last executing test programs: 12.613595988s ago: executing program 1 (id=751): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x9, 0x0, &(0x7f0000000340)={&(0x7f0000000ac0)={0x2, 0x3, 0x0, 0x3, 0x2}, 0x10}, 0x1, 0x7}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r8, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@newtfilter={0x70, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r10, {0xc, 0x4}, {}, {0x3, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x40, 0x2, [@TCA_FLOW_EMATCHES={0x3c, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x30, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_META={0x18, 0x2, 0x0, 0x0, {{0xfffb, 0x4, 0x2}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x5, 0xe, 0x2}, {0xf0, 0x7, 0x2}}}]}}]}]}]}}]}, 0x70}}, 0x20040054) r11 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00', r4}, 0x10) r12 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r11}, 0x8) close(r12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r13, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b700000000000000950000000000000007c7da02c73f92ba620b7aa53f72776370b59580ede4bebfa8f125fcf0ae9e7a1ba571c00e57856e7a67cb3884376cfe2f6809aab4a9d92c6a2a32fed9b7fc3ae3c0314bf91ae6072f15c19aef781ede3e595490833ea373e8676b"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r14, 0x0, 0x0}, 0x10) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r14, 0x0, 0x0}, 0x10) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r15 = socket$inet6(0xa, 0x80002, 0x88) bind$inet6(r15, &(0x7f00000001c0)={0xa, 0x10010000004e20, 0x0, @empty}, 0x1c) 12.211863054s ago: executing program 1 (id=756): r0 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) openat$cgroup_procs(r0, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) (async) listen(r0, 0x5a8) (async) sendmsg$NFNL_MSG_ACCT_NEW(r0, &(0x7f00000001c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x84, 0x0, 0x7, 0x101, 0x0, 0x0, {0x7, 0x0, 0x3}, [@NFACCT_PKTS={0xc, 0x2, 0x1, 0x0, 0x7}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1ff}, @NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x3}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x7}, @NFACCT_FILTER={0xc, 0x7, 0x0, 0x1, [@NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0xffffff62}]}, @NFACCT_FLAGS={0x8}, @NFACCT_QUOTA={0xc, 0x6, 0x1, 0x0, 0x8}, @NFACCT_BYTES={0xc}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0x84}, 0x1, 0x0, 0x0, 0x20000001}, 0x8800) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000200)={'wg2\x00', 0x0}) (async) r3 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={0xffffffffffffffff}, 0x4) ioctl$BTRFS_IOC_QUOTA_RESCAN(r3, 0x4040942c, &(0x7f0000000280)={0x0, 0x0, [0x2, 0x5, 0xfffffffffffff000, 0xfffffffffffffff8, 0x1, 0x100]}) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000002c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r0, 0x89e2, &(0x7f0000000300)={r4}) r5 = socket$netlink(0x10, 0x3, 0x7) (async) socketpair(0x26, 0x5, 0x1, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r7, 0x84, 0x64, &(0x7f0000000380)=[@in6={0xa, 0x4e23, 0x1459a2b0, @dev={0xfe, 0x80, '\x00', 0x2b}, 0x5}, @in={0x2, 0x4e24, @private=0xa010102}, @in6={0xa, 0x4e20, 0x8, @loopback, 0xedf7}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x4}, @in={0x2, 0x4e22, @broadcast}], 0x74) r8 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFVLAN_GET_VLAN_VID_CMD(r8, 0x8982, &(0x7f0000000400)) sendmsg$kcm(r6, &(0x7f0000000940)={&(0x7f0000000440)=@hci={0x1f, 0x1, 0x2}, 0x80, &(0x7f0000000680)=[{&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000005c0)="8e7a6eb453ccf59ede0fe31e9b1b09683dc0d90c50b365d354c481f2ba7bb7c246219066f761f6836c66c4021cd2a316df117e14ce", 0x35}, {&(0x7f0000000600)="d08f3746b838d79c3663f3baeb54d1b0e6ade58a6979e7eb1ec71b888b5851b5690a6b8c157cc6a4c1f189754c29f2f8", 0x30}, {&(0x7f0000000640)="03e1323d375c38a046991e42e50cae4ce22cba8da0d5331233b457db1efb811c0dfac16a17", 0x25}], 0x4, &(0x7f00000006c0)=[{0x108, 0x10f, 0x8, "bd8a3c663f97659e6c2f7dbf7a6395b7ac8f1e983852213230bec57de337d832eb5774983718f72ffc0986c380252ec6d026d09eb8e43538c82f20c45ba6f941398042e817b0e6f74180f3c704e4316f23f7846887772e1333c80837a519e04a078551911dda40df26d4695c8aced05d61054339eaae775965e13e8a87e457149333bd364b7ef51a9029d32db7e4b3abaca9531b23deb6711a6dc496f19f1f22b58e8c9c36a05254a851539595fe63fa5c56350b717874b30476d0dc1d6f2c126724fd30ad8de3a2e3ccdc34327326a3c8abc8a82145acd6b5d64b84d4ab2a40fee68ec81c97d4661f008f6723d247d802a57d3e"}, {0x38, 0x10b, 0x3, "869fcc544098b25857dec1892a7c74d08d1beaabbdee8d234a69a97e701ca7389316fedcf7041c1d"}, {0x48, 0x115, 0xe18, "f119f63f50746dfa419fb56d28ea6ed42ab2a3dbf32f3381b998008d29cbe039a0ac254b9856db244bc80691ec7d88e9b9e08a084a47"}, {0x28, 0x1, 0x0, "9518fa7e4e3e49a04a11738deb32fda6dec0a00c0d3a"}, {0x78, 0x3a, 0x5, "001ea513cbd79d49ef71e4fa292b24ee9e1a44222bba4ed234a2caa2dd6958ffdb37f931e64288b52749cb7f96d792e5b07a26cc41a8a255dfbf3b0b471bd062bd0ab9de9608b720a1b5252da15b8af2e938883c0ecd3943b249d6c8fde414c6a047"}, {0x20, 0x10c, 0x0, "897691ff87b87308b33be3af2f77"}], 0x248}, 0x0) (async) sendmsg$alg(r7, &(0x7f0000001b40)={0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f0000000980)}, {&(0x7f00000009c0)="392fa463b79227e1723ed6ad4c308c585b69034dab972c92697c5eadb02e92018722afacf9a2e141164b2f09f44ab30846793712c3", 0x35}, {&(0x7f0000000a00)="9b9faf5ebd3e7b9c21210b02bc39090d7863f41150427fb8f44dae0f297b57c50d217040395e11029c5ec3f6d8d53c5ac18c4b849a7137fb567ab0049c554bca654ed4a2541d21b08d7615495756f3c286774e8215aa63bae91db678d857baabe440f61a28e19c1bcbcf5ef27f3123e62ddcc4174f9e7bd806ae3bffd36ec0dbe5d88568d0da4baea615c7eef9577b91cf345169f97e8b70b1fd4199850da68ce5661d0264e8d6e5a94d59a629788c7388fe7eb688f92484e8209596ddc77b0bab26a80ea4aeb5aa368ff525da254ba726ecc36bec17abe2fd55c778c9d792b74895111d854ed60a9716f2c51fa7928d3754a4e54d7d83d39a3a7b068abb2c0cbe8a1bbd24def671f6d49c827b6c3738f043d74274bc1a73a03e3f7fe6b89f999742836b1009c7b5a90e44ed609de85206add6de6823cde62d4e019fea0708be13598cd9ad6651709c03a0fc9df33070152d54668fd2a60a696e001e949f51737fbf95a5aa5907794f021734c617a15bf6f6b384055bdf42f98c6f6bffba2e548cb835fcce090cded925534fcbaa0b0acb56bc7f92fcfe3a4cc15ae91ab4a64ec572fff34662d68b4ce9f6737fc7965cb32f319d993b7abb96237325e7d11ae153483989fda4c98642f2d9732de57e9cad614bd6b0ff39a8936f173233a85e8e596fc28c69d02c728244862dcd012763d6e7fe9d9d35edb2ebc98d66dac253739cc1ca35e4d535f6db4d755fb6ba321f41a68b01c7066d63216fd80bf6d70e4e5131eef107c8f154a344a1f6110d9a11d76df0d09c9d62221fad5bf0848c3051ce655a870dfb255409dcfbfb41cb491f0943628124606e97e9d31563b465c7cc0fc48b12a40a6ec82c7570bd579dadc9d674d1e6e72911fbc7fd1241b01edcaf7c6736ece2175d7ca1bd8348403c14efe0d83ccf6e05056359892aefa4177570589ff8119db4ac8cb0620ab23f0e762cc513f4149ea91dc0a80262cfcb3a737b9caa49597f3556468bf515f3570bb847be175f8928797dd0347ef2ade1edc1637432ca1cb0fcaedfbe5b5e118aaf392ec3abd8bc0af541de6fc4de0c3b738e0dc9f3e96285731b97ff4570b6de6636db721b77532f09591e1770e4522631c6de46e9b52fb07db0a4f21694b231417f343a149dda09b3aaefaa6bbd6bcea3c5e2a6e88b751f72a7f93911727a97161a67a6734aa80490cebf8e84e386b66ed807a92500865f1bd2656c855591cfeb9db70fe70600cebf7e0e066bf45676f737440c5adfe2efaedfbb0a0ceb72df9870e35c53459f10affe8acba25c6e5049fa28496db1e936bf76a166f985c7e2d5888a9ead0587e344bf16fab1809f519182f6ec5bb99f6da5236cc3c03729e66c966a714f2f4fb45e7850d3fa6015ad855f44fff4142e92355756f588cdbe58edf88cba31b25d18af37faa0184478c530fdffa0c29f1f1ee1808dc765375dd4d1cf413dfa91829d002fb1ba736b5888f9488a23aba475f7f88f9b11f1e41138a5cd733f91bf662fe92544130a49c75a90d0d9a3fda006ab36252d3430988a6df5079bc9a48528ab0c2492c2c6784d3deb8ab72871a92f7d3a87a90d04e39941e98e19ad3526c88dcc7ef3d444914c68dd3aeee9fed90ec8bf132252a862066410080eb1fc2a7b7f51d1fe6866fc6fff0fea3f48b7db529a35040767c69d9e399968046cabeed54aa4575f757c5c392caaa2984f2abfaa92510ceb8b6a6ed83cfe5a596abe41a0c87fa1eb6ad501e747c31c13d1a83c116612da190d5643a051c2753f1d3cc382349898b0df207772d5cd5e502bb3424f11c53be75daaca84873c5dc21395d73dc93ba1298f29350298474c6cec865410b8f446baa7d066c263414107a18335cdee74c9c419049ec6fff90942a50aad7062ddc9e39f721cd37694be93847bb9abfbec1495f1123dd3fdfb03d08eb3070b9cc6a323d7327d57b474c7fcd29fc4d838d7599f1af1560acb07c7d4026265d7453e70710968f6c38ee711750387d8e2c273afbd8d101330a929f3aff73d7249ed274b0b10dbe194861a7690b29360e0e369f5938c4b4d540d11a012296c324df11c09c4e5cb0d2c24ca61b17f562b8d691160135680c1e4d0734267b34aa0314fa83aabf75548e080b8a7786616484cc1649da5bc6ac493e94cebbeadce25f942aa39ffa964e75a475d58fcfd313a2694d0db3598dd4a1c1609324a1ecc3445e2eca865e9c7521c6f2eb1bdbb1bd6096f31441ab507e61348c28641fbb6b1c70345cabe4de7c2f6b4f785c3735767c6209ad869fce4ebe20373945f55239bd88c7c79dcfb287011a4cd3d40cb2036a50bcb785e96438a0551fdfeeaa87714bbd1c8736b90ff038faf997b0766c2c994c16b82847c533051535ec0b572a48d8418e8a0e3ee269a8126b1c4bc547d651d5612b90ed288291e7f11d19f025cc2dd1b6b13029770e58e3d9b2b4e475034c01a6f0fdd08761776095fb94ab05865f34d7d33b3bbb98625f5d882f464dec5208320a6a311f4c547ef6af7ef304269e382c56c056c5909fe2d5251576a9ba46f9e9a0aae7b059e1405e9f5a827bcdccd77a0bc67a007b6861a71629d08606dfdc583d7123aebae9adf8b428266f82d3d1b494b5271f8a838d5bd02a37dbf38e6609bf5aadfc55997c41248b176b6a7798b5c813514c669721e6036a8f52d6064132ea60906302b0858f13a2ac71f31ee9952861f2ffd05ed469204a06edd44022f9a8d8d6f2ec60288b8db211113332b718a4f22f69926a7e612f145312c4f89702d7d91f52bf9987c2a8153705b8802e4f93591414fdfdd92460ea33ec634fab4740a2df3ee7ab096056f2eb0ac277afe8be11946fe39a65e1bd4bdd1883b2767fc3bc1c3cfe9304fe8887a31d628b347ce2cb67ef2884c6266fbaa8290224c4c7759f850b9ae1610cd647ac39ce9958ca85eef798931c3df669b75fe524a46dfd8b313e761eb86fa5dd815e7a991bca5ff2fcf6882cb2e528704a899ae45eea2b9ef07bd358c9284c17baf71a3b97b90999b9f0ec720a1f51d0f46e3b1dc3b4a67921a135ee37f7b51ab557529724350bc938fd0594c9b370aaff6459e29a020de6c3b2715114db0ccd4005620a54748fa59da7431257afa0e7c4f7979da53c64af34b06e27b291a7a724768cc04dc06ea0978ba663c9e66ba6a4d74a60194ce5d57ccd4cc5530da9031b61b538105c228df9b2df77d2a4a110dd5f07941e8e580105e6c77508d041fd146615f0d540f07e029e75d5010e114a5dcf797f47ec501ddfe3fa711085d3305fd06456d3db85f7af0683648ecb23c1babcbf85c04059b86666691ff3b2298b14bce634698c3138b6fcc6d87e05f7d513cf4adca15dc4ca240c32ecabb994a7634ea0292c8b40ebe5b61c634b9e4d518e64a161358159b4817a5addb258aeac53603bf7e54dc06ce3221c9e5fdf0deeeb4b5e22737c728cfcd7b7ff32c26798d15ee73db44ea6b31dd34d04de60bb26f52c08f0605e33ea4389fcec9ea8d43c0f20621f266b0477f081270549a8a51226774c930180aacf40fa8e66f958fa0e4326da5959be6547d87cadaba9bc3df309f935f56b19f4fb54ec9f3fa06e326331ee924a5b37334a307f7921e369ff6640272b1e97d818c99d655e1f5cc3a636815388099d977fb921e4e1f85a34f6cd744c43a3f22b2c38d6edee3e6def1226acc58f3725b8fe7b5cc65a0375d57f65683d4098bad95fed44e3eb69dd7c9e7f783131c6112e4090321334c7b2c2195f4f9c40d4fde3f0d070f150fdd45874850dc8234ab9f00748bc2a0d770bb8b2560c3894d055e2c9019b5940d4fe05bc9f4d55d479ecd37f6f8375046ae46b32a2227c433617dfed972ee13c062d2a78762e1f5790b979f7fddb3ffbf6fbe079c89a3a4e35c3ccd42629266f5efd0eb36a79891e70c81d49d3cc468f581a6a03e962ad09646b57a5290a59cdb276a6898e087c038a79eacf8292980ef6df5145f76ac98c4786cfd6680a9e972bc39b0123dcdcf768df0688b04533c92805c87a4b0ddbc3a146736cfc867eaa35060348122f2974640024a915eba655c0e30f0fef85b4699dc58dba0452143b52e3c7c283db7e3e15d9ab47528bcab8ec67eec6ec4ef1a079a2613c10742c84454d8602693fa3e324a073ebafe70455dfb8f81a2f41cd4df38b13a86daf153a01393543d712e27cfe5c871b8ffe6231beeaf5dac05e882285c7b19da37bb661b0247902a5f0d2956fb168cbc35d3b5487947a8c06dadf708d12032e7968360dbe4f9a9ccd38c62233839439c75845c4cf3e0aed9ea5c7ab81fd4a9a36bb7435c21a7202e54859dacda3021ab30c475eac2331dd8eaa017c63e8bdd5030c9f749d9fa38d5527ccd8a2a28b47c6f931a3e0c478bd379b296ff8f989d5c9aad39ab2810fc6bd71d8251d5fabcb3569241a43f14406520b652edf7e052ffe028ad5f62f157231de17fec4c4f8d7ea73db462ebcd32e12baf69cc5fdf274d4b7d9ea15b00e25484fd6fb3e01222a6df55624ee8a445386a57357e54fccbcb28dc532c3bedb2eb6f4c0f473ac898f05340928bfe6a89aac04537b27c7ac746063e9cc0f2b797552f1904e33a40841cfb6a08e14723dd8424231a79353b2493cc4ae3938e0090f99cf0e1a3a8d195bdaa375ad196701f09905cda688165ca5d510992ab2c4ea9a2ae48a4198557caa2dbbcfef2a2d5d2435518b9ff2ad90a939a4484d8bc69ba7fbae019225ddd0aba0430886607e197c278f6602ac7f76b160fd6880a0ef87d326c0a9aa3806336d92003a2ba52c84f9295a8b3c9074f4d4c58f36d690fa7ac20ede0effa8ca4d87c2960171b547751cdcfb5a6f85849b60d2891b0719b9ce06faefa26f6bcc76a2ca188101efde2a592314038831b17e2eb0dcaf9b2ae1d25672a029d75819f8e29858d38625d2cebaa47b6e5eb9f1668de1197f6c0c77b93c662a327954d30f0f002b1cd633fdf265c444a209f0a4d018c5fc4af5dbaa84a707e6356658173f5220411a8de230fa3841570d01955e35770affed76e64eaad9137b82bc031f21dc9437524805b8afbaf8b317000959e31015d41d70039320031507f6fb415b6953f674f8cfe1f652a282cb2e9eb428fc5a13e640b6c60b1ae6a4fdb1998640a94e09b6b227ceabdd1688ee6c3ba772a07a191645fc46273f7a31732548ef928fb7e10cedd2f9c2c8096c004a72d8569f4094521aaf1158c4ca3499d40d0200cc625a042cfbcb92670592245fab58f592304dadb34382ffa4e7cb0b4910d7ed7cb397d4e6e38c7ee83461d7df09555d39f6f5133ec9b53b44f098cc6a3323b2d95101bc6f9e28ef95cbf76cb708674757e3c6ea15328632133aa59b4fe01b22df3e1e2c1129801ffe0b5c8b4e1ab624c3e1efe583de4cbd5fb13d125b80ae2eed3abb04289d6d8ee946ed66f6ba73af9382308e0351738f2e02bc99015ab4119bb2c6b66231f2417b724556bf8a4f0394a618a4ae31affaf5ec6180d5591bcd84d6fd99936a1dc80ba3fc729439afe2e68e5e92d174fca945f80b03200481242cce25e9056029a35b64cbcd0317e6703bb95c295a69a9957ab3a76da26040b9024f93acd87b2d3ad4fc49aa9c808c88c23d6fb294dddb53758dc63bde97a19c53344087c9686017e8ce325637d985dcc24242cebb77de0730e70270c777d392e4fc9d0684e4012a4811fbf32befb7bf13abea2cb37947e6e690bb99dc22d4ddfa120c47ec0510b08b465eb92381919941800abdb74c0b526660bb766", 0x1000}], 0x3, &(0x7f0000001a40)=[@iv={0xd8, 0x117, 0x2, 0xc4, "ab37ba9a10b77f42c9b71158214bcce542a60251516cb5f612fd05b9d82be93bd5d54375f65f4e2475ea2f1ff843a61af11bc3ddc76e873688abd17a17e65c4e733229062aa3347437e827ab741448fc6db1079a8c8a11f2f7f2e9748d1bf8ab5a0ead73d9c544ebb1213395e743432a24359190359a6707cb2b854735fd4323e54f94c500c37fd7ec60c66994d032635e453ae86381179e9fb3422c125c6cbe421ea5379b869fe7c3277761a52067c5a96741f8f9f821a41679f277c0584a35f20a1b54"}, @op={0x18, 0x117, 0x3, 0x1}], 0xf0, 0x804}, 0x5) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000001b80)={'batadv_slave_1\x00'}) r9 = socket$netlink(0x10, 0x3, 0x15) (async) r10 = syz_genetlink_get_family_id$wireguard(&(0x7f0000001c00), r0) sendmsg$WG_CMD_SET_DEVICE(r9, &(0x7f0000001d40)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x8001000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001c40)={0x84, r10, 0x2, 0x70bd2a, 0x25dfdbfc, {}, [@WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}, @WGDEVICE_A_FWMARK={0x8, 0x7, 0xff}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @a}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e23}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}]}, 0x84}}, 0x40004) (async) r11 = accept$inet6(r0, &(0x7f0000001d80)={0xa, 0x0, 0x0, @remote}, &(0x7f0000001dc0)=0x1c) ioctl$FS_IOC_GETFSLABEL(r11, 0x81009431, &(0x7f0000001e00)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000001f00)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$VFAT_IOCTL_READDIR_SHORT(r12, 0x82307202, &(0x7f0000001f40)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r13 = syz_genetlink_get_family_id$wireguard(&(0x7f00000021c0), r0) sendmsg$WG_CMD_SET_DEVICE(r6, &(0x7f0000002fc0)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002f80)={&(0x7f0000002200)={0xd54, r13, 0x100, 0x70bd28, 0x25dfdbfc, {}, [@WGDEVICE_A_PEERS={0xfc, 0x8, 0x0, 0x1, [{0x54, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x800}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @rand_addr=0x64010102}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}]}, {0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @c_g}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5, @private1, 0x1}}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x7}]}]}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_IFNAME={0x14, 0x2, 'wg1\x00'}, @WGDEVICE_A_PEERS={0x5c8, 0x8, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x3}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x4, @mcast2, 0xffff}}]}, {0xc, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0xff9c}]}, {0x25c, 0x0, 0x0, 0x1, [@WGPEER_A_ALLOWEDIPS={0x220, 0x9, 0x0, 0x1, [{0x94, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x2f}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x2f}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}]}, {0xa0, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}]}, {0x4}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010101}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x29}}, {0x5, 0x3, 0x2}}]}, {0x40, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}]}, {0x70, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5}}]}]}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e21, @private=0xa010100}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "a539550b358d40ae02bb0e2fd3473e5d345d3d3b3c1a41e3847cb9dd28ead844"}]}, {0x2f4, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x6}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}}, @WGPEER_A_ALLOWEDIPS={0x274, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, {0x5}}]}, {0x58, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x3}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x3f}}, {0x5}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private0}, {0x5, 0x3, 0x3}}]}, {0x88, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}]}, {0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x1e}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5}}]}]}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "f3f46373f3ca7cdcba8d39e88e108bbddc1e6675a4aab7ae56051ce23f13c53d"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x7, @mcast1, 0xff}}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x34, 0x0, 0x0, 0x1, [@WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x4, @loopback, 0x4}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}]}]}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e21}, @WGDEVICE_A_PEERS={0x610, 0x8, 0x0, 0x1, [{0xa4, 0x0, 0x0, 0x1, [@WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x4, @mcast2, 0xd}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @local}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x9}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x5, @loopback, 0x9}}]}, {0x2b4, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e22, @multicast1}}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_ALLOWEDIPS={0x270, 0x9, 0x0, 0x1, [{0x4}, {0xb8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xe}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @remote}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010102}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010100}, {0x5, 0x3, 0x1}}]}, {0x94, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @multicast1}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x44}}, {0x5, 0x3, 0x3}}]}, {0x100, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @loopback}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0xfa}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @loopback}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @remote}}, {0x5, 0x3, 