last executing test programs: 1m12.330764069s ago: executing program 3 (id=1141): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neonbs-sync\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) recvfrom(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r7, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000240)=[{r9, 0x53a}], 0x1, 0x4c58e922) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r11, r10, 0x80000001, 0x0) vmsplice(r12, &(0x7f0000000380), 0x0, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) socket$netlink(0x10, 0x3, 0x8) 1m11.204511702s ago: executing program 0 (id=1441): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800001000f0ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000081000000bca900000000000035090100000000009500000000000000bf98000000000000a6080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) close(r4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = accept(r2, 0x0, &(0x7f0000000140)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x17, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x0, 0x9, 0x7, 0x1, 0x50, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @exit, @ldst={0x2, 0x2, 0x0, 0x3, 0x3, 0x80, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0xa, 0x0, 0x0, 0x1e00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[r0], &(0x7f0000000600)=[{0x3, 0x1, 0x4, 0x8}, {0x2, 0x2, 0x0, 0xc}, {0x2, 0x2, 0xb, 0x6}, {0x0, 0x3, 0x3, 0xb}, {0x1, 0x3, 0x9, 0x7}, {0x4, 0x5, 0x4, 0x9}], 0x10, 0xf31, @void, @value}, 0x94) (async, rerun: 32) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x70, r5, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3e, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x40, 0x81}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x2, 0x5, 0xf, 0xf}}}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x70}}, 0x0) (rerun: 32) 57.726658476s ago: executing program 0 (id=1441): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800001000f0ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000081000000bca900000000000035090100000000009500000000000000bf98000000000000a6080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) close(r4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = accept(r2, 0x0, &(0x7f0000000140)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x17, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x0, 0x9, 0x7, 0x1, 0x50, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @exit, @ldst={0x2, 0x2, 0x0, 0x3, 0x3, 0x80, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0xa, 0x0, 0x0, 0x1e00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[r0], &(0x7f0000000600)=[{0x3, 0x1, 0x4, 0x8}, {0x2, 0x2, 0x0, 0xc}, {0x2, 0x2, 0xb, 0x6}, {0x0, 0x3, 0x3, 0xb}, {0x1, 0x3, 0x9, 0x7}, {0x4, 0x5, 0x4, 0x9}], 0x10, 0xf31, @void, @value}, 0x94) (async, rerun: 32) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x70, r5, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3e, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x40, 0x81}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x2, 0x5, 0xf, 0xf}}}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x70}}, 0x0) (rerun: 32) 57.124425279s ago: executing program 3 (id=1141): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neonbs-sync\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) recvfrom(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r7, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000240)=[{r9, 0x53a}], 0x1, 0x4c58e922) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r11, r10, 0x80000001, 0x0) vmsplice(r12, &(0x7f0000000380), 0x0, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) socket$netlink(0x10, 0x3, 0x8) 43.376890194s ago: executing program 0 (id=1441): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800001000f0ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000081000000bca900000000000035090100000000009500000000000000bf98000000000000a6080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) close(r4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = accept(r2, 0x0, &(0x7f0000000140)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x17, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x0, 0x9, 0x7, 0x1, 0x50, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @exit, @ldst={0x2, 0x2, 0x0, 0x3, 0x3, 0x80, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0xa, 0x0, 0x0, 0x1e00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[r0], &(0x7f0000000600)=[{0x3, 0x1, 0x4, 0x8}, {0x2, 0x2, 0x0, 0xc}, {0x2, 0x2, 0xb, 0x6}, {0x0, 0x3, 0x3, 0xb}, {0x1, 0x3, 0x9, 0x7}, {0x4, 0x5, 0x4, 0x9}], 0x10, 0xf31, @void, @value}, 0x94) (async, rerun: 32) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x70, r5, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3e, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x40, 0x81}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x2, 0x5, 0xf, 0xf}}}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x70}}, 0x0) (rerun: 32) 42.530752903s ago: executing program 3 (id=1141): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neonbs-sync\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) recvfrom(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r7, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000240)=[{r9, 0x53a}], 0x1, 0x4c58e922) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r11, r10, 0x80000001, 0x0) vmsplice(r12, &(0x7f0000000380), 0x0, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) socket$netlink(0x10, 0x3, 0x8) 28.478462313s ago: executing program 0 (id=1441): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800001000f0ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000081000000bca900000000000035090100000000009500000000000000bf98000000000000a6080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) close(r4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = accept(r2, 0x0, &(0x7f0000000140)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x17, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x0, 0x9, 0x7, 0x1, 0x50, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @exit, @ldst={0x2, 0x2, 0x0, 0x3, 0x3, 0x80, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0xa, 0x0, 0x0, 0x1e00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[r0], &(0x7f0000000600)=[{0x3, 0x1, 0x4, 0x8}, {0x2, 0x2, 0x0, 0xc}, {0x2, 0x2, 0xb, 0x6}, {0x0, 0x3, 0x3, 0xb}, {0x1, 0x3, 0x9, 0x7}, {0x4, 0x5, 0x4, 0x9}], 0x10, 0xf31, @void, @value}, 0x94) (async, rerun: 32) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x70, r5, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3e, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x40, 0x81}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x2, 0x5, 0xf, 0xf}}}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x70}}, 0x0) (rerun: 32) 27.225190773s ago: executing program 3 (id=1141): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neonbs-sync\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) recvfrom(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r7, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000240)=[{r9, 0x53a}], 0x1, 0x4c58e922) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r11, r10, 0x80000001, 0x0) vmsplice(r12, &(0x7f0000000380), 0x0, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) socket$netlink(0x10, 0x3, 0x8) 13.814204538s ago: executing program 0 (id=1441): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800001000f0ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000081000000bca900000000000035090100000000009500000000000000bf98000000000000a6080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) close(r4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = accept(r2, 0x0, &(0x7f0000000140)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x17, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x0, 0x9, 0x7, 0x1, 0x50, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @exit, @ldst={0x2, 0x2, 0x0, 0x3, 0x3, 0x80, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0xa, 0x0, 0x0, 0x1e00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[r0], &(0x7f0000000600)=[{0x3, 0x1, 0x4, 0x8}, {0x2, 0x2, 0x0, 0xc}, {0x2, 0x2, 0xb, 0x6}, {0x0, 0x3, 0x3, 0xb}, {0x1, 0x3, 0x9, 0x7}, {0x4, 0x5, 0x4, 0x9}], 0x10, 0xf31, @void, @value}, 0x94) (async, rerun: 32) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x70, r5, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3e, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x40, 0x81}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x2, 0x5, 0xf, 0xf}}}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x70}}, 0x0) (rerun: 32) 12.842630633s ago: executing program 3 (id=1141): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neonbs-sync\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) recvfrom(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r7, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000240)=[{r9, 0x53a}], 0x1, 0x4c58e922) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r11, r10, 0x80000001, 0x0) vmsplice(r12, &(0x7f0000000380), 0x0, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) socket$netlink(0x10, 0x3, 0x8) 3.244844206s ago: executing program 4 (id=2046): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x5}, @call={0x85, 0x0, 0x0, 0xba}, @generic={0xa7}, @initr0, @exit]}, &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0xb10, 0x170, 0xc8, 0x8, 0x170, 0x5803, 0xa40, 0x2e8, 0x2e8, 0xa40, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private2, [], [0x0, 0x0, 0xffffffff], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x128, 0x170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@devgroup={{0x38}, {0x5, 0x0, 0xc7}}, @common=@dst={{0x48}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0x8b0, 0x8d0, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{[{0xd8}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x4}]}, {[], [{}, {0x6b1cab00}]}, {[], [{0x0, 0x800}]}, {}, {[{0x0, 0x2}, {}, {}, {}, {}, {0x0, 0x1}, {}, {}, {}, {0x7caf1687, 0x3}]}, {[{}, {}, {}, {}, {}, {}, {}, {}, {0x943d}, {}, {0xfffffffc}]}, {[], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x4}]}, {[{}, {}, {}, {}, {}, {0x8}], [{}, {}, {}, {}, {}, {}, {0x20000000}]}, {}, {[{}, {}, {}, {}, {}, {0x0, 0x1}]}]}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0xb70) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000090a010200000000000000000000000008000a40000000000900020073797a32000000000900014a0f82150073797a300000000008000540000000211c0009800b0001007470726f787900000c000280080023400000000c140000001000010000000000000000000084000a"], 0x80}}, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(0xffffffffffffffff, &(0x7f0000000c40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x1c, 0x2, 0x1, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xfff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8020}, 0x24000010) 3.083783284s ago: executing program 4 (id=2048): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001f80)=ANY=[@ANYBLOB="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"/2830], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffffffffffffff4f, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000003c0)="764b9e147583ddd0569ba56a5cfd", 0x0, 0x9, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="d100000002060300000000000e0000000000000005000100070000000900020073797a32000000000c000780050015abc000080000000500050002000000050004000000000014000300686173683a69702c706f72742c697000"], 0x58}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) listen(r1, 0x8) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1bb}, 0x48801) bpf$PROG_LOAD(0x5, 0x0, 0xc5371efaa14bb733) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r6, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x3c, r5, 0x1, 0x0, 0x0, {0x3d}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) sendmmsg$inet(r1, &(0x7f0000003640)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001c00)=ANY=[@ANYBLOB="140000000000000000000000010000400500000000000000140000000000000000000000010000e21f00000008000000", @ANYRES16=r0, @ANYBLOB="00000000ffffffff0000000010000000000000000000000007000000140000000000000000000000010000000180000000000000110000000000000000000000010000001f00000000000000"], 0x90}}, {{&(0x7f0000001d00)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000002f00)=[{&(0x7f0000001d40)}, {0x0}], 0x2}}, {{0x0, 0x0, &(0x7f0000003040)=[{&(0x7f0000002f80)="2aa8e0c09aa2a6", 0x7}], 0x1, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], 0xc0}}, {{0x0, 0x0, &(0x7f00000031c0), 0x0, &(0x7f0000003780)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xc00}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}, @ip_ttl={{0x14, 0x0, 0x2, 0x630c}}], 0x48}}, {{0x0, 0x0, 0x0}}], 0x5, 0x40905) sendmsg$IPSET_CMD_FLUSH(r4, &(0x7f0000000380)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000300)={&(0x7f0000000480)=ANY=[@ANYBLOB="d42644eceb154f2717190002000004cda806010420001000010008050900220000007a3100000000000000005a17da95c22aee62712af8723c3aada70b987f67113212669edb28cc91817fb6cadda305ec0beee79f893e3c42f4deefc98bb346429499fcd0b2dc8bea1d29ded8259c86bf844ba70f33df6a6bdf4aab3e746cc7afbe33347f7535c882fff23cc51ce5b1102b0f731f4b181ebe209cd71150b8e2ee935ea5e2ec31a47ecd3d793a0150"], 0x20}, 0x1, 0x0, 0x0, 0xc000}, 0x20000005) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 2.918293129s ago: executing program 1 (id=2049): bpf$TOKEN_CREATE(0x24, &(0x7f0000000000), 0x8) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x3, 0x0, 0xffffffffffffffff, 0xfbc5, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000400)={r1, 0x3, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000300)=@filter={'filter\x00', 0x42, 0x4, 0x2b8, 0xffffffff, 0xd8, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast2, @dev={0xac, 0x14, 0x14, 0x40}, 0x0, 0x0, 'netpci0\x00', 'nr0\x00'}, 0x74000002, 0x70, 0xb8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@ip={@empty, @loopback, 0xff000000, 0xffffffff, 'veth1\x00', 'wlan1\x00', {}, {0xff}, 0x4, 0x3, 0x8}, 0x287, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @remote, 0x8, 0xb, [0x32, 0x20, 0x36, 0x16, 0x19, 0x14, 0x26, 0x26, 0xc, 0x30, 0xd, 0x36, 0x13, 0x11, 0x30, 0x31], 0x2, 0xfffffffe, 0x5c4}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x318) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0xa, 0xfff3}, {0x0, 0xfff1}, {0x0, 0x7}}, [{0x8, 0xb, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000094}, 0x4044040) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000140)='cpuacct.usage_all\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xf, 0x1e, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0x3a}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r7}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4ba}, @ldst={0x0, 0x3, 0x1, 0x3, 0x7, 0xc, 0x1}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x3}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x46, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.741169202s ago: executing program 4 (id=2051): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x2c, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_SRC={0x8, 0x2, @local}, @FRA_GENERIC_POLICY=@FRA_FWMASK={0x8, 0x10, 0x3ff}]}, 0x2c}}, 0x40) sendmsg$nl_xfrm(r0, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=@newsa={0x138, 0x10, 0x713, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in6=@mcast2, 0x0, 0x3c}, @in=@local, {0x200000, 0x0, 0xffffffffffff7fff}, {}, {}, 0x0, 0x0, 0x2}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}]}, 0x138}}, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r2) r4 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$WPAN_WANTACK(r4, 0x0, 0x300, 0x0, &(0x7f0000000080)) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)={0x38, r3, 0x1, 0x70bd27, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5, 0x36, 0x1}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_LLSEC_SECLEVELS={0x5, 0x35, 0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x40844) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="8b", 0x1}], 0x1}, 0x20048811) recvmsg(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000540)=""/225, 0xe1}], 0x1}, 0x40020123) r7 = socket(0x840000000002, 0x3, 0xff) r8 = socket$inet_smc(0x2b, 0x1, 0x0) accept4$packet(r7, 0x0, &(0x7f0000000000), 0x80000) setsockopt$bt_rfcomm_RFCOMM_LM(r7, 0x12, 0x3, &(0x7f0000000180)=0x8, 0x4) setsockopt$sock_linger(r8, 0x1, 0xd, &(0x7f0000000100)={0x0, 0xb}, 0x8) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) splice(r9, &(0x7f0000000080)=0x4, r7, &(0x7f00000000c0)=0x7fff, 0x4, 0x9ed022bee0ffa90a) sendmmsg$inet(r7, &(0x7f0000000840)=[{{&(0x7f0000000040)={0x2, 0x4e24, @local}, 0x10, 0x0, 0x0, &(0x7f0000000800)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x4000000) 2.519443231s ago: executing program 1 (id=2053): r0 = socket(0x2a, 0x80807, 0x3) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x2, 0x70bd2d, 0x25dfdbfd, {}, [@BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x180000}, @BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5}, @BATADV_ATTR_TPMETER_TEST_TIME={0x8, 0xb, 0x6}]}, 0x2c}, 0x1, 0x0, 0x0, 0x840}, 0x80) r2 = accept$packet(r0, 0x0, &(0x7f0000000140)) setsockopt$packet_int(r2, 0x107, 0x0, &(0x7f0000000180), 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS_CPU(r0, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, 0x4, 0x1, 0x301, 0x0, 0x0, {0x1, 0x0, 0x8}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4084}, 0x48801) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x4e21, @multicast1}, 0x1, 0x2, 0x3, 0x3}}, 0x80, &(0x7f0000000440)=[{&(0x7f0000000340)="1ff69032cfd6ec25a6d5b7770d5c320b913bce96a44fb16dd24fffc08936749eb3645ce5420273daeb38d6c390b037d4bfc00fa491c205b6315a83a38f1555a30fe42e91781b566f0cf18933c4e076a3d252d7e9b1ef6000035e50729045e8a7f6d3b7d0944756246cd5494493696908b34e12ec73f71b2fe1dfd355", 0x7c}, {&(0x7f00000003c0)="c360388faeb4ff6106e9a66398e0b2a15f7971de496db0024195a2895f171c85706134172b597dc4cf7d77d39bc7317a1c75a7cf1cacdf0189c1a3527a10652f9855423877942677067475069e2049", 0x4f}], 0x2, &(0x7f0000000480)}, 0x240088d0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$can_bcm(r0, &(0x7f0000000500), 0x10) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$SO_RDS_TRANSPORT(r4, 0x114, 0x8, &(0x7f0000000540)=0x2, 0x4) setsockopt$inet6_group_source_req(r3, 0x29, 0x2c, &(0x7f0000000580)={0x4, {{0xa, 0x4e20, 0x9, @mcast2, 0x5d3e1993}}, {{0xa, 0x4e20, 0x4, @ipv4={'\x00', '\xff\xff', @local}, 0x7fffffff}}}, 0x108) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000006c0)={0x0, 0xbb, "c7765939ea533a7f706bd563846cc6b6568ffe7038fb333747d5bcaa410f6011e937e60400efdbc11057893b6a63aa7a2a7d2b939128dffdb0447c2165142806d0c85fbd101c2f973feefdb665b94c7558e622e586576b497ec5237da9b755d46a5a26e433a5ae52e2991e10725ec0e6974bfc4abb59407f5f93417debe327e2e31e468ebcd729625f38e14603fb0fe59d64b6efbc0bb2c1bb749e69b07f40ca219bb12e101e0cfca7bcf22c78b272d6cf914a79131542d07e8698"}, &(0x7f00000007c0)=0xc3) getsockopt$inet_sctp_SCTP_MAXSEG(r0, 0x84, 0xd, &(0x7f0000000800)=@assoc_value={r5, 0xe46}, &(0x7f0000000840)=0x8) r6 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000880)=0x8, 0x4) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x50, 0x0, 0x200, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x92, 0x69}}}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x5}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x10, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_COOK_FRAMES={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}, @NL80211_MNTR_FLAG_FCSFAIL={0x4}]}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @broadcast}]]}, 0x50}, 0x1, 0x0, 0x0, 0x4044000}, 0x40408c0) r7 = socket$caif_stream(0x25, 0x1, 0x1) ioctl$sock_SIOCSIFBR(r7, 0x8941, &(0x7f0000000a40)=@get={0x1, &(0x7f0000000a00)=""/9, 0x1fb}) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000a80)='blkio.throttle.io_service_bytes_recursive\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), r0) sendmsg$NL80211_CMD_TDLS_MGMT(r8, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x40, r9, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8}, @val={0xc, 0x99, {0x4, 0x5b}}}}, [@NL80211_ATTR_TDLS_INITIATOR={0x4}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x326}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r6, 0x8982, &(0x7f0000000c00)={0x7, 'veth1_to_bridge\x00', {0xa}, 0x101}) syz_genetlink_get_family_id$batadv(&(0x7f0000000c40), r0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), r6) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000dc0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d00)={0x68, r10, 