last executing test programs: 2m11.629266817s ago: executing program 2 (id=1548): r0 = socket$inet6(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) sendto$inet6(r0, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0d00000008000000040000000500000000000000", @ANYRES32=r1], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@remote, @dev={0xfe, 0x80, '\x00', 0xc}, @dev={0xfe, 0x80, '\x00', 0xf}, 0xc, 0x7ff, 0x1, 0x400, 0xfffffffffffffffe, 0x1, r3}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) socket$inet6(0xa, 0x1, 0x84) (async) setsockopt$inet6_int(r0, 0x29, 0x1a, &(0x7f0000000080)=0x2, 0x4) (async) sendto$inet6(r0, &(0x7f00000002c0)='\x00', 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000a40)=ANY=[@ANYBLOB="0d00000008000000040000000500000000000000", @ANYRES32=r1], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) getsockname$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, &(0x7f0000000180)=0x14) (async) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000001c0)={@remote, @dev={0xfe, 0x80, '\x00', 0xc}, @dev={0xfe, 0x80, '\x00', 0xf}, 0xc, 0x7ff, 0x1, 0x400, 0xfffffffffffffffe, 0x1, r3}) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) getsockopt$bt_hci(r0, 0x84, 0x6d, &(0x7f0000002280)=""/4090, &(0x7f0000000040)=0xffa) (async) 2m11.536738996s ago: executing program 4 (id=1549): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0xc, 0x19, {0x2, 0x1}}}}, 0x30}}, 0x40000) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_SOCK_GET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x192000}, 0xc, &(0x7f0000000240)={&(0x7f0000000100)={0x138, r4, 0x2, 0x70bd2c, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0x54, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x40, 0x4, {'gcm(aes)\x00', 0x18, "6d61eac88f4f9e7e95578b70b4942007434ab01a8fa9513b"}}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0xfffffff4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x100}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @local}}, {0x14, 0x2, @in={0x2, 0x4e24, @broadcast}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x8001, @remote, 0xff}}, {0x20, 0x2, @in6={0xa, 0x4e24, 0x2, @private2, 0xfc4}}}}, @TIPC_NLA_BEARER_NAME={0xb, 0x1, @l2={'ib', 0x3a, 'wg2\x00'}}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x138}, 0x1, 0x0, 0x0, 0x80}, 0x20004010) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="58ddffff010605000000000000000000000000000c00078005001400080000000500010006000000050005000200000005000400000000000900020073797a320000000011000300686173683a69702c706f727400000000"], 0x58}}, 0x0) 2m11.515176043s ago: executing program 4 (id=1550): bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) recvmsg$kcm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000000240)=""/204, 0xcc}, {&(0x7f0000002440)=""/4091, 0xffb}, {&(0x7f0000001940)=""/252, 0xfc}], 0x3}, 0x2000) recvmsg$kcm(r0, &(0x7f0000000900)={0x0, 0x0, 0x0}, 0x0) recvmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="0a00000005000000020000000700000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000000e7db0000000000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000181100"/20, @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000080)={'syztnl2\x00', &(0x7f0000000800)={'tunl0\x00', 0x0, 0x8, 0x8000, 0x1, 0x9, {{0x13, 0x4, 0x1, 0x2, 0x4c, 0x68, 0x0, 0x5, 0x4, 0x0, @local, @dev={0xac, 0x14, 0x14, 0x38}, {[@lsrr={0x83, 0x3, 0x71}, @timestamp_addr={0x44, 0x34, 0xd8, 0x1, 0x1, [{@private=0xa010101, 0x2}, {@rand_addr=0x64010102, 0x7e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xfffffff8}, {@loopback, 0x245}, {@local, 0x8}, {@dev={0xac, 0x14, 0x14, 0x18}, 0x1000e066}]}]}}}}}) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) ioctl$SIOCGSTAMPNS(r4, 0x8907, 0x0) (async) sendmsg$802154_raw(r4, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)="f10ec51757a16c2b180237791e", 0xd}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xae, &(0x7f0000000200)=ANY=[@ANYBLOB="0180c20000000180c200000086dd60081f2000783afffe8000000000000000008000000000bbff02000000000000000000000000000186009078000000000000000000000000000aa78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96489269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af18021b010000000004000001260004001801fea5eb17efe3"], 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='ext4_discard_preallocations\x00', r6}, 0x10) (async) openat$cgroup_ro(r3, &(0x7f0000000400)='freezer.state\x00', 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'wg0\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB="4000000010001fff0300"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a0071a41704db3c8d9caa2aeedbb72f3bce22a397193d28694770603aea7250f1ad6708882981ba5745e8683868df7ba1bc9c726cd4943c7aa0db1a2626d318c6ab44daa02b131459baa55d4c75e42dbcb55585dcae9afb9dd91e783537f881b2693d31d6f76b3d5d334576394af95a524686ff97df3a03b3bfd063c22bd82e150c7afd5d7af201de2835f09b5d5c3c1bcf06e5f7186d67755c43dc50a8a5e6515c2fa85974d6f34ee0caf96abe4cb8337777f8e5649478ae3c129b4ea83f0fd9988d0d6b99143175", @ANYRES32=r8, @ANYBLOB="2340d5b83f"], 0x40}}, 0x4000) 2m11.004393588s ago: executing program 2 (id=1551): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@mcast2, 0x800, 0x0, 0x3, 0x1, 0x0, 0x3}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000002c0)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000300)={0x28, r2, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @multicast1=0xac1414aa}]}]}, 0x28}}, 0x10) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x380000, @ipv4={'\x00', '\xff\xff', @remote}, 0x9}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)=ANY=[@ANYBLOB="1400000010000100"/17], 0x94}}, 0x0) sendmmsg$alg(r0, &(0x7f0000000240)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="d8000000000000002900000002"], 0xd8}], 0x1, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000040), &(0x7f0000000080)=0x4) 2m10.960691353s ago: executing program 1 (id=1552): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r2, 0x0, r1, 0x0, 0x48, 0x0) close(r3) r4 = socket$inet(0x2, 0x2, 0x1) bind$inet(r4, &(0x7f0000000000)={0x2, 0x6e29, @remote}, 0xfd44) r5 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r5, 0x1, 0x2, &(0x7f00000000c0), 0x4) bind$inet(r5, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x1c, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0x20a, @remote}]}, &(0x7f0000000140)=0x10) sendmmsg$inet(r0, &(0x7f0000002f80)=[{{&(0x7f0000000080)={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x14}}, 0x10, 0x0}}, {{&(0x7f0000000380)={0x2, 0x4e23, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000580)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xfffffff9}}], 0x18}}], 0x2, 0x0) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8002, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000003000000850000006d00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000540)='rpm_return_int\x00', r8}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0x8, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r9, 0x8946, &(0x7f0000000900)={'wlan1\x00', @random='\x00\x00\x00 \x00'}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r1) sendmsg$NL80211_CMD_SET_WIPHY(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r10, 0x20, 0x70bd25, 0x25dfdbff, {}, [@NL80211_ATTR_WIPHY_ANTENNA_RX={0x8, 0x6a, 0x4}, @NL80211_ATTR_TXQ_LIMIT={0x8, 0x10a, 0x7}]}, 0x24}, 0x1, 0x0, 0x0, 0xc840}, 0x20000004) 2m10.958798614s ago: executing program 4 (id=1553): r0 = socket(0x80000000000000a, 0x2, 0x0) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2a, &(0x7f0000000200)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0xfffe, 0x0, @remote}}}, 0x108) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@security={'security\x00', 0x44, 0x4, 0x3f, 0xffffffff, 0x0, 0x0, 0x0, 0xffffffff, 0xffffffff, 0x2f0, 0x2f0, 0x2f0, 0xffffffff, 0x6, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @remote}, @empty, [], [], 'nr0\x00', 'nr0\x00'}, 0x203, 0xe0, 0x108, 0x8502, {0x700}, [@common=@unspec=@quota={{0x38}}]}, @common=@unspec=@NFQUEUE1={0x28, 'NFQUEUE\x00', 0x1, {0x0, 0x3}}}, {{@uncond, 0x0, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x4}}}, {{@ipv6={@local, @mcast1, [], [], 'ip6erspan0\x00', 'veth1_macvtap\x00'}, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@CLASSIFY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x420) (async) setsockopt$inet6_group_source_req(r0, 0x29, 0x2f, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x3, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}}}, 0x147) (async, rerun: 64) close(r0) (async, rerun: 64) getsockopt$IP_VS_SO_GET_INFO(r1, 0x0, 0x481, &(0x7f0000000000), &(0x7f0000000040)=0xc) 2m10.879631556s ago: executing program 2 (id=1554): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000240012800b00010067656e657665000014000280050003000d000004080008"], 0x44}, 0x1, 0x2}, 0x0) r3 = socket(0x2a, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@delchain={0x110, 0x65, 0x100, 0x70bd28, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0x7, 0xe}, {0xd, 0x10}, {0xffff, 0x5}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_flower={{0xb}, {0xd8, 0x2, [@TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV4_TYPE={0x5}, @TCA_FLOWER_KEY_IPV6_SRC_MASK={0x14, 0xf, [0xff, 0xffffffff, 0xffffffff, 0xffffffff]}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x94, 0x55, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x7}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x9d}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0xe8}]}, @TCA_FLOWER_KEY_ENC_OPTS_GENEVE={0x44, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x200}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x180}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0x6e}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x1}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_CLASS={0x6, 0x1, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_DATA={0x5, 0x3, 0x5}, @TCA_FLOWER_KEY_ENC_OPT_GENEVE_TYPE={0x5, 0x2, 0xf}]}, @TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x1c, 0x3, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_ERSPAN_INDEX={0x8, 0x2, 0x9}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_VER={0x5}, @TCA_FLOWER_KEY_ENC_OPT_ERSPAN_DIR={0x5, 0x3, 0x2}]}, @TCA_FLOWER_KEY_ENC_OPTS_VXLAN={0xc, 0x2, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPT_VXLAN_GBP={0x8, 0x1, 0x8}]}]}, @TCA_FLOWER_KEY_ENC_IPV6_SRC={0x14, 0x1f, @mcast1}, @TCA_FLOWER_KEY_ARP_TIP={0x8, 0x3b, @rand_addr=0x64010100}]}}]}, 0x110}}, 0x810) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000780)={0xffffffffffffffff, 0xe0, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000c40)={0x11, 0x3, &(0x7f00000009c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x31, 0x0, 0x0, 0x0, 0xc9}}, 0x0, 0x7, 0x0, 0x0, 0x41000, 0x2, '\x00', r5, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x90) (async) r8 = bpf$ITER_CREATE(0x21, &(0x7f00000008c0), 0x8) (async) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=r2, @ANYRES32, @ANYBLOB="002600ae80ae000400000000000000000000000000004f8dde91574a15b72d97439d76ceb1aa5701003688f854e79efb73110e97de6187773e968ea0229503f0e647ea74ba980115f89111e22316b4293227007ba1"], 0x50) (async) pipe(&(0x7f0000000340)={0xffffffffffffffff}) vmsplice(r10, 0x0, 0x0, 0x2) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000c40)={{0x1, 0xffffffffffffffff}, &(0x7f0000000980), &(0x7f0000000c00)}, 0x20) r12 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080006917ce1d75", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001040)={0x6, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000030018110000", @ANYRES32=r12, @ANYRESOCT], &(0x7f0000000480)='syzkaller\x00', 0x6, 0x10b, &(0x7f0000000140)=""/267, 0x0, 0x8, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000c80), &(0x7f0000000cc0)}, 0x20) (async, rerun: 32) socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 32) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000dc0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000d40), &(0x7f0000000d80)='%pI4 \x00'}, 0x20) (async) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000e40)=@o_path={&(0x7f0000000e00)='./file0\x00', 0x0, 0x4000, r0}, 0x18) (async, rerun: 32) r16 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000ec0)=@o_path={&(0x7f0000000e80)='./file0\x00', 0x0, 0x4000, r0}, 0x18) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000f80)={0x1, 0x3f, &(0x7f0000000a00)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @map_val={0x18, 0xb, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10}, @generic={0x6, 0xa, 0x9, 0x6, 0x5630ee2d}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x53}}, @cb_func={0x18, 0x0, 0x4, 0x0, 0x1}, @map_val={0x18, 0x4, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0xcf}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4f85}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000680)='syzkaller\x00', 0x1, 0x12, &(0x7f00000006c0)=""/18, 0x41100, 0x1, '\x00', r2, @fallback=0x36, 0xffffffffffffffff, 0x8, &(0x7f0000000840)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000880)={0x5, 0x2, 0x9, 0xfffffffe}, 0x10, r6, r8, 0x4, &(0x7f0000000f00)=[0x1, r9, r10, r11, 0x1, r12, r13, r14, r15, r16], &(0x7f0000000f40)=[{0x5, 0x5, 0xa, 0x1}, {0x3, 0x3, 0x10, 0x9}, {0x0, 0x2, 0xb, 0x5}, {0x1, 0x1, 0x7, 0x6}], 0x10, 0x401, @void, @value}, 0x94) (async) r17 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x0, 0x0, 0x0, 0x0, 0x5, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000640)={{}, &(0x7f00000005c0), &(0x7f0000000600)='%pI4 \x00'}, 0x20) (async) r18 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x52) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r18}, 0x10) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) recvfrom$packet(0xffffffffffffffff, &(0x7f0000000300)=""/235, 0xeb, 0x10000, 0x0, 0x0) (async) sendmmsg(r17, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m10.739280096s ago: executing program 2 (id=1555): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xa, &(0x7f0000000080)=0xff, 0x4) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000000c0)=""/117, 0x75, 0x0, &(0x7f0000000140)=""/234, 0xea}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xae}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) 2m10.708884956s ago: executing program 4 (id=1556): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000840), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)={0x30, r3, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x3}]}, 0x30}}, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r4, 0x8917, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="60000000020603000000000000830000000000000900020073797a31000000000500010007000000050005000a00000014000780080013400000000008001240ffffffff12000300686173683a6e65742c706f7274000000050004"], 0x60}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'ip6_vti0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x51, 0x4d, 0x7, 0x8, @loopback, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}, 0x700, 0x40, 0x3, 0x6}}) setsockopt$MRT_ADD_VIF(r0, 0x0, 0xca, &(0x7f0000000000)={0x0, 0x4, 0xff, 0x3d, @vifc_lcl_addr=@remote, @multicast2}, 0xffffffffffffff45) setsockopt$MRT_FLUSH(r0, 0x0, 0xd4, &(0x7f0000000040)=0xa, 0x4) 2m10.708091967s ago: executing program 1 (id=1557): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f00000011c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f00000010c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010200000020000000ee15660000080006000200000018000180140002007665746830"], 0x34}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r2, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000040)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x0) 2m10.596754967s ago: executing program 1 (id=1558): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24, 0x24, 0x0, 0x70bd29, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {}, {}, {0x3}}}, 0x24}}, 0x0) unshare(0x22020600) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) socket$packet(0x11, 0x4000000000002, 0x300) r0 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r0, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback, 0xfffffffc}, 0x1c) sendmsg$AUDIT_DEL_RULE(0xffffffffffffffff, 0x0, 0x20000040) listen(r0, 0x20000005) r1 = socket$inet6(0xa, 0x6, 0x0) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e20, 0x6, @empty}, 0x1c) close(r1) 2m10.594717572s ago: executing program 2 (id=1559): sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000002000000000000000000000000000010000180f7000280050001"], 0x58}}, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000020000000000000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000b640000000c0a03000000000000000000070000000900020073797a31000000000900010073797a300000000038000380340000800800034000000002280002802400028008000180fffffffb08000180fffffffb08"], 0xf8}}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ip6gretap0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB, @ANYRES32=r2, @ANYRESDEC=r1, @ANYRES8=r1], 0x48) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, @remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x24}}, 0x0, 0x2, 0x1, 0x100, 0x0, 0x0, r2}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r3 = socket(0x10, 0x80003, 0x0) write(r3, &(0x7f0000000000)="240000001a005f0214f9f407000904000a000000fe0000000000000008", 0x1d) recvmsg$unix(r3, 0x0, 0x0) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8914, &(0x7f0000000080)={'sit0\x00'}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) vmsplice(r4, &(0x7f0000000680), 0x10000000000000ef, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB], 0x48) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000140)={'syztnl0\x00', r5, 0x4, 0x9, 0xd, 0x10000, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}, @local, 0x1, 0x20, 0x9, 0x1ff}}) sendmsg$MPTCP_PM_CMD_SET_FLAGS(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x14, 0x0, 0x1, 0x70bd27, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x40400c1}, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(0xffffffffffffffff, 0x84, 0xb, &(0x7f0000001600)={0x29, 0x7, 0x7f, 0x8, 0x81, 0x1, 0x3, 0x21, 0x5, 0x0, 0xd, 0x5, 0xd, 0x1f}, 0xe) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r6}, 0x10) r7 = socket$netlink(0x10, 0x3, 0xc) setsockopt$sock_int(r7, 0x1, 0x8, &(0x7f0000000200), 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=ANY=[@ANYBLOB="640000000001010400000000141a0000e7000000240001801400018008000100e000000108000200e00000010c0002800500010000000000240002801400018008000100ac1e000108000200ac1fdd10bad07e01850001000000000008000740ffff639c"], 0x64}}, 0x0) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x14, 0x7, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x5}}, 0x14}, 0x1, 0x0, 0x0, 0x8044004}, 0xc0) 2m10.57573713s ago: executing program 1 (id=1560): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000021010000000000000001000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b7000000000000009500000040000000"], &(0x7f0000000000)='GPL\x00', 0x3, 0x5, &(0x7f0000003e40)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffee4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) getpeername$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x14) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', r0, 0x4, 0x6, 0x5, 0x0, 0x42, @private1, @private1, 0x0, 0x7800, 0x7}}) 2m10.488714299s ago: executing program 1 (id=1561): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x2, 0x0) sendmsg$inet(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}, {&(0x7f0000000600)="2794c69af24b849bd7b974d385b0425f0821abf44a05e7120bd2", 0x1a}, {0x0}], 0x3, &(0x7f0000000900)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}], 0x18}, 0x81) r2 = socket$inet6(0xa, 0x803, 0x6) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r2, r0}) sendmmsg$inet(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r3) sendmsg$IEEE802154_START_REQ(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000009c410fc12f47ea048507aab72f683ffb6a74a54c9746f961c08d6fa788055101c9eabbc0acf5ded91ab31d680677136b62a3d5f3a4bae375f00f0bb0a9ccb3632fa5eeb034e06ce00062bf595842a3bf7fdf489b728b9445b57b1c95c6c682948abd3060498a6b967ba2a0916c7c9d1203dcbc7046ea03efe97c15ca", @ANYRES16=r3, @ANYBLOB="010000000000000000000d000000050007001200000005001800010000000600080000000000050017000000000006000a00ffff00000500190004000000"], 0x44}, 0x1, 0x0, 0x0, 0x18000}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETGEN(r4, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x10, 0xa, 0x5, 0x0, 0x0, {0x0, 0x0, 0x4}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4005}, 0x4) 2m10.483371035s ago: executing program 4 (id=1562): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x50, r1, 0x20, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xf4}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}], @NL80211_ATTR_CH_SWITCH_COUNT={0x8, 0xb7, 0x7a}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x200400c1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='sched_kthread_work_queue_work\x00', 0xffffffffffffffff, 0x0, 0x11}, 0x18) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) write$nbd(r2, &(0x7f0000000240)={0x67446698, 0x1, 0x64, 0x4, 0x1000, "01b9de02aab56f9044a5227efd26c5a4077735c379c7d0d5ff1349144d2a54ebe0f3752281799e318bec2f3b68f1cc9a8b9ca443dc03f61a7b6460d84ae753480ab5a3c1c2f5defbe10fc015f4122f477cc7513d3f016228767e632ede66a6ac21bdeed874fc57f97f9b5e0cabc01e767a796fbf858a328e768b52181aa290948ca5a07a914abbe4634177e719262a02f22c3ba13fa31aab447e9e3b336dd504839447699dd6c29595de0ff75a0ebb7dffd682"}, 0xc3) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) sendmsg$NL80211_CMD_SET_REG(r2, &(0x7f0000000480)={&(0x7f0000000340), 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x58, r3, 0x200, 0x70bd29, 0x25dfdbfb, {}, [@NL80211_ATTR_REG_RULES={0x18, 0x22, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x1}, @NL80211_ATTR_FREQ_RANGE_MAX_BW={0x8, 0x4, 0x7}]}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'aa\x00'}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'a\x00'}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x8040) r4 = socket$netlink(0x10, 0x3, 0x5) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000500)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000540)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r5, &(0x7f0000000640)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x44, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_VLAN={0x8, 0x14, r7}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x513}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0xe}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0x8}, @NL80211_ATTR_STA_PLINK_STATE={0x5, 0x74, 0x4}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x5) sendmsg$NL80211_CMD_GET_FTM_RESPONDER_STATS(r5, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x14, r1, 0x1615, 0x70bd29, 0x25dfdbff, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x8051) syz_genetlink_get_family_id$ethtool(&(0x7f0000000780), r4) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000000980)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000940)={&(0x7f0000000800)={0x140, r1, 0x200, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x3}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8}, @NL80211_ATTR_STA_TX_POWER_SETTING={0x5}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x2}, @NL80211_ATTR_STA_TX_POWER={0x6, 0x114, 0x54a}, @NL80211_ATTR_STA_EXT_CAPABILITY={0x101, 0xac, "3ac311a8804d8afd40484a91fc9f28f2b8f05a951b860c40e34780620e8f1f707b7ce29a0ac546b2e8783c10f16d391466bec8d33794b00e1d13b91ac53053555c037320416e395b45da6ed0277864f5e7af26e26915b6f915cd3055ff87d042374cec2307756cab1bef07da905a806ffd0d3121ec0c9c6abbf3e50a2ee0f23dd1f2a56b3040b7d6b58420e21a962db279d268fc52dd0b763cbc711508c4e986d2815fcfde9453d04ae10cce73b1a9c96d18187867400280e17d4a540d33620a89fb6a038e28bb2af2de0d88764f6e00e54b75ea8f061de92f6bc1ec062d441c5a2cabc339861519b5b0047c58fcb348862ade19182b86eca40bd7a461"}]}, 0x140}, 0x1, 0x0, 0x0, 0x10000}, 0x4000) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000a40)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)='%-010d \x00'}, 0x20) r9 = socket(0x1f, 0xa, 0x0) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000dc0)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000ac0)={0x290, r1, 