0x2}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @neg}]}, {0x268, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e21, 0x25dc, @remote, 0x3}}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e23, 0x2, @private0, 0xa670}}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x54, 0x9, 0x0, 0x1, [{0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x22}}, {0x5, 0x3, 0x2}}]}, {0x28, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_ALLOWEDIPS={0x158, 0x9, 0x0, 0x1, [{0x70, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00'}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0xff}}]}, {0x4c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x3b}}, {0x5, 0x3, 0x1}}]}, {0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private1}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast2}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @private=0xa010101}, {0x5, 0x3, 0x1}}]}]}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x26}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x1, @mcast1, 0x17}}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0x8, @local, 0x8}}]}, {0x28, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x4}, @WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @loopback}}]}]}, @WGDEVICE_A_FLAGS={0x8}, @WGDEVICE_A_LISTEN_PORT={0x6, 0x6, 0x4e20}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}, @WGDEVICE_A_IFINDEX={0x8, 0x1, r2}]}, 0xd54}, 0x1, 0x0, 0x0, 0x4}, 0x40) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r6, 0x84, 0x64, &(0x7f0000003000)=[@in6={0xa, 0x4e20, 0x1, @rand_addr=' \x01\x00', 0xe056}, @in6={0xa, 0x4e22, 0x40000000, @mcast2, 0xfffffff9}], 0x38) (async) getsockopt$IP6T_SO_GET_REVISION_TARGET(r0, 0x29, 0x45, &(0x7f0000003040)={'TPROXY\x00'}, &(0x7f0000003080)=0x1e) (async) ioctl$FICLONERANGE(r4, 0x4020940d, &(0x7f00000030c0)={{r4}, 0x3, 0x9, 0x6}) 11.96521445s ago: executing program 1 (id=760): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x240, 0xd0, 0x11, 0x148, 0x0, 0x0, 0x1a8, 0x2a8, 0x2a8, 0x1a8, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xd0}, @common=@SET={0x60, 'SET\x00', 0x0, {{0xffffffffffffffff, [0x2, 0x5, 0x9, 0x3, 0x1]}, {0xffffffffffffffff}}}}, {{@ip={@multicast1, @private=0xa010102, 0xffffffff, 0xffffff00, 'veth1_to_batadv\x00', 'macsec0\x00', {0xff}, {}, 0x6, 0x2, 0x8}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2a0) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getpeername$packet(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_b, @random="7ede563ced2d", {0xb, 0x2}}, 0x3e, @void}}, @NL80211_ATTR_DURATION={0xfffffffffffffe08, 0x57, 0x3}]}, 0x44}}, 0x4000004) (async) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000005c0)={0x44, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_FRAME={0x1e, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x1}, @device_b, @device_b, @random="7ede563ced2d", {0xb, 0x2}}, 0x3e, @void}}, @NL80211_ATTR_DURATION={0xfffffffffffffe08, 0x57, 0x3}]}, 0x44}}, 0x4000004) sendmsg$nl_route_sched(r1, 0x0, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r6, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) (async) connect$netrom(r6, &(0x7f0000000140)={{0x6, @rose}, [@bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast, @bcast, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) pipe(0x0) (async) pipe(0x0) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) (async) vmsplice(0xffffffffffffffff, 0x0, 0x0, 0x8) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x14) (async) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) (async) sendmsg$nl_generic(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000400)=ANY=[@ANYBLOB="340000003e0007010000000000000000017c00000400fc800c000180060006006558000008000280040011"], 0x34}, 0x1, 0x0, 0x0, 0xc000}, 0xc010) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)=ANY=[@ANYRESDEC=r7], 0x44}}, 0x60040000) r9 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) (async) ioctl$sock_inet_SIOCSIFFLAGS(r9, 0x8914, &(0x7f0000000100)={'nr0\x00', 0x2}) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r10 = socket(0x40000000015, 0x5, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={0xffffffffffffffff, 0x0, 0x10, 0xf3, &(0x7f00000003c0)="aa102f7ce7bb7f85eebd639fdf5b26fb", &(0x7f00000004c0)=""/243, 0x6, 0x0, 0x6, 0x19, &(0x7f00000005c0)="0c3a046890a7", &(0x7f0000000600)="d5436b0de5d673f1a727b596e3d10f3d8bc6e826cea650dfa4", 0x3, 0x0, 0x3db9}, 0x50) connect$inet(r10, &(0x7f00000000c0)={0x2, 0x4e24, @rand_addr=0x64010102}, 0x10) bind$inet(r10, &(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) (async) bind$inet(r10, &(0x7f0000000340)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) 11.684129862s ago: executing program 1 (id=765): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x3c, 0x0, 0x0, 0x0, 0x0, {}, [@DEVLINK_ATTR_RATE_TX_SHARE={0xc}, @handle=@pci={{0x8}, {0x11}}]}, 0x3c}}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2, 0x2, 0x0, @void, @value}, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)={@cgroup=r8, r5, 0x2, 0x0, 0x4000, @void, @value}, 0x10) r9 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r9, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x1}}}}, 0x30}}, 0x4) sendmsg$nl_crypto(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="f0000000120003"], 0xf0}}, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x20, 0x34, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str=')\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x488c0}, 0x4c044) 11.626294189s ago: executing program 1 (id=767): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000a40)=ANY=[@ANYBLOB="30a2be190022da", @ANYRES16=r4, @ANYBLOB="0100ff010000fedbdf250f0000000c000600010000000100000005000f005d00000005000f0005000000"], 0x30}, 0x1, 0x0, 0x0, 0xc0000}, 0x40048c0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r5, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x44, r6, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x28, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x18, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000041}, 0x4880) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000a00)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000940)={&(0x7f00000008c0)={0x4c, r4, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFTYPE={0x8, 0x5, 0x1}, @NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_WPAN_PHY={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20008080}, 0x14) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010027bd7000fcdbdf25210000000c4f230005000202aaaaaaaaaaaa09001f00706879310000"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x20048000) socketpair(0x5, 0x80000, 0xb1, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r8, 0x89f3, &(0x7f00000002c0)={'syztnl2\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x8658, 0x700, 0x2, 0x0, {{0x19, 0x4, 0x2, 0x6, 0x64, 0x68, 0x0, 0x41, 0x2f, 0x0, @loopback, @local, {[@cipso={0x86, 0x39, 0x3, [{0x7, 0xe, "b43977bf1ad7de44aadd03e2"}, {0x2, 0x3, '<'}, {0x6, 0x2}, {0x5, 0x11, "432878e8021b5cb261b8cd4a45f37b"}, {0x1, 0xf, "cfaefd2f7bbd013d4c662be1ea"}]}, @ssrr={0x89, 0x17, 0x49, [@private=0xa010101, @empty, @broadcast, @rand_addr=0x64010102, @loopback]}]}}}}}) getsockname$packet(r8, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000340)=0x14) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000001200)={0x0, 0xfffffffffffffff5, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_PLIMIT={0x0, 0x1, 0x5}]}}]}, 0x48}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r8, 0x89f8, &(0x7f0000000400)={'erspan0\x00', &(0x7f0000000380)={'syztnl0\x00', 0x0, 0x1, 0x7, 0x2800000, 0x6, {{0xc, 0x4, 0x1, 0x38, 0x30, 0x64, 0x0, 0x9e, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x34}, @loopback, {[@cipso={0x86, 0x19, 0x0, [{0x2, 0x4, '\"x'}, {0x2, 0xa, "4b86bfbbc2620d00"}, {0x6, 0x5, "b9b66d"}]}]}}}}}) getsockopt$inet6_mreq(r8, 0x29, 0x1b, &(0x7f0000000440)={@private1, 0x0}, &(0x7f0000000480)=0x14) r17 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r18 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r17, &(0x7f0000000840)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000800)={&(0x7f00000007c0)={0x30, r18, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8, 0x2f, 0x9}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa3}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008005}, 0x5800) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f00000004c0)={'vcan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000500)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(r8, &(0x7f0000000580)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000540)={&(0x7f0000000680)=ANY=[@ANYBLOB="10010000", @ANYRES16=0x0, @ANYBLOB="200028bd7000ffdbdf251300000050000180140002007665746831000000000000000000000008000100", @ANYRES32=r10, @ANYBLOB="08000100", @ANYRES32=0x0, @ANYBLOB="08000100", @ANYRES32=r11, @ANYBLOB="080046a4fcffffff08000100", @ANYRES32=r14, @ANYBLOB="080003000200000008000100", @ANYRES32=r15, @ANYBLOB="2c000180080003000200000008000100", @ANYRES32=r16, @ANYBLOB="0800030000000000080003000200000008000100", @ANYRES32=r19, @ANYBLOB="34000180140002007369743000000000000000000000000008000100", @ANYRES32=r20, @ANYBLOB="14000200627269646765300000000000000000004c0001801400020064766d7270310000000000000000000008000300000000000800030003000000140002006272696467655f736c6176655f30000008000300000000000800030001000000"], 0x110}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$TUNATTACHFILTER(0xffffffffffffffff, 0x401054d5, &(0x7f0000000040)={0x6, &(0x7f0000000000)=[{}, {0x0, 0x0, 0x0, 0x745}, {}, {}, {}, {0xfffd}]}) bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) 11.324361167s ago: executing program 1 (id=772): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400a00142603600e120800160000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1, 0x0, 0x0, 0x6000}, 0x0) r1 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) (async) close(r1) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_ABORT_SCAN(r1, &(0x7f0000000280)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r2, 0x800, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4) (async, rerun: 64) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000100), 0x4) (rerun: 64) 4.282915096s ago: executing program 4 (id=846): pipe(&(0x7f0000000180)={0xffffffffffffffff}) close(r0) epoll_create1(0x80000) write$cgroup_int(r0, 0x0, 0x0) r1 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_mreq(r1, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000240)={0xa, 0x4e21, 0x0, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r5, 0x6, 0x14, &(0x7f0000000080)=0x1, 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x1, &(0x7f0000000140)=@gcm_128={{0x303}, "87ee8ac6c46dad33", "2607080d7f4fcf00fd4ef2dece6c7c58"}, 0x28) sendmsg$inet(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000006c0)="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", 0x18f}, {&(0x7f0000000340)="5fdbd61342a1560054f74cee82024cacdf79b6be94f99a7aea5b7678644cc1ef33880d4a59cad1fd0852b05064b02335eb6064c24f1ad325e0325bc473c3aeaf6709e5227bca1f7ba283d381d4f64e34fa77c5cac5d0bcf72850aaa9ea7f9144a008ae41f51262011dd0a3eb6eaf00da010b18a79f6917d0c25efbf1c56feb59cbf4683c026aa7aa1d65bea9ba31000000", 0x91}, {&(0x7f0000000940)="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", 0x105}, {&(0x7f0000000500)="0f1d547dfd011eee5ee96e9f1947841b6080ffadffd0f2ba53588a463cb08890097ea28302b894feb895cebb0e72a94c681955c3a39a1e5ebde1638c8f408cbb197ede5a6779e4732b685db9abb1184d1e4bf53bb5eafcc7d265002aeead4852d157cfb83a10f4d80f000000000000a7f702c9424df1ffbd0387c5e7777aa1bf37cbffb95d0daf", 0x87}, {&(0x7f0000000d40)="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", 0x1d4}, {&(0x7f0000001700)="e3fbc9f7e155a6e294f68078cb808c435b48612e93b0d69d1f21fd5564a9f18f996475fb64e12884979b5882a07d51ec37cab390561644521d18773068ad0fc0f6f8df2bb545c05fbfda35eefcf88a020063a2bf6468b302b9831678e59677adb2ec28d0caf29931cf5993e1ce3ba4cf655cf53218d9887589289e133b54050621892724d74ce07d912407878f2a4ec7a10be378467499f110fe42cfa93c4883db8d2c5155a0d94b828405a9de0e8ffae65c255df6ee1e807dd8fa8d384184f735fbc4e62d27f288c6c9c94477590c7ff4eb93131ebb0d6d5dfa82dbafd6a6bd0cc56bc8d7af7e4246389c34a239b98ec85073c76da59b1fe73f14c72c5fa25e77ce2d5849ad97c74e15826752d1d571e6d9377fe1dd1c794795216f2614d25d9a2a019c3f88b59dc971df962e0250e89263a6c3cbaa9f2b0c5d83cffd423c89b83783109d05b53831ba44e31971b5a5444e816b19e16ad69106d8d7339ed0b5707218728ea071db4f59aea059410e48dc0c210eb84552eaa5ff6aa127c9dc3312a6e0bd4eb3eac8bf7b9c4e158fcc69d371246d807fbeabcfb33e9268025d3dd4cdfbdb0e178cdb63493251915b8fcf933b9ac872818fc255fcc6e4d9fcd7cc6e5071928e7f1a5738321897b0d277f0bb661ea6d25d7f6f2b38273561593d62fc363cc77de0352ea0bee8b98ca55474fa1c69d476adb25ae2ab5357008d03c236294544f79039057a5b30d130c2149e755f2b61907e1cd54a56dc53e3c8471e81f83f5e8d97a5474015d24ec97a074394afa27408a73b8e765b79faf100ea3dd0c98fbfa3d113ffe56c0ffd1a30415e82b34cce8289eb6d01ed59fe6a6b0c99a00e4563c0c0c4fecd127fa357c0e12bfed2a1ac23643d91fd4daf12494bd0a8ac520886efe0caea86fe820b1e79b614fec63737d4930508e037ac05fb254fc362b39cd9b341df7d8504a13b8af2055ea1778c6043c119465f79c118e8080941bcbc0c65ba0cb25e1be8de94207dcb3d2863828a6b17f5a37fd64553ecb6d99879e38af6f3b2da109433c0b75faf20de6ee0ae823b17d1462de38d91f6d5292f02276dbf744ff835dee75532659087e91e5c873b321511b7dd74e86813b4ba4a99394559898206e29f149a53acf0483c0a150c5d1a9a050341c3f1822470381408ff787a2486ea81c6128f1b33ab8fb38e4491fd643ef1fb3efa333b5dbc8fb92daf0b957c19513a838355abcf40ddf272d88e2740dc390b94ee82a5b72a1e7c55ff6ee034d8010702dce3de159a34620b5216d3308e0cd64709cd7f4d5b026f4b81d7d43d8acb36c2251ac576b0ca9411e41eb6ba1d1871845ddcd4d95aa876d0baea1a00b59d68a00e191b59f751e54edecbc4aa0df7585e868a055efdb1dee40921d13d55dfb51f1b245ae2b91fad099e510b75b25daac3d2c529b9bdecf5ab6abcbc99c8f2358f60341eec86a4bd6a9cf0df4004124e31a4cc2e2e3c5cf53a90ee16bb4c6c49e9f50c993a8aa575b0b8e018b608f2321bc64afbace952457246dc8a3e4fc9a6c12a7d7d2779e4333072d4ef27d6e0cc2d1a6990a8376dc5dcd488888d9e436b566ecc63fe715b051859119b1399ef9c905fd63874175e5eeab2361bbfe6247921663c4c20bf6db22bf87477886f6778627bd6d5deffd7042c9b12b9a5448ef2425607e7b08fb984239750595e29f8cc241b238531824a6ba35747df767f1ce58403013394ba85a74871660d7e3e479ab54f2163662a9ffd385764bba475f87d56e191a87e1512afa51b41f664425dc0eccb202080327c8160a677054d5430e2af640d4f1bbf1c8e6d38ca007db30e52ae51781d27f5c760797601abecf3622e370f39edacfa7a8559bd1a5a2db1f0eb202f49f84f14231f593baed4ca91188665dc7daaaacdc8c02520c918a10f95f6894fbc735350a8e75b9e31493f200bbfb3824cce202f218c216310bb9d9e5621e03fd6df18b8bbf43f5eb29a1e1a7b8eb12bb28228bc536973f70f50b6c4e9663c12e861bc58d376b2a47298fd72f12e8af2970a806db26649be9876f7963fcdec769265a44048e6332e2dcd73b0637b5079c7f3c50e74bc43317f87bcb08bb0d307a9b85eb236dba7b7529be680454a76992d36fd9a8dab504f2a954ab14b40872460df0480845e307df07e80307920e5079196d14bc68e657f5d322265c6b4408b39e6a9c435ed485752cbb51a1bae60c86dd11579db163f453bacb9e34bc1b4c11498ea5dd95e8e7b8e57af0c66100745892cb16ec12dbdaa462487273bdb582a05376797c2732be2dc63e094442556be6ea8faf70e12834b7e724d516e3d6480b07b0b7c255b1c1079cb0809e84017ecd8116abe2d6cad207669a2104c9754fb265f6c7b01c5af50814d9f7f6bab90ba9010daa18c04e886939a6fde3e1e49f3823f41ee338f3ad24625143b01963bb9da90d60045604045ca4066634cf4da26b13b0a246d5f6e7a4d3e6de02aac171053c978cb6562d31b2eda0a4df9a8c54d6f0c35d59fba466208d0d9d8a38e968f0c116ebe05a7f681d74fa778fc9d3b098cc3181bb66ae6ac5ed3b13f4a4ab741bfcea12f6b7e5faf64d109fdb5d1fe812cd3fbb477146da300e021b161a1a2456993adfc0c7e7acf71f39a0dcc53dc27660a5e2ef022d334af9478b70aeb40667a20f6842630acf5e25a16efe6f377cedc969ec158878985f76a65af80a54c9d6d5d7585017f18376aa67cf8f5086f60e527268ddd87a75bf440fabb97b273d2a5d12c343c27e67968225d3575f4fa4c2de3618388e7a21acfd2ba7a9df2a195c2a36f627a55f34a8de4c46b5ce2d61298f34892f584bef2dfe95ae2f1fd1f8ca9daf85d8de0567eca0303574667bfff7210224b42180646b32b4cfc7c839b5d58f07ae83ce978ded9006619a5900428f4b051b6a539d6234e4aff0bf34c1602fc52d18dd8fa9b65341a843cef1e5160fa1d80d80a1236b14a4b524f472c6b2bb8296e8960c76398394a916df1e9c503256e14325b3dfc6a4ef123132db25a6dbe375525bc56a13067d2f93f6b4b767a4c24e52c716f87fec09875329d47bce4a0f10f7ad897cdc432b04eb1713466613657ba4fe490faa78f1ab3e309fc4ef98c9696e7bb9b32ee7f7c683697efdd78090d68efa86709c3dd49b7a25bccb368f527db6f950c33208c1c2428b702725211cd2094be97656d1695edacab73cfae2403b176fea2a4345b82f9a77946f945eb1555fa233d30d8cc6a836e02d721500f4cb1ae4f2a9e9ae0220a8b1ac5771e9c99dead7877bbbe04ee3b68b0e149deb9cbb09717e57ea163b5ad4cffcd73c83e06773fed4775e8a3a2fbaee8062ea42a72e9e63bde2d648c55984bf80d79da38eeff0e43a62a6c68122235fb8879d114932c19d951bfd3b9f56a20b069bbe630d7530c8fa203000418114489238d3648ee5350abd01eecd0ca952a049bc9e8b89ca6868f453bcda45462af52137ad0f4e354c6ce5e606b9a2a288036e524b403ebc5860a8ed0e282f8337321d855579900918f1f545cec1df3389e96d39a8ffe94e934f71f922a8af2cca5ce04a0e0af87532114d7cfd014938ee3b51ad3b4d64a918ffda6fe9975563e9159ed189e161849922109b799fa29a0f963fd244f3371cf3995f1446e6d9b9da87ebb5b39c10bfc59036bc248a2c859974a86f3e2d1015ea61bd6d75e8abe979f4a1e5a1ca23763041f44c53feca6f94215a806a0b54cbe2bfe4225e190d85115ce936ad1cab3d63bf7bb84", 0xa71}, {0x0}], 0x7}, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000680)=@gcm_128={{0x303}, "000037d7009400", "c0b6c5b29ca2b838d41ac2fc7ddf972d", "e9be1eae", "bb10000000000001"}, 0x28) recvfrom$inet6(r5, &(0x7f0000000100)=""/19, 0x1ff4, 0x40, 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010100"/20, @ANYRES32=r4], 0x20}}, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f00000001c0)={@remote}, 0x14) 3.712246278s ago: executing program 4 (id=853): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newlink={0x48, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0xffffffff}}]}]}, @IFLA_IFNAME={0x14, 0x3, 'veth0_to_bond\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x5801}, 0x0) close(0x4) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000005"], 0x48) close(0x3) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000300)={r3, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="b9ff03076804268c989e14f088a8", 0x0, 0x2, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$batadv(&(0x7f0000000180), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000400)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000040)={0x24, r5, 0x1, 0x0, 0xfffffffc, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_HARD_IFINDEX={0x8}]}, 0x24}}, 0x0) r7 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'dummy0\x00'}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x48, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x18, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @ipv4={'\x00', '\xff\xff', @broadcast}}]}}]}, 0x48}}, 0x8c000) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r9, 0xc004743e, &(0x7f0000000280)=0x4) ioctl$PPPIOCSMAXCID(r9, 0x40047451, &(0x7f0000000200)=0x3) ioctl$PPPIOCSFLAGS1(r9, 0x40047459, &(0x7f0000000100)=0x2000004) pwritev(r9, &(0x7f0000000180)=[{&(0x7f00000007c0)="00214717a707001d0000030640710a069d317ebbaaa6b639", 0x18}], 0x1, 0x803, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r10, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x801) 