RBP: 00007f8a14c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 180.909685][ T8596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.917744][ T8596] R13: 0000000000000000 R14: 00007f8a14db5fa0 R15: 00007ffcbbefc748 [ 180.925808][ T8596] [ 180.928851][ T8596] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 180.936153][ T8596] CPU: 1 UID: 0 PID: 8596 Comm: syz.3.686 Not tainted 6.16.0-syzkaller-06574-gd9104cec3e8f #0 PREEMPT(full) [ 180.947717][ T8596] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/12/2025 [ 180.957795][ T8596] Call Trace: [ 180.961088][ T8596] [ 180.964021][ T8596] dump_stack_lvl+0x99/0x250 [ 180.968636][ T8596] ? __asan_memcpy+0x40/0x70 [ 180.973241][ T8596] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.978446][ T8596] ? __pfx__printk+0x10/0x10 [ 180.983056][ T8596] panic+0x2db/0x790 [ 180.986961][ T8596] ? __pfx_panic+0x10/0x10 [ 180.991411][ T8596] __warn+0x31b/0x4b0 [ 180.995393][ T8596] ? rate_control_rate_init+0x64a/0x6e0 [ 181.000955][ T8596] ? rate_control_rate_init+0x64a/0x6e0 [ 181.006514][ T8596] report_bug+0x2be/0x4f0 [ 181.010856][ T8596] ? rate_control_rate_init+0x64a/0x6e0 [ 181.016415][ T8596] ? rate_control_rate_init+0x64a/0x6e0 [ 181.021973][ T8596] ? rate_control_rate_init+0x64c/0x6e0 [ 181.027540][ T8596] handle_bug+0x84/0x160 [ 181.031808][ T8596] exc_invalid_op+0x1a/0x50 [ 181.036327][ T8596] asm_exc_invalid_op+0x1a/0x20 [ 181.041190][ T8596] RIP: 0010:rate_control_rate_init+0x64a/0x6e0 [ 181.047368][ T8596] Code: 82 01 00 00 20 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 d8 8a 8c 00 cc e8 62 8e d9 f6 90 0f 0b 90 eb e1 e8 57 8e d9 f6 90 <0f> 0b 90 48 83 c4 20 5b 41 5c 41 5d 41 5e 41 5f 5d e9 90 00 00 00 [ 181.066994][ T8596] RSP: 0018:ffffc9001b0cef70 EFLAGS: 00010287 [ 181.073078][ T8596] RAX: ffffffff8ae62259 RBX: ffff888032da8000 RCX: 0000000000080000 [ 181.081051][ T8596] RDX: ffffc9000c0bc000 RSI: 000000000000032f RDI: 0000000000000330 [ 181.089024][ T8596] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8ae61d73 [ 181.096999][ T8596] R10: dffffc0000000000 R11: ffffed10065b5031 R12: 1ffff110065b500a [ 181.104971][ T8596] R13: ffff888028b70e40 R14: 0000000000000001 R15: ffffffff8ae61d73 [ 181.112946][ T8596] ? rate_control_rate_init+0x163/0x6e0 [ 181.118519][ T8596] ? rate_control_rate_init+0x163/0x6e0 [ 181.124074][ T8596] ? rate_control_rate_init+0x649/0x6e0 [ 181.129658][ T8596] rate_control_rate_init_all_links+0x109/0x1a0 [ 181.135939][ T8596] sta_apply_auth_flags+0x1c2/0x400 [ 181.141161][ T8596] sta_apply_parameters+0xe4b/0x15b0 [ 181.146470][ T8596] ieee80211_add_station+0x424/0x6a0 [ 181.151784][ T8596] rdev_add_station+0x108/0x290 [ 181.156655][ T8596] nl80211_new_station+0x1755/0x1b70 [ 181.161969][ T8596] ? __pfx_nl80211_new_station+0x10/0x10 [ 181.167698][ T8596] ? netdev_run_todo+0xe1d/0xea0 [ 181.172670][ T8596] ? nl80211_pre_doit+0x4f1/0x930 [ 181.177707][ T8596] genl_family_rcv_msg_doit+0x215/0x300 [ 181.183269][ T8596] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 