0x400, 0x70bd2a, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x0, 0x4d}}}}, [@NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x3}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1eaea3449f255769e0f43f72769d776a17cbaefe07d9034b"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1007d5d8a73549ad1d1611fcdde9eef1ee79f6f6b352f4dc"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "8438b43e4de37ff5"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="9565a3901ba4660aba74a605c9eda79f"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="3c63a3f570629f5720fa27a664229703"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f1e302e9f98584bf"}]}, @NL80211_ATTR_REKEY_DATA={0x64, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "72844ea45ffd5fa0"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="39a6fc922126e668073154154d9e52812c473bcaa1ced54efdcd6e92e1c2447d"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9d2bbcbedbbe5386"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="c5316e7b2bcb13cc91aa30323dbcf8fcee67c7f25449f42e"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x400}]}, @NL80211_ATTR_REKEY_DATA={0x54, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e7bc2a96c54690359d846d6c18d7b90778fd08f88d3ccecbc073cf221e49473c"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xf}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="e34251dc71bf3326c6e31abbc7608781d9075131b1a6f336c26f6ecf8c925a31"}]}, @NL80211_ATTR_REKEY_DATA={0x3c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c1902a2b26ab083dcc2de569c49d4d5e"}, @NL80211_REKEY_DATA_AKM={0x8}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="56df19d3db3529d99bac6f0112fdecffd28909afcd19a205"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "05eef1b7485f0ded"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="c91d5a4291baadaed70a7450b7e78bff"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x548}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="13b99866fbce6dc117eb6ceae9abe0bbca3e914c2919afb8"}]}, @NL80211_ATTR_REKEY_DATA={0x2c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="83bf1061f2d9e343e518cf44ff887ecd"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="22640bdc03e3903df2189a836b09b9d9"}]}, @NL80211_ATTR_REKEY_DATA={0x84, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="5b2487aab0de903e1d7452c4bad24548a6262b24a4b9a1b3eee17ea326c6f09b"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "cf55977b6295c539"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="adaf81359d0f8a1f8939296c5921b7e5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "fb7c4cc39b3d5074"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "28dd9140df8f7432"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f3dc75641ad02d820b376a9fc1a9fb43929641c12d1c6cac8d6c23dfbbaee930"}]}]}, 0x290}, 0x1, 0x0, 0x0, 0x8040}, 0x90) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r2, 0x89f0, &(0x7f0000000ec0)={'syztnl0\x00', &(0x7f0000000e40)={'syztnl1\x00', 0x0, 0x1, 0x8000, 0xa, 0x1d, {{0xc, 0x4, 0x0, 0x8, 0x30, 0x66, 0x0, 0x9, 0x4, 0x0, @local, @rand_addr=0x64010100, {[@lsrr={0x83, 0x17, 0x9c, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x39}, @remote, @local]}, @end, @noop]}}}}}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000001000)={'syztnl2\x00', &(0x7f0000000f00)={'ip_vti0\x00', 0x0, 0x8000, 0x10, 0x7, 0x8, {{0x2b, 0x4, 0x2, 0x9, 0xac, 0x64, 0x0, 0x1, 0x29, 0x0, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@noop, @timestamp_addr={0x44, 0x34, 0x8f, 0x1, 0x1, [{@remote, 0x8}, {@loopback, 0xb878}, {@empty, 0x5}, {@private=0xa010101, 0x9}, {@empty, 0x3}, {@multicast1, 0x51}]}, @cipso={0x86, 0x18, 0x3, [{0x2, 0x8, "0937f7521ae7"}, {0x2, 0xa, "77c0e77d825d6f9e"}]}, @ra={0x94, 0x4}, @noop, @end, @lsrr={0x83, 0x7, 0x7a, [@broadcast]}, @ssrr={0x89, 0x7, 0xc5, [@loopback]}, @timestamp_prespec={0x44, 0x34, 0x35, 0x3, 0xd, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7}, {@remote, 0x3}, {@loopback, 0x81}, {@local}, {@rand_addr=0x64010101, 0x5bd2}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x5}]}, @end]}}}}}) getsockopt$inet_mreqn(r9, 0x0, 0x24, &(0x7f0000001040)={@private, @rand_addr, 0x0}, &(0x7f0000001080)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000001140)={'ip6_vti0\x00', &(0x7f00000010c0)={'syztnl1\x00', 0x0, 0x29, 0x4, 0x0, 0x7, 0x25, @remote, @mcast2, 0x80, 0x7800, 0x4770, 0x800}}) sendmsg$nl_route(r2, &(0x7f0000001200)={&(0x7f0000000e00)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000011c0)={&(0x7f0000001180)=@mpls_getnetconf={0x3c, 0x52, 0x4, 0x70bd2d, 0x25dfdbfb, {}, [@NETCONFA_IFINDEX={0x8, 0x1, r10}, @NETCONFA_IFINDEX={0x8, 0x1, r11}, @NETCONFA_IFINDEX={0x8}, @NETCONFA_IFINDEX={0x8, 0x1, r12}, @NETCONFA_IFINDEX={0x8, 0x1, r13}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20040000}, 0x4000000) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000002380)={0x2, 0x4, 0x8, 0x1, 0x80, r8, 0x5f9, '\x00', r12, 0xffffffffffffffff, 0x1, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000002400)={&(0x7f0000001240)="1200903bf5f5f88d3e44b7b85ffe67b521be93e3a766b926ea139397fc127b1bc024c94dd484647531e5d6b236dc2ffe95009dd93eba4322b722ef60c73fe8", &(0x7f0000001280)=""/188, &(0x7f0000001340)="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", &(0x7f0000002340)="a7c109d22962ab4ecaf9e46b0d8655c8947083c98fc4b0206be832c5b71c5cc2a86694dacfde6a80dba8512035354b74", 0x8, r14}, 0x38) r15 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000002480)=@o_path={&(0x7f0000002440)='./file0\x00', 0x0, 0x10, r8}, 0x18) mmap(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x1000002, 0x110, r15, 0xefc60000) r16 = syz_genetlink_get_family_id$tipc2(&(0x7f0000002500), r5) sendmsg$TIPC_NL_LINK_RESET_STATS(r5, &(0x7f00000025c0)={&(0x7f00000024c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002580)={&(0x7f0000002540)={0x2c, r16, 0x4, 0x70bd28, 0x25dfdbff, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x5}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 2m10.35133682s ago: executing program 1 (id=1563): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) connect$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x2710}, 0x80, &(0x7f0000000900)=[{&(0x7f00000001c0)="d13252e0", 0x4}, {&(0x7f0000000240)="f037505136a21ada8b7b5c4dfe9cc3430c43b7bcd0e0e883dc31e6e47a40f34b022e9ce35061e215f451776eac38801183f450043eee86ab16bc31eccb02f037f31c071f77d511ed4c52a40fb90bb5d5d864c0c7673f", 0x56}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001280)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x3, 0x7, 0x2, {0xa, 0x4e24, 0x6, @empty}}}, 0x80, 0x0}}], 0x3, 0x80) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}, 0x3000000}], 0x2, 0x2004000) 2m10.350983502s ago: executing program 2 (id=1564): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x440083, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0xffffffffffffff99, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) 2m10.284561659s ago: executing program 4 (id=1565): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x8}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x1, 0x7fffffffffffffff}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x1000806, @mcast2, 0x805}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0xc, 0x40, 0x9, 0x12, @remote, @private2, 0x40, 0x40, 0x897, 0x6}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func={0x5, 0x0, 0x0, 0xc, 0x1}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x5, 0x3}]}, {0x0, [0x30, 0x7f]}}, &(0x7f00000002c0)=""/84, 0x38, 0x54, 0x1, 0x8, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8cec}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x4, 0x3, 0x6, 0x3ff}, 0x10, 0x14038, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000740)=[{0x4, 0x1, 0x8, 0xc}, {0x0, 0x2, 0xc, 0x8}, {0x3, 0x3, 0x3, 0x8}], 0x10, 0x400, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000c6000000c53afcff0100000085843cbe32660000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x77, &(0x7f0000000100)=""/119, 0x40f00, 0x20, '\x00', r4, @fallback=0xc, r5, 0x8, &(0x7f00000003c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x2, 0x2, 0x81}, 0x10, r6, r7, 0x3, &(0x7f00000009c0)=[r8, r9, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x3, 0x5, 0x3}, {0x5, 0x2, 0xa, 0x8}, {0x2, 0x9, 0x2, 0x1}], 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003400000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000006100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f88a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd347, 0x0, 0x0, 0x0, 0x29}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x52, &(0x7f0000000100)=""/82, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r11, 0x3, &(0x7f00000001c0)=[r0, r0, r0], &(0x7f0000000200)=[{0x3, 0x2, 0x6, 0xc}, {0x0, 0x2, 0x9, 0x8}, {0x3, 0x1, 0x3, 0x6}], 0x10, 0x2, @void, @value}, 0x94) 1m40.869091356s ago: executing program 32 (id=1563): r0 = socket$inet(0x2, 0x2, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r2) connect$tipc(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmmsg$sock(0xffffffffffffffff, &(0x7f0000002a00)=[{{&(0x7f0000000140)=@vsock={0x28, 0x0, 0x2710}, 0x80, &(0x7f0000000900)=[{&(0x7f00000001c0)="d13252e0", 0x4}, {&(0x7f0000000240)="f037505136a21ada8b7b5c4dfe9cc3430c43b7bcd0e0e883dc31e6e47a40f34b022e9ce35061e215f451776eac38801183f450043eee86ab16bc31eccb02f037f31c071f77d511ed4c52a40fb90bb5d5d864c0c7673f", 0x56}, {0x0}], 0x3}}, {{0x0, 0x0, 0x0}}, {{&(0x7f0000001280)=@pppol2tpin6={0x18, 0x1, {0x0, r2, 0x1, 0x3, 0x7, 0x2, {0xa, 0x4e24, 0x6, @empty}}}, 0x80, 0x0}}], 0x3, 0x80) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000000)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)=ANY=[@ANYRES16], 0x94}, 0x1, 0x0, 0x0, 0x4}, 0x0) connect$inet(r0, &(0x7f0000000180)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000000540)=[{{0x0, 0x2, &(0x7f0000000000)=[{&(0x7f00000000c0)="08001497733f5d3e", 0x6c6d}], 0x5}}, {{0x0, 0x0, &(0x7f0000000440), 0x56}, 0x3000000}], 0x2, 0x2004000) 1m40.762300166s ago: executing program 33 (id=1564): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r1}, 0x10) openat$ppp(0xffffffffffffff9c, 0x0, 0x440083, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0xffffffffffffff99, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}}, 0x5) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000180)='hugetlb.2MB.rsvd.limit_in_bytes\x00', 0x2, 0x0) 1m40.635119302s ago: executing program 34 (id=1565): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r1 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000000)={0xffffffffffffffff, 0x9, 0x8}, 0xc) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000180)={r0, 0x1, 0x7fffffffffffffff}) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r3, &(0x7f00000000c0)={0xa, 0x0, 0x1000806, @mcast2, 0x805}, 0x1c) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000180)={'syztnl1\x00', 0x0, 0x4, 0xc, 0x40, 0x9, 0x12, @remote, @private2, 0x40, 0x40, 0x897, 0x6}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x4, [@func={0x5, 0x0, 0x0, 0xc, 0x1}, @decl_tag={0x5, 0x0, 0x0, 0x11, 0x5, 0x3}]}, {0x0, [0x30, 0x7f]}}, &(0x7f00000002c0)=""/84, 0x38, 0x54, 0x1, 0x8, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000440)={0x1, 0x0}, 0x8) r7 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000780)=@bpf_tracing={0x1a, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x8cec}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000600)='syzkaller\x00', 0x8, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000700)={0x4, 0x3, 0x6, 0x3ff}, 0x10, 0x14038, 0xffffffffffffffff, 0x3, 0x0, &(0x7f0000000740)=[{0x4, 0x1, 0x8, 0xc}, {0x0, 0x2, 0xc, 0x8}, {0x3, 0x3, 0x3, 0x8}], 0x10, 0x400, @void, @value}, 0x94) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000008c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)='%pS \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000980)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000900), &(0x7f0000000940)='%pS \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x1c, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000c6000000c53afcff0100000085843cbe32660000"], &(0x7f0000000040)='GPL\x00', 0x8, 0x77, &(0x7f0000000100)=""/119, 0x40f00, 0x20, '\x00', r4, @fallback=0xc, r5, 0x8, &(0x7f00000003c0)={0x5, 0x1}, 0x8, 0x10, &(0x7f0000000400)={0x4, 0x2, 0x2, 0x81}, 0x10, r6, r7, 0x3, &(0x7f00000009c0)=[r8, r9, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x3, 0x5, 0x3}, {0x5, 0x2, 0xa, 0x8}, {0x2, 0x9, 0x2, 0x1}], 0x10, 0x9, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000000000000000000000000000850000003400000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1b00000000000000000000000080000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="18020000000000000000000000000000850000006100000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r11, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f88a8", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x7, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0xd347, 0x0, 0x0, 0x0, 0x29}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}]}, &(0x7f00000000c0)='syzkaller\x00', 0x6, 0x52, &(0x7f0000000100)=""/82, 0x41000, 0x0, '\x00', 0x0, @fallback=0x2f, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r11, 0x3, &(0x7f00000001c0)=[r0, r0, r0], &(0x7f0000000200)=[{0x3, 0x2, 0x6, 0xc}, {0x0, 0x2, 0x9, 0x8}, {0x3, 0x1, 0x3, 0x6}], 0x10, 0x2, @void, @value}, 0x94) 1m18.468082548s ago: executing program 3 (id=1062): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) r9 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0042000002000200140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r10, @ANYBLOB="c7aeeda560492500e06c27435eb323b80e1f97a621edde66fbffacee00fdc92857e925ce4c9a3e5da235f4eddd4b09a4d4d81a43228b8a9dd4ed86f7efde86085099158fec187dcfb4c300730ba55b64ebf857e5d896573a0080d113ee90581da089d8b616c11f81fbd18c923bfdc9525e920080713f965aed4f92fe6c53ecdb74f90f69ab5e7aa84444e5a9d96b51fedb9320ec039b95f649e50eb9e884a43c64a62fe070efe1019da8"], 0x3c}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, r7, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) r13 = openat$cgroup_ro(r5, &(0x7f0000000300)='cgroup.freeze\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r13, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x4}, 0x8) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000000100"}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x3e7, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0xff}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb}, @alu={0x7, 0x0, 0x8, 0xb, 0x9, 0x18, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m18.418802462s ago: executing program 0 (id=637): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x40004}, @IFLA_BOND_USE_CARRIER={0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x4c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 1m5.547412205s ago: executing program 3 (id=1062): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) r9 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0042000002000200140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r10, @ANYBLOB="c7aeeda560492500e06c27435eb323b80e1f97a621edde66fbffacee00fdc92857e925ce4c9a3e5da235f4eddd4b09a4d4d81a43228b8a9dd4ed86f7efde86085099158fec187dcfb4c300730ba55b64ebf857e5d896573a0080d113ee90581da089d8b616c11f81fbd18c923bfdc9525e920080713f965aed4f92fe6c53ecdb74f90f69ab5e7aa84444e5a9d96b51fedb9320ec039b95f649e50eb9e884a43c64a62fe070efe1019da8"], 0x3c}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, r7, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) r13 = openat$cgroup_ro(r5, &(0x7f0000000300)='cgroup.freeze\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r13, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x4}, 0x8) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000000100"}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x3e7, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0xff}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb}, @alu={0x7, 0x0, 0x8, 0xb, 0x9, 0x18, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m4.186119521s ago: executing program 0 (id=637): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x40004}, @IFLA_BOND_USE_CARRIER={0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x4c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 53.343999753s ago: executing program 3 (id=1062): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) r9 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0042000002000200140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r10, @ANYBLOB="c7aeeda560492500e06c27435eb323b80e1f97a621edde66fbffacee00fdc92857e925ce4c9a3e5da235f4eddd4b09a4d4d81a43228b8a9dd4ed86f7efde86085099158fec187dcfb4c300730ba55b64ebf857e5d896573a0080d113ee90581da089d8b616c11f81fbd18c923bfdc9525e920080713f965aed4f92fe6c53ecdb74f90f69ab5e7aa84444e5a9d96b51fedb9320ec039b95f649e50eb9e884a43c64a62fe070efe1019da8"], 0x3c}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, r7, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) r13 = openat$cgroup_ro(r5, &(0x7f0000000300)='cgroup.freeze\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r13, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x4}, 0x8) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000000100"}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x3e7, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0xff}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb}, @alu={0x7, 0x0, 0x8, 0xb, 0x9, 0x18, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 51.888536276s ago: executing program 0 (id=637): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x40004}, @IFLA_BOND_USE_CARRIER={0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x4c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 40.418298947s ago: executing program 3 (id=1062): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) r9 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0042000002000200140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r10, @ANYBLOB="c7aeeda560492500e06c27435eb323b80e1f97a621edde66fbffacee00fdc92857e925ce4c9a3e5da235f4eddd4b09a4d4d81a43228b8a9dd4ed86f7efde86085099158fec187dcfb4c300730ba55b64ebf857e5d896573a0080d113ee90581da089d8b616c11f81fbd18c923bfdc9525e920080713f965aed4f92fe6c53ecdb74f90f69ab5e7aa84444e5a9d96b51fedb9320ec039b95f649e50eb9e884a43c64a62fe070efe1019da8"], 0x3c}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, r7, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) r13 = openat$cgroup_ro(r5, &(0x7f0000000300)='cgroup.freeze\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r13, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x4}, 0x8) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000000100"}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x3e7, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0xff}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb}, @alu={0x7, 0x0, 0x8, 0xb, 0x9, 0x18, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 39.660466264s ago: executing program 0 (id=637): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x40004}, @IFLA_BOND_USE_CARRIER={0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x4c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 27.21682901s ago: executing program 7 (id=1922): r0 = socket$inet(0x2, 0x80002, 0x1) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000040)=0x2, 0x4) (async) bind$inet(r0, &(0x7f0000000200)={0x2, 0x0, @empty}, 0x10) (async) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r1, &(0x7f0000000080)='blkio.throttle.io_serviced\x00', 0x0, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) (async) bind$rds(0xffffffffffffffff, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) (async) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(r8, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x14, r9, 0x1, 0x3, 0x0, {0x2}}, 0x14}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x7}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE2={0x8, 0x2, r6}, @IFLA_HSR_SLAVE1={0x8, 0x1, r4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x6000000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x19, 0x200000000000035e, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x8}]}, &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 27.046174978s ago: executing program 7 (id=1924): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000003000000400001"], 0x54}}, 0x0) r3 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r3, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0}, 0x3000c041) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001800)=[{&(0x7f0000000680)="89000000120081ae08060cdc030ec0007f03e3f70100000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b81fdc6cc01e32efaec8c7a6ec08120800030006010000bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed00fa8af92347514f0b56a20ff27fff00e100"/137, 0x89}], 0x1}, 0x0) 26.827401312s ago: executing program 7 (id=1928): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x1abb01, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000005c0)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYBLOB="020000000000000000400000", @ANYRES32, @ANYBLOB="3c418dacee5bf7be4e51f166175d22ed77fa45fb1aaf819f15f164210208372d600eba5c43e9bf5e5ee494c7cd87d6ce64329aa91d92e1471c74a62f6a3fec7d3868a17ffd7828ea9067ac", @ANYRES64=0x0], 0x10) socket$kcm(0x2, 0x2, 0x73) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r3, 0x8983, &(0x7f0000000000)={0x0, 'veth0\x00', {0x4}, 0x1}) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'ip6_vti0\x00', 0x6bf1c2d5adba8c32}) r4 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000940)={@val={0xa}, @void, @eth={@broadcast, @remote, @val, {@ipv4={0x800, @tipc={{0x6, 0x4, 0x0, 0x5, 0x40, 0x66, 0x0, 0x10, 0x6, 0x0, @empty, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@ra={0x94, 0x4, 0x1}]}}, @name_distributor={{0x28, 0x0, 0x0, 0x0, 0x1, 0xa, 0xb, 0x2, 0xc, 0x0, 0x1, 0x7, 0x4db, 0x1, 0x4e21, 0x4e22, 0x3, 0x9, 0x0, 0x0, 0x1}}}}}}}, 0x5a) 26.281206901s ago: executing program 7 (id=1931): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001180)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x400000, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x40}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_MCAST_MSFILTER(r1, 0x0, 0x30, 0x0, 0x290) (async, rerun: 32) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (rerun: 32) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f0000001ac0)={r2, &(0x7f0000001b00)="dc1f364bb6725658d5473ce2f04f92eb2eae7666ee72bd0f77770744afb4af85a7090337ad2acad1b85db7f1a079c243781f09f54ceb6a8773d9e8ab76842490b89c4e090a783a25d962a4b18cb72ab9b8365466407c791f9de4b2a4578951cca1cb68d7052557fe0a3fcc3af37124c1c0c8602d987da82d08844b3951a8917eee42199b1ffb85e4fa3e98", &(0x7f0000000040)=""/70}, 0x20) (async) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x10, 0x6, 0x1588, 0x12a0, 0xd0, 0x11d0, 0x0, 0x12a0, 0x14b8, 0x14b8, 0x14b8, 0x14b8, 0x14b8, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @HL={0x28}}, {{@ipv6={@dev, @loopback, [0x0, 0x0, 0xff000000], [0x0, 0x0, 0xffffffff], 'pim6reg\x00', 'sit0\x00', {}, {0xff}, 0x0, 0x0, 0x2}, 0x0, 0x10d8, 0x1100, 0x0, {}, [@common=@unspec=@cgroup1={{0x1030}, {0x0, 0x1, 0x0, 0x1, './cgroup.cpu/syz0\x00', 0x40, {0x9faf}}}]}, @HL={0x28}}, {{@ipv6={@dev={0xfe, 0x80, '\x00', 0x33}, @private2={0xfc, 0x2, '\x00', 0x1}, [0x7f8000ff, 0xffffff00, 0xffffff00], [0xffffff00, 0xffffff00, 0xff000000, 0xffff00], 'wlan1\x00', 'macvtap0\x00', {}, {0xff}, 0x88, 0xb, 0x1, 0x4}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @local}, @local, [0xffffffff, 0xffffff00, 0xffffff00, 0xff], [0xff, 0xff000000, 0xffffff00], 'veth1_to_batadv\x00', 'geneve0\x00', {}, {}, 0x73, 0xe, 0x6, 0x58}, 0x0, 0x100, 0x128, 0x0, {}, [@common=@srh={{0x30}, {0x0, 0xe, 0x0, 0xb5, 0x8, 0x280d}}, @inet=@rpfilter={{0x28}, {0x1}}]}, @inet=@TOS={0x28, 'TOS\x00', 0x0, {0x3, 0x9}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv6=@mcast1, @ipv4=@multicast1, 0x1a, 0xf, 0xff}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x15e8) 26.040838358s ago: executing program 7 (id=1933): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x2, 0x3, 0x6, &(0x7f0000000040)) 25.169485952s ago: executing program 3 (id=1062): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) r9 