0x304, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x6, 0x10}}}}, [@NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xd7c62e951d578b24}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}, @NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0xc004091}, 0x1) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r6, 0x81f8943c, &(0x7f0000000e00)) getpeername(r2, &(0x7f0000001000)=@in6={0xa, 0x0, 0x0, @empty}, &(0x7f0000001080)=0x80) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r8, &(0x7f00000011c0)={&(0x7f00000010c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001180)={&(0x7f0000001100)={0x70, 0x0, 0x20, 0x70bd29, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}}, {@pci={{0x8}, {0x11}}, {0xd}}]}, 0x70}, 0x1, 0x0, 0x0, 0x40810}, 0x40080) connect$inet(r0, &(0x7f0000001200)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) 2.518172742s ago: executing program 4 (id=2054): r0 = socket$pppl2tp(0x18, 0x1, 0x1) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r2, &(0x7f0000000000)="240000001a005f0214f9f4070009040080fffffffe280000000000000800040001000000", 0x24) (async, rerun: 64) connect$pppl2tp(r0, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r1, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, 0x32) (async, rerun: 64) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000080)) r3 = socket(0x11, 0x800000003, 0x0) (async, rerun: 64) r4 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) sendto$packet(r4, &(0x7f00000006c0)="0300f198aaae5a98ca0000850820", 0xe, 0x20044080, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0xfe, 0x6, @random='A\x00@\x00'}, 0x14) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000001140), r5) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_KEY(r3, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001200)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="000826bd7000fcdbdf250a0000000c009900070000001b00000008008194dfc1000010f6d036f68449660e11a64229ea006e800400010004000100040001000800090005ac0f000800090001ac0f00090007003c108c87fe000000"], 0x54}, 0x1, 0x0, 0x0, 0xc084}, 0x20008001) (async) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="050000000000feffffff2e00000008000300", @ANYRES32=r7, @ANYBLOB="050034008b00000008004a000cfd0f"], 0x38}, 0x1, 0x0, 0x0, 0x4040000}, 0x10) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) (async, rerun: 64) r8 = socket$inet6_udp(0xa, 0x2, 0x0) (rerun: 64) setsockopt$inet6_IPV6_XFRM_POLICY(r8, 0x29, 0x23, &(0x7f0000000540)={{{@in=@remote, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8000000000000000}, {}, 0x0, 0x0, 0x0, 0x0, 0x2}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@mcast2, 0x0, 0x0, 0x0, 0x80, 0x0, 0x40000}}, 0xe8) (async) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)) (async) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f00000011c0)={'sit0\x00', 0x0}) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r9, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x3000007, 0x12, r9, 0x0) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$bt_hci(r10, 0x84, 0x82, &(0x7f0000000080)=""/4076, &(0x7f00000010c0)=0xfec) (async) ioctl$FITRIM(r9, 0xc0185879, &(0x7f0000001180)={0x80, 0xb54, 0x5b}) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) socket$nl_route(0x10, 0x3, 0x0) 2.34266922s ago: executing program 1 (id=2055): unshare(0x40000000) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}, 0xfffffffe}, 0x1c) listen(r1, 0x0) accept4(r0, &(0x7f0000000480)=@ethernet={0x0, @multicast}, 0x0, 0x800) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x18) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r4, 0x0, 0x60, 0x0, 0x0) setsockopt$inet6_int(r3, 0x29, 0x4e, 0x0, 0x0) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={0x0}, 0x1, 0x0, 0x0, 0x4004081}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r5, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r5, 0x0) setsockopt$sock_int(r5, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r6, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r6, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r6, 0x0) shutdown(r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 2.0649534s ago: executing program 4 (id=2057): r0 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r0, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa"], 0x1c) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, 0x0) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e24, @loopback}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r2, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000002c0)={0x44, r3, 0x1, 0x70bd2d, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x7}]}, 0x44}}, 0x0) sendmmsg$inet(r1, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000c00)="c8", 0x1}], 0x1}}], 0x1, 0x8090) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r5, 0x84, 0x6b, &(0x7f0000000140)=[@in={0x2, 0x4e23, @rand_addr=0x64010101}], 0x10) setsockopt(r5, 0x84, 0x7f, &(0x7f0000000040)="020000000980ffff", 0x8) recvmsg(r5, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r1, &(0x7f0000003780)=[{{0x0, 0x0, &(0x7f0000000fc0)=[{&(0x7f0000000f40)=""/91, 0x5b}], 0x1}, 0x80000000}], 0x1, 0x40000142, 0x0) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0xffffff}}}}}, 0x0) 1.830520862s ago: executing program 2 (id=2058): r0 = openat$cgroup_devices(0xffffffffffffffff, &(0x7f0000000100)='devices.deny\x00', 0x2, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={0x38, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0xf4, 0x2e}}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x177f}], @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}]]}, 0x38}, 0x1, 0x0, 0x0, 0xd37697ff280d3c0e}, 0x0) write$cgroup_devices(r0, &(0x7f0000000140)={'b', ' *:* ', 'rwm\x00'}, 0xa) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x60, 0x60, 0x7, [@array={0x0, 0x0, 0x0, 0x3, 0x0, {0x3, 0x3}}, @enum64={0x2, 0x5, 0x0, 0x13, 0x1, 0x5, [{0xe, 0x3, 0xa0}, {0x10, 0x2, 0x6}, {0xb, 0x9, 0x1}, {0x5, 0xffffff7a}, {0x4, 0x0, 0x7}]}]}, {0x0, [0x30, 0x0, 0x0, 0x2e, 0x5f]}}, &(0x7f00000002c0)=""/218, 0x7f, 0xda, 0x0, 0x1ff, 0x0, @void, @value}, 0x28) sendmsg$DEVLINK_CMD_PORT_SET(r5, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000080)={&(0x7f0000000180)={0x9c, r6, 0x1, 0x70bd29, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xfffffffffffffef9, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}]}, 0x9c}}, 0x8014) 1.761523242s ago: executing program 2 (id=2059): sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xcd, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bff88a800008100630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac014", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e6572000000400002800800024000000084080003"], 0xa8}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x5, 0x0, @loopback, @multicast1, {[@rr={0x7, 0x0, 0x3d, [@multicast2, @multicast2, @broadcast, @remote, @rand_addr=0x64010100, @multicast1]}, @ssrr={0x89, 0x3, 0xcd, [@remote]}, @lsrr={0x83, 0x7, 0x0, [@empty]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x400002c6, 0x80}}}}}}, 0x0) r2 = socket(0x10, 0x80002, 0xff) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'}) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xcd, 0x0, &(0x7f0000000100)="b9ff03006044238cb89e14f088a81bff88a800008100630677fbac141442e934a0a662079f4b4dfe87e5feca6aab845013f288a81a3908020b098da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac014", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e6572000000400002800800024000000084080003"], 0xa8}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, {0xfff3}, {0xffff, 0xffff}, {0x4, 0xf}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0xc, 0x2, [@TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xa000}]}}]}, 0x40}, 0x1, 0x0, 0x0, 0x404c810}, 0x0) (async) socket$inet_udplite(0x2, 0x2, 0x88) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) syz_emit_ethernet(0x46, &(0x7f0000000200)={@local, @remote, @void, {@ipv4={0x800, @tcp={{0x9, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x5, 0x0, @loopback, @multicast1, {[@rr={0x7, 0x0, 0x3d, [@multicast2, @multicast2, @broadcast, @remote, @rand_addr=0x64010100, @multicast1]}, @ssrr={0x89, 0x3, 0xcd, [@remote]}, @lsrr={0x83, 0x7, 0x0, [@empty]}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x400002c6, 0x80}}}}}}, 0x0) (async) socket(0x10, 0x80002, 0xff) (async) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'team0\x00'}) (async) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}, @empty, @void, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "9a83c9", 0x44, 0x2f, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1, 0x6558}}}}}}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="700200001300290a000000000000000007000000", @ANYRES32=r1, @ANYBLOB="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"], 0x270}, 0x1, 0x0, 0x0, 0x8015}, 0x4) (async) 1.655631212s ago: executing program 2 (id=2060): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c00000000080104000000000000000007000007140004800800024000000009080001000000fa2e050003002f00000006000240080500000600024008050000090001"], 0x4c}, 0x1, 0x0, 0x0, 0x40}, 0x4040) (async) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="14000000020801"], 0x14}, 0x1, 0x0, 0x0, 0x404c080}, 0x80080) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000600)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2b}, @initdev={0xac, 0x1e, 0x0, 0x0}}}}], 0x20}, 0x4000000) 1.434372662s ago: executing program 2 (id=2061): bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)=ANY=[@ANYBLOB="1c13e37ea7fbe858e0dc2c576d56a4f42cf09f595349f0186fa12a9128cb3a2de735f72246d1a6d2ff55840f208397b81a238489e06849518a9ec1872b1d30f61d05a81bf3d433ffff9f1353840ef6aebb2e9feecc245848a515e7006cf38b272ac4dc8064ceb0df4d9ca01091062aa70808ffa262a1dcde67a6d1abc092311f3d3bad55b05288b58d5cee6a3b5ae53f18cb127d88888ddc38b838f2030d", @ANYRESHEX, @ANYRES32, @ANYRESOCT, @ANYBLOB="addaced30a01a7fe46005a6cdee853229216446b411c8d9e63e3d3cdab"], 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}, {0xffff, 0xffff}, {0xfff3}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x80, 0x4b6, 0x401, 0x0, 0x12, 0xfffffff8}}, {0x4}}]}]}, 0x48}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_FIB_DREG={0x8}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x11}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0900000003000000040001000500000000", @ANYRES32, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000000000000000c4"], 0x50) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x7, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r5}, &(0x7f0000000040), &(0x7f0000000140)=r4}, 0x20) shutdown(r3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x6, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffff", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000540)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$alg(0x26, 0x5, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a30000000000800024000000003"], 0x7c}}, 0x10) bind$alg(r7, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendto(r0, &(0x7f0000000700)="cdd51ae5f9039e661615c8d5837ba919d310dcfa92078d6323ba1b8f979733de080c1594cfeac2496d8ebdd18b0af630124d0110fa829b75248fe355d94a1ae100ab5bcb240071b5c1564b16c774fdab3e8ab2f8b6bc1901a08c9c5021ad0acd2ac383d90f5ed7e83f40a137c8fc0c259b451fcd06e9a39d59415b30d7decee2b021b1bc1fd60634d4b850c6a19a61c3e314d0303d43a51a577e455a28567202dc33ed45b8931f9cb281ad39b74c42bf39e286d169b92befef30afcd1409880017e25ecfb38d4945b6fee68b7af55557a329cb0c64648e4c1efb3a35eaebfc6ca8ca64e5", 0xe4, 0x0, 0xfffffffffffffffd, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000044000100000006000000a127696d6ae401adf24cc6622300004a190000"], 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x0) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r9 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r9, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r10, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r11, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r12, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="5c0000000206010100000000000000000000000005000100070000000900020073797a30000000000c000780080012000000000015000300686173683a69702c706f72742c6e6574000000000500050002000000050004"], 0x5c}}, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000040)=ANY=[@ANYBLOB="0044a6129acc0aa161b543e9870d00bb15ea80415269a5b9885b22561fb782ab4f9bcb153130406cadccb97d3e488267d6612ffc972ce8d86e72d1463b72bce3dbcdad6930002720e0fcf1b548971c44495de01415e378bf47fc9ab6826967d8036e0b815bf84b98965adf"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000880)={0x4}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r13, 0x0, 0xe, 0x0, &(0x7f0000000140)="3d6ee2e04b91ab10143d9abe86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.433900658s ago: executing program 0 (id=1441): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000d80)=ANY=[@ANYBLOB="180800001000f0ff000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000081000000bca900000000000035090100000000009500000000000000bf98000000000000a6080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async, rerun: 64) r2 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_pressure(r3, &(0x7f0000000040)='memory.pressure\x00', 0x2, 0x0) (async) openat$cgroup_pressure(r3, &(0x7f0000000180)='memory.pressure\x00', 0x2, 0x0) close(r4) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = accept(r2, 0x0, &(0x7f0000000140)) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) sendmsg$NL80211_CMD_VENDOR(r6, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r7, 0x2, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void, @void}}, [@NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x101}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000011}, 0x20000000) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (rerun: 32) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{0x1, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f0000000400)=r1}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x17, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x0, 0x9, 0x7, 0x1, 0x50, 0x8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @exit, @ldst={0x2, 0x2, 0x0, 0x3, 0x3, 0x80, 0x8}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000540)='GPL\x00', 0xa, 0x0, 0x0, 0x1e00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x7, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f00000005c0)=[r0], &(0x7f0000000600)=[{0x3, 0x1, 0x4, 0x8}, {0x2, 0x2, 0x0, 0xc}, {0x2, 0x2, 0xb, 0x6}, {0x0, 0x3, 0x3, 0xb}, {0x1, 0x3, 0x9, 0x7}, {0x4, 0x5, 0x4, 0x9}], 0x10, 0xf31, @void, @value}, 0x94) (async, rerun: 32) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x70, r5, 0x5, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x3e, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @val={0x3c, 0x4, {0x1, 0x6, 0x40, 0x81}}, @void, @val={0x72, 0x6}, @void, @val={0x76, 0x6, {0x2, 0x5, 0xf, 0xf}}}}, @NL80211_ATTR_IE_PROBE_RESP={0x4}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x70}}, 0x0) (rerun: 32) 1.361407381s ago: executing program 1 (id=2062): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000400)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xa, 0x0, 0x0, 0x1, [@generic="976b64086860"]}, @nested={0x4, 0x1}]}, 0x28}], 0x1}, 0x0) syz_extract_tcp_res(&(0x7f0000000440)={0x41424344}, 0x401, 0x81) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'macvlan0\x00'}) close(r2) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r2, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) syz_emit_ethernet(0x134, &(0x7f0000000040)={@remote, @local, @val={@val={0x88a8, 0x2, 0x1, 0x3}, {0x8100, 0x7, 0x1}}, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x3, 0x3d, 0x11e, 0x68, 0x0, 0xe, 0x6, 0x0, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp_prespec={0x44, 0x1c, 0xcc, 0x3, 0x2, [{@private=0xa010100, 0x9}, {@empty, 0x81}, {@rand_addr=0x64010101, 0x5}]}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4, 0x1}]}}, {{0x4e23, 0x4e24, r1, 0x41424344, 0x1, 0x0, 0xa, 0xc2, 0x0, 0x0, 0xfff7, {[@window={0x3, 0x3, 0x3c}, @window={0x3, 0x3, 0xff}, @exp_smc={0xfe, 0x6}, @exp_smc={0xfe, 0x6}, @sack_perm={0x4, 0x2}]}}, {"12ff59397c11b738833377a1febdc989d07c01a2b4c04119af8682f242eee6f14a2abce85d55df4a8d1cd17f40e4364c19f2d1b7685b1f50cd2f633a523ec0bee798c9d0c4af7134ff14f24263a0c55399baf06df002f21febaa0766b8ec007dfca0ec797c5952c407cf0ac1ebd7c7524980d3780c7ede5d0cf0272275fe6d1c2d388f485754a2747b1cd618cc90dbd9db28c6e9d6b6dcca6434128c8cf25464f99b7ef4e440cb2716d21054735f0bea6da9b847ae3fa926d2e64fa5ea10"}}}}}}, 0x0) 344.024569ms ago: executing program 1 (id=2063): socketpair(0x22, 0x80803, 0x0, &(0x7f0000000400)={0xffffffffffffffff}) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000100)={&(0x7f0000000040)=@deltaction={0x88, 0x31, 0x508, 0x70bd2c, 0x25dfdbfb, {}, [@TCA_ACT_TAB={0x38, 0x1, [{0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffc0}}, {0xc, 0x18, 0x0, 0x0, @TCA_ACT_INDEX={0x41, 0x3, 0xe925}}, {0x10, 0x7, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0xa, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x12, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7fff}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) 339.611151ms ago: executing program 2 (id=2064): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000e00)={&(0x7f0000000c40)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x2, [@struct={0x0, 0x1, 0x0, 0x3, 0x0, 0x0, [{}]}]}}, 0x0, 0x32, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) sendto$inet6(r0, &(0x7f0000000040)="aa", 0xffffffffffffff84, 0x4048084, &(0x7f0000000100)={0xa, 0x0, 0x100, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}, 0x1c) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x3c, 0x24, 0x0, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_MPU={0x8, 0xe, 0x27}]}}]}, 0x3c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="500000d7185ebc0400"/20, @ANYRES64=r1, @ANYBLOB="0000000000000000280012800a00010076786c616e"], 0x50}}, 0x24048000) r2 = socket$caif_stream(0x25, 0x1, 0x3) r3 = syz_genetlink_get_family_id$devlink(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000200)={&(0x7f0000000280)={0x23c, r3, 0x4, 0x70bd27, 0x25dfdbfe, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0xdc0f}, {0x6, 0x11, 0x1}, {0x8, 0x13, 0x7}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}, {0x6, 0x11, 0x3}, {0x8, 0x13, 0x971}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x14}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x2}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x6}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x4}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x65}, {0x6, 0x11, 0xb}, {0x8, 0x13, 0xd3}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x1000}, {0x6, 0x11, 0x6}, {0x8, 0x13, 0x4}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3ff}, {0x6}, {0x8, 0x13, 0x8f}, {0x5, 0x14, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0x81}, {0x8, 0x13, 0x767}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}, {0x6, 0x11, 0x41d4}, {0x8, 0x13, 0xe358}, {0x5, 0x14, 0x1}}]}, 0x23c}, 0x1, 0x0, 0x0, 0x40000}, 0x4000) setsockopt$CAIFSO_LINK_SELECT(r2, 0x116, 0x7f, &(0x7f0000000140)=0xff000000, 0x4) 338.806789ms ago: executing program 4 (id=2065): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000002140)=ANY=[@ANYBLOB="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"/294], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), 0xffffffffffffffff) (rerun: 32) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r3, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000100)={&(0x7f00000002c0)={0xd0, r4, 0x2, 0x70bd28, 0x25dfdbfd, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}, {0xc, 0x8f, 0xe3f}, {0xc, 0x90, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8}, {0xc, 0x8f, 0x9}, {0xc, 0x90, 0x3}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x2}, {0xc}, {0xc, 0x90, 0x100}}]}, 0xd0}}, 0x0) r5 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000500)=0xffffffffffffffff, 0x4) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"/1582], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r7, r6, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000006c0)={0x1b, 0x0, 0x0, 0x800, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x5, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_ro(r9, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000200)=0x100000000, 