181.189354][ T8596] ? bpf_lsm_capable+0x9/0x20 [ 181.194040][ T8596] ? security_capable+0x7e/0x2e0 [ 181.198991][ T8596] genl_rcv_msg+0x60e/0x790 [ 181.203509][ T8596] ? __pfx_genl_rcv_msg+0x10/0x10 [ 181.208538][ T8596] ? __pfx_nl80211_pre_doit+0x10/0x10 [ 181.213916][ T8596] ? __pfx_nl80211_new_station+0x10/0x10 [ 181.219551][ T8596] ? __pfx_nl80211_post_doit+0x10/0x10 [ 181.225017][ T8596] ? __asan_memcpy+0x40/0x70 [ 181.229615][ T8596] ? __pfx_ref_tracker_free+0x10/0x10 [ 181.235000][ T8596] netlink_rcv_skb+0x205/0x470 [ 181.239782][ T8596] ? __lock_acquire+0xab9/0xd20 [ 181.244651][ T8596] ? __pfx_genl_rcv_msg+0x10/0x10 [ 181.249682][ T8596] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 181.255023][ T8596] ? down_read+0x1ad/0x2e0 [ 181.259566][ T8596] genl_rcv+0x28/0x40 [ 181.263605][ T8596] netlink_unicast+0x82c/0x9e0 [ 181.268401][ T8596] ? __pfx_netlink_unicast+0x10/0x10 [ 181.273704][ T8596] ? netlink_sendmsg+0x642/0xb30 [ 181.278656][ T8596] ? skb_put+0x11b/0x210 [ 181.282915][ T8596] netlink_sendmsg+0x805/0xb30 [ 181.287699][ T8596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.293004][ T8596] ? aa_sock_msg_perm+0x94/0x160 [ 181.297961][ T8596] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 181.303258][ T8596] ? __pfx_netlink_sendmsg+0x10/0x10 [ 181.308555][ T8596] __sock_sendmsg+0x219/0x270 [ 181.313244][ T8596] ____sys_sendmsg+0x505/0x830 [ 181.318018][ T8596] ? __pfx_____sys_sendmsg+0x10/0x10 [ 181.323315][ T8596] ? import_iovec+0x74/0xa0 [ 181.327830][ T8596] ___sys_sendmsg+0x21f/0x2a0 [ 181.332513][ T8596] ? __pfx____sys_sendmsg+0x10/0x10 [ 181.337747][ T8596] ? __fget_files+0x2a/0x420 [ 181.342346][ T8596] ? __fget_files+0x3a0/0x420 [ 181.347035][ T8596] __x64_sys_sendmsg+0x19b/0x260 [ 181.351980][ T8596] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 181.357452][ T8596] ? rcu_is_watching+0x15/0xb0 [ 181.362234][ T8596] ? do_syscall_64+0xbe/0x3b0 [ 181.366926][ T8596] do_syscall_64+0xfa/0x3b0 [ 181.371440][ T8596] ? lockdep_hardirqs_on+0x9c/0x150 [ 181.376649][ T8596] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.382721][ T8596] ? clear_bhb_loop+0x60/0xb0 [ 181.387405][ T8596] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.393300][ T8596] RIP: 0033:0x7f8a14b8eb69 [ 181.397719][ T8596] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.417328][ T8596] RSP: 002b:00007f8a15a11038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 181.425752][ T8596] RAX: ffffffffffffffda RBX: 00007f8a14db5fa0 RCX: 00007f8a14b8eb69 [ 181.433724][ T8596] RDX: 0000000000000000 RSI: 0000200000001080 RDI: 0000000000000005 [ 181.441698][ T8596] RBP: 00007f8a14c11df1 R08: 0000000000000000 R09: 0000000000000000 [ 181.449677][ T8596] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.457651][ T8596] R13: 0000000000000000 R14: 00007f8a14db5fa0 R15: 00007ffcbbefc748 [ 181.465658][ T8596] [ 181.468839][ T8596] Kernel Offset: disabled [ 181.473158][ T8596] Rebooting in 86400 seconds..