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0042000002000200140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r10, @ANYBLOB="c7aeeda560492500e06c27435eb323b80e1f97a621edde66fbffacee00fdc92857e925ce4c9a3e5da235f4eddd4b09a4d4d81a43228b8a9dd4ed86f7efde86085099158fec187dcfb4c300730ba55b64ebf857e5d896573a0080d113ee90581da089d8b616c11f81fbd18c923bfdc9525e920080713f965aed4f92fe6c53ecdb74f90f69ab5e7aa84444e5a9d96b51fedb9320ec039b95f649e50eb9e884a43c64a62fe070efe1019da8"], 0x3c}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, r7, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) r13 = openat$cgroup_ro(r5, &(0x7f0000000300)='cgroup.freeze\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r13, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x4}, 0x8) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000000100"}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x3e7, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0xff}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb}, @alu={0x7, 0x0, 0x8, 0xb, 0x9, 0x18, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 24.66827691s ago: executing program 0 (id=637): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x40004}, @IFLA_BOND_USE_CARRIER={0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x4c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 13.969674102s ago: executing program 3 (id=1062): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r1, 0x11, 0x1, &(0x7f0000000040)=0x6, 0x4) sendmmsg$inet6(r1, &(0x7f0000000740)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) getsockopt$netrom_NETROM_T4(r2, 0x103, 0x6, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) socket$kcm(0xa, 0x922000000003, 0x11) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYBLOB="08000100", @ANYRES32, @ANYBLOB="0800030002000000080007006401010108000700ac1414bb0800020003"], 0x78}}, 0x0) r9 = socket$inet(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0042000002000200140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r10, @ANYBLOB="c7aeeda560492500e06c27435eb323b80e1f97a621edde66fbffacee00fdc92857e925ce4c9a3e5da235f4eddd4b09a4d4d81a43228b8a9dd4ed86f7efde86085099158fec187dcfb4c300730ba55b64ebf857e5d896573a0080d113ee90581da089d8b616c11f81fbd18c923bfdc9525e920080713f965aed4f92fe6c53ecdb74f90f69ab5e7aa84444e5a9d96b51fedb9320ec039b95f649e50eb9e884a43c64a62fe070efe1019da8"], 0x3c}}, 0x4000) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x18, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xc3, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x8}, 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NL80211_CMD_SET_INTERFACE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r12}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)={0x4c, r7, 0x5, 0x0, 0xffffffff, {{}, {@val={0x8, 0x3, r12}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x3}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x6}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x2}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0xfffffffa}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xc}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x999}]]}, 0x4c}, 0x1, 0x0, 0x0, 0x2004c000}, 0x0) r13 = openat$cgroup_ro(r5, &(0x7f0000000300)='cgroup.freeze\x00', 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r13, 0x84, 0x71, &(0x7f0000000340)={0x0, 0x4}, 0x8) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="010000000100"}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x3e7, &(0x7f0000000200)={&(0x7f0000000a00)={0x28, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r14}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}]}, 0x28}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x1c, &(0x7f0000000480)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@map_val={0x18, 0x3, 0x2, 0x0, r13, 0x0, 0x0, 0x0, 0xff}, @printk={@d, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}, @map_idx_val={0x18, 0x2, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0xb}, @alu={0x7, 0x0, 0x8, 0xb, 0x9, 0x18, 0x10}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 13.57873402s ago: executing program 7 (id=1933): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@alu={0x7, 0x0, 0x3, 0x0, 0x0, 0x1, 0x4}]}, &(0x7f00000005c0)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair(0x2, 0x3, 0x6, &(0x7f0000000040)) 11.282491523s ago: executing program 0 (id=637): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0x0, 0x2}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @bond={{0x9}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_BOND_MIIMON={0x8, 0x3, 0x40004}, @IFLA_BOND_USE_CARRIER={0x5}, @IFLA_BOND_UPDELAY={0x8, 0x4, 0x5}]}}}]}, 0x4c}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) ioctl$sock_x25_SIOCDELRT(r2, 0x890c, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout_data(r4, 0x107, 0x16, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 6.429794573s ago: executing program 6 (id=2003): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$rose(0xb, 0x5, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000f00), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)={0x64, r3, 0x1, 0x0, 0x0, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0xfffffffd}}, {0x8}, {0x6}, {0x5}, {0x6}, {0x8}}]}, 0x64}}, 0x800) ioctl$sock_rose_SIOCADDRT(r1, 0x890b, &(0x7f0000000440)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0x2, @bcast, @netrom={'nr', 0x0}, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @null, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}]}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf", @ANYRESDEC=r0], 0xfc}, 0x1, 0x0, 0x0, 0x4000855}, 0xc0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x18, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="85100000010000009500000000000000850000007600000095"], &(0x7f0000000040)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 6.374741376s ago: executing program 6 (id=2004): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x17, &(0x7f0000000040)=0xe, 0x36) (async) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) (async, rerun: 64) getsockopt$inet_opts(r0, 0x0, 0x9, &(0x7f0000000f80)=""/4096, 0x0) (async, rerun: 64) socket$kcm(0x2, 0x3, 0x2) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(0xffffffffffffffff, 0x81f8943c, &(0x7f00000004c0)) (async) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0x48400) r4 = socket$alg(0x26, 0x5, 0x0) readv(r2, &(0x7f0000000340)=[{&(0x7f0000000140)=""/137, 0x89}], 0x1) bind$alg(r4, &(0x7f00000003c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendfile(r5, r2, 0x0, 0x1) r6 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) (async) getsockopt$bt_BT_VOICE(0xffffffffffffffff, 0x112, 0xb, &(0x7f0000000300)=0xfff, &(0x7f0000000340)=0x2) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(0xffffffffffffffff, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000f00)={&(0x7f0000000ec0)={0x24, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_NETNS_FD={0x8}, @NL802154_ATTR_WPAN_PHY={0x8}]}, 0x24}}, 0x0) (async) sendmsg$NL802154_CMD_SET_CCA_MODE(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x24, 0x0, 0x100, 0x70bd27, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_OPT={0x8, 0xd, 0x1}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}]}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r7 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000002400)={'ip6gre0\x00', &(0x7f0000000000)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, @local, @mcast2={0xff, 0x5}, 0x0, 0x8}}) 6.260321908s ago: executing program 6 (id=2005): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x38, r1, 0x200, 0x70bd2b, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x3, 0x29}}}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x10, 0x3, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, @NL80211_PKTPAT_OFFSET={0x8, 0x3, 0x5}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x6001}, 0x20000044) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x4, 0x2, 0x5, 0x1, 0xf, @mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x10, 0x7, 0xff, 0x400}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000380)={&(0x7f0000000280)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x6b, 0x6b, 0x4, [@typedef={0x3, 0x0, 0x0, 0x8, 0x5}, @enum={0x7, 0x4, 0x0, 0x6, 0x4, [{0xd, 0xc9c}, {0x1, 0x1}, {0x0, 0x5}, {0x6, 0x1}]}, @datasec={0x10, 0x2, 0x0, 0xf, 0x3, [{0x3, 0x6, 0x7fff}, {0x5, 0x1a08, 0xfffffe01}], "9c42bd"}, @restrict={0xe, 0x0, 0x0, 0xb, 0x3}]}, {0x0, [0x5f, 0x2e]}}, &(0x7f0000000340), 0x88, 0x0, 0x0, 0x54cd, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000400)={0x679b, 0x0}, 0x8) r6 = bpf$OBJ_GET_PROG(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xc, 0x1, 0x10000, 0x4, 0x800, 0xffffffffffffffff, 0x93, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000600)={{r0, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)='%+9llu \x00'}, 0x20) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000640)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xe, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x18, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x5}, [@map_idx={0x18, 0x8}, @jmp={0x5, 0x0, 0xb, 0x0, 0x3, 0xffffffffffffffc0}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000180)='syzkaller\x00', 0x200, 0x0, 0x0, 0x41100, 0x0, '\x00', r3, @fallback=0x1f, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x0, 0xc, 0x4, 0x6}, 0x10, r5, r6, 0x3, &(0x7f0000000700)=[r7, r8, r9, r10, r11], &(0x7f0000000740)=[{0x3, 0x6, 0x7ff, 0x7}, {0x4, 0x6, 0x5, 0x4}, {0x0, 0x4, 0x8, 0x4}], 0x10, 0xe, @void, @value}, 0x94) r12 = accept4$phonet_pipe(0xffffffffffffffff, &(0x7f0000000840), &(0x7f0000000880)=0x10, 0x80000) tee(r12, r10, 0x1, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000900)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_LEAVE_OCB(r2, &(0x7f00000009c0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)={0x1c, r1, 0x400, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r13}, @void}}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4008800}, 0x40) r14 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000c80)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3, r4, 0x1, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r15 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000d80)={0x6, 0x19, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x2b}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @ldst={0x1, 0x0, 0x3, 0x2, 0x0, 0xffffffffffffffc0, 0xffffffffffffffff}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x1}, @exit, @map_val={0x18, 0xb, 0x2, 0x0, r8}, @initr0={0x18, 0x0, 0x0, 0x0, 0xc5e0dfd, 0x0, 0x0, 0x0, 0x800}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b00)='syzkaller\x00', 0x5, 0x91, &(0x7f0000000b40)=""/145, 0x41100, 0x24, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x5, 0x4}, 0x8, 0x10, &(0x7f0000000c40)={0x0, 0xa, 0x43be, 0xb4}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000d00)=[r10, 0x1, r7, 0x1, r9, r14, r11, 0x1], &(0x7f0000000d40)=[{0x3, 0x5, 0x3, 0x1}, {0x3, 0x5, 0x1, 0x9}], 0x10, 0x7fffffff, @void, @value}, 0x94) r16 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) getsockopt$sock_buf(r16, 0x1, 0x3b, &(0x7f0000000e40)=""/171, &(0x7f0000000f00)=0xab) unshare(0x40000000) sendmsg$NL80211_CMD_DEL_MPATH(r0, &(0x7f0000001040)={&(0x7f0000000f40)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001000)={&(0x7f0000000f80)={0x58, r1, 0x2, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r13}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) getsockopt(r0, 0x8, 0x5, &(0x7f0000001080)=""/54, &(0x7f00000010c0)=0x36) syz_genetlink_get_family_id$team(&(0x7f0000001100), r2) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000002340)={r15, 0x0, 0x64, 0x6b, &(0x7f0000001140)="96ac99fd30070966fbf1fc1eaed361e23b5bc1bae472a9e90037bb5750b671dfb3317a2818d66d2bf3839fba5238b8afda7ce5c4ba16277bebae1b70a785be3b97dc057f2fc60228cec1b5ce61aecb9f8fb47e19a30ab492845cc9bbbabc24738584b914", &(0x7f00000011c0)=""/107, 0x7, 0x0, 0x1000, 0xe7, &(0x7f0000001240)="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", &(0x7f0000002240)="5c170d8d3a49d438f78b80cf2451a0f476c8f26059d75ad139e9bb5244eb059dafba9ca59e5e4c9e98aeb70c052e8b0472cd49f7da9ac88c20ba60d7b1a2cc242f5541bded97de428dfbc99fd0ed2e1a21d973c97fc98a6135547ba0c7628895ef62dc69f684d1e3ca17f1c5c5bb9f056ebc827b94f4607e697a22c94c6b9e98098b842c0906a12308c06d8fb3704e04ef4471032d323e1b2443c7843784cc1ed8c938fd4522aff7d10872eef048fe88464af955f9551179bdaf2014bb7ccbd9b8d593efaa4494b6983f8b1b38e48eccdded8d1bd755dfa6c3ef9228ed3682df6944d65bc3b7c3", 0x3}, 0x50) r17 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getpeername(r17, &(0x7f00000023c0)=@nl=@proc, &(0x7f0000002440)=0x80) unshare(0x40000000) 1.375734735s ago: executing program 5 (id=2012): r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000040)=@name={0x1e, 0x2, 0x2, {{0x40}}}, 0x10) r1 = socket$tipc(0x1e, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140f5ffff040800084000000001"], 0x98}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="40000000020301030000000000000000010000057252aec900000003080003400000000109000200fffffff1000000000800044000000003080001000100000b"], 0x40}, 0x1, 0x0, 0x0, 0x40}, 0x8080) bind$tipc(r1, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x10000001}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f00000003c0)={0x42, 0x100001}, 0x10) r4 = socket$tipc(0x1e, 0x5, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) select(0x40, &(0x7f0000000600)={0x3ff, 0xe28, 0x100000001, 0xfffffffffffffffe, 0x6, 0x7fffffffffffffff, 0x2, 0x78}, 0x0, 0x0, &(0x7f00000006c0)) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r5, 0x29, 0x20, &(0x7f00000000c0)={@mcast1={0xff, 0x5}, 0x0, 0x0, 0xff, 0x1}, 0x20) sendmsg$tipc(r4, &(0x7f0000000380)={&(0x7f0000000140)=@name={0x1e, 0x2, 0x3, {{0x1, 0x4}, 0x3}}, 0x10, 0x0}, 0x0) 1.237025815s ago: executing program 5 (id=2013): r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f00000001c0)=0x100000, 0x4) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f0000000140)=@newqdisc={0x24}, 0x24}}, 0x0) r3 = socket$kcm(0x10, 0x2, 0x4) close(r3) socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r3, &(0x7f0000000040)={0x0, 0x3, &(0x7f00000011c0)=[{&(0x7f0000000140)="5c00000013006bcc9e3be35c6e17aa31076b876c1d0000007ea60864160af36514001ac00800060007000c00040006c00364bc24eab556a705251e618294ff0051f60a84c9f4d4938037e786a6d00010ffa10e4509c5bbcd72c6c953", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) recvmsg$can_raw(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000200)=""/20, 0x14}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x24, 0x7, 0x6, 0x201, 0x0, 0x0, {0x0, 0x0, 0xa}, [@IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x4}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000000}, 0x400) setsockopt$XDP_TX_RING(r0, 0x11b, 0x3, &(0x7f0000000040)=0x400e01, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000580)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffd88, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 702.115713ms ago: executing program 5 (id=2014): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x6, 0xc, &(0x7f0000000140)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xa, 0x0, &(0x7f0000000200)="26e0988e08e8f271d344", 0x0, 0x5043, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0xb4, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x84, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x10000}]}]}, @TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x280000000000000}, @TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME={0xc, 0x8, 0x1}]}}]}, 0xb4}}, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080207000000400000a1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x25, 0x1, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000000)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x800, 0x0, 0x6, 0x2, 0x81}, 0x1}}, @TCA_MPLS_BOS={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x883e}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x74}}, 0x0) recvmsg$kcm(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x160) recvfrom$inet6(r0, &(0x7f0000000580)=""/65, 0x41, 0x20, &(0x7f0000000100)={0xa, 0x4e21, 0x6, @mcast2, 0x4}, 0x1c) r9 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r6, &(0x7f0000000dc0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000ac0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="0100000000000000000014000000240007800c0003"], 0x38}}, 0x0) 586.543083ms ago: executing program 5 (id=2015): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet_opts(r0, 0x0, 0x6, &(0x7f0000000380)='\a', 0x1) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000001000)=0x43aa, 0x4) sendmmsg$inet6(r0, &(0x7f00000002c0)=[{{&(0x7f0000000b00)={0xa, 0x4e23, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, 0x1c, 0x0}}], 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)=@setlink={0xfffffffffffffe0d, 0x10, 0x401, 0x70bd2a, 0x1100, {0x0, 0x0, 0x0, 0x0, 0x5000}}, 0x3c}}, 0x0) sendmsg$nl_xfrm(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[], 0xb8}}, 0x0) r3 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r1) syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000340)={'wpan1\x00'}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRESDEC=0x0, @ANYRES8=r3, @ANYBLOB="4d69b0c84b85f35d8cc5301e7a921331577e00000000000000002a006b24b9f8caab72f04a44df003600000000000c0005000000000000000000050037000000000008000200", @ANYRESHEX=r1, @ANYBLOB], 0x40}, 0x4, 0x700000000000000, 0x0, 0x40040c4}, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r6) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r9, 0x8933, &(0x7f0000000000)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x24, r7, 0x60b, 0x0, 0x3, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x81}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x24}}, 0x24000884) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r6, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYRESOCT], 0x1c}, 0x1, 0x0, 0x0, 0x804}, 0x2de0dfad709f4724) r11 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r11, 0x10f, 0x87, &(0x7f00000005c0)={0x40, 0x0, 0x3}, 0x10) r12 = epoll_create1(0x80000) ioctl$sock_FIOGETOWN(r11, 0x8903, &(0x7f0000000040)=0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000c80)=ANY=[@ANYBLOB="44120000010805002bbd7000fddbdf25000000009c00ca0028c1eb216c303f30916c3c8bef7793f6a64dfafb605f104eb62f850c9ffec1567dca64015f99b84f6c4296203df051ed9d4baf64b659ec5d580eee22b107988774c62d38e2465eff428b437a7d015a4d8a36c9b3883342480e2046492f38e3e482b30b4b2ec82cb0cddf43931b143207a561cf149455dab71cee46d1c7406cde3222c1764bcc00ab40f006ff2376b087d083a6d7e156f6db8508dc7d09f66ed09ae4e0fdd9e08e698e33b71ffa1c29d2dad4b7c8f281f238786d960edcdd2d2884f622d41e68e0e24f299d5d4935ba130edcd3ecb3c0acb58bb81234f2f3a73c9f38c3cda5372e166ada240aba207a10fd2760cc5765e9a811fef427984e321d2382162fe8e82fab533d59fd047922a607cc81b3007ea4732c75006cfd1aa363dc88d3584b4e2f2720f5968ea4d03f5a5120f5e461d19a9c7357845bcc1321c7e6b898e265b13e66376ff7e9695bb662266d99d0834b19e45047b13c3ac9cd245ebdd967de56bda8177d3702a4f8c810a23be3efd30d2cf7b2ed5c964dcfd7e8f163cd3bf6833f0119289f79920ca4d7324283842fcb36cf8209fc21b523647fbe8eef4cd5dfb31b44c36f7fb1d7402e217023a7fa43f4c4dfc77003138330634077dfc3a6f6c35da780062f9f044def2f94d719f53bcbc9a86a990f8ae74a5732e78f650692a7038c31924bd19f214d842966c3d42cbe233727aa6d06585a577a0b85065ac1d346902b381b2ea8cdba0fc05322c612d582fd4ebef2682614aa29953208c38396b5888db25f1d200f4f12015d994e2844962d7d92759f6229cb80ad3beeb20c7db67eaddddcc92dbf01a3daaf5b7fae179efe6030e30ad68bf592b8dad65c73c3acdaf694ab389a29dd7315ec5e737d547ffe94489b03049280600f7e791011fd7de44f390cfb0429c3454a72bc5da78ad8898eeeccb1745202d774cec6feadcc901c0d40c6d43d57a6c7ccae3595051896ffc7777acadfa06ddfee50663b155827cb84284017a7d90b1a5d6626946e37303cdaa2c8a5ebd04e9b6f85dd1819b27c5179ee40e66b3d4133b2b5ae7973b82c0b68ae9c424070bc32642740a463964d56ee46a58a302a342c31d477884cf94cb3273915f95cd052b03195718aa6f425ac9bac082723392287fc82e5c96f38216d9bc2a553c45cae88d6ce03d07c3fae7152884d95197227f2e17a93539bb58fb472d4762bfc4ae283b90a9743af5a6bdc575e355c2d7c93c2146bda5401e7ef22db6292c5dcfe0566466d38ada3a474749523ec6c435ee3a155f3e04aaaad71d468aa06201ccc0f7bde2cd86e9c0dc2488077582767d779707145521218911cd7cd497a8fa262b663a1348c8c52ad2f1337c91b7293f042a9c2de2473670d0a15281b7510ee8fca6fe8985caad4705058db5335d449c302911ef3b5a84ee834864e9ba3634aeafccf22fe8b8e2d8efdef7ae85f74836e912d560c228398287514c7f15a28bb936aac0cf57b6e4ba9a1ccba56d91a464bffe7874b8aad566f9d8f45aa36ef727a6c0a166289787073c45300e793457512e0d8ee9aa32f8f9f76d51bbf8ea5ef71ed3278e8d45427e145baec8d021ef8b659a3d7dbd0a9193257b99a4ac65b70d7a529f41d2e5deab66f7dd53a7fb3d42b1106c4e0bc60f139d1f2060bc24f960edf91dc43a6ecc8602b1eb2457433df1e6fe92a39ac86863a0c227863822eb35d69314a47a2c5d5c56c136c788215b880d5cb5000a709e0d1acc45cd3cd2005135051273cee3571e5f15a4e34167a39b1d515e2a5f60435adf9de46a704a9274b9a7760e5f26275df0441c6146fe1bbf1b1c97d589490a6c38ec467f5b33f14f14e807dbc4838dcc0f4f93c08080101c6adc7123389e9a57ce67b6f82fbc5ea95e76f6c6464a35fd2c0167d8591a12db3ad1fbfc5dcfc309d7e2d019d29d3b5314445002e3e06c5dcf6641cc04abecf249e1f07f071214e73956df401875eef4b668b384966769e3edef266a272e995935ea2abdae69d960c240b3f7a8e431083b3e7d4c7b0399fa0aa237b53a0dcc1bd01c10b6f9741a158159df22970717dc2a228f3c27d5be0f1166480aec0afab461f7e9d259ba3acc5e84775ff3e5e14bde61c3988ad4bae554641e74840107ee8b5a645088799e2e2ba5a0454543246482db342ba139212f7f57a569ecf6c81a0bb0bbcb2f70bf392b6d28b41a31143715553fd0ae4e73ed6d6c58e8268462f579a115ea130b045e7d51c14b219f691cc3596606fdd5d5af5d4c1cea4574588ed270663220db28c93580fb120e9dc8c2982d01e4b53098b2e8df9156112ad42475e9a5122b2d72e3bf0be5576e905523ad0aa14825ebccbef3f4fc3ce1bceaaef32eed7c3f6bde63bce239d9c92e464029d7505345257105b5f25f2d2c00355f15ca28178f740d91675c6e309f9904eaff079a9e0c4be23e712012bf4476928d7667904c46c968d38abb1ae470931875170139bcc83865a1c42bd82f5b2138a25c4aafcf5e99e8580474d4ca998d61f5e7a91eaecf44ff90d006c9f79873450b53258ecee409acc1e196eded8cd83c9ead206525e77cdd060a6224b0d575b91193ca553a514c5b9ea9a32985ca26d5980a9c24d4dd6a295364123512b2c52a867e2183b5673120b53d41b69d34d7e91236587eb5684839191d51f232102a4cd3ef20028b2dbfacc19f2f4efc8a0269e90c7dc579a5a8f9722342dc75e78ebccff01e3dd9d6b0439b16aaed1bf930663915f9f523b675590a7524ba82e3ebf9812215d3ae13183f58f8861c21ca675359a365dd1c07ebc1dd07a92872ec8c8b5eccef7691a011231b8540703b25337b48f639fc26b3a0ad56b2b115421319ec5e6f31bee816a19937f2781381038c2973e0d9971ad2e893e30a4c2a1ed865a94201f8601822d96a70eabf39510ea05f7f3de261a6949208ce3839a1c9f8878cae869702bee022492b8a71b22896b6c197835752e00f0c21aff2c827bd96d21560f26efcad4e6b9844f914677a55d739bd51a24d24fe8860a00ce2aba393fcf1f4c2e2239e361781648636061c63346152391ef0a0d9a1ad1a3df8177570ecf7e39a2267e884a9f766c3f49dfe0550ab802966252bbfbc5fa0d72385228051bf48a98c2c160eef3e9e9b6046c910acae81ae240a88eeabcb182899dc2d4c9e8bc9435887f8397adf70d8ed00971341b028696e379c8d7cc02710718d51f80fd26e67d3a62b8282146a38fc8aee60695a0625bf85040d97a75f3a41954f8148eb4f3e08e1168ed079fb4f687cc9a7ed4098599c966c641507dba10d6e8dd7913dd5d6ce3ea8600d759379532e126d10fc93afc043cae745c40d4762910d49df691de22326b179f7642624d792c13af8c7fd0a011dbbf24e0c785bc31bfffdaae29ce2d071212e9b5a4246ead0287bc09baf2538180b1b031d8bc6baf6eb922c55f52c9e4951ed253046cd678dd1ac5685027fbf073552adfd6b88f90740c33fd719a1ad1b8c6ce0619ce28dc0ba0a7963e5a11831945e38084be08d9256e36d808db1b0bf38389b7d6a477796662fb677984718d22da132ed02c3b562f815c001b04697481e5cc107d6d1fd9d86926e48f8685d075c90db8c898ef37f7eca69ea8c2bf96da81c4ce0afd546735fa6e4a28ea50b14f90250ad719477eb5956333c0d87d03e368d97309d2c214893b152da241fc2e4e2591d6438449e95312c496f5bd55eb85a6c807dc6856af3a499734349e7794df99a0dea6e624ee66b26d43ac9f57a2940855ccef72785141aa05d1a107f448715c33759928be8b4c8a0086f223627e7083d643ea7fd78d39da253c3d95c7f7e586e1ed5331ee52514a3c1b777716c6c55a0fae2f68fe0736d280ced38cbfec21a14cd807e8f9e2154b6fc7e36d7c4b677abdf9c8e81f6a9f59b54bfc99cb26198d9e5a5ab526efd074327aa01baaef156d7a899b0f761a36848c1503b167bc2f7cabc71ef0a57202dd841b6f2748463064bdf7a27e9c5bc902b78eb98b026824c53e7651949b173cffe22bde5e73d035e63d1d1866ea50efe9b066ba57bbf6ccbb34dbe410ea97340a393b131f7b5fe77746d779d24cf8d059a865f850b6a52c5e213dfa8082aaa74fd84b27142d89fdcda140939d6ef189e58677c94668bd69d559d2860049602fbabde32f0deadfcf71338cad2e5aa0b11d9ac9c0ef279e2de4e0171760a9e862d6d0b71a60c7320e85fc244fa0aa1a6500d7bcec1888f185e93ad634eb99bd071081a99c0093d1ff0a57f1fc7695fc6ad15429b936effdfd17ac96b534988d24c21e149dc57e6045ebe0a2c6302d040996dd82a19c0c1e453f4c51412b9feb276982fdb01d831f82fd83c59646ccb112aa74c37581ab618c13e442b5ab58c2caffdabf69d496f6ecae7c141bc80d017938675caf50eb96aa49150d4a53bc19d24ceacb6a23cb3ddc99cbb24804eac3015aeec8c199eff129f42f0f70680a44e576f75028b8e69027f02d2b3b4fe8b7a41699003678c67d1922d87959da1b2486ec19464f464a4c26424862a44814d39c44e85f242c3c390560487611f718adb276b48f8716daad44f6ecbc7f6e0fe432f90a045692f5a7ccaf63a20a748e11ccd344845b43bb1cfadab62949ac3dda670de222b19148042d3380f019bb01e2876a58464c1cb55f80d35b96168dc1d16749fe5ca965bc64e626d933d3b5827f4e45b154f9b862d17854ee7bb94033d6bda73855896f0aa4c1ced68aad8f29e2fd82715731f1cc12dc490dac2bd515f81c7f4bd65935fab0838a09d7ca41b8de76acb207775940000325d2b11cc06ef39e5e61ed7cd1dffbba8760eaa3ee76eda186765df00adf2055e7ecd28e0cc4d3469c05b0dc2b200b5565677ec0d76624b78741785faa49fc635640f1e0442b0a0e3652d39e0b3d16075b1e2d738fe049ddd580fc7f9f8b23b04c37c1485eefe9075bdcade03dbc060b6533e63d0119b7330a453219841cf2756eeff73f796518f6534b0dcac40124f254ad3c29930d6d9525f011309c71177661c02e1f735bb2002133193673bbe24360ea72f7bf7523a7380019bd7198cbe9e24a28d47ed0e88025019e6c82aae7bbb22b226752fd3ae63e51d5551d400aaf18bfd300438b93b451ab2b8d20eec92a88dfc2e0c36239ba3a93e99cd8953f9b642cd008f845c174532f53a483788540507614dcbcab965c205c110b00f162f93d4df63070a089971549ebde9b6c6b333929a27de6cf8ed3215c6f8573210cbad27a8247cdd9e05c1ee3f0c84a40f44579648a459d5dfd56f802bdf76a4919afd30d66315d52e1a3cc9e42956e91b518e05ba72a53a2d45fffab0565c7cee3f739916f3525b9bdcecd0b7babe00135154ee849d15a9deb040f9a9b54151027673bb652853e67a9b17e84143d6dd57678bed8d12537200e29b4b0ba2f102100d9301c6ae107a4a81db23c57abb219657b4d85559c638f9cbcc5a95de2289fa4c271dc75cfa42d6548c96102679e226e3d3008d88e022612fd0c98f848437f6f9d851ff650a294ca83b8973d4f583c7c66759800858a77940725a8290c0655f0da2ecc2f550f93683e9575e68116a4b230cfc8fa855a529d0b086d7addabae49b540e6557792deeb0e1ef8b6a48023a597c3a944c4ffab4f8c0f265b4a084a4419182a804ab490fb5cb8e67f8ed76503a110beb155a84af4671a2a8e4d758ee69c04b2eab4ef26e87065b0883086d223495eb751469c4970450f466a25f4dd648c553fc98efc65ab2256e238a7912c1882856829e16687457f327a03b4c99086c3b080212f14202869056190f8eb172d650d16596bfabfd7b262e556dbc7a48ed46b44c5ce017b85f007d37421e34c91f86fae0608dd11c38a38da929fd8b699cffd5e284beab526333125ce6c0326c3cf87f816b5c5c63c0284d255afe724265fb19d6c7f5573f7ba09c415abb6ee10a305513382534a7aa78f6acb04c12054cbefa2c93e11ee8b013d800800f100", @ANYRES32=r12, @ANYBLOB="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", @ANYRES32=r13, @ANYBLOB="08003200000000000008005e0005000000"], 