0x12) (async) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) pwritev(r11, &(0x7f0000000240)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x0, 0x0) (async) r12 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r13 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r12}, 0x10) r14 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r13}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000006c0)={@ifindex, 0xffffffffffffffff, 0x11, 0x0, 0x0, @void, @value=r14}, 0x20) r15 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x2, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r16 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r15, &(0x7f00000000c0), &(0x7f0000000280)=@udp=r16}, 0x20) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0xd, 0x19, &(0x7f00000005c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0xfffffffc}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0x4}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0xc}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x3}, @alu={0x4, 0x1, 0x4, 0x2, 0x0, 0x2, 0x8}, @generic={0xf, 0x0, 0x0, 0x100, 0x5}, @call={0x85, 0x0, 0x0, 0x78}, @ldst={0x0, 0x2, 0x6, 0x1, 0x8, 0x50, 0x1}, @generic={0xff, 0x3, 0x6, 0x2, 0x4}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x200}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x92, 0x0, 0x0, 0x0, 0xffffffff}]}, &(0x7f00000004c0)='GPL\x00', 0x8, 0xe0, &(0x7f0000000780)=""/224, 0x41100, 0x1, '\x00', 0x0, @fallback=0x33, r5, 0x8, &(0x7f0000000540)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, r7, 0xffffffffffffffff, 0x8, &(0x7f0000000880)=[r8, r10, r11, r3, 0x1, r14, r15, 0x1], &(0x7f00000008c0)=[{0x4, 0x2, 0x4, 0x9}, {0x5, 0x2, 0x0, 0x5}, {0x1, 0x5, 0x1, 0x9}, {0x0, 0x1, 0x0, 0x6}, {0x5, 0x1, 0xf, 0xa}, {0x0, 0x2, 0xf, 0x7}, {0x5, 0x3, 0x5, 0x4}, {0x2, 0x1, 0x9, 0xc}], 0x10, 0x82, @void, @value}, 0x94) (async, rerun: 64) r17 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='initcall_start\x00', r2}, 0x10) (rerun: 64) r18 = gettid() bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000280)={r18, r17, 0x0, 0x1, &(0x7f00000001c0)='\x00'}, 0x11) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000740)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x215}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'virt_wifi0\x00'}, @IFLA_MASTER={0x8, 0xa, r19}]}, 0x3c}, 0x1, 0xba01}, 0x0) 97.552132ms ago: executing program 1 (id=2066): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000040)=0x7) (async, rerun: 64) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, &(0x7f0000000000)="47c5245aef819601d8d2a291693a2aa7", 0x10) (async, rerun: 64) close(r1) (async) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r2, 0x107, 0x14, &(0x7f0000000080)=0xf3e, 0x4) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000140)=""/228, 0xe4}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)=@newtaction={0x48, 0x1e, 0x109, 0x0, 0x0, {}, [{0x34, 0x1, [@m_mirred={0x30, 0x8, 0x0, 0x0, {{0xb, 0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}, 0x1, 0x2b1e}, 0x0) 96.424742ms ago: executing program 2 (id=2067): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r2, 0x10c, 0x6, 0x0, 0x0) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010102, @remote}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x1c, 0x20, 0x9, 0x2, 0x25dfdbff, {0x4}, [@typed={0x8, 0x8, 0x0, 0x0, @fd}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000) (async) socket$igmp(0x2, 0x3, 0x2) (async) setsockopt$MRT_FLUSH(r1, 0x0, 0xd1, &(0x7f0000000000)=0x3, 0x4) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) setsockopt$llc_int(r2, 0x10c, 0x6, 0x0, 0x0) (async) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000080)={0x1, 0x4, 0x3f, 0x3202, @vifc_lcl_addr=@private=0xa010102, @remote}, 0x10) (async) 0s ago: executing program 3 (id=1141): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000080)=@raw={'raw\x00', 0x8, 0x3, 0x288, 0x0, 0xffffffff, 0xffffffff, 0xd0, 0xffffffff, 0x208, 0xffffffff, 0xffffffff, 0x208, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev, [], [], 'batadv0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xa8, 0xd0, 0x0, {0x0, 0x4c00}}, @common=@inet=@TCPMSS={0x28}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@inet=@TCPOPTSTRIP={0x40}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x2e8) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r2, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000000000aa140006"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x80) bind$alg(0xffffffffffffffff, &(0x7f0000000040)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr-aes-neonbs-sync\x00'}, 0x58) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x74) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r4, &(0x7f0000000000)={0x27}, 0x62) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000280)="4c0000001200ff09ff3a150099a283ff07b8008000f0ffff000000060040150024001d00120511a09798bc593ab6821148a730cc33a49868c62b2ca654a6613b6aab9d25bf46050d3c3a2b04", 0x4c}], 0x1}, 0x4008000) recvfrom(r1, 0x0, 0x0, 0x40000000, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback}, 0x1c) r5 = socket$alg(0x26, 0x5, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$batadv(&(0x7f00000003c0), r5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r1, 0x8933, &(0x7f0000000400)={'batadv_slave_1\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000480)={&(0x7f0000000440)={0x34, r7, 0x10, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r8}]}, 0x34}, 0x1, 0x0, 0x0, 0x40004}, 0x40) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001500)=@newtaction={0x18, 0x31, 0x829, 0x0, 0x0, {}, [{0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8890}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) poll(&(0x7f0000000240)=[{r9, 0x53a}], 0x1, 0x4c58e922) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r11, r10, 0x80000001, 0x0) vmsplice(r12, &(0x7f0000000380), 0x0, 0x0) bind$alg(r5, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) socket$netlink(0x10, 0x3, 0x8) kernel console output (not intermixed with test programs): 0689] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 185.451339][T10700] netlink: 'syz.2.1319': attribute type 21 has an invalid length. [ 186.199996][T10439] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 186.281065][T10439] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 186.374163][T10439] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 186.431050][T10439] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 186.621736][T10761] __nla_validate_parse: 12 callbacks suppressed [ 186.621756][T10761] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1335'. [ 186.788243][T10439] 8021q: adding VLAN 0 to HW filter on device bond0 [ 186.795917][ T55] Bluetooth: hci3: command tx timeout [ 186.905705][T10439] 8021q: adding VLAN 0 to HW filter on device team0 [ 186.947365][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 186.954593][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 187.023841][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 187.031037][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 187.177825][T10439] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 187.231165][T10794] openvswitch: netlink: ct_state flags 0000ee01 unsupported [ 187.717639][T10822] netlink: 'syz.0.1346': attribute type 1 has an invalid length. [ 187.801003][T10819] bond1: (slave veth3): Releasing backup interface [ 187.927425][T10823] veth3: entered promiscuous mode [ 188.047170][T10837] netlink: 'syz.1.1351': attribute type 38 has an invalid length. [ 188.149411][T10439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.218193][T10839] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1352'. [ 188.330746][T10852] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1354'. [ 188.436759][T10856] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1354'. [ 188.467270][T10439] veth0_vlan: entered promiscuous mode [ 188.486674][T10861] netlink: 'syz.4.1357': attribute type 30 has an invalid length. [ 188.510188][T10439] veth1_vlan: entered promiscuous mode [ 188.693706][T10439] veth0_macvtap: entered promiscuous mode [ 188.753475][T10439] veth1_macvtap: entered promiscuous mode [ 188.819663][T10439] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 188.847835][T10439] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 188.878888][T10439] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.884987][T10882] netlink: 104 bytes leftover after parsing attributes in process `syz.4.1360'. [ 188.919970][T10439] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 188.946199][T10881] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1360'. [ 188.973800][T10439] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.001539][T10439] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.059871][T10439] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.099401][T10439] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.338369][T10908] xt_recent: Unsupported userspace flags (00000061) [ 189.355813][T10911] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1368'. [ 189.404498][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.435406][T10915] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1369'. [ 189.454845][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.533392][T10921] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1369'. [ 189.605049][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.630659][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.814423][T10939] netlink: 'syz.4.1375': attribute type 32 has an invalid length. [ 189.838705][T10942] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1376'. [ 189.885204][T10942] netlink: 'syz.1.1376': attribute type 15 has an invalid length. [ 190.097868][T10958] netlink: 'syz.1.1381': attribute type 24 has an invalid length. [ 190.242092][ T5881] page_pool_release_retry() stalled pool shutdown: id 25, 1 inflight 60 sec [ 190.373814][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.478320][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.661050][T10983] netlink: 'syz.2.1390': attribute type 39 has an invalid length. [ 190.739124][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.884849][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.927235][T10991] IPv6: NLM_F_REPLACE set, but no existing node found! [ 191.271341][ T36] bridge_slave_1: left allmulticast mode [ 191.287549][ T36] bridge_slave_1: left promiscuous mode [ 191.305234][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.321065][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.332798][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.341048][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.355136][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.368240][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.377490][ T36] bridge_slave_0: left allmulticast mode [ 191.385719][ T36] bridge_slave_0: left promiscuous mode [ 191.411991][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.545043][T11022] netlink: 'syz.2.1404': attribute type 2 has an invalid length. [ 191.837302][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.848845][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.859156][ T36] bond0 (unregistering): Released all slaves [ 191.919712][T11008] lo speed is unknown, defaulting to 1000 [ 192.072596][T11036] raw_sendmsg: syz.4.1406 forgot to set AF_INET. Fix it! [ 192.198022][T11041] __nla_validate_parse: 7 callbacks suppressed [ 192.198041][T11041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1410'. [ 192.219983][T11034] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.232702][T11041] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 192.335965][T11045] netlink: 108 bytes leftover after parsing attributes in process `syz.2.1411'. [ 192.380934][T11047] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1412'. [ 192.452914][T11051] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1412'. [ 192.486143][T11034] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.546665][T11047] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1412'. [ 192.573574][T11049] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1413'. [ 192.589329][T11047] gretap2: entered promiscuous mode [ 192.598621][T11047] gretap2: entered allmulticast mode [ 192.696915][T11058] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1414'. [ 192.720153][T11034] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.750167][T11049] veth9: entered allmulticast mode [ 192.885118][T11034] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.916609][T11061] sctp: [Deprecated]: syz.4.1415 (pid 11061) Use of struct sctp_assoc_value in delayed_ack socket option. [ 192.916609][T11061] Use struct sctp_sack_info instead [ 192.981341][T11064] netlink: 'syz.0.1416': attribute type 1 has an invalid length. [ 192.998815][T11065] netlink: 'syz.4.1415': attribute type 32 has an invalid length. [ 193.190865][T11075] netlink: 'syz.2.1418': attribute type 1 has an invalid length. [ 193.199417][T11064] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.241434][T11067] 8021q: adding VLAN 0 to HW filter on device bond4 [ 193.250014][T11067] bond4: (slave vxcan1): The slave device specified does not support setting the MAC address [ 193.266792][T11067] bond4: (slave vxcan1): Error -95 calling set_mac_address [ 193.335131][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'. [ 193.347287][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'. [ 193.366726][T11072] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1417'. [ 193.376418][ T36] hsr_slave_0: left promiscuous mode [ 193.386088][ T36] hsr_slave_1: left promiscuous mode [ 193.393029][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.400547][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.410553][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.426484][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.433910][ T5838] Bluetooth: hci3: command tx timeout [ 193.436151][T11086] netlink: 'syz.0.1421': attribute type 1 has an invalid length. [ 193.483741][ T36] veth1_macvtap: left promiscuous mode [ 193.489436][ T36] veth0_macvtap: left promiscuous mode [ 193.496752][ T36] veth1_vlan: left promiscuous mode [ 193.503377][ T36] veth0_vlan: left promiscuous mode [ 193.931349][ T36] team0 (unregistering): Port device team_slave_1 removed [ 193.973213][ T36] team0 (unregistering): Port device team_slave_0 removed [ 194.380744][T11086] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 194.431232][T11090] vlan2: entered allmulticast mode [ 194.450720][T11090] veth1: entered allmulticast mode [ 194.492931][T11034] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.573782][T11034] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.683500][T11034] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.724841][T11034] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 194.775962][T11008] chnl_net:caif_netlink_parms(): no params data found [ 195.094049][T11008] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.121314][T11008] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.136859][T11008] bridge_slave_0: entered allmulticast mode [ 195.147028][T11008] bridge_slave_0: entered promiscuous mode [ 195.226839][T11120] bridge_slave_0 (unregistering): left allmulticast mode [ 195.243566][T11120] bridge_slave_0 (unregistering): left promiscuous mode [ 195.271079][T11120] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.296077][T11008] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.308536][T11008] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.316597][T11008] bridge_slave_1: entered allmulticast mode [ 195.325976][T11008] bridge_slave_1: entered promiscuous mode [ 195.335772][T11126] tipc: Started in network mode [ 195.351060][T11126] tipc: Node identity 000000002d0000000000000000000001, cluster identity 4711 [ 195.364435][T11126] tipc: Enabling of bearer rejected, failed to enable media [ 195.479518][T11138] lo speed is unknown, defaulting to 1000 [ 195.512240][ T5838] Bluetooth: hci3: command tx timeout [ 195.546014][T11008] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 195.620994][T11008] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 195.758699][T11008] team0: Port device team_slave_0 added [ 195.876420][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 195.939975][T11008] team0: Port device team_slave_1 added [ 196.054330][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.115570][T11008] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 196.125312][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.162853][T11162] netlink: 'syz.1.1442': attribute type 7 has an invalid length. [ 196.179720][T11008] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 196.191878][T11162] netlink: 'syz.1.1442': attribute type 8 has an invalid length. [ 196.229909][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.273495][T11008] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 196.280494][T11008] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 196.326721][T11008] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 196.388041][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 196.599577][ T55] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 196.608455][ T55] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 196.619889][ T55] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 196.628569][ T55] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 196.638787][ T55] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 196.678477][T11008] hsr_slave_0: entered promiscuous mode [ 196.702791][T11008] hsr_slave_1: entered promiscuous mode [ 196.709177][T11008] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 196.755880][T11008] Cannot create hsr debugfs directory [ 196.958297][T11192] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 197.084805][T11176] lo speed is unknown, defaulting to 1000 [ 197.173501][T11196] pim6reg: entered allmulticast mode [ 197.325450][ T36] bridge_slave_1: left allmulticast mode [ 197.332400][ T36] bridge_slave_1: left promiscuous mode [ 197.338424][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.534998][ T36] batman_adv: batadv0: Removing interface: gretap1 [ 197.591798][ T55] Bluetooth: hci3: command tx timeout [ 197.826625][ T36] bond1 (unregistering): Released all slaves [ 197.842609][ T36] bond2 (unregistering): Released all slaves [ 197.940628][ T36] bond3 (unregistering): Released all slaves [ 197.957401][ T36] bond0 (unregistering): Released all slaves [ 198.050384][ T36] bond4 (unregistering): Released all slaves [ 198.334292][T11220] __nla_validate_parse: 4 callbacks suppressed [ 198.334311][T11220] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1458'. [ 198.712167][ T55] Bluetooth: hci0: command tx timeout [ 198.985960][ T36] hsr_slave_0: left promiscuous mode [ 198.995946][ T36] hsr_slave_1: left promiscuous mode [ 199.004017][T11255] netlink: 'syz.4.1468': attribute type 1 has an invalid length. [ 199.023934][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.039568][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.047556][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1466'. [ 199.102677][ T36] pimreg3 (unregistering): left allmulticast mode [ 199.605664][ T36] team0 (unregistering): Port device team_slave_0 removed [ 199.671747][ T55] Bluetooth: hci3: command tx timeout [ 200.066416][T11176] chnl_net:caif_netlink_parms(): no params data found [ 200.229654][T11008] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 200.348753][T11008] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 200.461983][T11304] No such timeout policy "syz0" [ 200.536656][T11308] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1476'. [ 200.547693][T11300] netlink: 'syz.2.1476': attribute type 21 has an invalid length. [ 200.557447][T11300] netlink: 128 bytes leftover after parsing attributes in process `syz.2.1476'. [ 200.574995][T11008] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 200.588912][T11008] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 200.638095][T11300] netlink: 3 bytes leftover after parsing attributes in process `syz.2.1476'. [ 200.705009][T11176] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.722374][T11176] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.739988][T11176] bridge_slave_0: entered allmulticast mode [ 200.757288][T11176] bridge_slave_0: entered promiscuous mode [ 200.792369][ T55] Bluetooth: hci0: command tx timeout [ 200.802467][T11176] bridge0: port 2(bridge_slave_1) entered blocking state [ 