2.316298892s ago: executing program 4 (id=859): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x8, &(0x7f00000002c0)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@map_idx={0x18, 0xa, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x8}, @initr0={0x18, 0x0, 0x0, 0x0, 0x3274, 0x0, 0x0, 0x0, 0x4}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0xd, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0xa6030a80) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f0000000040)={&(0x7f00000000c0)=""/105, 0x69, 0x0, &(0x7f0000000140)=""/244, 0xf4}}, 0x10) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@ipv4={'\x00', '\xff\xff', @loopback}, 0x4, 0x2, 0x0, 0x6}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl(r1, 0x8b32, &(0x7f0000000040)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x9, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071111a00000000008510000002000000850000000800000095000007000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x9, 0xc3, &(0x7f000000cf3d)=""/195, 0x40f00, 0x0, '\x00', 0x0, @cgroup_sock=0x2, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, r0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2.163029187s ago: executing program 4 (id=863): pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000280)={'ip6gre0\x00', 0x0}) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) splice(r1, &(0x7f0000000040)=0xfffffffffffffffc, r0, 0x0, 0x800000000ff, 0x0) shutdown(r1, 0x1) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet_udplite(0x2, 0x2, 0x88) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r5, 0x8b32, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x82, &(0x7f00000001c0)={r6, 0x40, 0x8}, 0x8) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000080)={r6, 0x9, 0x1fc, 0x0, 0x9, 0x400}, &(0x7f0000000100)=0x14) setsockopt$sock_linger(r3, 0x1, 0x33, &(0x7f0000000000), 0x8) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = accept4(r7, 0x0, 0x0, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=ANY=[], 0x24}}, 0x4000011) sendmsg$nl_route_sched_retired(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000058c0)=@delchain={0x90, 0x65, 0x400, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x93536fa62b4dd0fa, 0x2}, {0x4, 0x3}, {0x2, 0xfff2}}, [@f_rsvp6={{0xa}, {0x60, 0x2, [@TCA_RSVP_ACT={0x5c, 0x6, [@m_skbedit={0x58, 0x18, 0x0, 0x0, {{0xc}, {0x1c, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x3, {0xd, 0xfff3}}, @TCA_SKBEDIT_QUEUE_MAPPING={0x6, 0x4, 0x24}, @TCA_SKBEDIT_PTYPE={0x6}]}, {0x11, 0x6, "be01623b81a9168f34fac14875"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3}}}}]}]}}]}, 0x90}, 0x1, 0x0, 0x0, 0x8004}, 0x4008040) recvmmsg(r8, &(0x7f0000005800)=[{{0x0, 0x0, &(0x7f00000052c0)=[{&(0x7f0000000200)=""/197, 0xc5}], 0x1}, 0x7}], 0x1, 0x1a0, 0x0) r10 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r10, 0x8914, &(0x7f0000000700)={'bond0\x00'}) 2.008306108s ago: executing program 3 (id=865): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f00000000c0)={&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0}, &(0x7f0000000180)=0x14) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWSETELEM={0x24, 0xc, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x4c}, 0x1, 0x0, 0x0, 0x20000090}, 0x0) ioctl$sock_inet6_udp_SIOCOUTQ(r1, 0x5411, &(0x7f0000000600)) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xb2}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x24}, @exit={0x95, 0x0, 0x33, 0x48000000}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb800007a, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 1.712287619s ago: executing program 3 (id=867): r0 = socket(0x40000000015, 0x5, 0x0) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x1, 0xd, 0x4, 0x3, 0x7f, 0x5c, 0x56, 0x7}, &(0x7f00000000c0)=0x20) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r0, 0x84, 0xa, &(0x7f0000000000)={0x1, 0xd, 0x4, 0x3, 0x7f, 0x5c, 0x56, 0x7}, &(0x7f00000000c0)=0x20) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00'}) sendmsg(r0, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000003"], 0x20}, 0x0) 1.711844897s ago: executing program 2 (id=868): r0 = socket$tipc(0x1e, 0x2, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) bind$alg(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f0000000040)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) pread64(0xffffffffffffffff, 0x0, 0x0, 0x1) setsockopt$TIPC_MCAST_REPLICAST(r0, 0x10f, 0x86) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000001, 0x41071, 0xffffffffffffffff, 0x0) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r3, &(0x7f0000000000)={0x1f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0xaa}}, 0x8) 1.465351783s ago: executing program 3 (id=869): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f000000c300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a05000000000000000000020000000900020073797a31000000000900010073797a3000000000140003800800024000000400080001400000000014000000110001"], 0x68}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x40, r2, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x42}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x7fffffff}, @NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4ac}, @NL80211_ATTR_PMK_REAUTH_THRESHOLD={0x5, 0x120, 0x4c}]}, 0x40}}, 0xc020) sendmsg$NFT_MSG_GETFLOWTABLE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)={0x2c, 0x17, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x2c}}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0xffffffff, @empty, 0x3}, 0x1c) listen(r3, 0x5) syz_emit_ethernet(0x4a, &(0x7f0000000200)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0200", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2, 0x0, 0x0, 0x81}}}}}}}, 0x0) syz_emit_ethernet(0x92, &(0x7f0000000100)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0a3ff2", 0x5c, 0x6, 0x0, @remote, @local, {[@dstopts={0x5c, 0x7, '\x00', [@calipso={0x7, 0x38, {0x3, 0xc, 0x2, 0x3, [0x9b59, 0x6, 0x3, 0x9, 0x9, 0x7]}}]}], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x1, 0x3fc, 0x0, 0x3}}}}}}}, 0x0) 1.244887788s ago: executing program 0 (id=870): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, 0x0, &(0x7f0000000480)=0x89) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) getsockopt$bt_BT_DEFER_SETUP(r3, 0x112, 0x7, &(0x7f0000000300), &(0x7f00000003c0)=0x4) (async) setsockopt$bt_l2cap_L2CAP_OPTIONS(r3, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x747, 0x0, 0x3}, 0xc) (async) connect$bt_l2cap(r3, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r3) (async) sendmsg$inet(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000680)=[{0x0}], 0x1}, 0x4040004) (async) shutdown(r3, 0x1) (async) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) (async) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000400)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) (async) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000041c0), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_GET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f00000006c0)={0x14, r7, 0x1, 0x70bd28}, 0x14}}, 0x4000080) (async) sendmsg$TIPC_NL_NET_GET(r5, &(0x7f0000000640)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f0000000880)=ANY=[@ANYBLOB="80010000", @ANYRES16=r7, @ANYBLOB="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"], 0x180}, 0x1, 0x0, 0x0, 0x400c840}, 0x4040) (async) r8 = socket(0x848000000015, 0x805, 0x0) (async) r9 = socket$packet(0x11, 0x2, 0x300) (async) r10 = socket$inet(0x2, 0x2, 0x1) (async) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000040), r12) sendmsg$NLBL_CIPSOV4_C_ADD(r12, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000b40)={0x48, r13, 0x200, 0x3, 0x25dfdbfd, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x2}, @NLBL_CIPSOV4_A_TAGLST={0x24, 0x4, 0x0, 0x1, [{0x5, 0x3, 0x2}, {0x5}, {0x5, 0x3, 0x2}, {0x5, 0x3, 0x7}]}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0xffffffffffffffff}]}, 0x48}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NLBL_CIPSOV4_C_ADD(r11, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="70caae60", @ANYRES16=r13, @ANYBLOB="000227bd7000fedbdf25010000004c000480050003000700000005000300020000000500030002000000050003000000000005000300010000000500030006000000050003000600000005000300050000000500030001000000"], 0x60}, 0x1, 0x0, 0x0, 0x40018}, 0x4) ioctl$ifreq_SIOCGIFINDEX_vcan(r10, 0x8933, &(0x7f0000000340)={'vxcan1\x00', 0x0}) sendto$packet(r9, &(0x7f0000000080)="18", 0x1, 0x10, &(0x7f00000000c0)={0x11, 0xe, r14, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) connect$inet6(r8, &(0x7f00000000c0)={0xa, 0x0, 0x0, @local, 0x2}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="340000001400010000000000000000000a000000", @ANYRES32=r4, @ANYBLOB="14000100ff"], 0x34}}, 0x0) 1.196323123s ago: executing program 3 (id=871): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x3, &(0x7f0000000000)=@framed, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1900000004000000040000000900000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000e59b3aef18809db34b0d942213a600"/42], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r0, &(0x7f00000000c0), &(0x7f0000000000)=""/8, 0x2}, 0x20) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000001c0)={r0, &(0x7f00000000c0), 0x0}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r0}, &(0x7f0000000100), &(0x7f0000000140)='%pi6 \x00'}, 0x20) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0xfd}, {{0x0, 0x0, 0x0}, 0x4}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000040)=""/176, 0xb0}, {&(0x7f0000000540)=""/245, 0xf5}, {&(0x7f0000000440)=""/72, 0x48}, {&(0x7f0000000840)=""/4083, 0xff3}, {&(0x7f0000000000)=""/64, 0x40}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x6}, 0x80000000}], 0x4, 0x20, 0x0) 1.115219412s ago: executing program 4 (id=872): syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r2, 0x8920, &(0x7f00000000c0)={'sit0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000000c0)={r4, &(0x7f0000000000), 0x0}, 0x20) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff29bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="81ffffff000000003a1c0012800b00010067726574617000000c00028005000800050000005ac25c27b3565101b12bd91238dcf3c3acaa9e68fa42dca8823d30522b82103164e0d1c81ffab4c33687a9e5672f6a5ab91392f836c47e748abcf88100bbf0d2feaa3fe9f7"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff29bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="81ffffff000000003a1c0012800b00010067726574617000000c00028005000800050000005ac25c27b3565101b12bd91238dcf3c3acaa9e68fa42dca8823d30522b82103164e0d1c81ffab4c33687a9e5672f6a5ab91392f836c47e748abcf88100bbf0d2feaa3fe9f7"], 0x3c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xfc}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000006c40)={0x14, 0x1a, 0x1, 0x0, 0x0, {0x1c, 0x0, 0x2}}, 0x14}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)={0x5c, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @nested={0x45, 0x11, 0x0, 0x1, [@generic="2fe5afbf24fbcccc554cd9761e79b8dad8a2018544a3f855448c77987d9d7a5233e2eb702840054f9e143ec6c09650dbe7a1520d6147f9cdbd9d15d2dcd393701e"]}]}, 0x5c}], 0x1}, 0x0) ioctl$EXT4_IOC_CHECKPOINT(r0, 0x4004662b, &(0x7f0000000080)=0x4) 1.070093498s ago: executing program 2 (id=873): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="00000008000c00020000000000000000000000000002"], 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x8001) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r3, 0x84, 0xa, 0x0, &(0x7f0000000480)) r4 = socket(0x1e, 0x1, 0x0) r5 = socket$isdn_base(0x22, 0x3, 0x0) getsockname(r5, &(0x7f0000000400)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @multicast2}}}, &(0x7f0000000640)=0x80) sendto(r4, 0x0, 0x0, 0x40000, &(0x7f0000000000)=@generic={0x1e, "ce33be0d44c60b14d87167d49396208e01367b3d90e5a933e1b2aee80d2c71d4e268223ed7dac20eccf4a0847aae138d9155f11f9f8fa070942cefc3a2910c9acb202d7f68a62b9aa78bb1327d24a0c44f4b9640cdcb14560949aa7a1fc3a33c332a4c409d1ddb96443400bd5f7f533e1de8c9663df1912afbe896cdad4f"}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r4, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000280)={&(0x7f0000000380)={0x7c, 0x0, 0x8, 0x401, 0x0, 0x0, {0x0, 0x0, 0x6}, [@CTA_TIMEOUT_DATA={0x1c, 0x4, 0x0, 0x1, @fccp=[@CTA_TIMEOUT_DCCP_TIMEWAIT={0x8, 0x7, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_CLOSEREQ={0x8, 0x5, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_DCCP_PARTOPEN={0x8, 0x3, 0x1, 0x0, 0x2}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x34, 0x4, 0x0, 0x1, @icmp=[@CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x4}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x10}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xda0d}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0xe}, @CTA_TIMEOUT_ICMP_TIMEOUT={0x8, 0x1, 0x1, 0x0, 0x1}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x88}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xd}]}, 0x7c}, 0x1, 0x0, 0x0, 0x1000}, 0x48c10) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x6a, &(0x7f0000000080)={@local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @address_request}}}}, 0x0) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x40, 0x0, 0x1, 0x70bd28, 0x0, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_FRAME={0x22, 0x33, @disassoc={{{0x0, 0x0, 0xa, 0x0, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x1}, {0xc}, @device_b, @device_a, @initial, {0x6, 0x3}, @value=@ver_80211n={0x0, 0x1, 0x3, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, 0x1f, @void}}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)={0x1c, r9, 0x1, 0x0, 0x0, {}, [@NLBL_CIPSOV4_A_DOI={0x8}]}, 0x1c}}, 0x0) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000140), r11) sendmsg$NLBL_CALIPSO_C_ADD(r10, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="258e0d5465999bafa30001000000080002000201ee0008000100"], 0x24}}, 0x0) sendmsg$NLBL_CALIPSO_C_LISTALL(r8, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x2c, r12, 0x800, 0x70bd2d, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4014004}, 0x8000) r13 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r13, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) sendmsg$nl_route(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3400000013000c3e10fdebeee002239e676a313073ca1142f6da005cf4038bf43c850ab04443eab4b31365a985b2d554f3bc7eb6582a660cda8063d308c370cac91cbebfb0773ffdcc46b745e91ae7dc4dcf55a5b1d4fca12e10c909d0c1d09425d972ae2bc4dd09ca9528f7b15c0c92feba6769bd86931b09f90b81468135f7a8a2", @ANYRES32=r6, @ANYBLOB="000000000000000014001a8004000100697036677265000004000280"], 0x34}}, 0x0) 936.084097ms ago: executing program 3 (id=874): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000580)={0x0, @in={{0x2, 0x4e1f, @empty}}, 0x0, 0x0, 0x400c275, 0x0, 0x32}, 0x9c) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) bind$inet6(r1, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000c40)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f0000001b40)=[{&(0x7f0000001a80)=""/79, 0x4f}], 0x1}}, @rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, 0x0}}], 0x90}, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000a00)={0x0, @in6={{0xa, 0x4e23, 0x0, @loopback}}, 0x0, 0x0, 0x300, 0x0, 0x54}, 0x9c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB="3400000013000500020000000000000007000000", @ANYRES32=r4, @ANYBLOB="004002000000000014001a80100005800c000380080001"], 0x34}}, 0x0) 914.904433ms ago: executing program 0 (id=875): setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000300)={0x3, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) (async) setsockopt$inet_group_source_req(0xffffffffffffffff, 0x0, 0x2e, &(0x7f0000000300)={0x3, {{0x2, 0x4e23, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) getsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2a, &(0x7f0000000440)=""/4096, &(0x7f0000000040)=0x1000) r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'sit0\x00', 0x0}) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) r4 = socket$inet6(0x10, 0x3, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x7, 0x0, 0x20, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d6}]}, 0x38}}, 0x0) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x1, 0x0, 0x2, 0x7, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x7, 0x0, 0x20, 0x0, @in={0x2, 0x0, @rand_addr=0x64010101}}, @sadb_spirange={0x2, 0x10, 0x4d2, 0x4d6}]}, 0x38}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c000000190001000000000000000000021800000000fd000000ed0008000100ac1414000800080004"], 0x2c}}, 0x0) sendto$inet6(r4, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3c00000013000100000000000000000007000001", @ANYRES32=r3, @ANYBLOB="00000000000000001c001a80180004"], 0x3c}}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000001440)={0x2, {{0x2, 0x4e22, @broadcast}}, {{0x2, 0x4e22, @loopback}}}, 0x108) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000680001000000000000000000020000000000000006000700070000000c000880050005000000000008000500", @ANYRES32=r1], 0x34}}, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="34000000680001000000000000000000020000000000000006000700070000000c000880050005000000000008000500", @ANYRES32=r1], 0x34}}, 0x0) 798.49309ms ago: executing program 2 (id=876): openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.events\x00', 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x2d, 0xa, 0xa, 0x0, 0x7f, 0x71, 0x10, 0x13, 0xa0d0}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 680.057921ms ago: executing program 4 (id=877): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e81621209600", 0xe4}, {0x0}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e899723b33735bbec3e1429117362acc4139fc3565f183bd5568f47f4bc416adb360fdd9c497c2ad2ffe1ad738f4c073f1378d2b455e61844076a4a97ac1e13e2fb300ae69d55c501f96dcc39bf7ed835cc866f0fbd8e936e8374a484f111919dc610e0a36a0ee3df2ab1dc34cea42a4292e2fbaa86875a506bdd81fbb3dc5ea", 0xf5}, {&(0x7f0000000500)="c83e2bd7f125f4a6a218f22da67e5a1d01c265386e882d477c2869af6f9092221cd278c734b3cd254fe08f708730f47775dd330f02714b3c221d0ca14be1b8b12c699935caa14628b7b209df8a8bb03d570db805", 0x54}], 0x4}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000840)="b1f56ee29c433328d3b2a83bd97e37007087acae7568edff43ed556d76770122635aea1dc48755381c71590cd542e796cc2669e2af442a03760c5cdfc691b3da35ad6a8d2ef9c2baa53a8dec36a2e434d46e643a1277b1dd932f3ef2cf46c257d6a19523b8b789ef34b46e461725b5e437323385b88c368f8bb5b933aa", 0x7d}, {&(0x7f0000000e80)="5be3b011e12323e4ab88c0472f0700000000000000e71ba6231f303d2db97401439932cfd4855c4cc243dae723789d8a9a16be3135c5f82691837c90ab19545f7a1dcf1449fd59eecae5f52fba1e89d6d34b39297bbbc2580600000000000000", 0x60}], 0x2}}], 0x2, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'team_slave_1\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x5c, 0x0, 0x1, 0x70bd25, 0x0, {0x1, 0x6c00000000000000}, [{{0x8, 0x1, r3}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r1}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x3000000}, 