0x1244}, 0x1, 0x0, 0x0, 0x80044}, 0x2004800) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000080)='ns/mnt\x00') sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r1, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB, @ANYRES16=r7, @ANYBLOB="000829bd7000fcdbdf2514000000"], 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x804) recvmmsg(r0, &(0x7f0000000800), 0x62, 0x12141, 0x0) 406.986276ms ago: executing program 6 (id=2016): r0 = socket$can_bcm(0x1d, 0x2, 0x2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000000)={0x11, 0x0, 0x0}, &(0x7f0000000100)=0x14) connect$can_bcm(r0, &(0x7f00000000c0)={0x1d, r1}, 0x10) sendmsg$can_bcm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="050000000808"], 0x80}}, 0x0) sendmmsg$inet(r0, &(0x7f0000001b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)="050000007402b8f4191db62b", 0xc}, {&(0x7f0000000440)="9f336d70bf41f19e47e98b4015e3b0384d86a1ceb4e530554ebc8154bf392bcf9ce0b09f879bd7aaf9d086e3", 0x2c}], 0x2}}], 0x1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000440)={0x6, 0x2, &(0x7f0000000500)=@raw=[@cb_func], &(0x7f0000000140)='syzkaller\x00', 0x6, 0xff, &(0x7f0000000340)=""/255, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x9, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0xffff5fa4, 0x0, 0x0, 0x0, 0x16, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f00000001c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0xffffffffffffff07, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000210400"/20, @ANYRES32=0x0, @ANYBLOB="adffa88800000000280012800a000100767863616e000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="040002001000000008000a00ea7482760427b75cf440195153f631e2d63a018090087c6270cbd3cfc79b8770ba77fe5705e84d3c8db15f93f3dca24eee387bf6f06780ddc217422fa8d0fe0af8ef", @ANYRES32=r6, @ANYBLOB], 0x50}}, 0x0) 332.8441ms ago: executing program 5 (id=2017): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000000)=ANY=[@ANYRES16=r0, @ANYRESDEC=r0, @ANYRESOCT=r0, @ANYBLOB="00000000000000000a001000010000000000000008000b00000000002c001300e0000001000000000000000000000000fc0000000000200000000000000000000000000000000000cc0111"], 0x268}, 0x1, 0x0, 0x0, 0x4004000}, 0x4000000) 189.401828ms ago: executing program 5 (id=2018): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r2, @ANYBLOB="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"], 0x28}, 0x1, 0x0, 0x0, 0x40004}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r3, 0x400448ca, 0x0) bind$bt_hci(r3, &(0x7f0000000080)={0x1f, 0xffff, 0x2}, 0x6) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB='\n\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00L\x00\x00\x00', @ANYRES32, @ANYBLOB="00000000002d630000000000000000000000000061669fd40398e76e264e0568fc6787b767637714426909fb20afbb0fc2b108b2d45a656e16ca70df74f9dd0f23038fb261fa8e72d33ebcf584a8f9f92d86424fb86c8a8de4df86ac46", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0xfffc, 0x1}, 0x6) write$bt_hci(r5, &(0x7f0000000380)=ANY=[@ANYRESDEC=r4], 0xfffffec3) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000900)=@newtaction={0x1ec, 0x30, 0xffff, 0x0, 0x0, {}, [{0x1d8, 0x1, [@m_nat={0x1d4, 0xd, 0x0, 0x0, {{0x8}, {0x11c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0xfffffffb, 0xca0, 0x7, 0x3, 0xd7a}, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x28}, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x6, 0x2, 0x7, 0xb04, 0x7ff}, @multicast2, @remote, 0x2b897ba3fa4775c1, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x3, 0x9, 0xffffffffffffffff, 0x4, 0x2}, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0x9, 0x2, 0xb679, 0x3}, @multicast1, @rand_addr=0x64010102}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x4, 0x8, 0x3, 0xf60e, 0x3}, @empty, @empty, 0xffffffff}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x1, 0x5, 0x2, 0xdb7c, 0x9}, @rand_addr=0x64010100, @private=0xa010102, 0x0, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x492b, 0xfffffffb, 0x7, 0xffffffff, 0xfffffe01}, @private=0xa010101, @multicast2, 0xffffff00}}]}, {0x91, 0x6, "764a1f4479967042d2316efc8493e2749e36959ec0d2330f7fce2d2c5a27a4819de752c438ea84a98956b56c983437cd30283419a99af4c602b382bd3cb52e79ab167c6026bde32aaa3be42efb1b7f1220119e484799511e7fea3bf9fa7e65dfe4fab55a4cb618e85f71f7534846895ecfa046dbe9f926829e2df6cafbdea103187c6f8634960301173abff13a"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x7}}}}]}]}, 0x1ec}}, 0x11) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) r7 = socket$inet(0x2, 0x1, 0x3) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0xb, &(0x7f00000004c0)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000000)='GPL\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071, 0x0, 0x46, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000, @void, @value}, 0x94) setsockopt$inet_msfilter(r7, 0x0, 0x8, &(0x7f0000000180)=ANY=[], 0x1) getsockopt$inet_pktinfo(r7, 0x0, 0x8, &(0x7f00000000c0)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r10, 0x8916, &(0x7f0000000000)={@remote, 0x7b, r9}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB="200000007900210826bd7000fcdbdf2507000000faffffff0700010001"], 0x20}, 0x1, 0x0, 0x0, 0xc0}, 0x20000000) socket$rxrpc(0x21, 0x2, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) 174.02412ms ago: executing program 6 (id=2019): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@gettaction={0x34, 0x32, 0x6dd711a25f4cb68b, 0x0, 0x0, {}, [@action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}]}]}, 0x34}}, 0x0) epoll_create(0x1) socket$netlink(0x10, 0x3, 0x0) 0s ago: executing program 6 (id=2020): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=ANY=[@ANYBLOB="000000003b7f486a89f67e469aaafded07f3f8f6c6fe48c4b420ac7cf1a56a95434dec9664f9e6f128daeddd4347f3c9aa4203638b4cfdb718fe6cb7ebdbbeaf9598ae4f7bc8abed2a6313e37ac474a8aa4a509bcdbd127d0c30189f26f5f44b8d6a693c181d3a82c6d93bc5f2dd4902ed2fe575749990239dedb811e4ab9df17120583e6fd203ca9b79406a17ecad0300000000000000e76a6d", @ANYRES16=r1, @ANYBLOB="000000000000000000001a00000007002100626200001c002280040000800400008004000080040000800400008004000080"], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$inet(0x2, 0x4, 0x1ffc) setsockopt$inet_mreqn(r2, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r2, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYRES16], 0x57) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18ffffffffffffffed000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r4 = socket$unix(0x1, 0x0, 0x0) bind$unix(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448de, &(0x7f00000000c0)={0x0, 0x0, "a4cd91"}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="05000000010000", 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r8 = epoll_create(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r3, &(0x7f00000001c0)={0x10}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000140)='contention_end\x00', r3}, 0x10) close(r4) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x6c}}, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) writev(r10, &(0x7f0000000780)=[{&(0x7f0000000380)="390000001300034700bb65e1c3e4ffff010000000100000056000000250000001900040004e0144000000007fd17e5ffff0800040000000000", 0x39}], 0x1) writev(r7, &(0x7f00000001c0)=[{&(0x7f0000000200)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000200000000000006040000000000f93132", 0x39}], 0x1) kernel console output (not intermixed with test programs): dge_slave_0) entered blocking state [ 285.813693][T12184] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.820919][T12184] bridge_slave_0: entered allmulticast mode [ 285.841807][T12184] bridge_slave_0: entered promiscuous mode [ 285.951277][T12184] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.971736][T12184] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.992219][T12184] bridge_slave_1: entered allmulticast mode [ 286.002429][T12184] bridge_slave_1: entered promiscuous mode [ 286.232232][ T9481] bridge_slave_1: left allmulticast mode [ 286.238361][ T9481] bridge_slave_1: left promiscuous mode [ 286.263543][ T9481] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.370041][ T9481] bridge_slave_0: left allmulticast mode [ 286.383378][ T9481] bridge_slave_0: left promiscuous mode [ 286.403758][ T9481] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.943489][ T5842] Bluetooth: hci1: command tx timeout [ 287.299638][ T9481] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.311837][ T9481] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.324761][ T9481] bond0 (unregistering): Released all slaves [ 287.340620][T12184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 287.352407][T12184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 287.544715][T12184] team0: Port device team_slave_0 added [ 287.586481][ T5842] Bluetooth: hci0: command 0x041b tx timeout [ 287.651897][T12184] team0: Port device team_slave_1 added [ 287.841982][T12316] netlink: 'syz.7.1701': attribute type 1 has an invalid length. [ 287.864046][T12184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.871022][T12184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.913169][T12184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 288.009042][T12184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 288.017273][T12184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 288.068251][T12184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 288.095460][T12314] pim6reg1: entered promiscuous mode [ 288.100919][T12314] pim6reg1: entered allmulticast mode [ 288.145579][T12160] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 288.157962][ T9481] hsr_slave_0: left promiscuous mode [ 288.169091][ T9481] hsr_slave_1: left promiscuous mode [ 288.176016][ T9481] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.183868][ T9481] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.214910][ T9481] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.222342][ T9481] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.295034][ T9481] veth1_macvtap: left promiscuous mode [ 288.300604][ T9481] veth0_macvtap: left promiscuous mode [ 288.308249][ T9481] veth1_vlan: left promiscuous mode [ 288.313879][ T9481] veth0_vlan: left promiscuous mode [ 288.762902][ T9481] team0 (unregistering): Port device team_slave_1 removed [ 288.816959][ T9481] team0 (unregistering): Port device team_slave_0 removed [ 289.023602][ T5842] Bluetooth: hci1: command tx timeout [ 289.290728][T12326] netlink: 'syz.7.1704': attribute type 25 has an invalid length. [ 289.303836][T12326] netlink: 'syz.7.1704': attribute type 7 has an invalid length. [ 289.322723][T12160] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 289.350122][T12335] pimreg: left allmulticast mode [ 289.376424][T12338] __nla_validate_parse: 5 callbacks suppressed [ 289.376455][T12338] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1706'. [ 289.484540][T12160] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 289.495985][T12160] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 289.547150][T12184] hsr_slave_0: entered promiscuous mode [ 289.554347][T12343] sock: sock_timestamping_bind_phc: sock not bind to device [ 289.564610][T12184] hsr_slave_1: entered promiscuous mode [ 289.571177][T12184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 289.580106][T12184] Cannot create hsr debugfs directory [ 289.618836][ T9064] IPVS: starting estimator thread 0... [ 289.625515][T12341] netlink: 'syz.7.1707': attribute type 39 has an invalid length. [ 289.674986][ T5842] Bluetooth: hci0: command 0x041b tx timeout [ 289.742888][T12347] netlink: 'syz.6.1709': attribute type 21 has an invalid length. [ 289.751122][T12345] IPVS: using max 19 ests per chain, 45600 per kthread [ 289.766182][T12347] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 289.980187][T12349] lo speed is unknown, defaulting to 1000 [ 289.992304][T12351] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1711'. [ 290.085773][T12160] 8021q: adding VLAN 0 to HW filter on device bond0 [ 290.162584][T12160] 8021q: adding VLAN 0 to HW filter on device team0 [ 290.301742][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 290.308996][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 290.385044][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 290.392217][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.463702][T12358] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1714'. [ 290.482358][T12363] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1715'. [ 290.629683][T12368] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1717'. [ 290.659233][T12366] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 290.694054][T12184] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 290.766174][T12184] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 290.803898][T12184] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 290.887364][T12184] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 291.109083][T12160] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.117359][ T5842] Bluetooth: hci1: command tx timeout [ 291.144946][T12184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 291.160308][T12184] 8021q: adding VLAN 0 to HW filter on device team0 [ 291.188338][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.195526][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 291.205738][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.212838][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 291.239932][T12184] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 291.341392][T12160] veth0_vlan: entered promiscuous mode [ 291.392297][T12160] veth1_vlan: entered promiscuous mode [ 291.479792][T12160] veth0_macvtap: entered promiscuous mode [ 291.518148][T12160] veth1_macvtap: entered promiscuous mode [ 291.568161][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.598119][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.623665][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.651599][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.673812][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.698160][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.713645][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.724646][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.736686][T12160] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.747572][ T5842] Bluetooth: hci0: command 0x041b tx timeout [ 291.832192][T12184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 291.878259][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.906541][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.928105][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.951383][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.972567][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.009370][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.022140][T12160] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.034765][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.046908][T12160] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.070666][T12400] lo speed is unknown, defaulting to 1000 [ 292.095958][T12160] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.123527][T12160] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.132249][T12160] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.165256][T12160] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.276943][T12184] veth0_vlan: entered promiscuous mode [ 292.347070][T12184] veth1_vlan: entered promiscuous mode [ 292.469881][T12160] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 292.480716][T12160] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.496759][T12184] veth0_macvtap: entered promiscuous mode [ 292.502715][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.513626][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.527634][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 292.551990][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.556146][T12184] veth1_macvtap: entered promiscuous mode [ 292.684289][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.714051][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.734079][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.759429][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.780316][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.802053][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.822381][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.843790][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.873684][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 292.893366][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.915022][T12184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 292.964164][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.984852][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.004224][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.036245][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.059705][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.080902][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.101354][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.123154][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.148958][T12184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 293.169890][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.184620][T12451] netlink: 'syz.6.1732': attribute type 12 has an invalid length. [ 293.192780][T12451] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1732'. [ 293.202721][T12184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 293.298506][T12184] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.322330][T12184] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.337926][T12184] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.350101][T12184] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 293.364916][T12455] netlink: 'syz.6.1734': attribute type 11 has an invalid length. [ 293.379500][T12455] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1734'. [ 293.634913][ T11] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 293.690042][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.712838][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.734421][T12184] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 293.744597][T12184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 293.778187][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.796612][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.930719][ T11] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.008301][ T11] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.082874][ T11] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 294.175457][ T11] bridge_slave_1: left allmulticast mode [ 294.181145][ T11] bridge_slave_1: left promiscuous mode [ 294.189312][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 294.202388][ T11] bridge_slave_0: left allmulticast mode [ 294.208558][ T11] bridge_slave_0: left promiscuous mode [ 294.215667][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.575836][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.592670][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.611314][ T11] bond0 (unregistering): Released all slaves [ 294.906978][T12466] netlink: 14568 bytes leftover after parsing attributes in process `syz.5.1736'. [ 295.197380][ T11] hsr_slave_0: left promiscuous mode [ 295.212823][ T11] hsr_slave_1: left promiscuous mode [ 295.219245][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 295.230763][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 295.231038][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 295.246716][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 295.252525][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 295.259698][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 295.262463][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 295.282978][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 295.290753][ T5855] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 295.308127][ T11] veth1_macvtap: left promiscuous mode [ 295.309176][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 295.313828][ T11] veth0_macvtap: left promiscuous mode [ 295.327127][ T11] veth1_vlan: left promiscuous mode [ 295.332642][ T11] veth0_vlan: left promiscuous mode [ 295.760573][ T11] team0 (unregistering): Port device team_slave_1 removed [ 295.798289][ T11] team0 (unregistering): Port device team_slave_0 removed [ 296.241333][T12475] lo speed is unknown, defaulting to 1000 [ 296.492205][T12475] chnl_net:caif_netlink_parms(): no params data found [ 296.557545][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.609007][T12475] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.621417][T12475] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.643829][T12475] bridge_slave_0: entered allmulticast mode [ 296.650863][T12475] bridge_slave_0: entered promiscuous mode [ 296.736600][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.769823][T12475] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.783768][T12475] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.797796][T12475] bridge_slave_1: entered allmulticast mode [ 296.814622][T12475] bridge_slave_1: entered promiscuous mode [ 296.920423][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.945685][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.963721][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.982473][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.994059][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 297.004326][ T5855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 297.011749][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.191834][T12475] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 