200.817886][T11176] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.846974][T11176] bridge_slave_1: entered allmulticast mode [ 200.855390][T11176] bridge_slave_1: entered promiscuous mode [ 200.939018][T11324] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1481'. [ 200.961475][T11176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.001036][T11176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.117306][T11176] team0: Port device team_slave_0 added [ 201.144111][T11176] team0: Port device team_slave_1 added [ 201.281419][T11176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.289262][T11176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.316871][T11176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.337410][T11176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 201.348458][T11176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.379606][T11176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 201.406014][T11343] netlink: 160 bytes leftover after parsing attributes in process `syz.2.1487'. [ 201.443138][T11344] set match dimension is over the limit! [ 201.526849][T11008] 8021q: adding VLAN 0 to HW filter on device bond0 [ 201.710077][T11359] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1490'. [ 201.729823][T11176] hsr_slave_0: entered promiscuous mode [ 201.743832][T11176] hsr_slave_1: entered promiscuous mode [ 201.750432][T11176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 201.762267][T11176] Cannot create hsr debugfs directory [ 201.770237][T11361] netem: change failed [ 201.781456][T11359] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1490'. [ 201.812493][T11359] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1490'. [ 201.851501][T11008] 8021q: adding VLAN 0 to HW filter on device team0 [ 201.886644][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.893888][ T9116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 201.893999][T11365] x_tables: duplicate underflow at hook 1 [ 201.969421][ T9116] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.976699][ T9116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 202.609570][T11394] netlink: 'syz.2.1499': attribute type 24 has an invalid length. [ 202.624205][T11395] xt_l2tp: invalid flags combination: 4 [ 202.667446][T11400] netlink: 'syz.4.1501': attribute type 23 has an invalid length. [ 202.808856][T11408] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (32767) [ 202.820069][T11408] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 202.873857][ T55] Bluetooth: hci0: command tx timeout [ 202.928653][T11412] netlink: 'syz.1.1503': attribute type 30 has an invalid length. [ 202.957795][T11412] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.966777][T11412] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.978013][T11412] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 202.987304][T11412] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.014225][T11412] netdevsim netdevsim1 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.022836][T11412] netdevsim netdevsim1 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.031217][T11412] netdevsim netdevsim1 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.039753][T11412] netdevsim netdevsim1 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 203.102882][T11008] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 203.201020][T11008] veth0_vlan: entered promiscuous mode [ 203.248784][T11008] veth1_vlan: entered promiscuous mode [ 203.472713][T11176] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 203.494639][T11427] netlink: 'syz.1.1507': attribute type 10 has an invalid length. [ 203.499980][T11176] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 203.533583][T11008] veth0_macvtap: entered promiscuous mode [ 203.565854][T11008] veth1_macvtap: entered promiscuous mode [ 203.586537][T11176] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 203.612528][T11176] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 203.640512][T11437] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1511'. [ 203.678690][T11438] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1510'. [ 203.714479][T11008] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 203.737016][T11008] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 203.747678][T11008] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 203.761688][T11008] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 203.769703][T11442] netlink: 696 bytes leftover after parsing attributes in process `syz.1.1512'. [ 203.815159][T11008] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.835118][T11008] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.847902][T11008] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.867844][T11008] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 203.909161][T11445] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 203.935569][T11449] netlink: 'syz.1.1514': attribute type 1 has an invalid length. [ 203.960950][T11449] lo speed is unknown, defaulting to 1000 [ 204.085012][T11176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.132683][ T9116] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.140578][ T9116] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.144378][T11176] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.218264][ T1323] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.225478][ T1323] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.248156][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 204.264765][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.272339][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.276697][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 204.433369][T11457] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1518'. [ 204.868111][T11176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.929348][T11480] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 204.954933][ T82] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.044365][T11176] veth0_vlan: entered promiscuous mode [ 205.064975][T11176] veth1_vlan: entered promiscuous mode [ 205.117151][T11176] veth0_macvtap: entered promiscuous mode [ 205.144435][T11176] veth1_macvtap: entered promiscuous mode [ 205.166135][T11176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 205.177541][T11176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.198796][T11176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 205.220957][T11176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.237131][T11176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.247538][T11176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 205.258272][T11176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 205.269726][T11176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 205.296088][ T82] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.332654][T11176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.341428][T11176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.353664][T11176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.364527][T11176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 205.438931][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.455689][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.497928][ T82] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.526373][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 205.540486][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 205.825091][ T82] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 206.166273][T11516] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1533'. [ 206.212391][T11515] tipc: Started in network mode [ 206.220405][T11515] tipc: Node identity ac14140f, cluster identity 4711 [ 206.242902][T11515] tipc: New replicast peer: 255.255.255.255 [ 206.270839][T11515] tipc: Enabled bearer , priority 10 [ 206.365182][T11523] bond0: (slave ip6tnl2): The slave device specified does not support setting the MAC address [ 206.397004][T11523] bond0: (slave ip6tnl2): Error -95 calling set_mac_address [ 206.426705][ T82] bridge_slave_1: left allmulticast mode [ 206.452465][ T82] bridge_slave_1: left promiscuous mode [ 206.458338][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.506747][ T82] bridge_slave_0: left allmulticast mode [ 206.521870][ T82] bridge_slave_0: left promiscuous mode [ 206.529050][ T5138] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 206.539452][ T5138] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 206.551108][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.560566][ T5138] Bluetooth: hci2: command 0x0406 tx timeout [ 206.561778][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 206.567955][ T5138] Bluetooth: hci1: command 0x0406 tx timeout [ 206.577711][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 206.589087][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 206.700265][T11531] Bluetooth: MGMT ver 1.23 [ 206.960158][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 206.972107][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 206.984464][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 206.993198][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 207.001486][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 207.143506][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 207.155184][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 207.167343][ T82] bond0 (unregistering): Released all slaves [ 207.261275][T11533] lo speed is unknown, defaulting to 1000 [ 207.383198][ T9] tipc: Node number set to 2886997007 [ 207.804483][T11525] lo speed is unknown, defaulting to 1000 [ 208.227891][T11579] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1547'. [ 208.306908][T11580] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1547'. [ 208.637276][ T5841] Bluetooth: hci0: command tx timeout [ 208.639772][T11589] tipc: Enabling of bearer rejected, failed to enable media [ 208.726256][ T82] hsr_slave_0: left promiscuous mode [ 208.760832][ T82] hsr_slave_1: left promiscuous mode [ 208.774349][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.781891][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.797200][T11597] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1554'. [ 208.809153][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.816978][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.845969][ T82] veth1_macvtap: left promiscuous mode [ 208.852471][ T82] veth0_macvtap: left promiscuous mode [ 208.858929][T11600] netlink: 'syz.2.1553': attribute type 4 has an invalid length. [ 208.868019][ T82] veth1_vlan: left promiscuous mode [ 208.874023][ T82] veth0_vlan: left promiscuous mode [ 208.878920][T11603] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1555'. [ 209.031735][ T5841] Bluetooth: hci3: command tx timeout [ 209.100711][T11615] netlink: 'syz.4.1558': attribute type 1 has an invalid length. [ 209.406301][ T82] team0 (unregistering): Port device team_slave_1 removed [ 209.448280][ T82] team0 (unregistering): Port device team_slave_0 removed [ 209.958878][T11533] chnl_net:caif_netlink_parms(): no params data found [ 210.077848][T11615] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 210.230305][T11624] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1560'. [ 210.329511][T11633] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1562'. [ 210.527645][T11533] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.556084][T11533] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.572687][T11533] bridge_slave_0: entered allmulticast mode [ 210.580666][T11533] bridge_slave_0: entered promiscuous mode [ 210.602362][T11533] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.610834][T11533] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.620791][T11533] bridge_slave_1: entered allmulticast mode [ 210.629376][T11533] bridge_slave_1: entered promiscuous mode [ 210.655390][T11644] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1564'. [ 210.704924][T11649] netlink: 'syz.1.1566': attribute type 2 has an invalid length. [ 210.711850][ T5841] Bluetooth: hci0: command tx timeout [ 210.818975][T11533] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 210.881113][T11533] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 210.966797][T11663] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1570'. [ 211.018589][ T82] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.084605][T11533] team0: Port device team_slave_0 added [ 211.112299][ T5841] Bluetooth: hci3: command tx timeout [ 211.149139][ T82] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.181666][T11533] team0: Port device team_slave_1 added [ 211.226944][T11669] syzkaller1: entered allmulticast mode [ 211.236795][T11525] chnl_net:caif_netlink_parms(): no params data found [ 211.314060][ T82] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.368597][T11533] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 211.381141][T11533] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.418654][T11533] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 211.459229][ T82] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.485196][T11533] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 211.497728][T11533] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 211.537402][T11533] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 211.627341][T11689] sctp: [Deprecated]: syz.4.1574 (pid 11689) Use of int in max_burst socket option deprecated. [ 211.627341][T11689] Use struct sctp_assoc_value instead [ 211.798181][T11701] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1576'. [ 211.821761][T11701] netlink: 'syz.1.1576': attribute type 1 has an invalid length. [ 211.831289][T11701] netlink: 'syz.1.1576': attribute type 1 has an invalid length. [ 211.841240][T11701] netlink: 'syz.1.1576': attribute type 2 has an invalid length. [ 211.849096][T11701] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1576'. [ 211.863718][T11701] netlink: 4960 bytes leftover after parsing attributes in process `syz.1.1576'. [ 211.922264][T11525] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.934770][T11525] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.950289][T11525] bridge_slave_0: entered allmulticast mode [ 211.961705][T11525] bridge_slave_0: entered promiscuous mode [ 211.976060][T11533] hsr_slave_0: entered promiscuous mode [ 211.985441][T11533] hsr_slave_1: entered promiscuous mode [ 211.993263][T11533] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.012879][T11533] Cannot create hsr debugfs directory [ 212.021112][T11525] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.039303][T11525] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.052723][T11525] bridge_slave_1: entered allmulticast mode [ 212.067829][T11525] bridge_slave_1: entered promiscuous mode [ 212.142831][T11714] x_tables: ip_tables: udp match: only valid for protocol 17 [ 212.245035][T11525] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.279889][T11525] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.523399][T11731] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1584'. [ 212.538132][T11525] team0: Port device team_slave_0 added [ 212.559599][T11525] team0: Port device team_slave_1 added [ 212.566668][T11731] netlink: 'syz.1.1584': attribute type 4 has an invalid length. [ 212.635005][ T82] bridge_slave_1: left allmulticast mode [ 212.640863][ T82] bridge_slave_1: left promiscuous mode [ 212.647071][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.658515][ T82] bridge_slave_0: left allmulticast mode [ 212.664504][ T82] bridge_slave_0: left promiscuous mode [ 212.670239][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.798579][ T5841] Bluetooth: hci0: command tx timeout [ 213.005612][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.017109][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.027821][ T82] bond0 (unregistering): Released all slaves [ 213.081227][T11525] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 213.106152][T11525] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.191693][ T5841] Bluetooth: hci3: command tx timeout [ 213.218505][T11525] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 213.244800][T11742] netlink: 'syz.4.1587': attribute type 1 has an invalid length. [ 213.264020][T11525] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 213.271097][T11525] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 213.298946][T11525] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.397334][T11742] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.415203][T11746] tunl0: entered promiscuous mode [ 213.435422][T11746] netlink: 'syz.2.1590': attribute type 3 has an invalid length. [ 213.478212][T11747] 8021q: adding VLAN 0 to HW filter on device bond3 [ 213.492130][T11747] bond3: (slave vxcan1): The slave device specified does not support setting the MAC address [ 213.516856][T11747] bond3: (slave vxcan1): Error -95 calling set_mac_address [ 213.563268][T11750] ip6erspan0: entered promiscuous mode [ 213.573051][T11750] bond3: (slave ip6erspan0): making interface the new active one [ 213.585264][T11750] bond3: (slave ip6erspan0): Enslaving as an active interface with an up link [ 213.622130][T11755] x_tables: duplicate underflow at hook 2 [ 213.770598][T11525] hsr_slave_0: entered promiscuous mode [ 213.777704][T11525] hsr_slave_1: entered promiscuous mode [ 213.784996][T11525] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.793212][T11525] Cannot create hsr debugfs directory [ 213.955180][T11774] netlink: 'syz.4.1596': attribute type 15 has an invalid length. [ 214.001768][T11774] __nla_validate_parse: 5 callbacks suppressed [ 214.001788][T11774] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1596'. [ 214.297963][ T82] hsr_slave_0: left promiscuous mode [ 214.327470][ T82] hsr_slave_1: left promiscuous mode [ 214.334478][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.342286][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.350329][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.357979][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.410149][ T82] veth1_macvtap: left promiscuous mode [ 214.422490][ T82] veth0_macvtap: left promiscuous mode [ 214.435730][ T82] veth1_vlan: left promiscuous mode [ 214.447113][ T82] veth0_vlan: left promiscuous mode [ 214.872107][ T5837] Bluetooth: hci0: command tx timeout [ 215.165376][ T82] team0 (unregistering): Port device team_slave_1 removed [ 215.211264][ T82] team0 (unregistering): Port device team_slave_0 removed [ 215.272045][ T5837] Bluetooth: hci3: command tx timeout [ 215.277529][ T5841] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 215.895789][T11830] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1609'. [ 215.898090][T11829] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1611'. [ 215.910832][T11830] mac80211_hwsim hwsim10 syzkaller0: entered promiscuous mode [ 215.950796][T11830] mac80211_hwsim hwsim10 syzkaller0: entered allmulticast mode [ 216.131387][T11533] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 216.173993][T11533] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 216.203841][T11533] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 216.237047][T11844] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci3/hci3:200/input7 [ 216.248923][T11533] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 216.298590][T11843] xt_CT: No such helper "pptp" [ 216.338726][T11850] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1616'. [ 216.603842][T11533] 8021q: adding VLAN 0 to HW filter on device bond0 [ 216.645390][T11864] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1619'. [ 216.656805][T11533] 8021q: adding VLAN 0 to HW filter on device team0 [ 216.689765][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.697111][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 216.709727][T11867] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1619'. [ 216.730329][T11867] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1619'. [ 216.824191][ T9116] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.831452][ T9116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 216.876693][T11525] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.907478][T11525] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.947131][T11525] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.954705][ T5841] Bluetooth: hci0: command 0x0c1a tx timeout [ 216.994675][T11525] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 217.170991][T11882] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1627'. [ 217.207446][T11882] openvswitch: netlink: nsh attribute has 13 unknown bytes. [ 217.224854][T11882] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.280306][T11525] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.363026][T11893] Cannot find del_set index 4 as target [ 217.391097][T11525] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.435125][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.442375][ T9116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.496444][T11897] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1630'. [ 217.506287][T11897] bridge0: entered promiscuous mode [ 217.524790][T11897] bridge0: left allmulticast mode [ 217.534631][T11899] netlink: 'syz.1.1631': attribute type 11 has an invalid length. [ 217.552741][ T82] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.559983][ T82] bridge0: port 2(bridge_slave_1) entered forwarding state [ 217.567808][T11899] netlink: 'syz.1.1631': attribute type 11 has an invalid length. [ 217.580739][T11899] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1631'. [ 217.687669][T11533] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 217.761021][T11912] netlink: 'syz.1.1635': attribute type 33 has an invalid length. [ 217.855045][T11533] veth0_vlan: entered promiscuous mode [ 217.893770][T11533] veth1_vlan: entered promiscuous mode [ 217.899868][ T5881] hid-generic 0005:699A:5505.0002: unknown main item tag 0x0 [ 217.917124][ T5881] hid-generic 0005:699A:5505.0002: unknown main item tag 0x0 [ 217.935816][ T5881] hid-generic 0005:699A:5505.0002: unknown main item tag 0x0 [ 217.953366][ T5881] hid-generic 0005:699A:5505.0002: unknown main item tag 0x0 [ 217.971792][ T5881] hid-generic 0005:699A:5505.0002: unknown main item tag 0x0 [ 217.979246][ T5881] hid-generic 0005:699A:5505.0002: unknown main item tag 0x0 [ 217.979463][T11919] tipc: Enabling of bearer rejected, failed to enable media [ 217.998594][ T5881] hid-generic 0005:699A:5505.0002: unknown main item tag 0x1 [ 218.009237][ T5881] hid-generic 0005:699A:5505.0002: hidraw0: BLUETOOTH HID v0.8b Device [syz1] on aa:aa:aa:aa:aa:aa [ 218.058264][T11533] veth0_macvtap: entered promiscuous mode [ 218.093987][T11533] veth1_macvtap: entered promiscuous mode [ 218.128343][T11533] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.188491][T11924] netlink: 'syz.1.1637': attribute type 1 has an invalid length. [ 218.198650][T11533] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.225723][T11533] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.255401][T11533] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.318129][T11924] 8021q: adding VLAN 0 to HW filter on device bond2 [ 218.390451][T11533] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.403079][T11533] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.412391][T11533] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.422485][T11533] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.453869][T11936] team0: No ports can be present during mode change [ 218.501534][T11525] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 218.585056][T11947] openvswitch: netlink: EtherType 0 is less than min 600 [ 218.678860][T11525] veth0_vlan: entered promiscuous mode [ 218.736132][ T1323] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.745495][ T1323] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.757977][T11525] veth1_vlan: entered promiscuous mode [ 218.818971][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.828702][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.862588][T11525] veth0_macvtap: entered promiscuous mode [ 218.879446][T11525] veth1_macvtap: entered promiscuous mode [ 218.938662][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.967314][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.999773][T11525] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.044194][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.079334][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.090080][T11525] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.102244][T11525] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.114667][T11525] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.154127][T11525] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.175437][T11525] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.184538][T11525] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.193777][T11525] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.368805][T10464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.395042][T10464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.443836][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.460472][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.468294][T11980] __nla_validate_parse: 4 callbacks suppressed [ 219.468312][T11980] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1653'. [ 219.557129][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.751104][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.972281][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.191228][T12000] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1660'. [ 220.265918][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.320416][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 220.334461][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 220.348877][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 220.357760][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 220.365690][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 220.450031][ T53] bridge_slave_1: left allmulticast mode [ 220.457493][ T53] bridge_slave_1: left promiscuous mode [ 220.463997][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.482905][ T53] bridge_slave_0: left allmulticast mode [ 220.488604][ T53] bridge_slave_0: left promiscuous mode [ 220.503179][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.805731][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.817323][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.827377][ T53] bond0 (unregistering): Released all slaves [ 220.855589][T12004] lo speed is unknown, defaulting to 1000 [ 221.131268][T12012] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ûÌÌULÙvy¸ÚØ¢…D£øUDŒw˜}z [ 221.150698][T12013] netlink: 'syz.4.1663': attribute type 3 has an invalid length. [ 221.160051][T12013] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.223539][T12017] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1663'. [ 221.233799][T12017] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1663'. [ 221.595252][T12020] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 221.623490][T12021] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 221.661750][ T53] hsr_slave_0: left promiscuous mode [ 221.681699][ T53] hsr_slave_1: left promiscuous mode [ 221.687878][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.716176][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.745113][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 221.756315][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.758641][T12032] openvswitch: netlink: VXLAN extension message has 12 unknown bytes. [ 221.763928][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 221.771779][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.789309][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 221.806893][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 221.816652][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 221.860190][ T53] veth1_macvtap: left promiscuous mode [ 221.877075][ T53] veth0_macvtap: left promiscuous mode [ 221.883068][ T53] veth1_vlan: left promiscuous mode [ 221.888419][ T53] veth0_vlan: left promiscuous mode [ 222.395920][ T5841] Bluetooth: hci0: command tx timeout [ 222.415746][ T53] team0 (unregistering): Port device team_slave_1 removed [ 222.454292][ T53] team0 (unregistering): Port device team_slave_0 removed [ 222.936719][T12027] lo speed is unknown, defaulting to 1000 [ 223.085619][T12058] netlink: 164 bytes leftover after parsing attributes in process `syz.4.1673'. [ 223.305815][T12004] chnl_net:caif_netlink_parms(): no params data found [ 223.501886][T12073] ip6gre1: entered allmulticast mode [ 223.539084][T12085] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1680'. [ 223.710095][T12004] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.718294][T12004] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.725682][T12004] bridge_slave_0: entered allmulticast mode [ 223.734396][T12004] bridge_slave_0: entered promiscuous mode [ 223.744620][T12004] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.752117][T12004] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.759860][T12004] bridge_slave_1: entered allmulticast mode [ 223.767800][T12004] bridge_slave_1: entered promiscuous mode [ 223.866389][T12004] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 223.875398][T12097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1684'. [ 223.884927][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1684'. [ 223.906135][T12097] netlink: 'syz.2.1684': attribute type 1 has an invalid length. [ 223.916369][ T5841] Bluetooth: hci3: command tx timeout [ 223.928212][T12004] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 223.975349][T12099] can: request_module (can-proto-5) failed. [ 223.984496][T12027] chnl_net:caif_netlink_parms(): no params data found [ 224.085584][T12105] veth5: entered promiscuous mode [ 224.124604][T12108] IPVS: length: 113 != 24 [ 224.130383][ T82] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.153924][T12004] team0: Port device team_slave_0 added [ 224.177734][T12004] team0: Port device team_slave_1 added [ 224.335045][ T82] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.456241][ T82] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.473239][ T5841] Bluetooth: hci0: command tx timeout [ 224.520046][T12004] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.529967][T12004] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.557100][T12004] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.569899][T12004] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.585771][T12004] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.611978][T12004] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.698535][ T82] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 224.758956][T12027] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.766978][T12027] bridge0: port 1(bridge_slave_0) entered disabled state [ 224.777760][T12027] bridge_slave_0: entered allmulticast mode [ 224.786940][T12027] bridge_slave_0: entered promiscuous mode [ 224.842146][T12027] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.851043][T12027] bridge0: port 2(bridge_slave_1) entered disabled state [ 224.859697][T12027] bridge_slave_1: entered allmulticast mode [ 224.867656][T12027] bridge_slave_1: entered promiscuous mode [ 225.050838][T12027] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 225.096561][T12004] hsr_slave_0: entered promiscuous mode [ 225.118342][T12004] hsr_slave_1: entered promiscuous mode [ 225.140679][T12004] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 225.166485][T12004] Cannot create hsr debugfs directory [ 225.210558][T12027] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 225.374799][T12027] team0: Port device team_slave_0 added [ 225.436399][T12161] netlink: 112 bytes leftover after parsing attributes in process `syz.2.1698'. [ 225.534583][T12027] team0: Port device team_slave_1 added [ 225.615940][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1700'. [ 225.735163][T12027] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 225.742897][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.774687][T12027] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 225.834087][T12027] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 225.851315][T12027] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.880034][T12172] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1702'. [ 225.908122][T12027] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 225.939708][ T82] bridge_slave_1: left allmulticast mode [ 225.952221][ T82] bridge_slave_1: left promiscuous mode [ 225.963642][ T82] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.986773][ T82] bridge_slave_0: left allmulticast mode [ 225.992623][ T5841] Bluetooth: hci3: command tx timeout [ 226.000123][ T82] bridge_slave_0: left promiscuous mode [ 226.006808][ T82] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.468648][ T82] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 226.483431][ T82] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 226.494994][ T82] bond0 (unregistering): Released all slaves [ 226.552856][ T5841] Bluetooth: hci0: command tx timeout [ 226.676833][T12177] sysfs: cannot create duplicate filename '/class/ieee80211/!å¯' [ 226.693348][T12177] CPU: 1 UID: 0 PID: 12177 Comm: syz.2.1703 Not tainted 6.15.0-rc4-syzkaller-00152-g4397684a292a #0 PREEMPT(full) [ 226.693394][T12177] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 226.693418][T12177] Call Trace: [ 226.693430][T12177] [ 226.693439][T12177] dump_stack_lvl+0x189/0x250 [ 226.693485][T12177] ? lockdep_hardirqs_on+0x9c/0x150 [ 226.693507][T12177] ? __pfx_dump_stack_lvl+0x10/0x10 [ 226.693535][T12177] ? __pfx__printk+0x10/0x10 [ 226.693558][T12177] ? kernfs_path_from_node+0x2b/0x260 [ 226.693587][T12177] ? kernfs_path_from_node+0x216/0x260 [ 226.693617][T12177] sysfs_warn_dup+0x8e/0xa0 [ 226.693643][T12177] sysfs_do_create_link_sd+0xc0/0x110 [ 226.693672][T12177] device_add_class_symlinks+0x1cf/0x240 [ 226.693698][T12177] device_add+0x475/0xb50 [ 226.693725][T12177] wiphy_register+0x199a/0x26b0 [ 226.693770][T12177] ? __pfx_wiphy_register+0x10/0x10 [ 226.693793][T12177] ? minstrel_ht_alloc+0x893/0x990 [ 226.693831][T12177] ? ieee80211_init_rate_ctrl_alg+0x56d/0x5f0 [ 226.693865][T12177] ieee80211_register_hw+0x334b/0x4060 [ 226.693899][T12177] ? ieee80211_register_hw+0x1441/0x4060 [ 226.693937][T12177] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 226.693960][T12177] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 226.693989][T12177] ? __hrtimer_setup+0x187/0x210 [ 226.694016][T12177] ? __pfx_mac80211_hwsim_beacon+0x10/0x10 [ 226.694038][T12177] mac80211_hwsim_new_radio+0x2f0e/0x5340 [ 226.694102][T12177] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 226.694128][T12177] ? trace_kmalloc+0x1f/0xd0 [ 226.694149][T12177] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 226.694173][T12177] ? kstrndup+0xbf/0x160 [ 226.694204][T12177] hwsim_new_radio_nl+0xea4/0x1b10 [ 226.694236][T12177] ? __pfx___nla_validate_parse+0x10/0x10 [ 226.694275][T12177] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 226.694307][T12177] ? genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 226.694344][T12177] ? __nla_parse+0x40/0x60 [ 226.694371][T12177] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 226.694407][T12177] genl_family_rcv_msg_doit+0x212/0x300 [ 226.694441][T12177] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 226.694483][T12177] ? bpf_lsm_capable+0x9/0x20 [ 226.694508][T12177] ? security_capable+0x7e/0x2e0 [ 226.694537][T12177] genl_rcv_msg+0x60e/0x790 [ 226.694570][T12177] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.694594][T12177] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 226.694640][T12177] netlink_rcv_skb+0x219/0x490 [ 226.694661][T12177] ? __pfx_genl_rcv_msg+0x10/0x10 [ 226.694688][T12177] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 226.694737][T12177] ? down_read+0x1ad/0x2e0 [ 226.694763][T12177] genl_rcv+0x28/0x40 [ 226.694785][T12177] netlink_unicast+0x758/0x8d0 [ 226.694852][T12177] netlink_sendmsg+0x805/0xb30 [ 226.694885][T12177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.694910][T12177] ? aa_sock_msg_perm+0x94/0x160 [ 226.694952][T12177] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 226.694973][T12177] ? __pfx_netlink_sendmsg+0x10/0x10 [ 226.694996][T12177] __sock_sendmsg+0x219/0x270 [ 226.695030][T12177] ____sys_sendmsg+0x505/0x830 [ 226.695063][T12177] ? __pfx_____sys_sendmsg+0x10/0x10 [ 226.695100][T12177] ? import_iovec+0x74/0xa0 [ 226.695131][T12177] ___sys_sendmsg+0x21f/0x2a0 [ 226.695160][T12177] ? __pfx____sys_sendmsg+0x10/0x10 [ 226.695231][T12177] ? __fget_files+0x2a/0x420 [ 226.695255][T12177] ? __fget_files+0x3a0/0x420 [ 226.695294][T12177] __x64_sys_sendmsg+0x19b/0x260 [ 226.695323][T12177] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 226.695370][T12177] ? do_syscall_64+0xba/0x210 [ 226.695398][T12177] do_syscall_64+0xf6/0x210 [ 226.695422][T12177] ? clear_bhb_loop+0x45/0xa0 [ 226.695448][T12177] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 226.695467][T12177] RIP: 0033:0x7f40c7f8e969 [ 226.695493][T12177] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 226.695510][T12177] RSP: 002b:00007f40c8e03038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 226.695538][T12177] RAX: ffffffffffffffda RBX: 00007f40c81b6080 RCX: 00007f40c7f8e969 [ 226.695553][T12177] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000005 [ 226.695565][T12177] RBP: 00007f40c8010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 226.695577][T12177] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 226.695588][T12177] R13: 0000000000000000 R14: 00007f40c81b6080 R15: 00007ffd31d769e8 [ 226.695622][T12177] [ 227.310772][T12027] hsr_slave_0: entered promiscuous mode [ 227.318076][T12027] hsr_slave_1: entered promiscuous mode [ 227.328028][T12027] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.336534][T12027] Cannot create hsr debugfs directory [ 227.440041][T12188] Cannot find map_set index 0 as target [ 228.045686][T12198] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 228.072347][ T5841] Bluetooth: hci3: command tx timeout [ 228.198019][ T82] hsr_slave_0: left promiscuous mode [ 228.219428][ T82] hsr_slave_1: left promiscuous mode [ 228.239508][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.251134][ T82] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.265550][ T82] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.276560][ T82] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.321247][ T82] veth1_macvtap: left promiscuous mode [ 228.327005][ T82] veth0_macvtap: left promiscuous mode [ 228.332967][ T82] veth1_vlan: left promiscuous mode [ 228.338334][ T82] veth0_vlan: left promiscuous mode [ 228.632753][ T5841] Bluetooth: hci0: command tx timeout [ 229.050164][ T82] team0 (unregistering): Port device team_slave_1 removed [ 229.125402][ T82] team0 (unregistering): Port device team_slave_0 removed [ 230.137932][T12004] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 230.153034][ T5841] Bluetooth: hci3: command tx timeout [ 230.172959][T12004] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 230.260504][T12229] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1721'. [ 230.264744][T12004] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 230.327759][T12004] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 230.500136][T12238] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1724'. [ 230.786089][T12248] netlink: 'syz.4.1727': attribute type 1 has an invalid length. [ 230.831346][T12248] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1727'. [ 230.918182][T12250] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1728'. [ 231.000238][T12004] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.040261][T12027] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 231.070315][T12004] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.083321][T12027] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 231.104781][T12027] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 231.129449][T12027] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 231.147597][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.154839][ T9116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.179949][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.187141][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.429945][T12027] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.469808][T12027] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.500877][ T1305] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.508163][ T1305] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.531191][ T1305] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.538450][ T1305] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.807582][T12004] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 231.966946][T12004] veth0_vlan: entered promiscuous