297.226030][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 297.249011][T12475] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 297.337594][T12501] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1744'. [ 297.367309][T12475] team0: Port device team_slave_0 added [ 297.376425][T12475] team0: Port device team_slave_1 added [ 297.408949][T12494] lo speed is unknown, defaulting to 1000 [ 297.424304][ T5842] Bluetooth: hci0: command tx timeout [ 297.532023][T12475] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 297.554067][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.638004][T12475] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 297.685888][T12475] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 297.692880][T12475] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 297.743260][T12475] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 297.949445][ T11] bridge_slave_1: left allmulticast mode [ 297.959064][ T11] bridge_slave_1: left promiscuous mode [ 297.973926][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 298.004595][ T11] bridge_slave_0: left allmulticast mode [ 298.010511][ T11] bridge_slave_0: left promiscuous mode [ 298.020776][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.439604][T12528] xt_l2tp: wrong L2TP version: 0 [ 298.630948][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.644341][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.657860][ T11] bond0 (unregistering): Released all slaves [ 298.666368][T12533] xt_TCPMSS: Only works on TCP SYN packets [ 298.689147][T12475] hsr_slave_0: entered promiscuous mode [ 298.696108][T12475] hsr_slave_1: entered promiscuous mode [ 298.702221][T12475] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 298.710908][T12475] Cannot create hsr debugfs directory [ 299.050885][T12539] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1753'. [ 299.104094][ T5842] Bluetooth: hci1: command tx timeout [ 299.513410][ T5842] Bluetooth: hci0: command tx timeout [ 299.578717][ T11] hsr_slave_0: left promiscuous mode [ 299.598569][ T11] hsr_slave_1: left promiscuous mode [ 299.613084][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.632049][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.646557][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.656796][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.682140][ T11] veth1_macvtap: left promiscuous mode [ 299.688064][ T11] veth0_macvtap: left promiscuous mode [ 299.693827][ T11] veth1_vlan: left promiscuous mode [ 299.699575][ T11] veth0_vlan: left promiscuous mode [ 300.185680][ T11] team0 (unregistering): Port device team_slave_1 removed [ 300.232186][ T11] team0 (unregistering): Port device team_slave_0 removed [ 300.716955][T12494] chnl_net:caif_netlink_parms(): no params data found [ 300.898331][T12580] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1764'. [ 300.993282][T12494] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.002788][T12494] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.012442][T12494] bridge_slave_0: entered allmulticast mode [ 301.021573][T12494] bridge_slave_0: entered promiscuous mode [ 301.049956][T12494] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.050082][T12580] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1764'. [ 301.057335][T12494] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.087393][T12494] bridge_slave_1: entered allmulticast mode [ 301.100119][T12494] bridge_slave_1: entered promiscuous mode [ 301.184110][ T5842] Bluetooth: hci1: command tx timeout [ 301.256317][T12494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 301.306961][T12494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 301.412157][T12494] team0: Port device team_slave_0 added [ 301.439525][T12597] netlink: 72 bytes leftover after parsing attributes in process `syz.5.1768'. [ 301.453946][T12597] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1768'. [ 301.463109][T12597] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1768'. [ 301.472847][T12595] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1767'. [ 301.490186][T12494] team0: Port device team_slave_1 added [ 301.515692][T12475] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 301.534151][T12475] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 301.568659][T12494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.576217][T12494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.602873][T12494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.603937][ T5842] Bluetooth: hci0: command tx timeout [ 301.614629][T12475] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 301.635509][T12494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.653134][T12494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.730468][T12494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.763595][T12475] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 301.790189][T12603] lo speed is unknown, defaulting to 1000 [ 302.006461][T12606] netlink: 52 bytes leftover after parsing attributes in process `syz.6.1772'. [ 302.042068][T12494] hsr_slave_0: entered promiscuous mode [ 302.074584][T12494] hsr_slave_1: entered promiscuous mode [ 302.081057][T12494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 302.113487][T12494] Cannot create hsr debugfs directory [ 302.318465][T12600] vlan2: entered promiscuous mode [ 302.324341][T12600] bond0: entered promiscuous mode [ 302.329537][T12600] bond_slave_0: entered promiscuous mode [ 302.337250][T12600] bond_slave_1: entered promiscuous mode [ 302.355002][T12600] vlan2: entered allmulticast mode [ 302.371749][T12600] bond0: entered allmulticast mode [ 302.377140][T12600] bond_slave_0: entered allmulticast mode [ 302.393081][T12600] bond_slave_1: entered allmulticast mode [ 302.401266][T12600] team0: Device vlan2 is up. Set it down before adding it as a team port [ 302.416763][T12600] bond0: left allmulticast mode [ 302.431870][T12600] bond_slave_0: left allmulticast mode [ 302.443474][T12600] bond_slave_1: left allmulticast mode [ 302.454685][T12600] bond0: left promiscuous mode [ 302.459487][T12600] bond_slave_0: left promiscuous mode [ 302.467818][T12612] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1771'. [ 302.503160][T12600] bond_slave_1: left promiscuous mode [ 302.572353][T12475] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.696490][T12475] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.751306][T10446] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.758578][T10446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.906198][T12621] lo speed is unknown, defaulting to 1000 [ 302.913219][T12621] lo speed is unknown, defaulting to 1000 [ 302.921835][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.929079][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.959581][T12621] lo speed is unknown, defaulting to 1000 [ 303.008136][T12621] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 303.100936][T12621] lo speed is unknown, defaulting to 1000 [ 303.211514][T12621] lo speed is unknown, defaulting to 1000 [ 303.264314][ T5842] Bluetooth: hci1: command tx timeout [ 303.276069][T12621] lo speed is unknown, defaulting to 1000 [ 303.321563][T12494] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 303.358544][T12621] lo speed is unknown, defaulting to 1000 [ 303.367456][T12494] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 303.381243][T12621] lo speed is unknown, defaulting to 1000 [ 303.382363][T12494] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 303.448621][T12621] lo speed is unknown, defaulting to 1000 [ 303.454644][T12494] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 303.471954][T12621] lo speed is unknown, defaulting to 1000 [ 303.504054][T12621] lo speed is unknown, defaulting to 1000 [ 303.510860][T12621] lo speed is unknown, defaulting to 1000 [ 303.536901][T12475] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.545920][T12621] lo speed is unknown, defaulting to 1000 [ 303.664633][ T5842] Bluetooth: hci0: command tx timeout [ 303.678534][T12475] veth0_vlan: entered promiscuous mode [ 303.730512][T12639] set match dimension is over the limit! [ 303.756090][T12475] veth1_vlan: entered promiscuous mode [ 303.866717][T12647] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1782'. [ 303.881403][T12475] veth0_macvtap: entered promiscuous mode [ 303.899060][T12494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 303.935004][T12475] veth1_macvtap: entered promiscuous mode [ 303.948278][T12639] pim6reg: left allmulticast mode [ 303.976607][T12647] Bluetooth: MGMT ver 1.23 [ 304.030297][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.057756][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.079159][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.092909][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.111543][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.128931][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.151936][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.155917][T12655] xt_bpf: check failed: parse error [ 304.167350][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.186744][T12475] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.231983][T12657] bridge0: port 2(bridge_slave_1) entered disabled state [ 304.273121][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.304685][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.316473][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.334636][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.353386][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.375261][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.394878][T12475] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.416656][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.458213][T12475] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.502805][T12658] bridge0: port 3(veth1) entered blocking state [ 304.520267][T12658] bridge0: port 3(veth1) entered disabled state [ 304.542381][T12658] veth1: entered allmulticast mode [ 304.568417][T12658] veth1: entered promiscuous mode [ 304.582840][T12658] bridge0: port 3(veth1) entered blocking state [ 304.589269][T12658] bridge0: port 3(veth1) entered forwarding state [ 304.632358][T12494] 8021q: adding VLAN 0 to HW filter on device team0 [ 304.708051][T12475] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.743585][T12475] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.766538][T12475] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.787747][T12475] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.834416][T12653] lo speed is unknown, defaulting to 1000 [ 304.846920][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.854087][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 304.904114][ T2960] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.911263][ T2960] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.093076][T12672] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1787'. [ 305.108507][T10446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.118910][T10446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.157595][T12475] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 305.174204][T12475] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 305.214306][T12653] lo speed is unknown, defaulting to 1000 [ 305.241010][ T8851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.275669][ T8851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.344689][ T5842] Bluetooth: hci1: command tx timeout [ 305.696795][T12494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 305.771953][T12689] netlink: 'syz.6.1793': attribute type 3 has an invalid length. [ 305.798453][T12698] sctp: [Deprecated]: syz.7.1794 (pid 12698) Use of int in maxseg socket option. [ 305.798453][T12698] Use struct sctp_assoc_value instead [ 305.875756][T12494] veth0_vlan: entered promiscuous mode [ 305.917030][T12494] veth1_vlan: entered promiscuous mode [ 306.048313][T12494] veth0_macvtap: entered promiscuous mode [ 306.074797][T12494] veth1_macvtap: entered promiscuous mode [ 306.092660][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.104758][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.120339][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.132597][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.143178][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.155594][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.166018][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.177062][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.187366][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 306.198665][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.209972][T12494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 306.221931][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.234872][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.245869][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.257226][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.267323][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.277981][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.287929][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.298585][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.309188][T12494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 306.319969][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.331185][T12494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 306.350274][T12494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.364594][T12494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.373984][T12494] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.382679][T12494] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 306.488523][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.515391][T10450] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.523223][T10450] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.562776][T12494] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 306.572783][T12494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 306.599470][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.615972][ T8851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 306.636021][ T8851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 306.685501][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.778855][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.893723][ T12] bridge_slave_1: left allmulticast mode [ 306.899421][ T12] bridge_slave_1: left promiscuous mode [ 306.905501][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.917718][ T12] bridge_slave_0: left allmulticast mode [ 306.924587][ T12] bridge_slave_0: left promiscuous mode [ 306.930262][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.359590][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 307.384149][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 307.400165][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 307.419541][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 307.432364][ T5855] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 307.444499][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 307.541811][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 307.553094][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 307.564486][ T12] bond0 (unregistering): Released all slaves [ 307.638217][T12701] lo speed is unknown, defaulting to 1000 [ 307.737583][T12701] lo speed is unknown, defaulting to 1000 [ 307.889346][T12701] chnl_net:caif_netlink_parms(): no params data found [ 307.980344][ T12] hsr_slave_0: left promiscuous mode [ 307.987079][ T12] hsr_slave_1: left promiscuous mode [ 308.001796][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 308.010043][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 308.023808][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 308.031213][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 308.057876][ T12] veth1_macvtap: left promiscuous mode [ 308.065883][ T12] veth0_macvtap: left promiscuous mode [ 308.071429][ T12] veth1_vlan: left promiscuous mode [ 308.077522][ T12] veth0_vlan: left promiscuous mode [ 308.510048][ T12] team0 (unregistering): Port device team_slave_1 removed [ 308.544963][ T12] team0 (unregistering): Port device team_slave_0 removed [ 308.910053][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 308.920082][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 308.928964][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 308.940330][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 308.949270][ T5855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 308.958531][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 309.496299][T12710] infiniband syz0: set active [ 309.513817][ T5842] Bluetooth: hci0: command tx timeout [ 309.521876][T12710] veth1: left allmulticast mode [ 309.538010][T12710] veth1: left promiscuous mode [ 309.553762][T12710] bridge0: port 3(veth1) entered disabled state [ 309.579916][T12710] bridge_slave_0: left allmulticast mode [ 309.593718][T12710] bridge_slave_0: left promiscuous mode [ 309.609335][T12710] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.631235][T12710] bridge_slave_1: left allmulticast mode [ 309.643504][T12710] bridge_slave_1: left promiscuous mode [ 309.649326][T12710] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.693878][T12710] bond0: (slave bond_slave_0): Releasing backup interface [ 309.724761][T12710] bond0: (slave bond_slave_1): Releasing backup interface [ 309.777185][T12710] team0: Port device team_slave_0 removed [ 309.829273][T12710] team0: Port device team_slave_1 removed [ 309.836673][T12710] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.844710][T12710] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.853150][T12710] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.862125][T12710] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.883143][T12715] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1797'. [ 309.981857][ T8507] lo speed is unknown, defaulting to 1000 [ 310.087503][T12717] lo speed is unknown, defaulting to 1000 [ 310.094173][T12701] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.101282][T12701] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.159803][T12701] bridge_slave_0: entered allmulticast mode [ 310.193742][T12701] bridge_slave_0: entered promiscuous mode [ 310.324915][T12701] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.342315][T12701] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.371030][T12701] bridge_slave_1: entered allmulticast mode [ 310.384618][T12701] bridge_slave_1: entered promiscuous mode [ 310.436943][T12717] lo speed is unknown, defaulting to 1000 [ 310.474105][T12701] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.485876][T12701] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.634373][T12746] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1806'. [ 310.705120][T12701] team0: Port device team_slave_0 added [ 310.756227][T12701] team0: Port device team_slave_1 added [ 310.934436][T12701] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.941475][T12701] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.979130][T12701] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 311.024204][ T5842] Bluetooth: hci1: command tx timeout [ 311.053755][T12701] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 311.060836][T12701] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 311.111458][T12701] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 311.257207][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.294018][T12717] chnl_net:caif_netlink_parms(): no params data found [ 311.349657][T12784] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1816'. [ 311.389433][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.408869][T12787] netlink: 60 bytes leftover after parsing attributes in process `syz.5.1817'. [ 311.468565][T12701] hsr_slave_0: entered promiscuous mode [ 311.484022][T12701] hsr_slave_1: entered promiscuous mode [ 311.495781][T12701] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.503782][T12701] Cannot create hsr debugfs directory [ 311.545282][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.584407][ T5842] Bluetooth: hci0: command tx timeout [ 311.708737][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 311.735359][T12804] netlink: 68 bytes leftover after parsing attributes in process `syz.6.1821'. [ 312.051798][T12804] lo speed is unknown, defaulting to 1000 [ 312.096677][T12717] bridge0: port 1(bridge_slave_0) entered blocking state [ 312.104252][T12717] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.112512][T12717] bridge_slave_0: entered allmulticast mode [ 312.136421][T12717] bridge_slave_0: entered promiscuous mode [ 312.144747][T12717] bridge0: port 2(bridge_slave_1) entered blocking state [ 312.151847][T12717] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.159833][T12717] bridge_slave_1: entered allmulticast mode [ 312.166878][T12717] bridge_slave_1: entered promiscuous mode [ 312.194867][T12821] infiniband syz0: set active [ 312.257235][ T8508] lo speed is unknown, defaulting to 1000 [ 312.277014][T12717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 312.295763][T12717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 312.320331][T12804] lo speed is unknown, defaulting to 1000 [ 312.320387][T12812] lo speed is unknown, defaulting to 1000 [ 312.361201][ T12] bridge_slave_1: left allmulticast mode [ 312.373536][ T12] bridge_slave_1: left promiscuous mode [ 312.379371][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 312.406352][ T12] bridge_slave_0: left allmulticast mode [ 312.412039][ T12] bridge_slave_0: left promiscuous mode [ 312.423637][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 312.790251][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 312.808510][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 312.820256][ T12] bond0 (unregistering): Released all slaves [ 312.862722][T12717] team0: Port device team_slave_0 added [ 312.879395][T12812] lo speed is unknown, defaulting to 1000 [ 312.882757][T12717] team0: Port device team_slave_1 added [ 313.066219][T12717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.073206][T12717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.102702][T12717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.114999][ T5842] Bluetooth: hci1: command tx timeout [ 313.193599][T12717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.208000][T12717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.235284][T12717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.592604][T12717] hsr_slave_0: entered promiscuous mode [ 313.611398][T12717] hsr_slave_1: entered promiscuous mode [ 313.640847][T12717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.662208][T12717] Cannot create hsr debugfs directory [ 313.668563][ T5842] Bluetooth: hci0: command tx timeout [ 313.909133][ T12] hsr_slave_0: left promiscuous mode [ 313.919826][ T12] hsr_slave_1: left promiscuous mode [ 313.934573][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 313.941998][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 313.959031][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 313.967934][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 313.998596][ T12] veth1_macvtap: left promiscuous mode [ 314.004320][ T12] veth0_macvtap: left promiscuous mode [ 314.009932][ T12] veth1_vlan: left promiscuous mode [ 314.015916][ T12] veth0_vlan: left promiscuous mode [ 314.421649][ T12] team0 (unregistering): Port device team_slave_1 removed [ 314.464255][ T12] team0 (unregistering): Port device team_slave_0 removed [ 315.175927][T12701] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 315.184956][ T5842] Bluetooth: hci1: command tx timeout [ 315.206194][T12701] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 315.288153][T12701] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 315.299285][T12701] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 315.519204][T12701] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.634794][T12701] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.646116][T12717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 315.693225][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.700437][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.744111][ T5842] Bluetooth: hci0: command tx timeout [ 315.758461][T12717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 315.803974][T12717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 315.826842][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.834003][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.860848][T12717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 315.877674][T12875] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1841'. [ 315.898648][T12875] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1841'. [ 316.055376][T12879] netlink: 'syz.5.1842': attribute type 10 has an invalid length. [ 316.119267][T12879] team0: Failed to send options change via netlink (err -105) [ 316.137372][T12879] team0: Port device netdevsim0 added [ 316.188577][T10446] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 316.244159][T12717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 316.256783][T12879] syz.5.1842 (12879) used greatest stack depth: 18320 bytes left [ 316.270831][T12701] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 316.294769][T12717] 8021q: adding VLAN 0 to HW filter on device team0 [ 316.336089][ T2960] bridge0: port 1(bridge_slave_0) entered blocking state [ 316.343319][ T2960] bridge0: port 1(bridge_slave_0) entered forwarding state [ 316.375220][T10446] bridge0: port 2(bridge_slave_1) entered blocking state [ 316.382430][T10446] bridge0: port 2(bridge_slave_1) entered forwarding state [ 316.510393][T12701] veth0_vlan: entered promiscuous mode [ 316.522543][T12896] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1846'. [ 316.547379][T12701] veth1_vlan: entered promiscuous mode [ 316.563251][T12896] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1846'. [ 316.666992][T12701] veth0_macvtap: entered promiscuous mode [ 316.700555][T12701] veth1_macvtap: entered promiscuous mode [ 316.764334][T12701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.803499][T12701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.824406][T12701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.864059][T12701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.893555][T12701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 316.923086][T12701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 316.937713][T12701] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 316.981736][T12911] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1849'. [ 316.990392][T12701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.003039][T12701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.013022][T12701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.024476][T12701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.034709][T12701] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 317.045355][T12701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.056293][T12701] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 317.073071][T12701] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.092364][T12920] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1850'. [ 317.094393][T12701] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.130117][T12701] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.141419][T12701] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 317.194096][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.199172][T12717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.243229][T12924] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1850'. [ 317.264360][ T5842] Bluetooth: hci1: command tx timeout [ 317.280476][T12920] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1850'. [ 317.297825][T12923] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1851'. [ 317.432408][T10446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.463765][T10446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.510374][T12701] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 317.521929][T12701] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 317.653101][T12717] veth0_vlan: entered promiscuous mode [ 317.674589][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 317.682766][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 317.708458][T12940] netlink: 'syz.5.1855': attribute type 10 has an invalid length. [ 317.733979][T12717] veth1_vlan: entered promiscuous mode [ 317.740777][T12940] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1855'. [ 317.806285][T12717] veth0_macvtap: entered promiscuous mode [ 317.865949][T12717] veth1_macvtap: entered promiscuous mode [ 317.971793][T12717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 317.998613][T12717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.010559][T12717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.021447][T12717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.032805][T12717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.063560][T12717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.083563][T12717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.103534][T12717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.164970][T12717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.203028][T12717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.221416][T12717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.231960][T12717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.243033][T12717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.252942][T12717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.263506][T12717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.273465][T12717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.283992][T12717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.295159][T12717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.330417][T12717] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.340422][T12717] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.350341][T12717] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.370360][T12717] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.578001][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.593806][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 318.621259][T12717] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 318.664333][T12717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.822563][ T2960] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.848157][T10446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 318.870949][T10446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.024245][ T2960] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.484650][ T2960] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.597925][ T2960] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 319.671289][ T5855] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 319.681365][ T5855] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 319.690250][ T5855] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 319.698610][ T5855] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 319.706456][ T5855] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 319.714135][ T5855] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 319.748703][ T2960] bridge_slave_1: left allmulticast mode [ 319.763368][ T2960] bridge_slave_1: left promiscuous mode [ 319.772075][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.781757][ T2960] bridge_slave_0: left allmulticast mode [ 319.787940][ T2960] bridge_slave_0: left promiscuous mode [ 319.793865][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.163742][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.180608][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.191833][ T2960] bond0 (unregistering): Released all slaves [ 320.202877][T12970] lo speed is unknown, defaulting to 1000 [ 320.348438][T12970] lo speed is unknown, defaulting to 1000 [ 320.555091][T12970] chnl_net:caif_netlink_parms(): no params data found [ 320.610613][ T2960] hsr_slave_0: left promiscuous mode [ 320.617162][ T2960] hsr_slave_1: left promiscuous mode [ 320.623200][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 320.631185][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 320.651803][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 320.660913][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 320.686866][ T2960] veth1_macvtap: left promiscuous mode [ 320.692924][ T2960] veth0_macvtap: left promiscuous mode [ 320.698672][ T2960] veth1_vlan: left promiscuous mode [ 320.704660][ T2960] veth0_vlan: left promiscuous mode [ 321.242380][ T5855] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 321.252749][ T5855] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 321.261228][ T5855] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 321.271039][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 321.297626][ T5855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 321.323040][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 321.461882][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 321.513799][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 321.745053][ T5855] Bluetooth: hci0: command tx timeout [ 322.001580][T12980] lo: entered allmulticast mode [ 322.018196][T12980] tunl0: entered allmulticast mode [ 322.039699][T12980] gre0: entered allmulticast mode [ 322.061333][T12980] gretap0: entered allmulticast mode [ 322.079221][T12980] erspan0: entered allmulticast mode [ 322.109499][T12980] ip_vti0: entered allmulticast mode [ 322.125724][T12980] ip6_vti0: entered allmulticast mode [ 322.171054][T12980] sit0: entered allmulticast mode [ 322.208213][T12980] ip6tnl0: entered allmulticast mode [ 322.238638][T12980] ip6gre0: entered allmulticast mode [ 322.250320][T12980] syz_tun: entered allmulticast mode [ 322.280026][T12980] ip6gretap0: entered allmulticast mode [ 322.324996][T12980] bridge0: port 1(bridge_slave_0) entered disabled state [ 322.334403][T12980] bridge0: entered allmulticast mode [ 322.376654][T12980] vcan0: entered allmulticast mode [ 322.407915][T12980] bond0: entered allmulticast mode [ 322.413085][T12980] bond_slave_0: entered allmulticast mode [ 322.433918][T12980] bond_slave_1: entered allmulticast mode [ 322.466902][T12980] team0: entered allmulticast mode [ 322.486164][T12980] team_slave_0: entered allmulticast mode [ 322.491960][T12980] team_slave_1: entered allmulticast mode [ 322.526702][T12980] dummy0: entered allmulticast mode [ 322.554348][T12980] nlmon0: entered allmulticast mode [ 322.561905][T12980] caif0: entered allmulticast mode [ 322.580284][T12980] batadv0: entered allmulticast mode [ 322.610697][T12980] veth0: entered allmulticast mode [ 322.624550][T12980] veth1: entered allmulticast mode [ 322.647478][T12980] wg1: entered allmulticast mode [ 322.673793][T12980] wg2: entered allmulticast mode [ 322.704919][T12980] veth0_to_bridge: entered allmulticast mode [ 322.750818][T12980] veth1_to_bridge: entered allmulticast mode [ 322.786141][T12980] veth0_to_bond: entered allmulticast mode [ 322.819637][T12980] veth1_to_bond: entered allmulticast mode [ 322.849297][T12980] veth0_to_team: entered allmulticast mode [ 322.908252][T12980] veth1_to_team: entered allmulticast mode [ 322.943134][T12980] veth0_to_batadv: entered allmulticast mode [ 322.962191][T12980] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.989423][T12980] batadv_slave_0: entered allmulticast mode [ 323.005894][T12980] veth1_to_batadv: entered allmulticast mode [ 323.034813][T12980] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 323.065007][T12980] batadv_slave_1: entered allmulticast mode [ 323.081948][T12980] xfrm0: entered allmulticast mode [ 323.102738][T12980] veth0_to_hsr: entered allmulticast mode [ 323.132553][T12980] hsr_slave_0: entered allmulticast mode [ 323.164175][T12980] veth1_to_hsr: entered allmulticast mode [ 323.182013][T12980] hsr_slave_1: entered allmulticast mode [ 323.209041][T12980] hsr0: entered allmulticast mode [ 323.226764][T12980] veth1_virt_wifi: entered allmulticast mode [ 323.273014][T12980] veth0_virt_wifi: entered allmulticast mode [ 323.292090][T12980] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 323.313640][T12980] veth1_vlan: entered allmulticast mode [ 323.334960][T12980] veth0_vlan: entered allmulticast mode [ 323.395258][T12980] vlan0: entered allmulticast mode [ 323.400544][T12980] vlan1: entered allmulticast mode [ 323.422256][T12980] macvlan0: entered allmulticast mode [ 323.424310][ T5855] Bluetooth: hci1: command tx timeout [ 323.446054][T12980] macvlan1: entered allmulticast mode [ 323.475322][T12980] ipvlan0: entered allmulticast mode [ 323.480735][T12980] ipvlan1: entered allmulticast mode [ 323.487684][T12980] veth1_macvtap: entered allmulticast mode [ 323.524168][T12980] veth0_macvtap: entered allmulticast mode [ 323.541080][T12980] macvtap0: entered allmulticast mode [ 323.567410][T12980] macsec0: entered allmulticast mode [ 323.595427][T12980] geneve0: entered allmulticast mode [ 323.620177][T12980] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.643394][T12980] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.652299][T12980] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.665736][T12980] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.677549][T12980] geneve1: entered allmulticast mode [ 323.703878][T12980] netdevsim netdevsim7 netdevsim0: entered allmulticast mode [ 323.724472][T12980] netdevsim netdevsim7 netdevsim1: entered allmulticast mode [ 323.741041][T12980] netdevsim netdevsim7 netdevsim2: entered allmulticast mode [ 323.763847][T12980] netdevsim netdevsim7 netdevsim3: entered allmulticast mode [ 323.797200][T12980] mac80211_hwsim hwsim52 wlan0: entered allmulticast mode [ 323.823619][ T5855] Bluetooth: hci0: command tx timeout [ 323.834067][T12980] mac80211_hwsim hwsim54 wlan1: entered allmulticast mode [ 323.845056][T12980] vti60: entered allmulticast mode [ 323.850333][T12980] : entered allmulticast mode [ 323.869417][T12980] bond1: entered allmulticast mode [ 323.882219][T12980] veth2: entered allmulticast mode [ 323.888354][T12980] veth3: entered allmulticast mode [ 323.894756][T12980] veth4: entered allmulticast mode [ 323.899998][T12980] veth5: entered allmulticast mode [ 323.912387][T12988] erspan1: entered promiscuous mode [ 323.919807][T12988] erspan1: entered allmulticast mode [ 323.939167][T12985] lo speed is unknown, defaulting to 1000 [ 324.040359][ T8510] lo speed is unknown, defaulting to 1000 [ 324.086083][T12985] lo speed is unknown, defaulting to 1000 [ 324.180887][T13009] team0: entered promiscuous mode [ 324.186415][T13009] team_slave_0: entered promiscuous mode [ 324.192876][T13009] team_slave_1: entered promiscuous mode [ 324.221814][T12970] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.251414][T12970] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.279087][T12970] bridge_slave_0: entered allmulticast mode [ 324.294711][T12970] bridge_slave_0: entered promiscuous mode [ 324.326008][T13008] team0: left promiscuous mode [ 324.330951][T13008] team_slave_0: left promiscuous mode [ 324.337476][T13008] team_slave_1: left promiscuous mode [ 324.344729][T12970] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.352113][T12970] bridge0: port 2(bridge_slave_1) entered disabled state [ 324.373698][T12970] bridge_slave_1: entered allmulticast mode [ 324.381706][T12970] bridge_slave_1: entered promiscuous mode [ 324.405100][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1875'. [ 324.427112][T13026] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1875'. [ 324.509377][T12970] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 324.536733][T12970] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 324.693813][T12970] team0: Port device team_slave_0 added [ 324.725118][T12970] team0: Port device team_slave_1 added [ 324.886274][ T2960] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 324.911025][T12970] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 324.918424][T12970] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 324.946287][T12970] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 324.991864][ T2960] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.009127][T12970] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.022243][T12970] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.049009][T12970] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.125600][ T2960] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.195827][T12985] chnl_net:caif_netlink_parms(): no params data found [ 325.297179][ T2960] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 325.345471][T12970] hsr_slave_0: entered promiscuous mode [ 325.353468][T12970] hsr_slave_1: entered promiscuous mode [ 325.360323][T12970] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.383169][T12970] Cannot create hsr debugfs directory [ 325.504425][ T5855] Bluetooth: hci1: command tx timeout [ 325.724914][T13065] team0: Port device veth0_to_hsr added [ 325.741916][T12985] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.758537][T12985] bridge0: port 1(bridge_slave_0) entered disabled state [ 325.787570][T12985] bridge_slave_0: entered allmulticast mode [ 325.813585][T12985] bridge_slave_0: entered promiscuous mode [ 325.903518][ T5855] Bluetooth: hci0: command tx timeout [ 325.920906][T13067] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 325.949970][T12985] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.977179][T12985] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.004577][T12985] bridge_slave_1: entered allmulticast mode [ 326.042880][T12985] bridge_slave_1: entered promiscuous mode [ 326.203507][T13075] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1886'. [ 326.280334][T12985] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 326.289782][ T2960] bridge_slave_1: left allmulticast mode [ 326.296652][T13069] Bluetooth: MGMT ver 1.23 [ 326.301955][ T2960] bridge_slave_1: left promiscuous mode [ 326.317229][ T2960] bridge0: port 2(bridge_slave_1) entered disabled state [ 326.359689][ T2960] bridge_slave_0: left allmulticast mode [ 326.371667][ T2960] bridge_slave_0: left promiscuous mode [ 326.383629][ T2960] bridge0: port 1(bridge_slave_0) entered disabled state [ 326.461272][T13085] No such timeout policy "syz0" [ 326.945745][ T2960] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 326.958775][ T2960] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 326.969979][ T2960] bond0 (unregistering): Released all slaves [ 326.982995][T12985] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 326.995047][T13095] netlink: 'syz.5.1892': attribute type 11 has an invalid length. [ 327.009215][T13095] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1892'. [ 327.009695][T13083] batman_adv: batadv0: Adding interface: dummy0 [ 327.028353][T13083] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.055988][T13083] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 327.066658][T13096] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1892'. [ 327.265491][T12985] team0: Port device team_slave_0 added [ 327.283139][T12985] team0: Port device team_slave_1 added [ 327.315812][T13102] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1895'. [ 327.385495][T12985] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 327.402669][T12985] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.452079][T12985] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 327.583739][ T5855] Bluetooth: hci1: command tx timeout [ 327.644909][T12985] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 327.652307][T12985] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 327.715212][T12985] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 327.930700][T13118] netlink: 'syz.5.1900': attribute type 64 has an invalid length. [ 327.973561][T13118] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1900'. [ 327.982557][T13118] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1900'. [ 328.003637][ T5855] Bluetooth: hci0: command tx timeout [ 328.008424][T13122] netlink: 'syz.5.1900': attribute type 10 has an invalid length. [ 328.039853][T13122] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1900'. [ 328.167852][T13116] lo speed is unknown, defaulting to 1000 [ 328.266604][T12985] hsr_slave_0: entered promiscuous mode [ 328.290584][T12985] hsr_slave_1: entered promiscuous mode [ 328.307565][T12985] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 328.324388][T12985] Cannot create hsr debugfs directory [ 328.388699][T13127] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 328.417274][ T2960] hsr_slave_0: left promiscuous mode [ 328.427043][ T2960] hsr_slave_1: left promiscuous mode [ 328.433007][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 328.450932][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 328.465529][ T2960] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 328.483738][ T2960] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 328.535897][ T2960] veth1_macvtap: left promiscuous mode [ 328.541462][ T2960] veth0_macvtap: left promiscuous mode [ 328.557802][ T2960] veth1_vlan: left promiscuous mode [ 328.563075][ T2960] veth0_vlan: left promiscuous mode [ 329.021696][ T2960] team0 (unregistering): Port device team_slave_1 removed [ 329.072858][ T2960] team0 (unregistering): Port device team_slave_0 removed [ 329.525477][T13116] lo speed is unknown, defaulting to 1000 [ 329.548509][T12970] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 329.576251][T12970] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 329.654733][T12970] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 329.664182][ T5855] Bluetooth: hci1: command tx timeout [ 329.701214][T12970] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 329.735630][T13142] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1907'. [ 329.941057][T13145] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 330.185255][T13153] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1911'. [ 330.236597][T13153] macsec1: entered promiscuous mode [ 330.241862][T13153] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 330.266962][T12970] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.301379][T13154] lo speed is unknown, defaulting to 1000 [ 330.310524][T12970] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.411788][T10450] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.418965][T10450] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.470666][T10450] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.477846][T10450] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.538682][T12985] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 330.576752][T12985] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 330.594866][T12985] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 330.643402][T13154] lo speed is unknown, defaulting to 1000 [ 330.643472][T12985] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 330.995673][T12970] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.029252][T12970] veth0_vlan: entered promiscuous mode [ 331.046841][T12970] veth1_vlan: entered promiscuous mode [ 331.070027][T12985] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.122087][T13170] netlink: 'syz.6.1914': attribute type 75 has an invalid length. [ 331.214213][T12985] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.253018][T13170] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 331.286334][T12970] veth0_macvtap: entered promiscuous mode [ 331.315643][T12970] veth1_macvtap: entered promiscuous mode [ 331.350217][T12985] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 331.361014][T12985] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 331.379081][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.386251][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.395444][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.402584][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.640673][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.655144][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.665842][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.676550][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.687825][T12970] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.787842][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.798087][T13197] netlink: 'syz.5.1920': attribute