mode [ 232.001107][T12004] veth1_vlan: entered promiscuous mode [ 232.096499][T12004] veth0_macvtap: entered promiscuous mode [ 232.119594][T12004] veth1_macvtap: entered promiscuous mode [ 232.139122][T12027] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 232.228123][T12004] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.276140][T12004] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 232.297491][T12004] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 232.311273][T12004] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.344963][T12004] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.358252][T12004] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.369862][T12004] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.384600][T12004] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.499957][T12027] veth0_vlan: entered promiscuous mode [ 232.538012][T12311] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 232.548627][T12311] netlink: 'syz.2.1742': attribute type 10 has an invalid length. [ 232.550751][T12027] veth1_vlan: entered promiscuous mode [ 232.585719][T12311] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.602919][T12311] bond0: (slave team0): Enslaving as an active interface with an up link [ 232.677279][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.698019][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.750527][T12027] veth0_macvtap: entered promiscuous mode [ 232.780976][T12319] xt_socket: unknown flags 0x2 [ 232.819901][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 232.821333][T12027] veth1_macvtap: entered promiscuous mode [ 232.841166][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 232.949375][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 232.983246][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.001076][T12027] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 233.041290][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.067800][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.080460][T12027] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 233.097802][T12027] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 233.114735][T12328] rdma_op ffff8880594809f0 conn xmit_rdma 0000000000000000 [ 233.127474][T12027] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 233.158821][T12027] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.172957][T12027] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.184855][T12027] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.200775][T12027] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 233.417215][T12342] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1751'. [ 233.424162][T12343] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1752'. [ 233.451336][T12342] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1751'. [ 233.459551][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.477161][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.496238][T12343] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1752'. [ 233.498478][T12342] netlink: 'syz.4.1751': attribute type 7 has an invalid length. [ 233.572464][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 233.587473][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 233.748943][T12354] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 233.967231][ T9116] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.151161][ T9116] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.488436][ T9116] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.573923][T12363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1758'. [ 234.592485][T12363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1758'. [ 234.609616][T12363] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1758'. [ 234.718898][ T9116] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.282917][ T9116] bridge_slave_1: left allmulticast mode [ 235.288631][ T9116] bridge_slave_1: left promiscuous mode [ 235.309083][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 235.312701][ T9116] bridge0: port 2(bridge_slave_1) entered disabled state [ 235.326842][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 235.336903][ T9116] bridge_slave_0: left allmulticast mode [ 235.342220][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 235.347816][ T9116] bridge_slave_0: left promiscuous mode [ 235.356965][ T9116] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.370130][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 235.379009][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 235.761425][ T9116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.774589][ T9116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.785011][ T9116] bond0 (unregistering): Released all slaves [ 235.824178][T12384] lo speed is unknown, defaulting to 1000 [ 235.984319][T12400] __nla_validate_parse: 34 callbacks suppressed [ 235.984347][T12400] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1763'. [ 236.051056][T12400] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1763'. [ 236.134231][T12409] sctp: [Deprecated]: syz.4.1765 (pid 12409) Use of int in max_burst socket option. [ 236.134231][T12409] Use struct sctp_assoc_value instead [ 236.747470][T12431] nbd: must specify an index to disconnect [ 237.100174][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 237.120977][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 237.135778][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 237.160230][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 237.192544][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 237.319159][ T9116] hsr_slave_0: left promiscuous mode [ 237.336282][ T9116] hsr_slave_1: left promiscuous mode [ 237.354669][ T9116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 237.367502][T12449] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1774'. [ 237.377632][T12449] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1774'. [ 237.408238][ T9116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 237.432044][ T5841] Bluetooth: hci0: command tx timeout [ 237.440508][ T9116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 237.463251][ T9116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 237.511497][ T9116] veth1_macvtap: left promiscuous mode [ 237.519438][ T9116] veth0_macvtap: left promiscuous mode [ 237.529541][ T9116] veth1_vlan: left promiscuous mode [ 237.535945][ T9116] veth0_vlan: left promiscuous mode [ 238.331989][ T9116] team0 (unregistering): Port device team_slave_1 removed [ 238.374018][ T9116] team0 (unregistering): Port device team_slave_0 removed [ 238.869424][T12443] lo speed is unknown, defaulting to 1000 [ 239.065035][T12384] chnl_net:caif_netlink_parms(): no params data found [ 239.274167][ T5841] Bluetooth: hci3: command tx timeout [ 239.353226][T12506] Can't find ip_set type [ 239.513136][ T5841] Bluetooth: hci0: command tx timeout [ 239.587048][T12519] tipc: Enabling of bearer rejected, failed to enable media [ 239.661086][T12384] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.677266][T12384] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.685540][T12384] bridge_slave_0: entered allmulticast mode [ 239.693544][T12384] bridge_slave_0: entered promiscuous mode [ 239.714727][T12384] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.734462][T12384] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.753329][T12384] bridge_slave_1: entered allmulticast mode [ 239.761286][T12384] bridge_slave_1: entered promiscuous mode [ 239.900549][T12384] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.984594][T12384] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 240.093528][T12384] team0: Port device team_slave_0 added [ 240.104197][T12384] team0: Port device team_slave_1 added [ 240.175715][T12547] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1797'. [ 240.278928][ T9116] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.325595][T12443] chnl_net:caif_netlink_parms(): no params data found [ 240.383467][T12384] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.397194][T12384] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.425076][T12384] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.439378][T12384] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.462027][T12384] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.524112][T12384] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.624299][ T9116] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.757845][ T9116] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.944900][ T9116] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.015360][T12384] hsr_slave_0: entered promiscuous mode [ 241.024718][T12384] hsr_slave_1: entered promiscuous mode [ 241.030878][T12384] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 241.039032][T12384] Cannot create hsr debugfs directory [ 241.088262][T12443] bridge0: port 1(bridge_slave_0) entered blocking state [ 241.096658][T12443] bridge0: port 1(bridge_slave_0) entered disabled state [ 241.104192][T12443] bridge_slave_0: entered allmulticast mode [ 241.113472][T12443] bridge_slave_0: entered promiscuous mode [ 241.196179][T12443] bridge0: port 2(bridge_slave_1) entered blocking state [ 241.204966][T12443] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.212838][T12443] bridge_slave_1: entered allmulticast mode [ 241.233578][T12443] bridge_slave_1: entered promiscuous mode [ 241.352277][ T5841] Bluetooth: hci3: command tx timeout [ 241.358869][T12584] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1810'. [ 241.385228][T12443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 241.405180][T12443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 241.430249][T12588] netlink: 136 bytes leftover after parsing attributes in process `syz.4.1811'. [ 241.532882][ T9116] bridge_slave_1: left allmulticast mode [ 241.542967][ T9116] bridge_slave_1: left promiscuous mode [ 241.550027][ T9116] bridge0: port 2(bridge_slave_1) entered disabled state [ 241.579527][ T9116] bridge_slave_0: left allmulticast mode [ 241.588697][ T9116] bridge_slave_0: left promiscuous mode [ 241.594558][ T5841] Bluetooth: hci0: command tx timeout [ 241.612204][T12595] sctp: [Deprecated]: syz.4.1811 (pid 12595) Use of int in max_burst socket option. [ 241.612204][T12595] Use struct sctp_assoc_value instead [ 241.621881][ T9116] bridge0: port 1(bridge_slave_0) entered disabled state [ 242.215760][ T9116] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 242.227573][ T9116] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 242.242637][ T9116] bond0 (unregistering): Released all slaves [ 242.260398][T12588] IPVS: Unknown mcast interface: pim6reg0 [ 242.276957][T12443] team0: Port device team_slave_0 added [ 242.290750][T12443] team0: Port device team_slave_1 added [ 242.303503][T12600] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1813'. [ 242.318286][T12600] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1813'. [ 242.341783][T12610] netlink: 'syz.1.1815': attribute type 29 has an invalid length. [ 242.349671][T12610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1815'. [ 242.461323][T12616] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1816'. [ 242.651220][T12632] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1820'. [ 242.707350][T12634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1820'. [ 242.730569][T12443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 242.738408][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.765992][T12443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 242.798684][T12634] geneve2: entered promiscuous mode [ 242.890787][T12443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 242.909483][T12443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 242.936256][T12443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 242.953108][T12650] xt_l2tp: wrong L2TP version: 0 [ 243.355491][T12666] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1828'. [ 243.366178][T12666] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1828'. [ 243.437281][ T5841] Bluetooth: hci3: command tx timeout [ 243.455952][T12443] hsr_slave_0: entered promiscuous mode [ 243.496110][T12443] hsr_slave_1: entered promiscuous mode [ 243.531374][T12443] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 243.549316][T12443] Cannot create hsr debugfs directory [ 243.636534][ T9116] hsr_slave_0: left promiscuous mode [ 243.648536][ T9116] hsr_slave_1: left promiscuous mode [ 243.661155][ T9116] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 243.672526][ T5841] Bluetooth: hci0: command tx timeout [ 243.684845][ T9116] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 243.701148][ T9116] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 243.709752][ T9116] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 243.744378][T12682] netlink: 'syz.1.1833': attribute type 1 has an invalid length. [ 243.783277][ T9116] veth1_macvtap: left promiscuous mode [ 243.788904][ T9116] veth0_macvtap: left promiscuous mode [ 243.795341][ T9116] veth1_vlan: left promiscuous mode [ 243.800745][ T9116] veth0_vlan: left promiscuous mode [ 244.311232][ T9116] team0 (unregistering): Port device team_slave_1 removed [ 244.355235][ T9116] team0 (unregistering): Port device team_slave_0 removed [ 244.850502][T12685] ip6erspan1: entered promiscuous mode [ 245.432662][T12384] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 245.457097][T12708] openvswitch: netlink: Message has 16 unknown bytes. [ 245.512678][ T5841] Bluetooth: hci3: command tx timeout [ 245.548283][T12384] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 245.583049][T12384] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 245.644240][T12384] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 245.772250][T12716] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 245.825894][T12723] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 246.139147][T12736] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 246.219232][T12384] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.321065][T12384] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.370495][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.377743][ T9116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.410400][T12443] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 246.477169][T12443] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 246.526644][T10464] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.533899][T10464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 246.550206][T12443] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 246.596912][T12443] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 246.911194][T12443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.962434][T12443] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.996045][T10464] bridge0: port 1(bridge_slave_0) entered blocking state [ 247.003313][T10464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 247.066706][T10464] bridge0: port 2(bridge_slave_1) entered blocking state [ 247.073991][T10464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.093572][T12768] __nla_validate_parse: 8 callbacks suppressed [ 247.093594][T12768] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1859'. [ 247.296559][T12384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.347471][T12781] sctp: [Deprecated]: syz.4.1862 (pid 12781) Use of int in max_burst socket option deprecated. [ 247.347471][T12781] Use struct sctp_assoc_value instead [ 247.444600][T12384] veth0_vlan: entered promiscuous mode [ 247.471504][T12384] veth1_vlan: entered promiscuous mode [ 247.527260][T12384] veth0_macvtap: entered promiscuous mode [ 247.585391][T12443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.593558][ T5841] Bluetooth: hci3: command tx timeout [ 247.600391][T12384] veth1_macvtap: entered promiscuous mode [ 247.644203][T12384] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.668727][T12384] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.682744][T12384] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.696438][T12384] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.720927][T12384] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.730688][T12384] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.743960][T12384] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.756762][T12384] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.807682][T12443] veth0_vlan: entered promiscuous mode [ 247.846100][T12443] veth1_vlan: entered promiscuous mode [ 247.997675][T10464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.021966][T10464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.029950][T12443] veth0_macvtap: entered promiscuous mode [ 248.100174][T12443] veth1_macvtap: entered promiscuous mode [ 248.109603][T12796] syzkaller1: entered promiscuous mode [ 248.117233][T12796] syzkaller1: entered allmulticast mode [ 248.151073][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.166387][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.169090][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 248.217173][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.229266][T12443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.264226][T12801] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1866'. [ 248.276783][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.296484][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.306891][T12443] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 248.319027][T12443] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 248.391124][T12443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.429402][T12443] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.461843][T12443] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.472962][T12443] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.481946][T12443] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.482852][T12811] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 248.793410][ T82] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.801298][ T82] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.892762][ T53] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.040826][T10464] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.072431][T10464] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.179626][ T53] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.377741][ T53] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.508506][ T53] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.604703][ T53] bridge_slave_1: left allmulticast mode [ 249.610378][ T53] bridge_slave_1: left promiscuous mode [ 249.616500][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.625894][ T53] bridge_slave_0: left allmulticast mode [ 249.636445][ T53] bridge_slave_0: left promiscuous mode [ 249.645897][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.063474][T12853] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1877'. [ 250.512947][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.525420][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.534105][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.544428][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.556123][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.655903][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.668850][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.681244][ T53] bond0 (unregistering): Released all slaves [ 250.837989][T12832] lo speed is unknown, defaulting to 1000 [ 251.053682][T12857] lo speed is unknown, defaulting to 1000 [ 251.278596][T12864] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1879'. [ 251.329872][T12863] tunl0: left promiscuous mode [ 251.374940][T12868] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1878'. [ 251.399775][T12864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1879'. [ 251.410319][T12864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1879'. [ 251.418077][T12863] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.426559][T12863] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.434168][T12863] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.441309][T12863] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.453054][T12864] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1879'. [ 251.517869][T12863] bridge0: left promiscuous mode [ 251.547251][T12863] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 251.774625][ T1305] batman_adv: batadv1: MLD Querier disappeared - multicast optimizations disabled [ 251.804418][T12874] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1880'. [ 252.073201][T12878] xt_CT: No such helper "pptp" [ 252.157935][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 252.167303][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 252.167643][T12886] geneve2: entered promiscuous mode [ 252.175732][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 252.184042][T12886] geneve2: entered allmulticast mode [ 252.189249][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 252.203898][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 252.240458][ T53] hsr_slave_0: left promiscuous mode [ 252.250725][ T53] hsr_slave_1: left promiscuous mode [ 252.258151][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.266303][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 252.276816][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 252.284453][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.309475][ T53] veth1_macvtap: left promiscuous mode [ 252.315585][ T53] veth0_macvtap: left promiscuous mode [ 252.321320][ T53] veth1_vlan: left promiscuous mode [ 252.327957][ T53] veth0_vlan: left promiscuous mode [ 252.632852][ T5837] Bluetooth: hci0: command tx timeout [ 252.800175][ T53] team0 (unregistering): Port device team_slave_1 removed [ 252.842949][ T1305] batman_adv: batadv1: MLD Querier appeared [ 252.879101][ T53] team0 (unregistering): Port device team_slave_0 removed [ 253.595031][T12885] lo speed is unknown, defaulting to 1000 [ 253.678595][T12857] chnl_net:caif_netlink_parms(): no params data found [ 253.793875][T12911] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1889'. [ 254.080236][T12857] bridge0: port 1(bridge_slave_0) entered blocking state [ 254.111705][T12857] bridge0: port 1(bridge_slave_0) entered disabled state [ 254.119526][T12857] bridge_slave_0: entered allmulticast mode [ 254.138180][T12857] bridge_slave_0: entered promiscuous mode [ 254.163181][T12857] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.179707][T12857] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.197921][T12857] bridge_slave_1: entered allmulticast mode [ 254.230236][T12857] bridge_slave_1: entered promiscuous mode [ 254.237741][ T5837] Bluetooth: hci3: command tx timeout [ 254.364977][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1897'. [ 254.376826][T12939] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1897'. [ 254.465224][T12857] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.481423][T12944] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 254.506891][T12938] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1898'. [ 254.570405][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.589595][T12857] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.675183][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.712279][ T5837] Bluetooth: hci0: command tx timeout [ 254.809856][T12857] team0: Port device team_slave_0 added [ 254.895401][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.921427][T12857] team0: Port device team_slave_1 added [ 254.929309][T12967] netlink: 18 bytes leftover after parsing attributes in process `syz.1.1905'. [ 255.014807][T12967] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 255.033292][T12967] xt_hashlimit: size too large, truncated to 1048576 [ 255.057117][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 255.280197][T12971] ÿ: renamed from dummy0 (while UP) [ 255.337290][T12982] netlink: 'syz.2.1907': attribute type 1 has an invalid length. [ 255.351252][T12857] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 255.358628][T12857] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.385159][T12857] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 255.404186][T12857] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 255.411404][T12857] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 255.438044][T12857] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 255.513561][T12983] bond0: entered promiscuous mode [ 255.518862][T12983] bond_slave_0: entered promiscuous mode [ 255.524934][T12983] bond_slave_1: entered promiscuous mode [ 255.530991][T12983] team0: entered promiscuous mode [ 255.536356][T12983] team_slave_0: entered promiscuous mode [ 255.552044][T12983] team_slave_1: entered promiscuous mode [ 255.563159][T12983] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 255.576527][T12983] bond4: (slave macvlan0): Enslaving as a backup interface with an up link [ 255.640365][T12989] Bluetooth: MGMT ver 1.23 [ 255.737178][T12857] hsr_slave_0: entered promiscuous mode [ 255.747402][T12857] hsr_slave_1: entered promiscuous mode [ 255.754825][T12857] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.763925][T12857] Cannot create hsr debugfs directory [ 255.817078][T12996] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1910'. [ 255.858995][T12885] chnl_net:caif_netlink_parms(): no params data found [ 255.957985][T12998] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1912'. [ 255.997043][T12998] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1912'. [ 256.099178][ T53] bridge_slave_1: left allmulticast mode [ 256.107945][ T53] bridge_slave_1: left promiscuous mode [ 256.120966][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.124555][T13012] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1915'. [ 256.150342][ T53] bridge_slave_0: left allmulticast mode [ 256.156930][ T53] bridge_slave_0: left promiscuous mode [ 256.168536][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.312389][ T5837] Bluetooth: hci3: command tx timeout [ 256.598554][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 256.610410][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 256.621487][ T53] bond0 (unregistering): Released all slaves [ 256.794723][ T5837] Bluetooth: hci0: command tx timeout [ 256.861268][T13031] netlink: 'syz.2.1921': attribute type 21 has an invalid length. [ 256.984666][T13031] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1921'. [ 257.016868][T12885] bridge0: port 1(bridge_slave_0) entered blocking state [ 257.031349][T12885] bridge0: port 1(bridge_slave_0) entered disabled state [ 257.054614][T12885] bridge_slave_0: entered allmulticast mode [ 257.065551][T12885] bridge_slave_0: entered promiscuous mode [ 257.157082][T12885] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.165581][T12885] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.173529][T12885] bridge_slave_1: entered allmulticast mode [ 257.182478][T13044] netlink: 'syz.2.1924': attribute type 20 has an invalid length. [ 257.190698][T12885] bridge_slave_1: entered promiscuous mode [ 257.238726][T13043] lo: entered promiscuous mode [ 257.251422][T13043] tunl0: entered promiscuous mode [ 257.267012][T13043] gre0: entered promiscuous mode [ 257.286072][T13043] gretap0: entered promiscuous mode [ 257.313646][T13043] erspan0: entered promiscuous mode [ 257.329785][T13043] ip_vti0: entered promiscuous mode [ 257.343057][T13037] syzkaller1: entered promiscuous mode [ 257.348762][T13037] syzkaller1: entered allmulticast mode [ 257.384467][T12885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 257.419284][T12885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 257.861457][T12885] team0: Port device team_slave_0 added [ 257.878014][T12885] team0: Port device team_slave_1 added [ 257.900322][ T53] hsr_slave_0: left promiscuous mode [ 257.907969][ T53] hsr_slave_1: left promiscuous mode [ 257.915189][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 257.923304][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 257.931293][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 257.940259][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 257.966320][ T53] veth1_macvtap: left promiscuous mode [ 257.972653][ T53] veth0_macvtap: left promiscuous mode [ 257.978315][ T53] veth1_vlan: left promiscuous mode [ 257.984160][ T53] veth0_vlan: left promiscuous mode [ 258.394503][ T5837] Bluetooth: hci3: command tx timeout [ 258.458232][ T53] team0 (unregistering): Port device team_slave_1 removed [ 258.500861][ T53] team0 (unregistering): Port device team_slave_0 removed [ 258.739894][T13070] can: request_module (can-proto-0) failed. [ 258.875543][ T5837] Bluetooth: hci0: command tx timeout [ 259.114260][T12885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 259.139960][T12885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.179045][T12885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 259.210956][T12885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 259.228428][T12885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 259.276414][T12885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 259.366538][ T5837] block nbd1: Receive control failed (result -32) [ 259.421361][T12885] hsr_slave_0: entered promiscuous mode [ 259.456665][T12885] hsr_slave_1: entered promiscuous mode [ 259.475091][T12885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 259.501230][T12885] Cannot create hsr debugfs directory [ 259.755030][T12857] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 259.810364][T12857] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 259.829425][T13108] netlink: 'syz.1.1942': attribute type 1 has an invalid length. [ 259.837839][T13108] __nla_validate_parse: 2 callbacks suppressed [ 259.837856][T13108] netlink: 17 bytes leftover after parsing attributes in process `syz.1.1942'. [ 259.886593][T12857] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 259.917862][T12857] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 260.085896][T13122] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1945'. [ 260.098852][T13122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1945'. [ 260.429966][T13138] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1947'. [ 260.475249][ T5837] Bluetooth: hci3: command tx timeout [ 260.514970][T12857] 8021q: adding VLAN 0 to HW filter on device bond0 [ 260.630260][T12857] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.679643][T13145] netlink: 'syz.4.1949': attribute type 2 has an invalid length. [ 260.680140][T10464] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.694690][T10464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.711846][T13144] netlink: 512 bytes leftover after parsing attributes in process `syz.1.1950'. [ 260.779119][T12885] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 260.785823][T13149] netlink: 'syz.4.1951': attribute type 8 has an invalid length. [ 260.838470][T12885] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 260.870881][T10464] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.878119][T10464] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.902366][T12885] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 260.942864][T12885] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 261.093732][T12857] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.387213][T12885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.453796][T12885] 8021q: adding VLAN 0 to HW filter on device team0 [ 261.489993][T13172] netlink: 'syz.2.1957': attribute type 32 has an invalid length. [ 261.506955][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.514309][ T9116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 261.554746][T13175] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1958'. [ 261.584342][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.591612][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 261.707500][T12857] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 261.936337][T12857] veth0_vlan: entered promiscuous mode [ 261.979469][T12857] veth1_vlan: entered promiscuous mode [ 261.988176][T13186] ip6t_srh: unknown srh invflags 4449 [ 262.079610][T12857] veth0_macvtap: entered promiscuous mode [ 262.136896][T12857] veth1_macvtap: entered promiscuous mode [ 262.210928][T12857] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 262.282977][T12857] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 262.312484][T12857] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 262.336099][T12857] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.405275][T12857] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.432214][T12857] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.448064][T12857] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.458519][T12857] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.589992][T12885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 262.762185][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.770039][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.787491][T12885] veth0_vlan: entered promiscuous mode [ 262.838517][T12885] veth1_vlan: entered promiscuous mode [ 262.849280][T13215] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1972'. [ 262.869418][T13215] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1972'. [ 262.893065][ T9116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.901430][ T9116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.051259][T13219] 8021q: adding VLAN 0 to HW filter on device bond3 [ 263.064828][T13219] bond0: (slave bond3): Enslaving as an active interface with an up link [ 263.091314][T13224] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1974'. [ 263.100355][T13224] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1974'. [ 263.120581][T13215] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 263.192769][T13215] bond4: entered promiscuous mode [ 263.197867][T13215] bond4: entered allmulticast mode [ 263.204793][T13215] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.271084][T12885] veth0_macvtap: entered promiscuous mode [ 263.325637][T12885] veth1_macvtap: entered promiscuous mode [ 263.373817][T12885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 263.386813][T12885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.406022][T12885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.527351][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.556416][T12885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.582023][T12885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.601593][T12885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 263.621819][T12885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 263.633408][T12885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.652120][T12885] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.660872][T12885] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.686010][T12885] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.697788][T12885] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.738201][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.809797][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 263.873906][ T1305] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.885073][ T1305] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 263.915887][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 263.925168][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.028127][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 264.181000][ T13] bridge_slave_1: left allmulticast mode [ 264.187486][ T13] bridge_slave_1: left promiscuous mode [ 264.193849][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.204985][ T13] bridge_slave_0: left allmulticast mode [ 264.211001][ T13] bridge_slave_0: left promiscuous mode [ 264.217177][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.888248][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 264.899667][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 264.908090][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 264.917656][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 264.927147][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 264.930681][ T13] bond0 (unregistering): Released all slaves [ 264.946622][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 264.955332][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 265.009706][T13248] lo speed is unknown, defaulting to 1000 [ 265.407044][T13248] chnl_net:caif_netlink_parms(): no params data found [ 265.505077][ T13] hsr_slave_0: left promiscuous mode [ 265.511020][ T13] hsr_slave_1: left promiscuous mode [ 265.522963][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 265.530413][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 265.543624][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 265.551078][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 265.575024][ T13] veth1_macvtap: left promiscuous mode [ 265.580611][ T13] veth0_macvtap: left promiscuous mode [ 265.586910][ T13] veth1_vlan: left promiscuous mode [ 265.592964][ T13] veth0_vlan: left promiscuous mode [ 265.774082][T13261] __nla_validate_parse: 1 callbacks suppressed [ 265.774104][T13261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1982'. [ 266.128604][ T5837] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 266.147785][ T5837] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 266.163892][ T5837] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 266.173748][ T5837] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 266.188588][ T5837] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 266.400456][ T13] team0 (unregistering): Port device team_slave_1 removed [ 266.445193][ T13] team0 (unregistering): Port device team_slave_0 removed [ 267.031902][ T5837] Bluetooth: hci0: command tx timeout [ 267.033270][T13272] lo speed is unknown, defaulting to 1000 [ 267.087221][T13281] netlink: 'syz.4.1987': attribute type 1 has an invalid length. [ 267.094962][T13248] bridge0: port 1(bridge_slave_0) entered blocking state [ 267.102788][T13248] bridge0: port 1(bridge_slave_0) entered disabled state [ 267.109916][T13281] netlink: 'syz.4.1987': attribute type 3 has an invalid length. [ 267.110201][T13248] bridge_slave_0: entered allmulticast mode [ 267.127265][T13248] bridge_slave_0: entered promiscuous mode [ 267.138595][T13248] bridge0: port 2(bridge_slave_1) entered blocking state [ 267.150987][T13248] bridge0: port 2(bridge_slave_1) entered disabled state [ 267.158445][T13248] bridge_slave_1: entered allmulticast mode [ 267.166719][T13248] bridge_slave_1: entered promiscuous mode [ 267.170020][T13281] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1987'. [ 267.486878][T13248] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 267.516600][T13248] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 267.613944][T13248] team0: Port device team_slave_0 added [ 267.620815][T13296] xt_CT: No such helper "snmp" [ 267.638501][T13248] team0: Port device team_slave_1 added [ 267.728407][T13302] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1991'. [ 267.769839][T13248] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.777580][T13248] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.804498][T13248] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.831436][T13248] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.840464][T13248] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.872534][T13248] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.944991][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.043648][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.232466][ T5837] Bluetooth: hci3: command tx timeout [ 268.249754][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.278369][T13248] hsr_slave_0: entered promiscuous mode [ 268.285459][T13248] hsr_slave_1: entered promiscuous mode [ 268.291782][T13248] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 268.299430][T13248] Cannot create hsr debugfs directory [ 268.465065][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.717605][T13344] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 268.728456][T13344] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 268.815088][T13272] chnl_net:caif_netlink_parms(): no params data found [ 268.850952][T13347] netlink: 'syz.2.2004': attribute type 12 has an invalid length. [ 268.859792][T13347] netlink: 132 bytes leftover after parsing attributes in process `syz.2.2004'. [ 268.942385][T13354] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2007'. [ 269.122717][ T5837] Bluetooth: hci0: command tx timeout [ 269.165392][ T13] bridge_slave_1: left allmulticast mode [ 269.171144][ T13] bridge_slave_1: left promiscuous mode [ 269.177242][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.188751][ T13] bridge_slave_0: left allmulticast mode [ 269.195208][ T13] bridge_slave_0: left promiscuous mode [ 