type 2 has an invalid length. [ 331.799786][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.832461][T12970] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.853251][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.879714][T12970] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.916521][T12970] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.925574][T12970] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.935274][T12970] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.944249][T12970] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.992681][T12985] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.165077][T12985] veth0_vlan: entered promiscuous mode [ 332.171105][T13211] netlink: 60 bytes leftover after parsing attributes in process `syz.7.1924'. [ 332.248990][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.257176][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.278877][T12985] veth1_vlan: entered promiscuous mode [ 332.314029][T12985] veth0_macvtap: entered promiscuous mode [ 332.335680][T12985] veth1_macvtap: entered promiscuous mode [ 332.344978][T13223] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1927'. [ 332.360074][T12970] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 332.371679][T12970] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.425272][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.456871][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.476215][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.488568][T13232] netlink: 'syz.5.1929': attribute type 10 has an invalid length. [ 332.509204][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.530219][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.546216][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.558032][T12985] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.588650][T13232] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.611752][T13232] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 332.635414][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.656983][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.670847][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.681812][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.692273][T12985] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.703550][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.715442][T12985] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.724650][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.732797][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.766191][T12985] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.811313][T12985] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.820285][T12985] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.834558][T12985] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.876890][T13238] lo speed is unknown, defaulting to 1000 [ 333.203688][ T9481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.211539][ T9481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.239676][T12985] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 333.270113][T12985] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.307021][T10450] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.342768][T10450] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.353505][T13238] lo speed is unknown, defaulting to 1000 [ 333.632939][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 333.647982][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 333.662416][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 333.683620][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 333.696611][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 333.704280][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 333.758735][T13252] lo speed is unknown, defaulting to 1000 [ 333.881060][T13252] lo speed is unknown, defaulting to 1000 [ 334.356192][T13252] chnl_net:caif_netlink_parms(): no params data found [ 334.556556][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.675090][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.686109][ T5842] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.696273][ T5842] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.705589][ T5842] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.713209][ T5842] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 334.721843][ T5842] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.741761][T13252] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.756485][T13252] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.768201][T13252] bridge_slave_0: entered allmulticast mode [ 334.778135][T13252] bridge_slave_0: entered promiscuous mode [ 334.802729][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.826997][T13252] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.834632][T13252] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.841840][T13252] bridge_slave_1: entered allmulticast mode [ 334.856924][T13252] bridge_slave_1: entered promiscuous mode [ 334.900979][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.943812][T13252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.955756][T13252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.968185][T13271] lo speed is unknown, defaulting to 1000 [ 335.015400][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.057506][T13252] team0: Port device team_slave_0 added [ 335.080734][T13252] team0: Port device team_slave_1 added [ 335.102398][T13271] lo speed is unknown, defaulting to 1000 [ 335.124523][T13252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.131816][T13252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.160159][T13252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.184517][T13252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.191481][T13252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.219529][T13252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.290418][T13252] hsr_slave_0: entered promiscuous mode [ 335.297257][T13252] hsr_slave_1: entered promiscuous mode [ 335.304373][T13252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.311936][T13252] Cannot create hsr debugfs directory [ 335.387060][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.472550][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.565199][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.635062][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.650073][T13271] chnl_net:caif_netlink_parms(): no params data found [ 335.744255][ T5855] Bluetooth: hci0: command tx timeout [ 335.759013][T13271] bridge0: port 1(bridge_slave_0) entered blocking state [ 335.766858][T13271] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.774228][T13271] bridge_slave_0: entered allmulticast mode [ 335.780994][T13271] bridge_slave_0: entered promiscuous mode [ 335.806504][T13252] netdevsim netdevsim7 netdevsim0 (unregistering): left promiscuous mode [ 335.841575][T13271] bridge0: port 2(bridge_slave_1) entered blocking state [ 335.849529][T13271] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.856851][T13271] bridge_slave_1: entered allmulticast mode [ 335.863938][T13271] bridge_slave_1: entered promiscuous mode [ 335.921410][ T61] bridge_slave_1: left allmulticast mode [ 335.927582][ T61] bridge_slave_1: left promiscuous mode [ 335.934188][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.945629][ T61] bridge_slave_0: left allmulticast mode [ 335.951581][ T61] bridge_slave_0: left promiscuous mode [ 335.957969][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.971994][ T61] bridge_slave_1: left allmulticast mode [ 335.977914][ T61] bridge_slave_1: left promiscuous mode [ 335.984108][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.993210][ T61] bridge_slave_0: left allmulticast mode [ 335.999343][ T61] bridge_slave_0: left promiscuous mode [ 336.005837][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.379585][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 336.406165][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 336.429732][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 336.440404][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 336.448786][ T5842] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 336.460742][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 336.779730][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.788757][ T5855] Bluetooth: hci1: command tx timeout [ 336.798189][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.809265][ T61] bond0 (unregistering): Released all slaves [ 336.922485][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.933411][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.951137][ T61] bond0 (unregistering): Released all slaves [ 336.965788][T13271] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 336.989530][T13284] ip6gretap0: entered promiscuous mode [ 336.997828][T13284] batadv_slave_0: entered promiscuous mode [ 337.004927][T13284] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 337.012608][T13284] Cannot create hsr debugfs directory [ 337.018663][T13284] hsr1: Slave A (ip6gretap0) is not up; please bring it up to get a fully working HSR network [ 337.051596][T13284] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 337.068601][T13284] hsr1: entered promiscuous mode [ 337.076226][T13284] hsr1: entered allmulticast mode [ 337.088896][T13284] ip6gretap0: entered allmulticast mode [ 337.107811][T13284] batadv_slave_0: entered allmulticast mode [ 337.165390][T13271] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.292812][T13292] lo speed is unknown, defaulting to 1000 [ 337.323164][T13271] team0: Port device team_slave_0 added [ 337.355235][T13271] team0: Port device team_slave_1 added [ 337.480614][T13271] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.492525][T13271] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.538047][T13271] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 337.570035][T13271] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 337.591469][T13271] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 337.628432][T13271] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 337.650818][T13252] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 337.658266][T13292] lo speed is unknown, defaulting to 1000 [ 337.776040][T13252] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 337.833887][ T5855] Bluetooth: hci0: command tx timeout [ 337.861920][T13271] hsr_slave_0: entered promiscuous mode [ 337.876149][T13271] hsr_slave_1: entered promiscuous mode [ 337.882845][T13271] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 337.891108][T13271] Cannot create hsr debugfs directory [ 337.897815][T13252] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 337.910407][T13252] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 338.195163][T13316] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1947'. [ 338.501494][T13319] team0 (unregistering): Port device team_slave_0 removed [ 338.522102][T13319] team0 (unregistering): Port device team_slave_1 removed [ 338.540134][T13319] team0 (unregistering): Port device veth0_to_hsr removed [ 338.547707][ T5855] Bluetooth: hci2: command tx timeout [ 338.706912][T13292] chnl_net:caif_netlink_parms(): no params data found [ 338.873408][ T5855] Bluetooth: hci1: command tx timeout [ 338.932615][T13330] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1950'. [ 338.953001][ T61] hsr_slave_0: left promiscuous mode [ 338.968448][ T61] hsr_slave_1: left promiscuous mode [ 338.973627][T13330] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1950'. [ 338.982846][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.990602][T13330] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1950'. [ 338.999789][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.038025][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.073964][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.103813][ T61] hsr_slave_0: left promiscuous mode [ 339.123967][ T61] hsr_slave_1: left promiscuous mode [ 339.132419][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 339.143731][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 339.161587][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 339.169273][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 339.177799][T13336] syz.5.1951[13336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.177889][T13336] syz.5.1951[13336] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 339.242362][ T61] veth1_macvtap: left promiscuous mode [ 339.259446][ T61] veth0_macvtap: left promiscuous mode [ 339.272100][ T61] veth1_vlan: left promiscuous mode [ 339.278571][ T61] veth0_vlan: left promiscuous mode [ 339.286018][ T61] veth1_macvtap: left promiscuous mode [ 339.291546][ T61] veth0_macvtap: left promiscuous mode [ 339.297445][ T61] veth1_vlan: left promiscuous mode [ 339.302754][ T61] veth0_vlan: left promiscuous mode [ 339.849865][ T61] team0 (unregistering): Port device team_slave_1 removed [ 339.892686][ T61] team0 (unregistering): Port device team_slave_0 removed [ 339.909070][ T5855] Bluetooth: hci0: command tx timeout [ 340.629518][ T5855] Bluetooth: hci2: command tx timeout [ 340.685032][ T61] team0 (unregistering): Port device team_slave_1 removed [ 340.728570][ T61] team0 (unregistering): Port device team_slave_0 removed [ 340.947824][ T5855] Bluetooth: hci1: command tx timeout [ 341.190462][T13339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 341.371158][T13292] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.378741][T13292] bridge0: port 1(bridge_slave_0) entered disabled state [ 341.386641][T13292] bridge_slave_0: entered allmulticast mode [ 341.394075][T13292] bridge_slave_0: entered promiscuous mode [ 341.402034][T13292] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.409593][T13292] bridge0: port 2(bridge_slave_1) entered disabled state [ 341.417031][T13292] bridge_slave_1: entered allmulticast mode [ 341.424531][T13292] bridge_slave_1: entered promiscuous mode [ 341.449119][T13252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.551725][T13357] siw: device registration error -23 [ 341.559262][T13292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 341.574135][T13292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 341.585914][T13252] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.606854][T13355] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1955'. [ 341.690861][T13292] team0: Port device team_slave_0 added [ 341.716254][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.723490][ T8851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.785113][T13292] team0: Port device team_slave_1 added [ 341.800444][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.807587][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.838702][T13271] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 341.856905][T13271] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 341.884023][T13292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 341.891952][T13292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 341.932592][T13292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 341.957870][T13271] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 341.994922][ T5855] Bluetooth: hci0: command tx timeout [ 342.004531][T13292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 342.011494][T13292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 342.041299][T13292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 342.070189][T13271] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 342.176164][T13372] netlink: 264 bytes leftover after parsing attributes in process `syz.5.1960'. [ 342.180508][T13292] hsr_slave_0: entered promiscuous mode [ 342.193098][T13292] hsr_slave_1: entered promiscuous mode [ 342.201400][T13292] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 342.210461][T13292] Cannot create hsr debugfs directory [ 342.421273][T13378] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 342.579690][T13271] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.667437][T13252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.705744][ T5855] Bluetooth: hci2: command tx timeout [ 342.714794][T13271] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.730338][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.737569][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.758908][ T8851] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.766033][ T8851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.946847][T13397] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1967'. [ 343.011334][T13292] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 343.023785][ T5855] Bluetooth: hci1: command tx timeout [ 343.041474][T13292] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 343.085577][T13292] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 343.119309][T13292] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 343.153121][T13406] tun0: tun_chr_ioctl cmd 1074812117 [ 343.160382][T13406] tun0: tun_chr_ioctl cmd 1076925456 [ 343.217034][T13271] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.225331][T13406] IPVS: Scheduler module ip_vs_sip not found [ 343.280451][T13252] veth0_vlan: entered promiscuous mode [ 343.329613][T13252] veth1_vlan: entered promiscuous mode [ 343.373143][T13292] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.397490][T13271] veth0_vlan: entered promiscuous mode [ 343.443138][T13252] veth0_macvtap: entered promiscuous mode [ 343.457327][T13252] veth1_macvtap: entered promiscuous mode [ 343.480266][T13271] veth1_vlan: entered promiscuous mode [ 343.499239][T13292] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.529600][T13411] netlink: 'syz.6.1969': attribute type 21 has an invalid length. [ 343.544681][T13411] netlink: 128 bytes leftover after parsing attributes in process `syz.6.1969'. [ 343.556038][T13411] netlink: 'syz.6.1969': attribute type 5 has an invalid length. [ 343.567285][T13411] netlink: 'syz.6.1969': attribute type 6 has an invalid length. [ 343.580175][T13414] netlink: 148 bytes leftover after parsing attributes in process `syz.6.1969'. [ 343.590586][T13411] netlink: 3 bytes leftover after parsing attributes in process `syz.6.1969'. [ 343.606364][T13416] IPVS: Unknown mcast interface: pimreg1 [ 343.632865][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.640006][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.659610][T13271] veth0_macvtap: entered promiscuous mode [ 343.694921][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.702011][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.729123][T13252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.753523][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.764064][T13252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 343.775339][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.787256][T13252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.815440][T13271] veth1_macvtap: entered promiscuous mode [ 343.839332][T13252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.853244][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.863154][T13252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 343.874032][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 343.885055][T13252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.936717][T13252] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.953436][T13252] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.962162][T13252] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.974691][T13252] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.020126][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.032741][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.050127][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.061182][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.072090][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 344.082642][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.095300][T13271] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 344.116159][T13292] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 344.131336][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.144950][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.168818][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.182189][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.192491][T13271] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 344.203889][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.215134][T13271] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 344.226979][T13271] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.236621][T13271] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.248660][T13271] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.257511][T13271] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.457711][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.475573][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.521569][T13252] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 344.550800][T13252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.566992][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.581825][ T2960] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.593037][ T2960] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.603816][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.632783][T13271] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 344.652417][T13271] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 344.707259][T13437] netlink: 'syz.5.1974': attribute type 10 has an invalid length. [ 344.723626][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.731928][T13437] netlink: 55 bytes leftover after parsing attributes in process `syz.5.1974'. [ 344.749593][T13292] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.756782][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.786225][T13437] team0: Port device virt_wifi0 added [ 344.791955][T13439] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1974'. [ 344.794862][ T5855] Bluetooth: hci2: command tx timeout [ 344.821937][T13441] netlink: 'syz.6.1975': attribute type 27 has an invalid length. [ 344.856233][T13441] C: renamed from team_slave_0 [ 344.882111][T13441] netlink: 'syz.6.1975': attribute type 27 has an invalid length. [ 344.896952][T13437] netlink: 16410 bytes leftover after parsing attributes in process `syz.5.1974'. [ 344.980547][T13292] veth0_vlan: entered promiscuous mode [ 344.987757][T13441] netlink: 'syz.6.1975': attribute type 27 has an invalid length. [ 345.050069][T13441] netlink: 'syz.6.1975': attribute type 27 has an invalid length. [ 345.062745][T13441] netlink: 'syz.6.1975': attribute type 27 has an invalid length. [ 345.075648][T13292] veth1_vlan: entered promiscuous mode [ 345.084943][T13441] netlink: 'syz.6.1975': attribute type 27 has an invalid length. [ 345.175387][ T61] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.221258][T13292] veth0_macvtap: entered promiscuous mode [ 345.235391][T13292] veth1_macvtap: entered promiscuous mode [ 345.260636][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.307292][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.328686][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.339244][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.349964][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.372947][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.385882][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 345.410633][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.434736][T13292] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.476343][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.504055][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.543639][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.574612][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.605254][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.633629][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.653568][T13292] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 345.676327][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 345.701486][T13292] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.729699][T13292] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.757082][T13292] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.783528][T13292] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.792245][T13292] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.909307][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 345.928737][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 345.945729][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 345.965322][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 345.972747][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 345.982880][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 345.991549][ T5848] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 345.991719][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 346.008385][ T61] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.020529][ T5845] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 346.029632][ T5855] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 346.042602][ T5855] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 346.051506][ T5855] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 346.109532][T13454] lo speed is unknown, defaulting to 1000 [ 346.218786][T13471] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1981'. [ 346.247087][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.292124][T13454] lo speed is unknown, defaulting to 1000 [ 346.361003][ T9066] IPVS: starting estimator thread 0... [ 346.371789][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 346.389371][T13453] lo speed is unknown, defaulting to 1000 [ 346.464141][T13474] IPVS: using max 19 ests per chain, 45600 per kthread [ 346.598290][T13473] tipc: Started in network mode [ 346.610718][T13473] tipc: Node identity ac1414aa, cluster identity 4711 [ 346.623142][T13473] tipc: Enabled bearer , priority 10 [ 346.643650][T13453] lo speed is unknown, defaulting to 1000 [ 346.665304][ T2960] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.682231][ T2960] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.749892][T13292] batman_adv: The newly added mac address (08:02:11:00:00:01) already exists on: ipvlan2 [ 346.772481][T13292] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 346.810486][ T61] bridge_slave_1: left allmulticast mode [ 346.816755][ T61] bridge_slave_1: left promiscuous mode [ 346.822565][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 346.834982][ T61] bridge_slave_0: left allmulticast mode [ 346.840657][ T61] bridge_slave_0: left promiscuous mode [ 346.847859][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.271580][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 347.282991][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 347.298073][ T61] bond0 (unregistering): Released all slaves [ 347.326807][ T8851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.335109][ T8851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.596269][T13454] chnl_net:caif_netlink_parms(): no params data found [ 347.613542][ T9066] tipc: Node number set to 2886997162 [ 347.854383][T13454] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.861724][T13454] bridge0: port 1(bridge_slave_0) entered disabled state [ 347.894322][T13454] bridge_slave_0: entered allmulticast mode [ 347.941698][T13454] bridge_slave_0: entered promiscuous mode [ 348.031886][T13454] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.053079][T13454] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.063588][ T5842] Bluetooth: hci0: command tx timeout [ 348.070535][T13454] bridge_slave_1: entered allmulticast mode [ 348.077905][T13454] bridge_slave_1: entered promiscuous mode [ 348.090191][ T61] hsr_slave_0: left promiscuous mode [ 348.102414][ T61] hsr_slave_1: left promiscuous mode [ 348.111729][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.119838][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.128252][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.137119][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.144495][ T5842] Bluetooth: hci1: command tx timeout [ 348.168889][ T61] veth1_macvtap: left promiscuous mode [ 348.174757][ T61] veth0_macvtap: left promiscuous mode [ 348.180363][ T61] veth1_vlan: left promiscuous mode [ 348.185853][ T61] veth0_vlan: left promiscuous mode [ 348.638884][ T61] team0 (unregistering): Port device team_slave_1 removed [ 348.680434][ T61] team0 (unregistering): Port device team_slave_0 removed [ 349.131265][T13454] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.145633][T13454] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.155119][T13453] chnl_net:caif_netlink_parms(): no params data found [ 349.219576][T13454] team0: Port device team_slave_0 added [ 349.235026][T13454] team0: Port device team_slave_1 added [ 349.298446][T13454] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 349.312140][T13454] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.339511][T13454] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 349.352175][T13454] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 349.359288][T13454] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 349.386394][T13454] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 349.484365][T13454] hsr_slave_0: entered promiscuous mode [ 349.492960][T13454] hsr_slave_1: entered promiscuous mode [ 349.502492][T13454] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 349.511497][T13454] Cannot create hsr debugfs directory [ 349.518042][T13453] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.525870][T13453] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.532996][T13453] bridge_slave_0: entered allmulticast mode [ 349.539979][T13453] bridge_slave_0: entered promiscuous mode [ 349.572834][T13453] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.593403][T13453] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.600558][T13453] bridge_slave_1: entered allmulticast mode [ 349.615756][T13453] bridge_slave_1: entered promiscuous mode [ 349.662151][T13453] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.696335][T13453] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.771751][T13454] netdevsim netdevsim7 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.795013][T13453] team0: Port device team_slave_0 added [ 349.829007][ T61] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.851840][T13453] team0: Port device team_slave_1 added [ 349.954847][T13454] netdevsim netdevsim7 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.016829][ T61] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.069269][T13453] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.084212][T13453] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.126643][T13453] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.143554][ T5842] Bluetooth: hci0: command tx timeout [ 350.162411][ T5855] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 350.172366][ T5855] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 350.181810][ T5855] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 350.192620][ T5855] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 350.200340][ T5855] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 350.219575][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 350.227061][ T5845] Bluetooth: hci1: command tx timeout [ 350.248293][T13454] netdevsim netdevsim7 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.344008][ T61] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.379194][T13519] netlink: 2 bytes leftover after parsing attributes in process `syz.6.1991'. [ 350.391223][T13453] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.399229][T13453] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.427380][T13453] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.475205][T13454] netdevsim netdevsim7 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.521079][ T61] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.669183][T13453] hsr_slave_0: entered promiscuous mode [ 350.677145][T13453] hsr_slave_1: entered promiscuous mode [ 350.686019][T13453] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 350.694770][T13453] Cannot create hsr debugfs directory [ 350.700452][T13520] lo speed is unknown, defaulting to 1000 [ 350.721534][T13536] vlan2: entered promiscuous mode [ 350.917181][T13520] lo speed is unknown, defaulting to 1000 [ 350.955063][T13454] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 350.974441][T13454] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 350.994371][ T61] bridge_slave_1: left allmulticast mode [ 351.005441][ T61] bridge_slave_1: left promiscuous mode [ 351.018859][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.039101][ T61] bridge_slave_0: left allmulticast mode [ 351.045308][ T61] bridge_slave_0: left promiscuous mode [ 351.051376][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.063058][ T61] bridge_slave_1: left allmulticast mode [ 351.070512][ T61] bridge_slave_1: left promiscuous mode [ 351.076465][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.110310][ T61] bridge_slave_0: left allmulticast mode [ 351.126804][ T61] bridge_slave_0: left promiscuous mode [ 351.139541][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.284415][T13538] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1995'. [ 351.303795][T13538] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1995'. [ 351.899382][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 351.910867][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 351.924962][ T61] bond0 (unregistering): Released all slaves [ 352.051545][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.062510][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.078551][ T61] bond0 (unregistering): Released all slaves [ 352.102143][T13454] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 352.215561][T13454] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 352.233527][ T5842] Bluetooth: hci0: command tx timeout [ 352.304162][ T5842] Bluetooth: hci2: command tx timeout [ 352.310098][ T5842] Bluetooth: hci1: command tx timeout [ 354.317811][ T5842] Bluetooth: hci0: command tx timeout [ 354.394135][ T5842] Bluetooth: hci1: command tx timeout [ 354.395663][ T5855] Bluetooth: hci2: command tx timeout [ 354.532211][T13573] lo speed is unknown, defaulting to 1000 [ 354.575538][T13454] 8021q: adding VLAN 0 to HW filter on device bond0 [ 354.628459][T13520] chnl_net:caif_netlink_parms(): no params data found [ 354.748161][T13454] 8021q: adding VLAN 0 to HW filter on device team0 [ 354.762585][T13574] lo speed is unknown, defaulting to 1000 [ 354.768705][T13573] lo speed is unknown, defaulting to 1000 [ 354.821600][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.828769][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.924008][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.931112][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.963090][T13520] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.980147][T13520] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.988147][T13520] bridge_slave_0: entered allmulticast mode [ 354.995579][T13520] bridge_slave_0: entered promiscuous mode [ 355.003822][T13574] lo speed is unknown, defaulting to 1000 [ 355.058983][T13520] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.091385][T13520] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.103650][T13520] bridge_slave_1: entered allmulticast mode [ 355.120105][T13520] bridge_slave_1: entered promiscuous mode [ 355.312742][ T61] hsr_slave_0: left promiscuous mode [ 355.322141][ T61] hsr_slave_1: left promiscuous mode [ 355.329978][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.337548][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.345560][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.352984][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.367893][ T61] hsr_slave_0: left promiscuous mode [ 355.380007][ T61] hsr_slave_1: left promiscuous mode [ 355.388191][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.395802][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.405899][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.418097][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.463723][ T61] veth1_macvtap: left promiscuous mode [ 355.469270][ T61] veth0_macvtap: left promiscuous mode [ 355.489579][ T61] veth1_vlan: left promiscuous mode [ 355.495533][ T61] veth0_vlan: left promiscuous mode [ 355.504224][ T61] veth1_macvtap: left promiscuous mode [ 355.509900][ T61] veth0_macvtap: left promiscuous mode [ 355.518453][ T61] veth1_vlan: left promiscuous mode [ 355.523836][ T61] veth0_vlan: left promiscuous mode [ 355.669327][T13586] x_tables: arp_tables: CLASSIFY target: used from hooks INPUT, but only usable from FORWARD/OUTPUT [ 356.328257][ T61] team0 (unregistering): Port device team_slave_1 removed [ 356.365719][ T61] team0 (unregistering): Port device team_slave_0 removed [ 356.465997][ T5855] Bluetooth: hci2: command tx timeout [ 357.121656][ T61] team0 (unregistering): Port device team_slave_1 removed [ 357.168459][ T61] team0 (unregistering): Port device team_slave_0 removed [ 357.569423][T13453] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 357.579198][T13453] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 357.627844][T13520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.648685][T13520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.658351][T13453] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 357.681361][T13453] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 357.780887][T13597] netlink: 44 bytes leftover after parsing attributes in process `syz.5.2012'. [ 357.875864][T13520] team0: Port device team_slave_0 added [ 357.911978][T13520] team0: Port device team_slave_1 added [ 358.145635][T13520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 358.152622][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.226180][T13520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 358.239162][T13520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 358.246749][T13520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 358.273117][T13520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 358.516919][T13520] hsr_slave_0: entered promiscuous mode [ 358.523373][T13520] hsr_slave_1: entered promiscuous mode [ 358.531620][T13520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.544356][ T5855] Bluetooth: hci2: command tx timeout [ 358.549858][T13520] Cannot create hsr debugfs directory [ 358.561940][T13454] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.747076][T13453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.809887][T13453] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.928883][ T8851] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.936099][ T8851] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.004199][T13630] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2018'. [ 359.014638][ T8851] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.021745][ T8851] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.097188][T13454] veth0_vlan: entered promiscuous mode [ 359.116533][T13454] veth1_vlan: entered promiscuous mode [ 359.123925][T13633] Bluetooth: MGMT ver 1.23 [ 359.129962][T13632] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 359.154367][T13632] validate_nla: 60 callbacks suppressed [ 359.154383][T13632] netlink: 'syz.6.2020': attribute type 4 has an invalid length. [ 359.176050][ T5855] ================================================================== [ 359.184137][ T5855] BUG: KASAN: slab-use-after-free in set_powered_sync+0x3a/0xc0 [ 359.191901][ T5855] Read of size 8 at addr ffff88802775cb98 by task kworker/u9:6/5855 [ 359.199887][ T5855] [ 359.202218][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: kworker/u9:6 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 359.213059][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 359.223107][ T5855] Workqueue: hci0 hci_cmd_sync_work [ 359.228319][ T5855] Call Trace: [ 359.231591][ T5855] [ 359.234516][ T5855] dump_stack_lvl+0x241/0x360 [ 359.239191][ T5855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.244389][ T5855] ? __pfx__printk+0x10/0x10 [ 359.248976][ T5855] ? _printk+0xd5/0x120 [ 359.253127][ T5855] ? __virt_addr_valid+0x183/0x530 [ 359.258234][ T5855] ? __virt_addr_valid+0x183/0x530 [ 359.263358][ T5855] print_report+0x169/0x550 [ 359.267871][ T5855] ? __virt_addr_valid+0x183/0x530 [ 359.272982][ T5855] ? __virt_addr_valid+0x183/0x530 [ 359.278087][ T5855] ? __virt_addr_valid+0x45f/0x530 [ 359.283205][ T5855] ? __phys_addr+0xba/0x170 [ 359.287711][ T5855] ? set_powered_sync+0x3a/0xc0 [ 359.292569][ T5855] kasan_report+0x143/0x180 [ 359.297080][ T5855] ? set_powered_sync+0x3a/0xc0 [ 359.301942][ T5855] set_powered_sync+0x3a/0xc0 [ 359.306626][ T5855] ? __pfx_set_powered_sync+0x10/0x10 [ 359.312008][ T5855] hci_cmd_sync_work+0x22b/0x400 [ 359.316951][ T5855] ? process_scheduled_works+0x976/0x1850 [ 359.322683][ T5855] process_scheduled_works+0xa63/0x1850 [ 359.328239][ T5855] ? __pfx_process_scheduled_works+0x10/0x10 [ 359.334224][ T5855] ? assign_work+0x364/0x3d0 [ 359.338814][ T5855] worker_thread+0x870/0xd30 [ 359.343449][ T5855] ? __kthread_parkme+0x169/0x1d0 [ 359.348475][ T5855] ? __pfx_worker_thread+0x10/0x10 [ 359.353586][ T5855] kthread+0x2f0/0x390 [ 359.357649][ T5855] ? __pfx_worker_thread+0x10/0x10 [ 359.362762][ T5855] ? __pfx_kthread+0x10/0x10 [ 359.367357][ T5855] ret_from_fork+0x4b/0x80 [ 359.371793][ T5855] ? __pfx_kthread+0x10/0x10 [ 359.376394][ T5855] ret_from_fork_asm+0x1a/0x30 [ 359.381169][ T5855] [ 359.384180][ T5855] [ 359.386497][ T5855] Allocated by task 13633: [ 359.390899][ T5855] kasan_save_track+0x3f/0x80 [ 359.395576][ T5855] __kasan_kmalloc+0x98/0xb0 [ 359.400176][ T5855] __kmalloc_cache_noprof+0x19c/0x2c0 [ 359.405551][ T5855] mgmt_pending_new+0x65/0x250 [ 359.410314][ T5855] mgmt_pending_add+0x36/0x120 [ 359.415077][ T5855] set_powered+0x3cd/0x5e0 [ 359.419486][ T5855] hci_mgmt_cmd+0xc47/0x11d0 [ 359.424106][ T5855] hci_sock_sendmsg+0x7b8/0x11c0 [ 359.429042][ T5855] __sock_sendmsg+0x221/0x270 [ 359.433713][ T5855] sock_write_iter+0x2d7/0x3f0 [ 359.438468][ T5855] vfs_write+0xaeb/0xd30 [ 359.442711][ T5855] ksys_write+0x183/0x2b0 [ 359.447034][ T5855] do_syscall_64+0xf3/0x230 [ 359.451530][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.457421][ T5855] [ 359.459747][ T5855] Freed by task 13630: [ 359.463805][ T5855] kasan_save_track+0x3f/0x80 [ 359.468479][ T5855] kasan_save_free_info+0x40/0x50 [ 359.473500][ T5855] __kasan_slab_free+0x59/0x70 [ 359.478254][ T5855] kfree+0x1a0/0x440 [ 359.482143][ T5855] settings_rsp+0x2bc/0x390 [ 359.486650][ T5855] mgmt_pending_foreach+0xd1/0x130 [ 359.491763][ T5855] __mgmt_power_off+0x106/0x430 [ 359.496614][ T5855] hci_dev_close_sync+0x6c4/0x11c0 [ 359.501724][ T5855] hci_dev_close+0x112/0x210 [ 359.506319][ T5855] sock_do_ioctl+0x158/0x460 [ 359.510927][ T5855] sock_ioctl+0x626/0x8e0 [ 359.515252][ T5855] __se_sys_ioctl+0xf9/0x170 [ 359.519864][ T5855] do_syscall_64+0xf3/0x230 [ 359.524368][ T5855] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.530254][ T5855] [ 359.532566][ T5855] The buggy address belongs to the object at ffff88802775cb80 [ 359.532566][ T5855] which belongs to the cache kmalloc-96 of size 96 [ 359.546438][ T5855] The buggy address is located 24 bytes inside of [ 359.546438][ T5855] freed 96-byte region [ffff88802775cb80, ffff88802775cbe0) [ 359.560058][ T5855] [ 359.562374][ T5855] The buggy address belongs to the physical page: [ 359.568788][ T5855] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2775c [ 359.577551][ T5855] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 359.584663][ T5855] page_type: f5(slab) [ 359.588636][ T5855] raw: 00fff00000000000 ffff88801ac41280 dead000000000100 dead000000000122 [ 359.597219][ T5855] raw: 0000000000000000 0000000000200020 00000001f5000000 0000000000000000 [ 359.605797][ T5855] page dumped because: kasan: bad access detected [ 359.612204][ T5855] page_owner tracks the page as allocated [ 359.617909][ T5855] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 12128, tgid 12127 (syz.5.1650), ts 280064807005, free_ts 276294187733 [ 359.637359][ T5855] post_alloc_hook+0x1f3/0x230 [ 359.642151][ T5855] get_page_from_freelist+0x303f/0x3190 [ 359.647692][ T5855] __alloc_pages_noprof+0x292/0x710 [ 359.652885][ T5855] alloc_pages_mpol_noprof+0x3e8/0x680 [ 359.658342][ T5855] alloc_slab_page+0x6a/0x140 [ 359.663015][ T5855] allocate_slab+0x5a/0x2f0 [ 359.667516][ T5855] ___slab_alloc+0xcd1/0x14b0 [ 359.672196][ T5855] __slab_alloc+0x58/0xa0 [ 359.676532][ T5855] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 359.681906][ T5855] dst_cow_metrics_generic+0x56/0x1c0 [ 359.687284][ T5855] icmp6_dst_alloc+0x270/0x420 [ 359.692088][ T5855] ndisc_send_skb+0x316/0x1450 [ 359.696862][ T5855] addrconf_rs_timer+0x371/0x670 [ 359.701804][ T5855] call_timer_fn+0x18e/0x650 [ 359.706398][ T5855] __run_timer_base+0x66a/0x8e0 [ 359.711262][ T5855] run_timer_softirq+0xb7/0x170 [ 359.716119][ T5855] page last free pid 8508 tgid 8508 stack trace: [ 359.722438][ T5855] free_unref_page+0xcfb/0xf20 [ 359.727212][ T5855] kasan_depopulate_vmalloc_pte+0x74/0x90 [ 359.732930][ T5855] __apply_to_page_range+0x806/0xde0 [ 359.738219][ T5855] kasan_release_vmalloc+0x9a/0xb0 [ 359.743326][ T5855] purge_vmap_node+0x417/0x810 [ 359.748093][ T5855] process_scheduled_works+0xa63/0x1850 [ 359.753637][ T5855] worker_thread+0x870/0xd30 [ 359.758232][ T5855] kthread+0x2f0/0x390 [ 359.762293][ T5855] ret_from_fork+0x4b/0x80 [ 359.766711][ T5855] ret_from_fork_asm+0x1a/0x30 [ 359.771478][ T5855] [ 359.773795][ T5855] Memory state around the buggy address: [ 359.779414][ T5855] ffff88802775ca80: 00 00 00 00 00 00 00 00 00 00 00 00 fc fc fc fc [ 359.787470][ T5855] ffff88802775cb00: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 359.795519][ T5855] >ffff88802775cb80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 359.803569][ T5855] ^ [ 359.808435][ T5855] ffff88802775cc00: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 359.816496][ T5855] ffff88802775cc80: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 359.824561][ T5855] ================================================================== [ 359.853397][ T5855] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 359.860614][ T5855] CPU: 1 UID: 0 PID: 5855 Comm: kworker/u9:6 Not tainted 6.12.0-rc6-syzkaller-01362-ga58f00ed24b8 #0 [ 359.871470][ T5855] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 359.881538][ T5855] Workqueue: hci0 hci_cmd_sync_work [ 359.886778][ T5855] Call Trace: [ 359.890070][ T5855] [ 359.893007][ T5855] dump_stack_lvl+0x241/0x360 [ 359.897701][ T5855] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.902918][ T5855] ? __pfx__printk+0x10/0x10 [ 359.907525][ T5855] ? preempt_schedule+0xe1/0xf0 [ 359.912396][ T5855] ? vscnprintf+0x5d/0x90 [ 359.916756][ T5855] panic+0x349/0x880 [ 359.920666][ T5855] ? check_panic_on_warn+0x21/0xb0 [ 359.925779][ T5855] ? __pfx_panic+0x10/0x10 [ 359.930193][ T5855] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 359.936196][ T5855] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 359.942555][ T5855] ? print_report+0x502/0x550 [ 359.947239][ T5855] check_panic_on_warn+0x86/0xb0 [ 359.952191][ T5855] ? set_powered_sync+0x3a/0xc0 [ 359.957056][ T5855] end_report+0x77/0x160 [ 359.961303][ T5855] kasan_report+0x154/0x180 [ 359.965803][ T5855] ? set_powered_sync+0x3a/0xc0 [ 359.970656][ T5855] set_powered_sync+0x3a/0xc0 [ 359.975421][ T5855] ? __pfx_set_powered_sync+0x10/0x10 [ 359.980796][ T5855] hci_cmd_sync_work+0x22b/0x400 [ 359.985736][ T5855] ? process_scheduled_works+0x976/0x1850 [ 359.991456][ T5855] process_scheduled_works+0xa63/0x1850 [ 359.997017][ T5855] ? __pfx_process_scheduled_works+0x10/0x10 [ 360.003007][ T5855] ? assign_work+0x364/0x3d0 [ 360.007597][ T5855] worker_thread+0x870/0xd30 [ 360.012196][ T5855] ? __kthread_parkme+0x169/0x1d0 [ 360.017230][ T5855] ? __pfx_worker_thread+0x10/0x10 [ 360.022345][ T5855] kthread+0x2f0/0x390 [ 360.026415][ T5855] ? __pfx_worker_thread+0x10/0x10 [ 360.031537][ T5855] ? __pfx_kthread+0x10/0x10 [ 360.036125][ T5855] ret_from_fork+0x4b/0x80 [ 360.040548][ T5855] ? __pfx_kthread+0x10/0x10 [ 360.045132][ T5855] ret_from_fork_asm+0x1a/0x30 [ 360.049909][ T5855] [ 360.053287][ T5855] Kernel Offset: disabled [ 360.057605][ T5855] Rebooting in 86400 seconds..