269.201100][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.670908][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.694980][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.705713][ T13] bond0 (unregistering): Released all slaves [ 269.954087][T13272] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.965412][T13272] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.973631][T13272] bridge_slave_0: entered allmulticast mode [ 269.981471][T13272] bridge_slave_0: entered promiscuous mode [ 270.025936][T13272] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.052240][T13272] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.064814][T13272] bridge_slave_1: entered allmulticast mode [ 270.096003][T13272] bridge_slave_1: entered promiscuous mode [ 270.286186][T13405] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2020'. [ 270.312291][ T5837] Bluetooth: hci3: command tx timeout [ 270.380577][T13272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 270.444195][T13272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 270.667934][T13415] openvswitch: netlink: Key 22 has unexpected len 106 expected 4 [ 270.729737][T13272] team0: Port device team_slave_0 added [ 270.790409][ T13] hsr_slave_0: left promiscuous mode [ 270.806790][ T13] hsr_slave_1: left promiscuous mode [ 270.814642][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.823055][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.831459][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.843711][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.867136][ T13] veth1_macvtap: left promiscuous mode [ 270.873556][ T13] veth0_macvtap: left promiscuous mode [ 270.879175][ T13] veth1_vlan: left promiscuous mode [ 270.884988][ T13] veth0_vlan: left promiscuous mode [ 271.196283][ T5837] Bluetooth: hci0: command tx timeout [ 271.428170][ T13] team0 (unregistering): Port device team_slave_1 removed [ 271.475107][ T13] team0 (unregistering): Port device team_slave_0 removed [ 271.827358][T13272] team0: Port device team_slave_1 added [ 271.973508][T13272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.980604][T13272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.037749][T13272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.088610][T13272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.104152][T13272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.153414][T13450] openvswitch: netlink: Duplicate key (type 0). [ 272.172107][T13272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.283717][T13248] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 272.335239][T13248] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 272.349113][T13454] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2033'. [ 272.391830][ T5837] Bluetooth: hci3: command tx timeout [ 272.417797][T13248] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 272.483368][T13272] hsr_slave_0: entered promiscuous mode [ 272.490275][T13272] hsr_slave_1: entered promiscuous mode [ 272.496880][T13272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.505521][T13272] Cannot create hsr debugfs directory [ 272.516503][T13455] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2033'. [ 272.526659][T13248] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 272.937952][T13248] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.006029][T13248] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.084035][ T9116] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.091224][ T9116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.153160][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.160373][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.271187][T13248] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 273.284806][ T5837] Bluetooth: hci0: command tx timeout [ 273.444587][T13272] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 273.458105][T13272] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 273.485239][T13272] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 273.508822][T13272] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 273.536395][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 273.567402][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 273.571617][T13494] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2042'. [ 273.628936][T13489] netlink: 32 bytes leftover after parsing attributes in process `syz.2.2042'. [ 273.646893][T13496] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2044'. [ 273.668741][T13496] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2044'. [ 273.717285][T13248] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 273.786537][T13272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.827880][T13272] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.847199][T13248] veth0_vlan: entered promiscuous mode [ 273.857736][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.865001][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.888305][ T1323] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.895488][ T1323] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.909250][T13248] veth1_vlan: entered promiscuous mode [ 274.024545][T13501] xt_CT: You must specify a L4 protocol and not use inversions on it [ 274.045174][T13248] veth0_macvtap: entered promiscuous mode [ 274.063520][T13501] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2046'. [ 274.073829][T13248] veth1_macvtap: entered promiscuous mode [ 274.143539][T13248] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.200695][T13504] bridge3: entered promiscuous mode [ 274.210280][T13504] bridge3: entered allmulticast mode [ 274.222267][T13248] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.263368][T13509] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2048'. [ 274.273067][T13248] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.306720][T13248] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 274.349913][T13248] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.364117][T13248] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.373276][T13248] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.382420][T13248] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 274.472017][ T5837] Bluetooth: hci3: command tx timeout [ 274.645362][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.676276][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.724592][T13272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.818412][ T1323] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 274.861238][ T1323] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 274.910294][T13272] veth0_vlan: entered promiscuous mode [ 274.960590][T13272] veth1_vlan: entered promiscuous mode [ 275.035040][T13532] lo speed is unknown, defaulting to 1000 [ 275.050426][T13272] veth0_macvtap: entered promiscuous mode [ 275.137156][T13272] veth1_macvtap: entered promiscuous mode [ 275.158942][T13536] netlink: 201056 bytes leftover after parsing attributes in process `syz.2.2056'. [ 275.181284][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.199721][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.226071][T13272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.242559][T13536] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2056'. [ 275.283148][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.317317][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.342431][T13272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.370435][T13272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.390306][T13272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.464516][T13272] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.480049][T13272] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.494036][T13272] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.503245][T13272] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.697355][T10464] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.723938][T10464] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.793806][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.810778][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.857043][T10464] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.268704][T10464] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.499219][T10464] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.581687][T10464] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.721227][T10464] bridge_slave_1: left allmulticast mode [ 276.727933][T10464] bridge_slave_1: left promiscuous mode [ 276.734388][T10464] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.745013][T10464] bridge_slave_0: left allmulticast mode [ 276.750676][T10464] bridge_slave_0: left promiscuous mode [ 276.757224][T10464] bridge0: port 1(bridge_slave_0) entered disabled state [ 277.196277][T13571] netlink: 'syz.1.2066': attribute type 9 has an invalid length. [ 277.212498][T13571] netlink: 'syz.1.2066': attribute type 6 has an invalid length. [ 277.492314][T10464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.511296][T10464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.526351][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 277.536636][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 277.537384][T10464] bond0 (unregistering): Released all slaves [ 277.552375][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 277.560568][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 277.585439][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 277.591884][T13575] pimreg3: entered allmulticast mode [ 277.658038][T13578] lo speed is unknown, defaulting to 1000 [ 278.053157][T10464] hsr_slave_0: left promiscuous mode [ 278.059201][T10464] hsr_slave_1: left promiscuous mode [ 278.081606][T10464] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 278.089826][T10464] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 278.097773][T10464] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 278.105394][T10464] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 278.126509][T10464] veth1_macvtap: left promiscuous mode [ 278.132548][T10464] veth0_macvtap: left promiscuous mode [ 278.138151][T10464] veth1_vlan: left promiscuous mode [ 278.143566][T10464] veth0_vlan: left promiscuous mode [ 278.235514][T10464] ------------[ cut here ]------------ [ 278.241239][T10464] WARNING: CPU: 0 PID: 10464 at net/ipv6/route.c:4803 rt6_multipath_rebalance+0x455/0x8b0 [ 278.251172][T10464] Modules linked in: [ 278.255322][T10464] CPU: 0 UID: 0 PID: 10464 Comm: kworker/u8:9 Not tainted 6.15.0-rc4-syzkaller-00152-g4397684a292a #0 PREEMPT(full) [ 278.267575][T10464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 278.277668][T10464] Workqueue: netns cleanup_net [ 278.282479][T10464] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 278.288747][T10464] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 5d 5a 13 f8 e9 78 fe ff ff e8 e3 65 b1 f7 eb 05 e8 dc 65 b1 f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 278.308472][T10464] RSP: 0018:ffffc9000b22efa0 EFLAGS: 00010293 [ 278.314601][T10464] RAX: ffffffff8a0e5a6d RBX: ffff88803236b400 RCX: ffff888028788000 [ 278.322643][T10464] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 278.330628][T10464] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 278.338622][T10464] R10: dffffc0000000000 R11: fffff52001645dec R12: ffff88803236b4ce [ 278.346636][T10464] R13: ffff88803236b490 R14: 0000000000000000 R15: 1ffff1100646d692 [ 278.354647][T10464] FS: 0000000000000000(0000) GS:ffff8881260cc000(0000) knlGS:0000000000000000 [ 278.363712][T10464] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 278.370316][T10464] CR2: 00007f29e36e5000 CR3: 000000000dd36000 CR4: 00000000003526f0 [ 278.378317][T10464] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 278.386330][T10464] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 278.394326][T10464] Call Trace: [ 278.397604][T10464] [ 278.400553][T10464] fib6_ifdown+0x401/0x4c0 [ 278.405031][T10464] ? __pfx_fib6_ifdown+0x10/0x10 [ 278.410002][T10464] fib6_clean_node+0x24a/0x590 [ 278.414855][T10464] ? __pfx_fib6_clean_node+0x10/0x10 [ 278.420203][T10464] ? __local_bh_enable_ip+0x12d/0x1c0 [ 278.425658][T10464] fib6_walk_continue+0x678/0x910 [ 278.430749][T10464] fib6_walk+0x149/0x290 [ 278.435051][T10464] __fib6_clean_all+0x234/0x380 [ 278.439926][T10464] ? __fib6_clean_all+0x9b/0x380 [ 278.444937][T10464] ? __pfx_fib6_ifdown+0x10/0x10 [ 278.449903][T10464] ? __pfx___fib6_clean_all+0x10/0x10 [ 278.455333][T10464] ? __pfx_fib6_clean_node+0x10/0x10 [ 278.460662][T10464] ? __pfx_fib6_ifdown+0x10/0x10 [ 278.465685][T10464] ? __lock_acquire+0xaac/0xd20 [ 278.470578][T10464] rt6_disable_ip+0x120/0x720 [ 278.475326][T10464] ? rcu_is_watching+0x15/0xb0 [ 278.480128][T10464] ? __pfx_rt6_disable_ip+0x10/0x10 [ 278.485400][T10464] addrconf_ifdown+0x15d/0x1880 [ 278.490290][T10464] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 278.495986][T10464] ? __pfx___mutex_lock+0x10/0x10 [ 278.501044][T10464] ? tls_dev_event+0x717/0xec0 [ 278.505872][T10464] ? __pfx_addrconf_ifdown+0x10/0x10 [ 278.511223][T10464] addrconf_notify+0x1bc/0x1010 [ 278.516152][T10464] notifier_call_chain+0x1b3/0x3e0 [ 278.521320][T10464] dev_close_many+0x29c/0x410 [ 278.526061][T10464] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 278.532105][T10464] ? __pfx_dev_close_many+0x10/0x10 [ 278.537351][T10464] unregister_netdevice_many_notify+0x834/0x2330 [ 278.543757][T10464] ? __local_bh_enable_ip+0x12d/0x1c0 [ 278.549177][T10464] ? __local_bh_enable_ip+0x12d/0x1c0 [ 278.554642][T10464] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 278.561461][T10464] ? unregister_netdevice_queue+0x1b3/0x380 [ 278.567444][T10464] ? batadv_meshif_destroy_netlink+0x1dd/0x270 [ 278.573662][T10464] default_device_exit_batch+0x819/0x890 [ 278.579343][T10464] ? __pfx___might_resched+0x10/0x10 [ 278.584703][T10464] ? __pfx_default_device_exit_batch+0x10/0x10 [ 278.590894][T10464] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 278.596423][T10464] ? __pfx_default_device_exit_batch+0x10/0x10 [ 278.602662][T10464] cleanup_net+0x7a9/0xbd0 [ 278.607120][T10464] ? __pfx_cleanup_net+0x10/0x10 [ 278.612127][T10464] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.617351][T10464] ? process_scheduled_works+0x9ec/0x17a0 [ 278.623146][T10464] ? process_scheduled_works+0x9ec/0x17a0 [ 278.628937][T10464] process_scheduled_works+0xadb/0x17a0 [ 278.634619][T10464] ? __pfx_process_scheduled_works+0x10/0x10 [ 278.640667][T10464] worker_thread+0x8a0/0xda0 [ 278.645320][T10464] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 278.651725][T10464] ? __kthread_parkme+0x7b/0x200 [ 278.656707][T10464] kthread+0x70e/0x8a0 [ 278.660811][T10464] ? __pfx_worker_thread+0x10/0x10 [ 278.665979][T10464] ? __pfx_kthread+0x10/0x10 [ 278.670606][T10464] ? __pfx_kthread+0x10/0x10 [ 278.675263][T10464] ? _raw_spin_unlock_irq+0x23/0x50 [ 278.680492][T10464] ? lockdep_hardirqs_on+0x9c/0x150 [ 278.685753][T10464] ? __pfx_kthread+0x10/0x10 [ 278.690384][T10464] ret_from_fork+0x4b/0x80 [ 278.694854][T10464] ? __pfx_kthread+0x10/0x10 [ 278.699476][T10464] ret_from_fork_asm+0x1a/0x30 [ 278.704319][T10464] [ 278.707381][T10464] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 278.714684][T10464] CPU: 0 UID: 0 PID: 10464 Comm: kworker/u8:9 Not tainted 6.15.0-rc4-syzkaller-00152-g4397684a292a #0 PREEMPT(full) [ 278.726984][T10464] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/29/2025 [ 278.737104][T10464] Workqueue: netns cleanup_net [ 278.741909][T10464] Call Trace: [ 278.745218][T10464] [ 278.748174][T10464] dump_stack_lvl+0x99/0x250 [ 278.752820][T10464] ? __asan_memcpy+0x40/0x70 [ 278.757439][T10464] ? __pfx_dump_stack_lvl+0x10/0x10 [ 278.762679][T10464] ? __pfx__printk+0x10/0x10 [ 278.767315][T10464] panic+0x2db/0x790 [ 278.771261][T10464] ? __pfx_panic+0x10/0x10 [ 278.775713][T10464] ? show_trace_log_lvl+0x4fb/0x550 [ 278.780971][T10464] ? ret_from_fork_asm+0x1a/0x30 [ 278.786034][T10464] __warn+0x31b/0x4b0 [ 278.790054][T10464] ? rt6_multipath_rebalance+0x455/0x8b0 [ 278.795725][T10464] ? rt6_multipath_rebalance+0x455/0x8b0 [ 278.801392][T10464] report_bug+0x2be/0x4f0 [ 278.805752][T10464] ? rt6_multipath_rebalance+0x455/0x8b0 [ 278.811417][T10464] ? rt6_multipath_rebalance+0x455/0x8b0 [ 278.817084][T10464] ? rt6_multipath_rebalance+0x457/0x8b0 [ 278.822751][T10464] handle_bug+0x84/0x160 [ 278.827039][T10464] exc_invalid_op+0x1a/0x50 [ 278.831581][T10464] asm_exc_invalid_op+0x1a/0x20 [ 278.836459][T10464] RIP: 0010:rt6_multipath_rebalance+0x455/0x8b0 [ 278.842738][T10464] Code: ff ff 44 89 e1 80 e1 07 38 c1 0f 8c 85 fe ff ff 4c 89 e7 e8 5d 5a 13 f8 e9 78 fe ff ff e8 e3 65 b1 f7 eb 05 e8 dc 65 b1 f7 90 <0f> 0b 90 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 278.862383][T10464] RSP: 0018:ffffc9000b22efa0 EFLAGS: 00010293 [ 278.868487][T10464] RAX: ffffffff8a0e5a6d RBX: ffff88803236b400 RCX: ffff888028788000 [ 278.876491][T10464] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 278.884492][T10464] RBP: dffffc0000000000 R08: 0000000000000003 R09: 0000000000000004 [ 278.892501][T10464] R10: dffffc0000000000 R11: fffff52001645dec R12: ffff88803236b4ce [ 278.900507][T10464] R13: ffff88803236b490 R14: 0000000000000000 R15: 1ffff1100646d692 [ 278.908524][T10464] ? rt6_multipath_rebalance+0x44d/0x8b0 [ 278.914223][T10464] fib6_ifdown+0x401/0x4c0 [ 278.918686][T10464] ? __pfx_fib6_ifdown+0x10/0x10 [ 278.923658][T10464] fib6_clean_node+0x24a/0x590 [ 278.928460][T10464] ? __pfx_fib6_clean_node+0x10/0x10 [ 278.933782][T10464] ? __local_bh_enable_ip+0x12d/0x1c0 [ 278.939198][T10464] fib6_walk_continue+0x678/0x910 [ 278.944620][T10464] fib6_walk+0x149/0x290 [ 278.948893][T10464] __fib6_clean_all+0x234/0x380 [ 278.953772][T10464] ? __fib6_clean_all+0x9b/0x380 [ 278.958741][T10464] ? __pfx_fib6_ifdown+0x10/0x10 [ 278.963717][T10464] ? __pfx___fib6_clean_all+0x10/0x10 [ 278.969120][T10464] ? __pfx_fib6_clean_node+0x10/0x10 [ 278.974443][T10464] ? __pfx_fib6_ifdown+0x10/0x10 [ 278.979414][T10464] ? __lock_acquire+0xaac/0xd20 [ 278.984315][T10464] rt6_disable_ip+0x120/0x720 [ 278.989047][T10464] ? rcu_is_watching+0x15/0xb0 [ 278.993842][T10464] ? __pfx_rt6_disable_ip+0x10/0x10 [ 278.999085][T10464] addrconf_ifdown+0x15d/0x1880 [ 279.003980][T10464] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 279.009650][T10464] ? __pfx___mutex_lock+0x10/0x10 [ 279.014709][T10464] ? tls_dev_event+0x717/0xec0 [ 279.019507][T10464] ? __pfx_addrconf_ifdown+0x10/0x10 [ 279.024847][T10464] addrconf_notify+0x1bc/0x1010 [ 279.029735][T10464] notifier_call_chain+0x1b3/0x3e0 [ 279.034894][T10464] dev_close_many+0x29c/0x410 [ 279.039599][T10464] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 279.045619][T10464] ? __pfx_dev_close_many+0x10/0x10 [ 279.050863][T10464] unregister_netdevice_many_notify+0x834/0x2330 [ 279.057238][T10464] ? __local_bh_enable_ip+0x12d/0x1c0 [ 279.062665][T10464] ? __local_bh_enable_ip+0x12d/0x1c0 [ 279.068088][T10464] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 279.074912][T10464] ? unregister_netdevice_queue+0x1b3/0x380 [ 279.080858][T10464] ? batadv_meshif_destroy_netlink+0x1dd/0x270 [ 279.087054][T10464] default_device_exit_batch+0x819/0x890 [ 279.092740][T10464] ? __pfx___might_resched+0x10/0x10 [ 279.098056][T10464] ? __pfx_default_device_exit_batch+0x10/0x10 [ 279.104243][T10464] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 279.109749][T10464] ? __pfx_default_device_exit_batch+0x10/0x10 [ 279.115942][T10464] cleanup_net+0x7a9/0xbd0 [ 279.120392][T10464] ? __pfx_cleanup_net+0x10/0x10 [ 279.125373][T10464] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.130609][T10464] ? process_scheduled_works+0x9ec/0x17a0 [ 279.136369][T10464] ? process_scheduled_works+0x9ec/0x17a0 [ 279.142154][T10464] process_scheduled_works+0xadb/0x17a0 [ 279.147858][T10464] ? __pfx_process_scheduled_works+0x10/0x10 [ 279.153925][T10464] worker_thread+0x8a0/0xda0 [ 279.158529][T10464] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 279.164877][T10464] ? __kthread_parkme+0x7b/0x200 [ 279.169828][T10464] kthread+0x70e/0x8a0 [ 279.173908][T10464] ? __pfx_worker_thread+0x10/0x10 [ 279.179028][T10464] ? __pfx_kthread+0x10/0x10 [ 279.183675][T10464] ? __pfx_kthread+0x10/0x10 [ 279.188282][T10464] ? _raw_spin_unlock_irq+0x23/0x50 [ 279.193576][T10464] ? lockdep_hardirqs_on+0x9c/0x150 [ 279.198780][T10464] ? __pfx_kthread+0x10/0x10 [ 279.203378][T10464] ret_from_fork+0x4b/0x80 [ 279.207806][T10464] ? __pfx_kthread+0x10/0x10 [ 279.212409][T10464] ret_from_fork_asm+0x1a/0x30 [ 279.217205][T10464] [ 279.220930][T10464] Kernel Offset: disabled [ 279.225256][T10464] Rebooting in 86400 seconds..