0x10) sendmmsg$inet(r0, &(0x7f0000001440)=[{{&(0x7f0000000180)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x10, &(0x7f00000001c0)=[{&(0x7f00000008c0)="3f70c4a1302549dfb86d723315b032eb678b156094bfbf8d1f822a1d9107505dd751794f89b8c946b1deef03bb131be323d40d6a5277c86669157559745e550d44049a339e51bd8b2ce77cd4eb03a427aab350525be04b711d1747e1edf324e24840b3019c66e23d961558a5dd4d6372e3865961b0449f6fd654614f6a834627f37509cd43b2ef280de35209432ffad1178f65bfd1ea56ea69c0ffadd89613fa89a74f5ad89cdf5bbad5dbf28153fb2b6775f065b5a3416f7497101acb772a664017d265835d3767f6cdfae4", 0xcc}, {&(0x7f00000009c0)="f60e5d21e796ab11a6dae88848b34c0c61517fd78887e1d5ffa55b920e0011614b7a712acb4b96d015f2dcc6ec667f18b3bb888c76938f597ecc66d0673dac8f4bf8c74b4f58936fa5d719f5c2b5f1724c74013c9606d220cfec0ea6c0dfdb86fac530113ee6a144e59ad0a49bb1951a920f01765a2c4c23906514f41f27e14fe435b40afdf3741abccbe220150f27472cd40bc4a037c2acec0dd5b289be112fa934a94d17ea5eacbb5a2db35fea3aaea7b22d542add400f0a7a005dbc05dffd", 0xc0}, {&(0x7f0000000a80)="b0b0f2c656ca9edcc805124a68a11655a68ffdbd16f760bdf3eb9a62ebf6db6a97d1e5b554ed8a7c9b02950c8dfeed83f54e4d6c300baa7e50457710727a6bae3fbbad2fd42a784cbec49f198a7e263ba8a81830733ba3f6d183632ab60005d17fb02f7cdbc1454c14688d790ea92d628dc94729a16adeea4870c5bd41d354a91ee2fd62464bc974", 0x88}], 0x3, &(0x7f0000000b40)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @rand_addr=0x64010101, @multicast2}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffc}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@cipso={0x86, 0x1f, 0x1, [{0x0, 0x7, "520e273c2d"}, {0x6, 0x2}, {0x2, 0x6, "443cb2ce"}, {0x5, 0xa, "032dabe19705f2c3"}]}, @lsrr={0x83, 0x1b, 0x4c, [@initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010101, @local, @broadcast, @loopback, @loopback]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x1000000}}], 0xa0}}, {{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000d40)="ed14f56dad4ded3999d1df83606a179781a960a0a935754f94e42e278140306a41698933a4f4cd32976db56078a140b3d88bf7b7d8b158fc0b30c0c188f9f32438999d2405d2cbf91977bf89ce83bf31e64b255729de9b94a219f2cd68cae4eb72524ded89d8083cff4844e5b7f2200bfa6ef2d5c4719b83ca3e0a9d77e400fd9634e2b11ccac8e6d71e417092ab011f49555d955fd57a88d20864c3ebca7c9d00cb0544c4d16e5c1312076a703a28115cd5ba26b839197f73393e352ad2b74c5224a80b66936d3350", 0xc9}, {&(0x7f0000000240)="1240e8e02ebf8c2923f08d34775598852a64990d3108bb4378ac6de0693e55f54df4e1dc2c786ed203c975", 0x2b}, {&(0x7f0000000f00)="61e7b6f46e6ada2203526338f577c962a74941afa1a26034a339aeed60030b2b4ec67319171f87c441d08d158f184e4d69f29f7de376bbf88de8ff5ca233bd3a5ed0240e990f88a347be900261e4b03b6db57f4013c7201aaecaa52d99ae257db5677e9e03f7004f8a27f8f70d9713e6041e42bd78e045b1af37c5701550e294fd3a5d1474c9a6b2364f0cc093b409493e35d9877cbf2cbe8f6b611ffa74f90542566d30ab1e14909592fe79efa37afb5b30f2f56125852c3750541a3d6bae29f8def673b82c0e708341285e", 0xcc}], 0x3}}, {{&(0x7f0000000640)={0x2, 0x4e24, @private=0xa010100}, 0x10, &(0x7f00000012c0)=[{&(0x7f0000001000)="855f9a1c857a4472362e03183c9ebada9e6b178c01345cf5056bb324f7f6af1d9a5f3da191a597679066f658287a080296a7085257d45cf9b73625b98834220317e69ce77245b418b80703f351f31efbae247a8810b86d49340988d8d280d6eac99252d62086d7488b8ec6d5b46611f453b42971336f2ac3defaf0803df9a30900dc15885b179266327f040016d2963685a160ef345d6d47a27c420d865e7328b949cfe4542b92a3acbd98f575dc9dc84d559e6a0f0165bc9fe5ca0bc72ecdabb459c9e2943d2d1913ecb98e11d92d61916a3ae8be719a0e91bc6cc9c4fad7e0d377d319c0295c573db4f30fafd0167eb29b004548b3c3", 0xf7}, {&(0x7f0000000680)="a849d5ffa87b2ec48488024f0f5912d465e85101111841dbbd2f7b5af5cc453f93c704071a58db", 0x27}, {&(0x7f0000000c00)="50d3a3b80917731e94311ec07a6f19635acbbe17dac9a52c82fb315555ba4f13b8eb41904933da50ccc81c0331d773c60a62d3e9900ea0891db68d2c2cb7e0bd01bc254eb2725e7e25c762b217420024d9e9fcdbb057efad8ba8d57b", 0x5c}, {&(0x7f0000001100)="7bd56b64a18d41a23ac1ed9b456a34804f36487795725ecdcb732fe9b5be4ae2317c49ed8696efe534ad0441e9e4b2d7b7e4b0cdc661e71c69198476ad51f09c5cfa1163496dda52808a084295cbcf079487c2d7db3f91a1200db0dd2461e0f562e1b67f312278c18a0c8173b82685270adf313fad3ad2b12e6cc445e02565d15051084678eb7e65de235c7b67a7ec54efe9224a84531717bb5681ac302dd170502ef54a9846419bc4baf96840de08a1c1b06b110e6732", 0xb7}, {&(0x7f00000011c0)="5a2b26f8b4c2f13061c4c0a262ccf3f9404ed509189426dd28d8912c974443e1f15db22aba65975674d5e5fc1154e392c971518c41a6af182794ab6b23d7c70f5032651cd8b2fa2a6fe4f1b22c071bf295ea61309d76521fbe922b98da38d2f2eaea93218f1fc7b8b583ef0b7c3688f73dbbf9595427bdd0cf2a79c9617a62cfcc25d542445e5b90792e114272e15762ab19290a5b4491b8f3a3e662c5c2cf29bf4efe21ae648548e97faa2d01f56a7b3672d4ec6bd2c8270b0a8d9235c3cfe151b6c5e55db5", 0xc6}], 0x5, &(0x7f0000001340)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1b}}}}, @ip_retopts={{0x28, 0x0, 0x7, {[@cipso={0x86, 0x18, 0x2, [{0x7, 0x7, "b4a3246a85"}, {0x7, 0xb, "dd017d20fb6f53361b"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x98, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x43, 0x0, 0x8, [0x6, 0x8000]}, @rr={0x7, 0x13, 0x34, [@multicast2, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @empty]}, @rr={0x7, 0x13, 0x3d, [@multicast1, @loopback, @empty, @private=0xa010101]}, @timestamp={0x44, 0x2c, 0xa6, 0x0, 0x1, [0x1ff, 0x4, 0xa80, 0x4d0, 0x80000000, 0x7, 0x703, 0x81, 0xffff, 0x6]}, @noop, @timestamp={0x44, 0x18, 0xb0, 0x0, 0x0, [0xcec9, 0x6, 0x40, 0xc, 0x3]}, @timestamp_prespec={0x44, 0xc, 0xfe, 0x3, 0x2, [{@broadcast, 0x2}]}, @generic={0x86, 0x2}]}}}], 0xf8}}], 0x3, 0x20004090) 577.927979ms ago: executing program 0 (id=878): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'veth1_to_bridge\x00', 0x0}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_SIOCSIFADDR(r3, 0x8916, &(0x7f0000000100)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x0, r2}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f0000000600)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x140, 0x140, 0x6, [@union={0x8, 0x8, 0x0, 0x5, 0x0, 0x3, [{0x8, 0x1, 0x5}, {0xf, 0x2, 0xcf}, {0xd, 0x4, 0x4}, {0x0, 0x3, 0x9fa4}, {0xb, 0x2, 0x2}, {0xf, 0x5, 0x6}, {0xe, 0x0, 0x8}, {0x2, 0x1, 0x5}]}, @enum64={0xe, 0x1, 0x0, 0x13, 0x1, 0x7, [{0x5, 0x0, 0x2f83}]}, @enum={0x5, 0x4, 0x0, 0x6, 0x4, [{0x8, 0x6}, {0x10, 0x9}, {0xe, 0x527}, {0x2, 0x4}]}, @restrict={0x7, 0x0, 0x0, 0xb, 0x5}, @restrict={0xd, 0x0, 0x0, 0xb, 0x5}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x3, 0x8}}, @ptr={0x3, 0x0, 0x0, 0x2, 0x1}, @ptr={0x6, 0x0, 0x0, 0x2, 0x3}, @const={0xa, 0x0, 0x0, 0xa, 0x5}, @enum64={0xb, 0x4, 0x0, 0x13, 0x0, 0x2, [{0x8, 0x6}, {0x1, 0xffffff90, 0x401}, {0x5, 0x8, 0x8}, {0x10, 0xefa, 0x9664}]}]}, {0x0, [0x61, 0x0, 0x61, 0x30]}}, &(0x7f0000000800)=""/119, 0x15e, 0x77, 0x0, 0x7, 0x10000, @value}, 0x28) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a00)={0x6, 0x11, &(0x7f00000004c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x8}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@initr0={0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x10}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000300)='GPL\x00', 0xcb, 0x41, &(0x7f0000000580)=""/65, 0x41100, 0x40, '\x00', r2, 0x25, r4, 0x8, &(0x7f0000000780)={0x2, 0x3}, 0x8, 0x10, &(0x7f00000008c0)={0x1, 0x1, 0xc, 0x6}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000980)=[r5, 0xffffffffffffffff, 0x1], &(0x7f00000009c0)=[{0x2, 0x80000001, 0x5, 0x2}, {0x3, 0x3, 0x9, 0x3}, {0x1, 0x1, 0xe, 0x6}], 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r0, 0x0, 0x3}, 0x18) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@updsa={0x104, 0x1a, 0x1, 0x0, 0x0, {{@in=@multicast2, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {@in6=@local, 0x1, 0x2b}, @in=@multicast1, {}, {}, {}, 0x0, 0x0, 0xa}, [@coaddr={0x14}]}, 0x104}}, 0x0) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r7, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, 0x0}}], 0x1, 0x2c000011) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="3c00f8ff10000100295a74000000000000000000", @ANYRES32=0x0, @ANYBLOB="0c71040000000000140003006e657464657673696d300000000000000800168004000180"], 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x50) syz_emit_ethernet(0x84, &(0x7f0000000040)={@multicast, @random="28feee412b8f", @val={@void}, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "ddff00", 0x4a, 0x2f, 0x0, @private2, @local, {[], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x88a8, 0x0, 0x0, [0x7ff, 0x1]}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0x6]}}}}}}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="90000000", @ANYRES16=r9, @ANYBLOB="01002cbd7000fadbdf254400000008000300", @ANYRES32=r10, @ANYBLOB="0a001800030303030303000068005a8064000380140005"], 0x90}, 0x1, 0x0, 0x0, 0x4000001}, 0x4000) r12 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'xfrm0\x00', 0x0}) r14 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r14, &(0x7f0000000100)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000400)=@getae={0xac, 0x1f, 0x4, 0x70bd26, 0x25dfdbfd, {{@in=@rand_addr=0x64010102, 0x4d3, 0xa, 0xff}, @in6=@mcast2, 0x3, 0x3504}, [@coaddr={0x14, 0xe, @in=@multicast2}, @user_kmaddress={0x2c, 0x13, {@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@broadcast, 0x0, 0x2}}, @user_kmaddress={0x2c, 0x13, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0x0, 0x2}}]}, 0xac}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000) ioctl$EXT4_IOC_MIGRATE(r7, 0x6609) sendto$packet(r12, &(0x7f0000000180)="10031412e4ff020002004788aa96a13bb100001100007fca1a00", 0x1000a, 0x0, &(0x7f0000000140)={0x11, 0x0, r13}, 0x14) 564.918715ms ago: executing program 2 (id=879): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000240), 0x10) sendmsg$can_bcm(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=ANY=[@ANYBLOB="050000000300"/16, @ANYRES64=r0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x2710, @ANYBLOB="0000000003"], 0x38}, 0x300}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001700)=ANY=[@ANYBLOB="1800000024000103000000000000000001008c000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000240)=""/86, 0x56}, {&(0x7f0000002740)=""/4097, 0x1001}, {&(0x7f0000000380)=""/182, 0xb6}, {&(0x7f0000000440)=""/242, 0xf2}], 0x4}, 0x9}, {{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0}, 0x10001}, {{&(0x7f0000000d40)=@nfc_llcp, 0x80, 0x0}, 0x80}], 0x4, 0x10160, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newtaction={0x68, 0x30, 0x1, 0x0, 0x0, {}, [{0x54, 0x1, [@m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000000203030001"], 0x14}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c0000004d962e0a00d2c2ee3daac0210bfe88081000030400000000fedbdf2500007400", @ANYRES32=0x0, @ANYBLOB="00080000075005001c0012800b00010062726964676500000c0002800500190002000000"], 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="0300000004000000040000000a00000200000000", @ANYRES32, @ANYBLOB="0200"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02000000030000000500"/28], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x4, 0x5, 0x4000000, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) pselect6(0x40, &(0x7f0000000100)={0x9, 0x47f, 0x7, 0x7, 0x9, 0x10001, 0x1, 0xf8}, 0x0, 0x0, &(0x7f0000000200), 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000b00)=ANY=[@ANYBLOB="9feb01001800000000000000180000001800000005000000000000000100000400000000010000000400000003180000002e5f2e"], 0x0, 0x35, 0x0, 0x0, 0x3, 0x0, @void, @value}, 0x28) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000700)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000006c0), &(0x7f00000003c0)='%pK \x00'}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r4, 0x58, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=@newnexthop={0x28, 0x68, 0x1, 0x3, 0x80000000, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x6}]}, @NHA_RES_GROUP={0x4}]}, 0x28}}, 0x40000) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000009440)={0x0, 0x0, &(0x7f0000009400)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01886bfb010000000000000000020000000900010073797a300000000014000000020a0102000000000000000000000000240000000c0a010200000000000000000289560000000900010073797a30a8b5b49d8cdc2b8a140000001100010000000000000000"], 0x80}}, 0x0) r8 = accept(r0, &(0x7f0000000800)=@nfc, &(0x7f0000000300)=0x80) ioctl$sock_inet6_SIOCSIFDSTADDR(r8, 0x8918, &(0x7f0000000740)={@private1, 0x4b, r5}) sendmsg$nl_route(r6, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000180)={&(0x7f0000000b40)=ANY=[@ANYBLOB="34007e0070000000348ae60c6bb35d8989a48852ad0226bd7000fedbdf2507000000", @ANYRES32=r5, @ANYBLOB="100001800c00048008000100030000000c0001800500030003000000"], 0x34}, 0x1, 0x0, 0x0, 0x20000014}, 0x800) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_MSFILTER(r9, 0x0, 0x30, &(0x7f0000000880)=ANY=[@ANYBLOB="020000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000002000000000000000000000ff03000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000300000002000000640101020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000107464edd274cf1ed4acda000000000000000000740000000000000000000000000002000000ac141400000000000000000000000000000000000000000000004a4f000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000c55bd6d2f0c7a5aecf1500"/544], 0x210) setsockopt$inet_group_source_req(r9, 0x0, 0x2c, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) 352.373976ms ago: executing program 0 (id=880): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000004640)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="05000000000000000000440000e207000300", @ANYRES32=r2, @ANYBLOB="0c00238006000100b2000000"], 0x28}}, 0x40840) 295.362515ms ago: executing program 2 (id=881): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x13, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x10, 0x4, &(0x7f0000001300)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x47}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x91) 202.283836ms ago: executing program 0 (id=882): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="850000000800000076000000000001003d0000000000000095000000000000000000a58fc9093e220f8900f3c474313bd69170d74a50a7eaa3da9dbfc07698cc25105bd66a97a236bc41073b6ecef48f25609e4a2ac44b7eb68c77a63aa393ad73bc897e0049e4b4fe"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8e, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r1, @ANYBLOB="0800a0009e09000008009f000400000008002600800900000800a1000519"], 0x3c}}, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r3, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r3, 0x6, 0xd, &(0x7f0000000140)='illinois\x00', 0x9) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000000200)={0x0, @in={{0x2, 0x4e23, @rand_addr=0x64010101}}, 0x101, 0x3ff, 0x81, 0x1, 0x64, 0x7, 0x5}, &(0x7f0000000040)=0x9c) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f00000002c0)={r4, 0xc3dc, 0x75, "53ae59bf013fe4673980768f4aa4606e9f137b51b85faf872433dcf63463130c976a2b79898ee7eafd853e0b50558f512a3d64b95fa1589bdf0446ec726449d4cf1d1a3e4c6721afe59336575b5a4af82bbdc7258e4f374c1c90528189de5dc5bd2f3922564fc66d332bff6a503382d66c0a032051"}, 0x7d) recvfrom$inet(r3, 0x0, 0x0, 0x2, 0x0, 0x0) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) r5 = socket(0x1d, 0x2, 0x6) ppoll(&(0x7f00000004c0)=[{r5, 0x1}], 0x1, &(0x7f0000000540), 0x0, 0x0) setsockopt$MRT_PIM(r5, 0x0, 0xcf, &(0x7f0000000100), 0x4) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) (async) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, 0x0, 0x0, 0x24004001, 0x0, 0x0) (async) sendto$inet(r3, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0x0) recvfrom$inet(r3, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 122.397762ms ago: executing program 2 (id=883): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f0000000200)="18", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x1c) shutdown(r0, 0x1) setsockopt(r0, 0x400084, 0x7f, &(0x7f00000001c0)="020000000980ffff", 0x8) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x12, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="550a00000000000061191c00000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0xb, 0xd}, {0x0, 0x2}, {0x8, 0xfff1}}}, 0x24}}, 0x40004) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={0x1, 0xffffffffffffffff}, 0x4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuset.memory_pressure_enabled\x00', 0x275a, 0x0) ioctl$FS_IOC_RESVSP(r9, 0x40305839, &(0x7f0000000000)={0x5c, 0x1, 0x0, 0x0, 0x0, 0xf0}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000100)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000080), &(0x7f00000000c0)=r1}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r11}, &(0x7f00000004c0), &(0x7f0000000840)}, 0x20) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000003c0), 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={r1, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0], 0x0, 0x62, &(0x7f0000000500)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000540), &(0x7f0000000580), 0x8, 0xd6, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000740)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x13, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x1}, [@call={0x85, 0x0, 0x0, 0x4c}, @alu={0x7, 0x1, 0xa, 0x5, 0x1, 0x50, 0x1}, @alu={0x4, 0x0, 0x0, 0x7, 0x3, 0xfffffffffffffffc, 0x1}, @map_fd={0x18, 0x0, 0x1, 0x0, r8}, @tail_call={{0x18, 0x2, 0x1, 0x0, r9}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r10}}, @map_fd={0x18, 0x7, 0x1, 0x0, r11}]}, &(0x7f0000000140)='syzkaller\x00', 0x4, 0x30, &(0x7f0000000180)=""/48, 0x41100, 0x16, '\x00', 0x0, @fallback=0x33, r12, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r13, r1, 0x4, &(0x7f0000000780)=[r14], &(0x7f00000007c0)=[{0x3, 0x5, 0x3, 0xc}, {0x4, 0x3, 0xc, 0xa}, {0x4, 0x3, 0x2, 0x8}, {0x0, 0x1, 0x8, 0x9}], 0x10, 0x9, @void, @value}, 0x94) 66.541008ms ago: executing program 0 (id=884): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, &(0x7f0000000700)={'bond0\x00'}) (async, rerun: 32) ioctl$sock_SIOCDELDLCI(r0, 0x8981, &(0x7f00000001c0)={'geneve1\x00', 0xf}) (async, rerun: 32) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40482, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) (async) r5 = socket(0x18, 0x0, 0x0) r6 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) getsockopt$llc_int(r6, 0x10c, 0x3, 0x0, &(0x7f0000000080)=0x4) (async) setsockopt$inet6_tcp_TLS_TX(r5, 0x6, 0x1, &(0x7f0000000200)=@gcm_128={{}, "b45a958fa4ab8b43", "174cf810affac8029611bcaf79272ad2", "6d1f00", "ccb4e5702746dd00"}, 0x28) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000711217000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) close(r5) socket$can_j1939(0x1d, 0x2, 0x7) getsockname$packet(r5, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000002c0)=@newqdisc={0x118, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0xf3, 0x2, {{}, [@TCA_NETEM_RATE64={0xc}, @TCA_NETEM_DELAY_DIST={0xa, 0x2, "58d5c080bbdd"}, @TCA_NETEM_LOSS={0x48, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x8}, @NETEM_LOSS_GE={0x14, 0x2, {0x0, 0x0, 0xe}}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_LOSS={0x60, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18}, @NETEM_LOSS_GE={0x14}, @NETEM_LOSS_GI={0x4}, @NETEM_LOSS_GI={0x18}]}, @TCA_NETEM_REORDER={0xc}]}}}]}, 0x118}}, 0x0) (async, rerun: 64) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async, rerun: 64) close(0x3) (async) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000140)) (async) pwritev(r1, &(0x7f0000000040)=[{&(0x7f0000000180)="80fd06000040", 0x27}], 0x2, 0x0, 0x4) (async, rerun: 64) r8 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)={0x30, 0x3e, 0x9, 0x0, 0x800, {0x3}, [@typed={0x4, 0x4}, @nested={0x18, 0x1, 0x0, 0x1, [@typed={0x14, 0x1a, 0x0, 0x0, @ipv6=@private2={0xfc, 0x2, '\x00', 0x1}}]}]}, 0x30}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x2, 0x3, 0x1, 0x0, 0x31}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 0s ago: executing program 3 (id=885): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018114668", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000ae0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xc}, &(0x7f00000000c0)=0x8) syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c202000090dd687fefc0000c1101fc020000000000000000000000000000fe800000000000000000000000002ef64e234e21000c9078a1080001f0130c7efa5ea59d5c7de9abb8c8d70a07103635ffafa96ed4e3bed36dd01aa1c4cb77900c3faff2890f5e76"], 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1f, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1d, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018114668", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000200000085000000ae0000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0x4, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0xc}, &(0x7f00000000c0)=0x8) (async) syz_emit_ethernet(0x42, &(0x7f0000000240)=ANY=[@ANYBLOB="aaaaaaaaaaaa0180c202000090dd687fefc0000c1101fc020000000000000000000000000000fe800000000000000000000000002ef64e234e21000c9078a1080001f0130c7efa5ea59d5c7de9abb8c8d70a07103635ffafa96ed4e3bed36dd01aa1c4cb77900c3faff2890f5e76"], 0x0) (async) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.68' (ED25519) to the list of known hosts. [ 80.683319][ T5817] cgroup: Unknown subsys name 'net' [ 80.819801][ T5817] cgroup: Unknown subsys name 'cpuset' [ 80.828942][ T5817] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 82.440531][ T5817] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 84.997950][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.014597][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 85.022039][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.034415][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 85.042298][ T5846] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.065900][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 85.077459][ T5843] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 85.085836][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 85.085945][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 85.096022][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.101307][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 85.116613][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 85.123772][ T5849] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 85.124215][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 85.130984][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 85.140102][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 85.147101][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 85.153603][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 85.160625][ T5850] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.166654][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 85.175524][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 85.204470][ T5140] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 85.212254][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 85.223608][ T5140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 85.231011][ T5832] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 85.836921][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 85.890050][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 86.045082][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 86.094329][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 86.218821][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 86.281931][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.289655][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.297867][ T5835] bridge_slave_0: entered allmulticast mode [ 86.305149][ T5835] bridge_slave_0: entered promiscuous mode [ 86.346207][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.353427][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.361042][ T5829] bridge_slave_0: entered allmulticast mode [ 86.368713][ T5829] bridge_slave_0: entered promiscuous mode [ 86.376871][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.384052][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.391587][ T5829] bridge_slave_1: entered allmulticast mode [ 86.399698][ T5829] bridge_slave_1: entered promiscuous mode [ 86.407039][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.414162][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.421944][ T5835] bridge_slave_1: entered allmulticast mode [ 86.429859][ T5835] bridge_slave_1: entered promiscuous mode [ 86.521301][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.531930][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.539629][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.547609][ T5839] bridge_slave_0: entered allmulticast mode [ 86.555642][ T5839] bridge_slave_0: entered promiscuous mode [ 86.562874][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.571073][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.578463][ T5834] bridge_slave_0: entered allmulticast mode [ 86.586035][ T5834] bridge_slave_0: entered promiscuous mode [ 86.628823][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.651517][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.659157][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.666684][ T5839] bridge_slave_1: entered allmulticast mode [ 86.673972][ T5839] bridge_slave_1: entered promiscuous mode [ 86.684007][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.691569][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.700181][ T5834] bridge_slave_1: entered allmulticast mode [ 86.708092][ T5834] bridge_slave_1: entered promiscuous mode [ 86.740235][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.764365][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 86.893202][ T5835] team0: Port device team_slave_0 added [ 86.903469][ T5835] team0: Port device team_slave_1 added [ 86.932924][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.946479][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 86.979953][ T5829] team0: Port device team_slave_0 added [ 86.994945][ T5829] team0: Port device team_slave_1 added [ 87.024321][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.036631][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.125437][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.132689][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.140024][ T5840] bridge_slave_0: entered allmulticast mode [ 87.147500][ T5840] bridge_slave_0: entered promiscuous mode [ 87.169284][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.176455][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.202538][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.242407][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.249806][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.256547][ T5842] Bluetooth: hci4: command tx timeout [ 87.261808][ T5840] bridge_slave_1: entered allmulticast mode [ 87.262486][ T5841] Bluetooth: hci1: command tx timeout [ 87.268202][ T5140] Bluetooth: hci2: command tx timeout [ 87.273901][ T5842] Bluetooth: hci0: command tx timeout [ 87.285928][ T5840] bridge_slave_1: entered promiscuous mode [ 87.292963][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.300438][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.326391][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.337163][ T5842] Bluetooth: hci3: command tx timeout [ 87.341244][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.350002][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.375988][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.398216][ T5834] team0: Port device team_slave_0 added [ 87.407518][ T5839] team0: Port device team_slave_0 added [ 87.426016][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.432982][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.459048][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.480374][ T5834] team0: Port device team_slave_1 added [ 87.503466][ T5839] team0: Port device team_slave_1 added [ 87.524829][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 87.601477][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 87.638662][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.645826][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.672630][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.684689][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 87.691892][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.718361][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 87.735205][ T5829] hsr_slave_0: entered promiscuous mode [ 87.741903][ T5829] hsr_slave_1: entered promiscuous mode [ 87.777319][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.784406][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.810410][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.822559][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 87.829589][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 87.855550][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 87.891514][ T5840] team0: Port device team_slave_0 added [ 87.901324][ T5840] team0: Port device team_slave_1 added [ 87.912487][ T5835] hsr_slave_0: entered promiscuous mode [ 87.919245][ T5835] hsr_slave_1: entered promiscuous mode [ 87.926176][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 87.933978][ T5835] Cannot create hsr debugfs directory [ 88.006157][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 88.013167][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.039417][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 88.099329][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 88.106835][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 88.132885][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 88.202880][ T5839] hsr_slave_0: entered promiscuous mode [ 88.209930][ T5839] hsr_slave_1: entered promiscuous mode [ 88.216511][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.224080][ T5839] Cannot create hsr debugfs directory [ 88.252886][ T5834] hsr_slave_0: entered promiscuous mode [ 88.259578][ T5834] hsr_slave_1: entered promiscuous mode [ 88.265974][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.273543][ T5834] Cannot create hsr debugfs directory [ 88.348904][ T5840] hsr_slave_0: entered promiscuous mode [ 88.356725][ T5840] hsr_slave_1: entered promiscuous mode [ 88.363079][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 88.375549][ T5840] Cannot create hsr debugfs directory [ 88.805846][ T5829] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 88.836588][ T5829] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 88.849377][ T5829] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 88.888670][ T5829] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 88.933444][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 88.958339][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 88.970718][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 88.983759][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 89.051560][ T5839] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 89.079209][ T5839] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 89.091366][ T5839] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 89.103490][ T5839] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 89.226009][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 89.238471][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 89.252233][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 89.263056][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 89.298691][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.343233][ T5842] Bluetooth: hci0: command tx timeout [ 89.349960][ T5841] Bluetooth: hci2: command tx timeout [ 89.350014][ T5832] Bluetooth: hci4: command tx timeout [ 89.361052][ T5140] Bluetooth: hci1: command tx timeout [ 89.374541][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.419171][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.425370][ T5140] Bluetooth: hci3: command tx timeout [ 89.465728][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 89.476851][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 89.488805][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 89.500548][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 89.513726][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.520974][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.555334][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.562471][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.579765][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.620321][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.627498][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.702532][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.709695][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.724360][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.813313][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 89.851724][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.859023][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 89.886447][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 89.909577][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.916821][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 89.994488][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.038267][ T1094] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.045463][ T1094] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.084945][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 90.102246][ T1094] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.109439][ T1094] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.159735][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 90.193988][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.201190][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 90.243575][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.250777][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 90.281043][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.460738][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 90.527731][ T5835] veth0_vlan: entered promiscuous mode [ 90.564754][ T5835] veth1_vlan: entered promiscuous mode [ 90.680042][ T5835] veth0_macvtap: entered promiscuous mode [ 90.709651][ T5835] veth1_macvtap: entered promiscuous mode [ 90.789143][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.846710][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.881491][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.913937][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.934207][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.948091][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.985065][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.089059][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.134887][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 91.182742][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.198129][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.237158][ T5839] veth0_vlan: entered promiscuous mode [ 91.267760][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.276105][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.290274][ T5839] veth1_vlan: entered promiscuous mode [ 91.362305][ T5829] veth0_vlan: entered promiscuous mode [ 91.374553][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 91.416156][ T5140] Bluetooth: hci2: command tx timeout [ 91.420511][ T5832] Bluetooth: hci0: command tx timeout [ 91.421586][ T5841] Bluetooth: hci1: command tx timeout [ 91.429424][ T5832] Bluetooth: hci4: command tx timeout [ 91.440313][ T5829] veth1_vlan: entered promiscuous mode [ 91.451380][ T5840] veth0_vlan: entered promiscuous mode [ 91.476573][ T5834] veth0_vlan: entered promiscuous mode [ 91.493622][ T5839] veth0_macvtap: entered promiscuous mode [ 91.508124][ T5832] Bluetooth: hci3: command tx timeout [ 91.511327][ T5840] veth1_vlan: entered promiscuous mode [ 91.543697][ T5839] veth1_macvtap: entered promiscuous mode [ 91.554683][ T5834] veth1_vlan: entered promiscuous mode [ 91.618533][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.662501][ T5840] veth0_macvtap: entered promiscuous mode [ 91.674854][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.711943][ T5840] veth1_macvtap: entered promiscuous mode [ 91.723955][ T5829] veth0_macvtap: entered promiscuous mode [ 91.732270][ T5839] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.742032][ T5839] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.764946][ T5839] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.782180][ T5839] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.799820][ T5834] veth0_macvtap: entered promiscuous mode [ 91.823513][ T974] cfg80211: failed to load regulatory.db [ 91.832340][ T5829] veth1_macvtap: entered promiscuous mode [ 91.839677][ T5834] veth1_macvtap: entered promiscuous mode [ 91.878285][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.890035][ T5928] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 91.934166][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.946764][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 91.956516][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 91.986426][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.005188][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 92.017094][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.026526][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.035215][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.044434][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.081197][ T5829] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.090146][ T5829] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.100796][ T5829] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.113120][ T5829] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.169197][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.184106][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.194443][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.203279][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 92.215193][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.239002][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.308297][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.318853][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.441804][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.476278][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.570035][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.591436][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.669082][ T1094] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.696401][ T1094] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.763783][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.780656][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.901962][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.923194][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 92.931428][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.947767][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.974455][ T5945] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.11'. [ 92.975770][ T5948] netlink: 'syz.4.5': attribute type 29 has an invalid length. [ 93.007597][ T5949] netlink: 'syz.4.5': attribute type 29 has an invalid length. [ 93.041293][ T5948] netlink: 492 bytes leftover after parsing attributes in process `syz.4.5'. [ 93.499769][ T5841] Bluetooth: hci2: command tx timeout [ 93.505633][ T5842] Bluetooth: hci0: command tx timeout [ 93.511295][ T5140] Bluetooth: hci4: command tx timeout [ 93.516966][ T5832] Bluetooth: hci1: command tx timeout [ 93.575853][ T5832] Bluetooth: hci3: command tx timeout [ 93.768606][ T5980] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 93.775264][ T5980] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 93.814252][ T5981] syz.3.19 uses obsolete (PF_INET,SOCK_PACKET) [ 93.824451][ T5986] netlink: 'syz.1.20': attribute type 21 has an invalid length. [ 93.844373][ T5986] netlink: 'syz.1.20': attribute type 11 has an invalid length. [ 94.113143][ T6001] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 94.198968][ T6004] netlink: 36 bytes leftover after parsing attributes in process `syz.4.23'. [ 94.393138][ T6010] netlink: 8 bytes leftover after parsing attributes in process `syz.3.26'. [ 94.506935][ T6018] gtp0: entered promiscuous mode [ 94.512083][ T6018] gtp0: entered allmulticast mode [ 94.531349][ T6019] netlink: 20 bytes leftover after parsing attributes in process `syz.1.30'. [ 94.629960][ T6014] tipc: Started in network mode [ 94.639363][ T6014] tipc: Node identity e6584a15f228, cluster identity 4711 [ 94.654134][ T6014] tipc: Enabled bearer , priority 0 [ 94.669088][ T6014] veth0_macvtap: entered allmulticast mode [ 94.832882][ T6032] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 94.978604][ T6012] tipc: Disabling bearer [ 95.013424][ T6041] warning: `syz.0.36' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.047013][ T6042] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.35'. [ 95.167949][ T6045] netlink: 'syz.2.37': attribute type 2 has an invalid length. [ 95.222591][ T6046] netlink: 52 bytes leftover after parsing attributes in process `syz.3.38'. [ 95.327064][ T6046] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 95.366061][ T6046] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 95.741963][ T6069] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 95.865030][ T6078] netlink: 'syz.4.50': attribute type 1 has an invalid length. [ 95.969092][ T6085] netlink: 48 bytes leftover after parsing attributes in process `syz.4.50'. [ 96.110491][ T6089] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 96.161828][ T6091] netlink: 'syz.4.53': attribute type 1 has an invalid length. [ 96.195131][ T6089] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 96.303531][ T6091] wg2: entered allmulticast mode [ 96.941595][ T6121] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.209011][ T6137] veth0: entered promiscuous mode [ 97.372355][ T6133] "syz.0.64" (6133) uses obsolete ecb(arc4) skcipher [ 97.396872][ T6131] veth0: left promiscuous mode [ 97.507646][ T6149] netlink: 'syz.4.68': attribute type 8 has an invalid length. [ 97.968094][ T6181] netlink: 'syz.2.77': attribute type 4 has an invalid length. [ 98.003632][ T6184] Zero length message leads to an empty skb [ 98.202024][ T6191] netlink: 8 bytes leftover after parsing attributes in process `syz.0.80'. [ 98.263907][ T6193] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 98.301192][ T6196] netlink: 28 bytes leftover after parsing attributes in process `syz.1.82'. [ 98.334859][ T6196] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 98.659653][ T6210] netlink: 28 bytes leftover after parsing attributes in process `syz.0.84'. [ 98.694329][ T6209] tipc: Started in network mode [ 98.711536][ T6209] tipc: Node identity 9e168efb0fc2, cluster identity 4711 [ 98.740344][ T6209] tipc: Enabled bearer , priority 0 [ 98.778655][ T6213] syzkaller0: entered promiscuous mode [ 98.793749][ T6213] syzkaller0: entered allmulticast mode [ 98.846186][ T6209] tipc: Resetting bearer [ 98.932165][ T6208] tipc: Resetting bearer [ 98.987516][ T6208] tipc: Disabling bearer [ 99.262739][ T6234] tipc: Enabling of bearer rejected, failed to enable media [ 99.467872][ T6244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.97'. [ 99.954722][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 99.969664][ T6256] netlink: 12 bytes leftover after parsing attributes in process `syz.0.100'. [ 101.363684][ T6281] sctp: [Deprecated]: syz.1.108 (pid 6281) Use of int in maxseg socket option. [ 101.363684][ T6281] Use struct sctp_assoc_value instead [ 102.031642][ T6296] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 102.077265][ T6297] netlink: 60 bytes leftover after parsing attributes in process `syz.2.111'. [ 102.099801][ T6297] netlink: 60 bytes leftover after parsing attributes in process `syz.2.111'. [ 102.389808][ T6319] netlink: 'syz.1.119': attribute type 3 has an invalid length. [ 102.496791][ T6321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.120'. [ 102.526251][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881423a2c00: rx timeout, send abort [ 102.535710][ C0] vcan0: j1939_tp_rxtimer: 0xffff8881423a3000: rx timeout, send abort [ 102.544274][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881423a2c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 102.559380][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8881423a3000: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 103.295189][ T6359] netlink: zone id is out of range [ 103.318493][ T6359] netlink: del zone limit has 4 unknown bytes [ 103.410068][ T6366] netlink: 4 bytes leftover after parsing attributes in process `syz.0.134'. [ 103.691514][ T6371] netlink: 9 bytes leftover after parsing attributes in process `syz.2.137'. [ 103.717511][ T6371] gretap0: entered promiscuous mode [ 103.884700][ T6371] netlink: 5 bytes leftover after parsing attributes in process `syz.2.137'. [ 103.914083][ T6371] 0{X功: renamed from gretap0 [ 103.940934][ T6371] 0{X功: left promiscuous mode [ 103.993426][ T6371] 0{X功: entered allmulticast mode [ 104.021653][ T6371] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 104.094666][ T6384] netlink: 24 bytes leftover after parsing attributes in process `syz.4.139'. [ 104.332244][ T6391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.142'. [ 104.729784][ T6403] trusted_key: syz.4.147 sent an empty control message without MSG_MORE. [ 105.154410][ T6421] sctp: [Deprecated]: syz.1.148 (pid 6421) Use of struct sctp_assoc_value in delayed_ack socket option. [ 105.154410][ T6421] Use struct sctp_sack_info instead [ 105.521910][ T6430] team_slave_0: entered promiscuous mode [ 105.527920][ T6430] team_slave_1: entered promiscuous mode [ 105.565942][ T6430] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 105.595078][ T6430] team0: Device macvtap1 is already an upper device of the team interface [ 105.654217][ T6430] team_slave_0: left promiscuous mode [ 105.659794][ T6430] team_slave_1: left promiscuous mode [ 105.695589][ T6436] xt_addrtype: ipv6 does not support BROADCAST matching [ 105.775029][ T6434] batadv0: mtu less than device minimum [ 106.091488][ T6452] openvswitch: netlink: Missing valid actions attribute. [ 106.125634][ T6452] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 106.303419][ T6458] sit0: entered allmulticast mode [ 106.422578][ T6467] netlink: 'syz.4.169': attribute type 1 has an invalid length. [ 106.445321][ T6467] netlink: 'syz.4.169': attribute type 10 has an invalid length. [ 106.471053][ T6467] netlink: 236 bytes leftover after parsing attributes in process `syz.4.169'. [ 107.079406][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.0.177'. [ 107.120070][ T6500] netlink: 'syz.0.177': attribute type 30 has an invalid length. [ 107.214154][ T6503] bridge0: port 2(bridge_slave_1) entered disabled state [ 107.222448][ T6503] bridge0: port 1(bridge_slave_0) entered disabled state [ 107.299265][ T6509] netlink: 5 bytes leftover after parsing attributes in process `syz.3.180'. [ 107.358233][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.384233][ T6503] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.478467][ T6503] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.488088][ T6503] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.497978][ T6503] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.507178][ T6503] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.559718][ T6500] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.569028][ T6500] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.577875][ T6500] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.586657][ T6500] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 107.604476][ T6515] netlink: 'syz.2.181': attribute type 29 has an invalid length. [ 107.612808][ T6516] netlink: 'syz.2.181': attribute type 29 has an invalid length. [ 107.740977][ T6523] sit0: entered promiscuous mode [ 107.780330][ T6520] netlink: 12 bytes leftover after parsing attributes in process `syz.4.182'. [ 107.793981][ T6523] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 107.814221][ T6519] netlink: 12 bytes leftover after parsing attributes in process `syz.4.182'. [ 107.824625][ T6523] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 107.849428][ T6523] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 107.857581][ T6523] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 107.866494][ T6523] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 107.874566][ T6523] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 107.893786][ T6523] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 107.933139][ T6523] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 108.203059][ T6541] ieee802154 phy0 wpan0: encryption failed: -22 [ 108.344164][ T6548] Bluetooth: MGMT ver 1.23 [ 108.744712][ T6566] (unnamed net_device) (uninitialized): up delay (5) is not a multiple of miimon (4), value rounded to 4 ms [ 109.342766][ T10] IPVS: starting estimator thread 0... [ 109.445517][ T6598] IPVS: using max 27 ests per chain, 64800 per kthread [ 109.544007][ T6610] __nla_validate_parse: 38 callbacks suppressed [ 109.544026][ T6610] netlink: 4 bytes leftover after parsing attributes in process `syz.4.219'. [ 109.625839][ T6614] netlink: 32 bytes leftover after parsing attributes in process `syz.4.219'. [ 109.663285][ T6619] netlink: 8 bytes leftover after parsing attributes in process `syz.2.222'. [ 109.707792][ T6619] netlink: 32 bytes leftover after parsing attributes in process `syz.2.222'. [ 109.717772][ T6619] netlink: 32 bytes leftover after parsing attributes in process `syz.2.222'. [ 109.884791][ T6625] batman_adv: batadv0: Adding interface: dummy0 [ 109.914608][ T6625] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 109.941727][ T6625] batman_adv: batadv0: Interface activated: dummy0 [ 109.950865][ T6631] veth1_macvtap: left promiscuous mode [ 109.960535][ T6631] macsec0: entered promiscuous mode [ 109.998386][ T6632] batadv0: mtu less than device minimum [ 110.010744][ T6632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.022913][ T6632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.034666][ T6632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.046553][ T6632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.058341][ T6632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.069957][ T6632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.081925][ T6632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.083820][ T6638] netlink: 12 bytes leftover after parsing attributes in process `syz.4.227'. [ 110.093938][ T6632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.113313][ T6632] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 110.126148][ T6625] netlink: 40 bytes leftover after parsing attributes in process `syz.0.225'. [ 110.195745][ T6625] net veth1_virt_wifi virt_wifi0: refused to change device tx_queue_len [ 110.268925][ T6641] dvmrp0: entered allmulticast mode [ 110.312742][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz.1.228'. [ 110.324529][ T6632] netlink: 24 bytes leftover after parsing attributes in process `syz.0.225'. [ 110.377188][ T5832] Bluetooth: hci0: command tx timeout [ 110.422020][ T6652] netlink: 40 bytes leftover after parsing attributes in process `syz.0.232'. [ 110.972449][ T30] audit: type=1800 audit(1746932381.624:2): pid=6688 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.242" name="memory.events" dev="tmpfs" ino=263 res=0 errno=0 [ 111.509745][ T6714] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 111.532238][ T6714] infiniband srz1: RDMA CMA: cma_listen_on_dev, error -98 [ 112.695224][ T6776] team_slave_0: entered promiscuous mode [ 112.701073][ T6776] team_slave_1: entered promiscuous mode [ 112.710044][ T6776] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 113.278702][ T6801] syzkaller1: entered promiscuous mode [ 113.284460][ T6801] syzkaller1: entered allmulticast mode [ 113.339972][ T6798] sctp: [Deprecated]: syz.1.275 (pid 6798) Use of struct sctp_assoc_value in delayed_ack socket option. [ 113.339972][ T6798] Use struct sctp_sack_info instead [ 113.558341][ T6807] tap0: tun_chr_ioctl cmd 1074025676 [ 113.564174][ T6807] tap0: owner set to 0 [ 113.701508][ T6807] team0 (unregistering): Port device team_slave_0 removed [ 113.713197][ T6807] team0 (unregistering): Port device team_slave_1 removed [ 113.754746][ T6809] pim6reg1: entered promiscuous mode [ 113.765341][ T6809] pim6reg1: entered allmulticast mode [ 114.383692][ T6835] validate_nla: 27 callbacks suppressed [ 114.383711][ T6835] netlink: 'syz.0.285': attribute type 3 has an invalid length. [ 114.590078][ T6850] __nla_validate_parse: 7 callbacks suppressed [ 114.590097][ T6850] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 114.714981][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.4.290'. [ 115.979161][ T6901] No such timeout policy "syz1" [ 115.992680][ T6899] netlink: 28 bytes leftover after parsing attributes in process `syz.2.306'. [ 116.080437][ T6910] netlink: 16 bytes leftover after parsing attributes in process `syz.4.307'. [ 116.254756][ T6918] netlink: 16 bytes leftover after parsing attributes in process `syz.2.313'. [ 116.279566][ T6918] netlink: 20 bytes leftover after parsing attributes in process `syz.2.313'. [ 116.501198][ T6932] netlink: 1128 bytes leftover after parsing attributes in process `syz.2.317'. [ 116.517828][ T6937] netlink: 'syz.3.318': attribute type 33 has an invalid length. [ 116.542850][ T6937] netlink: 152 bytes leftover after parsing attributes in process `syz.3.318'. [ 116.572516][ T6937] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'. [ 116.582691][ T6943] netlink: 12 bytes leftover after parsing attributes in process `syz.0.319'. [ 117.403806][ T6977] lo speed is unknown, defaulting to 1000 [ 117.417680][ T6977] lo speed is unknown, defaulting to 1000 [ 117.439932][ T6977] lo speed is unknown, defaulting to 1000 [ 117.554896][ T6977] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 117.603798][ T6984] wg2: entered promiscuous mode [ 117.614668][ T6984] wg2: entered allmulticast mode [ 117.668165][ T6977] lo speed is unknown, defaulting to 1000 [ 117.698638][ T6977] lo speed is unknown, defaulting to 1000 [ 117.719940][ T6977] lo speed is unknown, defaulting to 1000 [ 117.739243][ T6977] lo speed is unknown, defaulting to 1000 [ 117.761756][ T6977] lo speed is unknown, defaulting to 1000 [ 118.820861][ T7034] netlink: 'syz.4.347': attribute type 18 has an invalid length. [ 118.895862][ T7039] net_ratelimit: 11 callbacks suppressed [ 118.895880][ T7039] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 119.441121][ T7074] netlink: 'syz.3.357': attribute type 29 has an invalid length. [ 119.454379][ T7074] netlink: 'syz.3.357': attribute type 29 has an invalid length. [ 119.745220][ T7092] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.859641][ T7100] netlink: 'syz.2.365': attribute type 1 has an invalid length. [ 120.224518][ T7117] __nla_validate_parse: 7 callbacks suppressed [ 120.224536][ T7117] netlink: 60 bytes leftover after parsing attributes in process `syz.1.371'. [ 120.247956][ T7119] netlink: 8 bytes leftover after parsing attributes in process `syz.0.372'. [ 120.281183][ T7117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.371'. [ 120.288385][ T7119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.372'. [ 120.309773][ T7117] netlink: 24 bytes leftover after parsing attributes in process `syz.1.371'. [ 120.343512][ T7117] netlink: 60 bytes leftover after parsing attributes in process `syz.1.371'. [ 120.416182][ T7122] netlink: 12 bytes leftover after parsing attributes in process `syz.4.373'. [ 120.655834][ T7141] netlink: 68 bytes leftover after parsing attributes in process `syz.2.377'. [ 120.709387][ T7144] openvswitch: netlink: Unknown key attributes 2 [ 120.962733][ T7154] vti0: entered promiscuous mode [ 121.746102][ T7195] netlink: 8 bytes leftover after parsing attributes in process `syz.2.390'. [ 122.166576][ T7209] Bluetooth: hci0: Opcode 0x0401 failed: -22 [ 122.502013][ T7225] netlink: 5 bytes leftover after parsing attributes in process `syz.3.402'. [ 122.596529][ T7225] syz_tun: entered allmulticast mode [ 122.624924][ T7224] syz_tun: left allmulticast mode [ 122.691120][ T7232] ip6gretap0: entered promiscuous mode [ 122.731682][ T7232] vlan2: entered promiscuous mode [ 122.889262][ T7245] gretap0: entered promiscuous mode [ 122.926729][ T7248] 0{X功: renamed from gretap0 [ 122.948166][ T7248] 0{X功: left promiscuous mode [ 122.953265][ T7248] 0{X功: entered allmulticast mode [ 122.988371][ T7248] A link change request failed with some changes committed already. Interface 30{X功 may have been left with an inconsistent configuration, please check. [ 123.287608][ T7265] netlink: 'syz.0.414': attribute type 21 has an invalid length. [ 123.347567][ T7265] netlink: 'syz.0.414': attribute type 5 has an invalid length. [ 123.633090][ T7277] netlink: 'syz.1.418': attribute type 7 has an invalid length. [ 123.740479][ T7277] : entered promiscuous mode [ 123.816684][ T7287] netlink: 'syz.4.421': attribute type 11 has an invalid length. [ 123.852634][ T7287] netlink: 'syz.4.421': attribute type 11 has an invalid length. [ 123.916050][ T7294] veth0: entered promiscuous mode [ 124.217911][ T5832] Bluetooth: hci0: command tx timeout [ 124.787099][ T7348] xt_hashlimit: size too large, truncated to 1048576 [ 124.836214][ T7349] (unnamed net_device) (uninitialized): option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 125.326424][ T7367] __nla_validate_parse: 12 callbacks suppressed [ 125.326461][ T7367] netlink: 4 bytes leftover after parsing attributes in process `syz.4.441'. [ 125.449894][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.4.441'. [ 125.559174][ T7380] netlink: 8 bytes leftover after parsing attributes in process `syz.2.443'. [ 125.627843][ T7380] netlink: 28 bytes leftover after parsing attributes in process `syz.2.443'. [ 125.664078][ T7380] xt_connbytes: Forcing CT accounting to be enabled [ 126.126568][ T7401] netlink: 8 bytes leftover after parsing attributes in process `syz.2.450'. [ 126.171545][ T7401] netlink: 12 bytes leftover after parsing attributes in process `syz.2.450'. [ 126.226526][ T7401] netlink: 'syz.2.450': attribute type 20 has an invalid length. [ 126.326099][ T7415] netlink: 8 bytes leftover after parsing attributes in process `syz.0.453'. [ 126.699551][ T7435] netlink: 12 bytes leftover after parsing attributes in process `syz.1.457'. [ 127.063724][ T7435] lo speed is unknown, defaulting to 1000 [ 127.299149][ T7463] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 127.462293][ T7471] netlink: 12 bytes leftover after parsing attributes in process `syz.4.469'. [ 127.546965][ T7469] netlink: 28 bytes leftover after parsing attributes in process `syz.0.467'. [ 127.979039][ T7495] bridge_slave_1: left allmulticast mode [ 127.984819][ T7495] bridge_slave_1: left promiscuous mode [ 127.995141][ T7495] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.026543][ T7495] bridge_slave_0: left allmulticast mode [ 128.042094][ T7495] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.469195][ T7528] netlink: 'syz.0.482': attribute type 32 has an invalid length. [ 128.499962][ T7531] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 128.926095][ T7549] tunl0: entered promiscuous mode [ 128.936040][ T7546] ip6t_srh: unknown srh match flags 4001 [ 128.944976][ T7549] netlink: 'syz.0.488': attribute type 3 has an invalid length. [ 129.690257][ T7590] geneve2: entered promiscuous mode [ 129.702622][ T7590] geneve2: entered allmulticast mode [ 130.306610][ T7623] xt_NFQUEUE: number of total queues is 0 [ 130.590964][ T7633] __nla_validate_parse: 15 callbacks suppressed [ 130.590985][ T7633] netlink: 8 bytes leftover after parsing attributes in process `syz.0.514'. [ 130.620423][ T7633] netlink: 12 bytes leftover after parsing attributes in process `syz.0.514'. [ 130.638427][ T7633] netlink: 'syz.0.514': attribute type 13 has an invalid length. [ 130.863575][ T7646] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 130.887819][ T7646] batadv_slave_1: entered promiscuous mode [ 130.930018][ T7651] tipc: Started in network mode [ 130.935068][ T7651] tipc: Node identity e0000002, cluster identity 4711 [ 130.944524][ T7651] tipc: Enabling of bearer rejected, failed to enable media [ 130.962804][ T7655] netlink: 20 bytes leftover after parsing attributes in process `syz.1.522'. [ 130.974556][ T7652] netlink: 'syz.4.519': attribute type 1 has an invalid length. [ 131.000554][ T7649] netlink: 12 bytes leftover after parsing attributes in process `syz.3.518'. [ 131.010014][ T7652] netlink: 'syz.4.519': attribute type 3 has an invalid length. [ 131.036124][ T7652] netlink: 224 bytes leftover after parsing attributes in process `syz.4.519'. [ 131.170324][ T7665] netlink: 'syz.1.524': attribute type 11 has an invalid length. [ 131.173753][ T7668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.525'. [ 131.209868][ T7668] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.218395][ T7668] bridge0: port 1(bridge_slave_0) entered disabled state [ 131.460030][ T7676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 131.487321][ T7676] netlink: 24 bytes leftover after parsing attributes in process `syz.3.528'. [ 131.695410][ T7688] netlink: 8 bytes leftover after parsing attributes in process `syz.2.532'. [ 131.695545][ T7689] netlink: 8 bytes leftover after parsing attributes in process `syz.3.533'. [ 131.811757][ T7692] Cannot find add_set index 1 as target [ 131.984494][ T7701] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 132.170961][ T7701] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 132.218550][ T7705] lo speed is unknown, defaulting to 1000 [ 132.225525][ T5890] lo speed is unknown, defaulting to 1000 [ 132.302155][ C1] Illegal XDP return value 16128 on prog (id 191) dev lo, expect packet loss! [ 132.408990][ T7724] lo: entered promiscuous mode [ 132.418173][ T7724] tunl0: entered promiscuous mode [ 132.466552][ T7724] gre0: entered promiscuous mode [ 132.509615][ T7724] 0{X功: entered promiscuous mode [ 132.527761][ T7724] 0{X功: left allmulticast mode [ 132.570242][ T7724] erspan0: entered promiscuous mode [ 132.589644][ T7724] ip_vti0: entered promiscuous mode [ 132.606792][ T7724] ip6_vti0: entered promiscuous mode [ 132.614533][ T7724] sit0: entered promiscuous mode [ 132.667339][ T7724] sit0: left allmulticast mode [ 132.676577][ T7724] ip6tnl0: entered promiscuous mode [ 132.688870][ T7724] ip6gre0: entered promiscuous mode [ 132.710549][ T7724] ip6gretap0: entered promiscuous mode [ 132.725593][ T7724] vcan0: entered promiscuous mode [ 132.742746][ T7724] bond0: entered promiscuous mode [ 132.755727][ T7724] bond_slave_0: entered promiscuous mode [ 132.761739][ T7724] bond_slave_1: entered promiscuous mode [ 132.780154][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.791252][ T7750] netlink: 'syz.0.547': attribute type 16 has an invalid length. [ 132.799607][ T7750] netlink: 'syz.0.547': attribute type 17 has an invalid length. [ 132.819005][ T7724] dummy0: entered promiscuous mode [ 132.830625][ T7724] nlmon0: entered promiscuous mode [ 132.841896][ T7724] caif0: entered promiscuous mode [ 132.849164][ T7724] batadv0: entered promiscuous mode [ 132.862164][ T7724] vxcan0: entered promiscuous mode [ 132.877278][ T7724] vxcan1: entered promiscuous mode [ 132.884385][ T7724] veth0: entered promiscuous mode [ 132.899831][ T7724] veth1: entered promiscuous mode [ 132.911120][ T7724] wg0: entered promiscuous mode [ 132.929486][ T7724] wg1: entered promiscuous mode [ 132.942793][ T7724] wg2: entered promiscuous mode [ 132.954840][ T7724] veth0_to_bridge: entered promiscuous mode [ 132.981282][ T7724] veth1_to_bridge: entered promiscuous mode [ 132.992297][ T7724] bridge_slave_1: entered promiscuous mode [ 133.024731][ T7724] veth0_to_bond: entered promiscuous mode [ 133.053345][ T7724] veth1_to_bond: entered promiscuous mode [ 133.094070][ T7724] veth0_to_team: entered promiscuous mode [ 133.117912][ T7724] team_slave_0: entered promiscuous mode [ 133.124288][ T7724] veth1_to_team: entered promiscuous mode [ 133.147081][ T7724] team_slave_1: entered promiscuous mode [ 133.154412][ T7724] veth0_to_batadv: entered promiscuous mode [ 133.170046][ T7724] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.178976][ T7724] batadv_slave_0: entered promiscuous mode [ 133.200428][ T7724] veth1_to_batadv: entered promiscuous mode [ 133.214236][ T7724] xfrm0: entered promiscuous mode [ 133.224545][ T7724] veth0_to_hsr: entered promiscuous mode [ 133.239905][ T7724] veth1_to_hsr: entered promiscuous mode [ 133.251254][ T7724] hsr0: entered promiscuous mode [ 133.260927][ T7724] veth1_virt_wifi: entered promiscuous mode [ 133.271366][ T7724] veth0_virt_wifi: entered promiscuous mode [ 133.290333][ T7724] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 133.309702][ T7724] macvtap0: entered promiscuous mode [ 133.324721][ T7724] macsec0: entered promiscuous mode [ 133.342372][ T7724] geneve0: entered promiscuous mode [ 133.356270][ T7724] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.374534][ T7724] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.384011][ T7724] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.397146][ T7724] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 133.408987][ T7724] geneve1: entered promiscuous mode [ 133.423133][ T7724] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 133.435014][ T7724] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 133.445210][ T7724] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 133.464068][ T7724] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 133.493219][ T7724] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 133.519980][ T7724] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 133.537390][ T7724] gtp0: left allmulticast mode [ 133.555479][ T7724] bond1: entered promiscuous mode [ 133.560705][ T7724] bridge1: entered promiscuous mode [ 133.567015][ T7724] mac80211_hwsim hwsim12 wlan2: entered promiscuous mode [ 133.574226][ T7724] bridge2: entered promiscuous mode [ 133.580193][ T7724] mac80211_hwsim hwsim14 wlan3: entered promiscuous mode [ 133.588556][ T7724] vlan0: entered promiscuous mode [ 133.594150][ T7724] vxlan0: entered promiscuous mode [ 134.307618][ T7787] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 134.655717][ T7802] netlink: 'syz.2.557': attribute type 11 has an invalid length. [ 134.685417][ T7802] netlink: 'syz.2.557': attribute type 11 has an invalid length. [ 134.718019][ T7802] netlink: 'syz.2.557': attribute type 11 has an invalid length. [ 134.736800][ T7802] netlink: 'syz.2.557': attribute type 5 has an invalid length. [ 134.844615][ T7812] netlink: 'syz.0.562': attribute type 1 has an invalid length. [ 134.910926][ T7812] netlink: 'syz.0.562': attribute type 7 has an invalid length. [ 135.363035][ T7836] netlink: 'syz.0.568': attribute type 6 has an invalid length. [ 135.399819][ T7836] netlink: 'syz.0.568': attribute type 5 has an invalid length. [ 135.520323][ T7836] netlink: 'syz.0.568': attribute type 2 has an invalid length. [ 135.535435][ T7836] netlink: 'syz.0.568': attribute type 6 has an invalid length. [ 135.554989][ T7846] netlink: 'syz.4.570': attribute type 21 has an invalid length. [ 135.752927][ T7858] __nla_validate_parse: 14 callbacks suppressed [ 135.752947][ T7858] netlink: 8 bytes leftover after parsing attributes in process `syz.1.573'. [ 135.777452][ T7858] netlink: 12 bytes leftover after parsing attributes in process `syz.1.573'. [ 135.961030][ T7864] lo: entered promiscuous mode [ 135.984688][ T7870] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 135.988884][ T7875] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 135.998248][ T7864] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.243322][ T7883] netlink: 48 bytes leftover after parsing attributes in process `syz.2.580'. [ 136.667219][ T7909] netlink: 20 bytes leftover after parsing attributes in process `syz.0.587'. [ 136.741982][ T7913] veth1_to_hsr: entered promiscuous mode [ 136.777112][ T7912] veth1_to_hsr: left promiscuous mode [ 137.209928][ T7939] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 137.433713][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 137.452131][ T7956] netlink: 4 bytes leftover after parsing attributes in process `syz.2.596'. [ 138.701764][ T7944] lo speed is unknown, defaulting to 1000 [ 138.814282][ T7979] netlink: 8 bytes leftover after parsing attributes in process `syz.2.604'. [ 138.983701][ T7987] xt_l2tp: missing protocol rule (udp|l2tpip) [ 139.016596][ T7987] validate_nla: 6 callbacks suppressed [ 139.016611][ T7987] netlink: 'syz.1.606': attribute type 2 has an invalid length. [ 139.182643][ T7996] lo speed is unknown, defaulting to 1000 [ 139.782820][ T8022] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 139.846176][ T8022] team0: Device ipvlan2 is already an upper device of the team interface [ 140.004557][ T8031] netlink: 'syz.3.614': attribute type 58 has an invalid length. [ 140.045601][ T8031] netlink: 20 bytes leftover after parsing attributes in process `syz.3.614'. [ 140.080725][ T8038] netlink: 72 bytes leftover after parsing attributes in process `syz.2.616'. [ 140.415251][ T8046] lo speed is unknown, defaulting to 1000 [ 140.699180][ T8068] netlink: 4 bytes leftover after parsing attributes in process `syz.1.624'. [ 140.943959][ T8080] netlink: 'syz.0.625': attribute type 1 has an invalid length. [ 141.051621][ T8086] __nla_validate_parse: 1 callbacks suppressed [ 141.051639][ T8086] netlink: 48 bytes leftover after parsing attributes in process `syz.4.628'. [ 141.082869][ T8086] netlink: 48 bytes leftover after parsing attributes in process `syz.4.628'. [ 141.601189][ T8112] netlink: 112 bytes leftover after parsing attributes in process `syz.2.634'. [ 141.688991][ T5919] IPVS: starting estimator thread 0... [ 141.701638][ T8116] netlink: 'syz.3.635': attribute type 1 has an invalid length. [ 141.709669][ T8116] netlink: 20 bytes leftover after parsing attributes in process `syz.3.635'. [ 141.816211][ T8117] IPVS: using max 34 ests per chain, 81600 per kthread [ 141.864692][ T8129] netlink: 16 bytes leftover after parsing attributes in process `syz.0.637'. [ 141.883499][ T8121] netlink: 'syz.0.637': attribute type 12 has an invalid length. [ 141.905485][ T8121] netlink: 132 bytes leftover after parsing attributes in process `syz.0.637'. [ 142.103854][ T8141] sock: sock_set_timeout: `syz.3.642' (pid 8141) tries to set negative timeout [ 142.589731][ T8167] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.616232][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'. [ 142.684165][ T8167] netlink: 24 bytes leftover after parsing attributes in process `syz.3.651'. [ 142.725574][ T8167] netlink: 'syz.3.651': attribute type 1 has an invalid length. [ 142.742497][ T8167] netlink: 224 bytes leftover after parsing attributes in process `syz.3.651'. [ 142.787609][ T8167] netlink: 8 bytes leftover after parsing attributes in process `syz.3.651'. [ 142.791621][ T8171] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 142.826137][ T8171] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 142.866165][ T8171] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 142.895903][ T8171] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 142.924644][ T8171] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 142.981348][ T8171] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 143.023249][ T8171] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 143.043251][ T8171] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 143.076537][ T8171] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 143.104685][ T8171] sctp: sctp_transport_update_pmtu: Reported pmtu 68 too low, using default minimum of 512 [ 144.022786][ T8226] netlink: 'syz.2.669': attribute type 1 has an invalid length. [ 144.204416][ T7735] IPVS: starting estimator thread 0... [ 144.315441][ T8236] IPVS: using max 28 ests per chain, 67200 per kthread [ 144.359295][ T8238] block nbd2: NBD_DISCONNECT [ 144.383285][ T8238] block nbd2: Disconnected due to user request. [ 144.396104][ T8238] block nbd2: shutting down sockets [ 144.439893][ T8240] bond0: (slave bond_slave_0): Releasing backup interface [ 144.466646][ T8240] bond0: (slave bond_slave_1): Releasing backup interface [ 144.480609][ T8240] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.508024][ T8240] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.628833][ T8247] gtp0: entered promiscuous mode [ 145.402617][ T8289] veth3: entered allmulticast mode [ 145.649603][ T8306] xt_CT: No such helper "pptp" [ 146.062536][ T8342] __nla_validate_parse: 79 callbacks suppressed [ 146.062555][ T8342] netlink: 8 bytes leftover after parsing attributes in process `syz.2.701'. [ 146.212475][ T8348] netlink: 165 bytes leftover after parsing attributes in process `syz.3.702'. [ 146.284087][ T8351] netlink: 16 bytes leftover after parsing attributes in process `syz.1.704'. [ 146.293059][ T8354] netlink: 'syz.4.705': attribute type 3 has an invalid length. [ 146.293083][ T8354] netlink: 666 bytes leftover after parsing attributes in process `syz.4.705'. [ 146.429210][ T8357] netlink: 20 bytes leftover after parsing attributes in process `syz.3.706'. [ 146.442033][ T8351] bond0: (slave bond_slave_0): Releasing backup interface [ 146.683071][ T8369] netlink: 12 bytes leftover after parsing attributes in process `syz.0.710'. [ 146.761238][ T8375] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 146.793625][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.2.712'. [ 147.116940][ T8398] netlink: 16 bytes leftover after parsing attributes in process `syz.0.717'. [ 147.394617][ T8422] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 147.627286][ T8432] netlink: 'syz.0.727': attribute type 1 has an invalid length. [ 148.159283][ T8451] netlink: 12 bytes leftover after parsing attributes in process `syz.0.735'. [ 148.183467][ T8452] dvmrp0: entered allmulticast mode [ 148.928250][ T7733] IPVS: starting estimator thread 0... [ 149.020182][ T8498] IPVS: using max 36 ests per chain, 86400 per kthread [ 149.217424][ T8509] netlink: 'syz.4.754': attribute type 1 has an invalid length. [ 149.297128][ T8509] 8021q: adding VLAN 0 to HW filter on device bond2 [ 149.367767][ T8509] bond2: (slave veth0_to_bond): Enslaving as an active interface with a down link [ 149.651769][ T8531] No such timeout policy "syz1" [ 149.706617][ T8532] openvswitch: netlink: Unknown nsh attribute 0 [ 149.706629][ T8531] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 149.723293][ T8532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.599162][ T8573] xt_hashlimit: size too large, truncated to 1048576 [ 150.608214][ T8574] xt_hashlimit: size too large, truncated to 1048576 [ 151.045822][ T5832] Bluetooth: hci4: link tx timeout [ 151.051382][ T5832] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 151.066245][ T8588] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 151.185942][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 151.199062][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 151.215788][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 151.224624][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 151.232900][ T5841] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 151.334062][ T8594] lo speed is unknown, defaulting to 1000 [ 151.452063][ T8608] syz.0.784: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 151.507872][ T8608] CPU: 1 UID: 0 PID: 8608 Comm: syz.0.784 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 151.507901][ T8608] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 151.507917][ T8608] Call Trace: [ 151.507928][ T8608] [ 151.507938][ T8608] dump_stack_lvl+0x189/0x250 [ 151.507978][ T8608] ? __pfx_rcu_read_unlock_special+0x10/0x10 [ 151.508003][ T8608] ? __pfx_dump_stack_lvl+0x10/0x10 [ 151.508031][ T8608] ? __pfx__printk+0x10/0x10 [ 151.508050][ T8608] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 151.508080][ T8608] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 151.508117][ T8608] warn_alloc+0x214/0x310 [ 151.508144][ T8608] ? __pfx___schedule+0x10/0x10 [ 151.508168][ T8608] ? __pfx_warn_alloc+0x10/0x10 [ 151.508192][ T8608] ? kasan_save_track+0x4f/0x80 [ 151.508213][ T8608] ? __kmalloc_cache_noprof+0x230/0x3d0 [ 151.508235][ T8608] ? xskq_create+0x56/0x170 [ 151.508256][ T8608] ? __x64_sys_setsockopt+0x18b/0x220 [ 151.508277][ T8608] ? do_syscall_64+0xf6/0x210 [ 151.508299][ T8608] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.508329][ T8608] __vmalloc_node_range_noprof+0x125/0x12c0 [ 151.508385][ T8608] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 151.508413][ T8608] ? __kasan_kmalloc+0x93/0xb0 [ 151.508440][ T8608] vmalloc_user_noprof+0x74/0x80 [ 151.508466][ T8608] ? xskq_create+0xbf/0x170 [ 151.508484][ T8608] xskq_create+0xbf/0x170 [ 151.508508][ T8608] xsk_init_queue+0xb0/0x110 [ 151.508530][ T8608] xsk_setsockopt+0x43f/0x710 [ 151.508552][ T8608] ? __pfx_xsk_setsockopt+0x10/0x10 [ 151.508582][ T8608] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 151.508602][ T8608] ? __pfx_xsk_setsockopt+0x10/0x10 [ 151.508629][ T8608] do_sock_setsockopt+0x257/0x3e0 [ 151.508654][ T8608] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 151.508675][ T8608] ? __fget_files+0x2a/0x420 [ 151.508704][ T8608] ? __fget_files+0x3a0/0x420 [ 151.508727][ T8608] ? __fget_files+0x2a/0x420 [ 151.508759][ T8608] __x64_sys_setsockopt+0x18b/0x220 [ 151.508788][ T8608] do_syscall_64+0xf6/0x210 [ 151.508811][ T8608] ? clear_bhb_loop+0x45/0xa0 [ 151.508833][ T8608] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 151.508856][ T8608] RIP: 0033:0x7fb7ed78e969 [ 151.508878][ T8608] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 151.508893][ T8608] RSP: 002b:00007fb7ee66b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 151.508913][ T8608] RAX: ffffffffffffffda RBX: 00007fb7ed9b6080 RCX: 00007fb7ed78e969 [ 151.508926][ T8608] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 151.508937][ T8608] RBP: 00007fb7ed810ab1 R08: 0000000000000004 R09: 0000000000000000 [ 151.508948][ T8608] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 151.508959][ T8608] R13: 0000000000000000 R14: 00007fb7ed9b6080 R15: 00007ffeadbf2818 [ 151.508988][ T8608] [ 151.775948][ T8608] Mem-Info: [ 151.827489][ T8608] active_anon:5361 inactive_anon:0 isolated_anon:0 [ 151.827489][ T8608] active_file:1270 inactive_file:39850 isolated_file:0 [ 151.827489][ T8608] unevictable:768 dirty:27 writeback:0 [ 151.827489][ T8608] slab_reclaimable:10363 slab_unreclaimable:100896 [ 151.827489][ T8608] mapped:31362 shmem:1371 pagetables:1031 [ 151.827489][ T8608] sec_pagetables:0 bounce:0 [ 151.827489][ T8608] kernel_misc_reclaimable:0 [ 151.827489][ T8608] free:1341696 free_pcp:719 free_cma:0 [ 151.894176][ T8608] Node 0 active_anon:21356kB inactive_anon:0kB active_file:5080kB inactive_file:159192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:125356kB dirty:144kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11960kB pagetables:3924kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 151.964721][ T8608] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 152.000697][ T8608] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 152.030204][ T8608] lowmem_reserve[]: 0 2504 2504 2504 2504 [ 152.064380][ T8608] Node 0 DMA32 free:1443600kB boost:0kB min:34304kB low:42880kB high:51456kB reserved_highatomic:0KB active_anon:21348kB inactive_anon:0kB active_file:5080kB inactive_file:159092kB unevictable:1536kB writepending:144kB present:3129332kB managed:2564136kB mlocked:0kB bounce:0kB free_pcp:2048kB local_pcp:720kB free_cma:0kB [ 152.100293][ T8608] lowmem_reserve[]: 0 0 0 0 0 [ 152.122152][ T8608] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 152.180801][ T8608] lowmem_reserve[]: 0 0 0 0 0 [ 152.187676][ T8608] Node 1 Normal free:3910752kB boost:0kB min:55592kB low:69488kB high:83384kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:208kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 152.242388][ T8633] xt_CT: You must specify a L4 protocol and not use inversions on it [ 152.251502][ T8608] lowmem_reserve[]: 0 0 0 0 0 [ 152.261745][ T8608] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 152.276031][ T8608] Node 0 DMA32: 0*4kB 3*8kB (UME) 2*16kB (UE) 69*32kB (UME) 55*64kB (UM) 28*128kB (UME) 65*256kB (UME) 48*512kB (UM) 24*1024kB (UME) 4*2048kB (UME) 332*4096kB (M) = 1443224kB [ 152.294126][ T8608] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 152.307621][ T8608] Node 1 Normal: 234*4kB (UME) 51*8kB (UME) 38*16kB (UME) 198*32kB (UME) 86*64kB (UME) 31*128kB (UME) 9*256kB (UME) 9*512kB (UME) 3*1024kB (UM) 4*2048kB (UE) 946*4096kB (M) = 3910752kB [ 152.330193][ T8608] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.341630][ T8608] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 152.351516][ T8608] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 152.362495][ T8608] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 152.372242][ T8608] 42487 total pagecache pages [ 152.377395][ T8608] 0 pages in swap cache [ 152.382715][ T8608] Free swap = 124996kB [ 152.387514][ T8608] Total swap = 124996kB [ 152.391800][ T8608] 2097051 pages RAM [ 152.396259][ T8608] 0 pages HighMem/MovableOnly [ 152.401122][ T8608] 424359 pages reserved [ 152.405823][ T8608] 0 pages cma reserved [ 152.454429][ T8594] chnl_net:caif_netlink_parms(): no params data found [ 152.611663][ T8645] netlink: 'syz.4.790': attribute type 10 has an invalid length. [ 152.642426][ T8646] netlink: 'syz.2.791': attribute type 21 has an invalid length. [ 152.691781][ T8646] __nla_validate_parse: 7 callbacks suppressed [ 152.691801][ T8646] netlink: 132 bytes leftover after parsing attributes in process `syz.2.791'. [ 153.030676][ T8674] netlink: 4 bytes leftover after parsing attributes in process `syz.4.794'. [ 153.105653][ T5832] Bluetooth: hci4: command 0x0405 tx timeout [ 153.158730][ T8594] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.197176][ T8594] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.252446][ T8594] bridge_slave_0: entered allmulticast mode [ 153.259878][ T5832] Bluetooth: hci3: command tx timeout [ 153.352948][ T8594] bridge_slave_0: entered promiscuous mode [ 153.375757][ T8594] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.409450][ T8594] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.440432][ T8594] bridge_slave_1: entered allmulticast mode [ 153.462100][ T8594] bridge_slave_1: entered promiscuous mode [ 153.563237][ T8594] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.599836][ T8594] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.766502][ T8718] netlink: 'syz.4.806': attribute type 2 has an invalid length. [ 153.794415][ T8594] team0: Port device team_slave_0 added [ 153.804902][ T8594] team0: Port device team_slave_1 added [ 153.819983][ T8720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.807'. [ 154.062695][ T8594] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.078271][ T8594] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.107277][ T8594] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.123653][ T8737] netlink: 8 bytes leftover after parsing attributes in process `syz.4.810'. [ 154.140467][ T8737] netlink: 24 bytes leftover after parsing attributes in process `syz.4.810'. [ 154.184612][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.260762][ T8594] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.276249][ T8594] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.347565][ T8594] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.430867][ T8748] netlink: 'syz.2.814': attribute type 1 has an invalid length. [ 154.477148][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.488107][ T8753] netlink: 'syz.3.813': attribute type 39 has an invalid length. [ 154.522807][ T8594] hsr_slave_0: entered promiscuous mode [ 154.529255][ T8744] af_packet: tpacket_rcv: packet too big, clamped from 44 to 4294967272. macoff=96 [ 154.529935][ T8594] hsr_slave_1: entered promiscuous mode [ 154.555215][ T8594] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.565961][ T8594] Cannot create hsr debugfs directory [ 154.597713][ T8755] netlink: 8 bytes leftover after parsing attributes in process `syz.4.816'. [ 154.607840][ T8755] netlink: 4 bytes leftover after parsing attributes in process `syz.4.816'. [ 154.709094][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.922628][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.279392][ T8786] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 155.323807][ T8789] netlink: 4 bytes leftover after parsing attributes in process `syz.3.825'. [ 155.335891][ T5832] Bluetooth: hci3: command tx timeout [ 155.545456][ T8798] netlink: 4 bytes leftover after parsing attributes in process `syz.0.827'. [ 155.554338][ T8800] netlink: 'syz.3.828': attribute type 12 has an invalid length. [ 155.626107][ T8804] netlink: 20 bytes leftover after parsing attributes in process `syz.4.829'. [ 155.696530][ T62] bridge_slave_1: left allmulticast mode [ 155.702371][ T62] bridge_slave_1: left promiscuous mode [ 155.729661][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.781297][ T8811] x_tables: unsorted entry at hook 2 [ 155.788542][ T62] bridge_slave_0: left allmulticast mode [ 155.804103][ T62] bridge_slave_0: left promiscuous mode [ 155.813266][ T8811] x_tables: unsorted entry at hook 2 [ 155.826024][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.379779][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 156.390281][ T62] bond0 (unregistering): Released all slaves [ 156.486783][ T62] : left promiscuous mode [ 156.562773][ T8834] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 156.625103][ T62] tipc: Left network mode [ 157.253038][ T8865] netlink: 'syz.2.842': attribute type 33 has an invalid length. [ 157.328465][ T8869] nbd: must specify at least one socket [ 157.417508][ T5832] Bluetooth: hci3: command tx timeout [ 157.869923][ T8900] __nla_validate_parse: 4 callbacks suppressed [ 157.869941][ T8900] netlink: 216 bytes leftover after parsing attributes in process `syz.0.851'. [ 157.925205][ T8900] netlink: 16 bytes leftover after parsing attributes in process `syz.0.851'. [ 157.939957][ T62] hsr_slave_0: left promiscuous mode [ 157.965647][ T62] hsr_slave_1: left promiscuous mode [ 157.979904][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.993419][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.005058][ T8911] netlink: 'syz.4.853': attribute type 4 has an invalid length. [ 158.015540][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.022990][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.092626][ T62] team_slave_0: left promiscuous mode [ 158.098351][ T62] team_slave_1: left promiscuous mode [ 158.136531][ T62] veth0_macvtap: left promiscuous mode [ 158.145731][ T62] veth1_vlan: left promiscuous mode [ 158.151161][ T62] veth0_vlan: left promiscuous mode [ 158.580440][ T62] team0 (unregistering): Port device team_slave_1 removed [ 158.610993][ T62] team0 (unregistering): Port device team_slave_0 removed [ 158.977756][ T8594] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 159.041196][ T8594] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 159.099733][ T8594] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 159.163917][ T8594] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 159.351924][ T8946] netlink: 20 bytes leftover after parsing attributes in process `syz.3.860'. [ 159.486826][ T8594] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.507723][ T5832] Bluetooth: hci3: command tx timeout [ 159.545209][ T8594] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.646734][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.653935][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.753828][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.761073][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.108007][ T8979] lo speed is unknown, defaulting to 1000 [ 160.612964][ T9008] netlink: 28 bytes leftover after parsing attributes in process `syz.4.872'. [ 160.640875][ T9004] netlink: 28 bytes leftover after parsing attributes in process `syz.4.872'. [ 160.716257][ T9015] netlink: 71 bytes leftover after parsing attributes in process `syz.0.875'. [ 161.038571][ T8594] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.139710][ T9030] netlink: 76 bytes leftover after parsing attributes in process `syz.0.878'. [ 161.172976][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz.2.879'. [ 161.178654][ T8594] veth0_vlan: entered promiscuous mode [ 161.212803][ T8594] veth1_vlan: entered promiscuous mode [ 161.261221][ T8594] veth0_macvtap: entered promiscuous mode [ 161.271629][ T9035] netlink: 'syz.0.880': attribute type 3 has an invalid length. [ 161.280465][ T8594] veth1_macvtap: entered promiscuous mode [ 161.323269][ T8594] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.354800][ T8594] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.378984][ T8594] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.394087][ T8594] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.423005][ T8594] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.433662][ T8594] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 161.633917][ T9047] [ 161.636388][ T9047] ====================================================== [ 161.643424][ T9047] WARNING: possible circular locking dependency detected [ 161.650487][ T9047] 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 Not tainted [ 161.657612][ T9047] ------------------------------------------------------ [ 161.664640][ T9047] syz.0.884/9047 is trying to acquire lock: [ 161.670634][ T9047] ffffffff8f44acf8 (nr_node_list_lock){+...}-{3:3}, at: nr_rt_device_down+0xa9/0x720 [ 161.680160][ T9047] [ 161.680160][ T9047] but task is already holding lock: [ 161.687533][ T9047] ffffffff8f44ac98 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 161.697158][ T9047] [ 161.697158][ T9047] which lock already depends on the new lock. [ 161.697158][ T9047] [ 161.707585][ T9047] [ 161.707585][ T9047] the existing dependency chain (in reverse order) is: [ 161.716636][ T9047] [ 161.716636][ T9047] -> #2 (nr_neigh_list_lock){+...}-{3:3}: [ 161.724585][ T9047] lock_acquire+0x120/0x360 [ 161.729666][ T9047] _raw_spin_lock_bh+0x36/0x50 [ 161.734980][ T9047] nr_rt_ioctl+0x390/0xd50 [ 161.739949][ T9047] sock_do_ioctl+0xd9/0x300 [ 161.745005][ T9047] sock_ioctl+0x576/0x790 [ 161.749884][ T9047] __se_sys_ioctl+0xf9/0x170 [ 161.755014][ T9047] do_syscall_64+0xf6/0x210 [ 161.760066][ T9047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.766498][ T9047] [ 161.766498][ T9047] -> #1 (&nr_node->node_lock){+...}-{3:3}: [ 161.774528][ T9047] lock_acquire+0x120/0x360 [ 161.779581][ T9047] _raw_spin_lock_bh+0x36/0x50 [ 161.784896][ T9047] nr_rt_ioctl+0x193/0xd50 [ 161.789861][ T9047] sock_do_ioctl+0xd9/0x300 [ 161.794923][ T9047] sock_ioctl+0x576/0x790 [ 161.799796][ T9047] __se_sys_ioctl+0xf9/0x170 [ 161.804930][ T9047] do_syscall_64+0xf6/0x210 [ 161.809980][ T9047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.816421][ T9047] [ 161.816421][ T9047] -> #0 (nr_node_list_lock){+...}-{3:3}: [ 161.824278][ T9047] validate_chain+0xb9b/0x2140 [ 161.829612][ T9047] __lock_acquire+0xaac/0xd20 [ 161.834865][ T9047] lock_acquire+0x120/0x360 [ 161.839927][ T9047] _raw_spin_lock_bh+0x36/0x50 [ 161.845239][ T9047] nr_rt_device_down+0xa9/0x720 [ 161.850655][ T9047] nr_device_event+0x137/0x150 [ 161.855974][ T9047] notifier_call_chain+0x1b3/0x3e0 [ 161.861630][ T9047] dev_close_many+0x29c/0x410 [ 161.866850][ T9047] netif_close+0x158/0x210 [ 161.871831][ T9047] dev_close+0x10a/0x220 [ 161.876620][ T9047] bpq_device_event+0x2f4/0x600 [ 161.882011][ T9047] notifier_call_chain+0x1b3/0x3e0 [ 161.887665][ T9047] __dev_notify_flags+0x18d/0x2e0 [ 161.893245][ T9047] netif_change_flags+0xe8/0x1a0 [ 161.898727][ T9047] dev_change_flags+0x130/0x260 [ 161.904125][ T9047] dev_ioctl+0x7b4/0x1150 [ 161.909000][ T9047] sock_do_ioctl+0x22c/0x300 [ 161.914145][ T9047] sock_ioctl+0x576/0x790 [ 161.919030][ T9047] __se_sys_ioctl+0xf9/0x170 [ 161.924167][ T9047] do_syscall_64+0xf6/0x210 [ 161.929222][ T9047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 161.935656][ T9047] [ 161.935656][ T9047] other info that might help us debug this: [ 161.935656][ T9047] [ 161.945903][ T9047] Chain exists of: [ 161.945903][ T9047] nr_node_list_lock --> &nr_node->node_lock --> nr_neigh_list_lock [ 161.945903][ T9047] [ 161.959780][ T9047] Possible unsafe locking scenario: [ 161.959780][ T9047] [ 161.967267][ T9047] CPU0 CPU1 [ 161.972664][ T9047] ---- ---- [ 161.978041][ T9047] lock(nr_neigh_list_lock); [ 161.982772][ T9047] lock(&nr_node->node_lock); [ 161.990061][ T9047] lock(nr_neigh_list_lock); [ 161.997277][ T9047] lock(nr_node_list_lock); [ 162.001867][ T9047] [ 162.001867][ T9047] *** DEADLOCK *** [ 162.001867][ T9047] [ 162.010004][ T9047] 2 locks held by syz.0.884/9047: [ 162.015027][ T9047] #0: ffffffff8f2f4848 (rtnl_mutex){+.+.}-{4:4}, at: dev_ioctl+0x7a4/0x1150 [ 162.023819][ T9047] #1: ffffffff8f44ac98 (nr_neigh_list_lock){+...}-{3:3}, at: nr_rt_device_down+0x28/0x720 [ 162.033829][ T9047] [ 162.033829][ T9047] stack backtrace: [ 162.039716][ T9047] CPU: 0 UID: 0 PID: 9047 Comm: syz.0.884 Not tainted 6.15.0-rc5-syzkaller-00136-g4d64321c4f6f #0 PREEMPT(full) [ 162.039734][ T9047] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 162.039742][ T9047] Call Trace: [ 162.039748][ T9047] [ 162.039755][ T9047] dump_stack_lvl+0x189/0x250 [ 162.039779][ T9047] ? __pfx_dump_stack_lvl+0x10/0x10 [ 162.039798][ T9047] ? __pfx__printk+0x10/0x10 [ 162.039812][ T9047] ? print_lock_name+0xde/0x100 [ 162.039837][ T9047] print_circular_bug+0x2ee/0x310 [ 162.039853][ T9047] check_noncircular+0x134/0x160 [ 162.039869][ T9047] validate_chain+0xb9b/0x2140 [ 162.039882][ T9047] ? neigh_ifdown+0x1f/0x30 [ 162.039903][ T9047] ? rt6_disable_ip+0x6b3/0x720 [ 162.039925][ T9047] __lock_acquire+0xaac/0xd20 [ 162.039946][ T9047] ? nr_rt_device_down+0xa9/0x720 [ 162.039963][ T9047] lock_acquire+0x120/0x360 [ 162.039981][ T9047] ? nr_rt_device_down+0xa9/0x720 [ 162.040003][ T9047] ? nr_rt_device_down+0xa9/0x720 [ 162.040026][ T9047] _raw_spin_lock_bh+0x36/0x50 [ 162.040044][ T9047] ? nr_rt_device_down+0xa9/0x720 [ 162.040070][ T9047] nr_rt_device_down+0xa9/0x720 [ 162.040097][ T9047] ? do_raw_spin_unlock+0x122/0x240 [ 162.040114][ T9047] nr_device_event+0x137/0x150 [ 162.040132][ T9047] notifier_call_chain+0x1b3/0x3e0 [ 162.040148][ T9047] dev_close_many+0x29c/0x410 [ 162.040163][ T9047] ? __pfx_dev_close_many+0x10/0x10 [ 162.040176][ T9047] ? __try_to_del_timer_sync+0x34a/0x3a0 [ 162.040192][ T9047] ? bond_netdev_event+0x227/0xe80 [ 162.040207][ T9047] netif_close+0x158/0x210 [ 162.040219][ T9047] ? __pfx_netif_close+0x10/0x10 [ 162.040231][ T9047] ? tun_device_event+0x77/0x1020 [ 162.040253][ T9047] dev_close+0x10a/0x220 [ 162.040269][ T9047] bpq_device_event+0x2f4/0x600 [ 162.040284][ T9047] notifier_call_chain+0x1b3/0x3e0 [ 162.040299][ T9047] __dev_notify_flags+0x18d/0x2e0 [ 162.040316][ T9047] ? __pfx___dev_notify_flags+0x10/0x10 [ 162.040330][ T9047] ? __dev_change_flags+0x4cc/0x6d0 [ 162.040348][ T9047] ? __pfx___dev_change_flags+0x10/0x10 [ 162.040363][ T9047] ? dev_ioctl+0x7a4/0x1150 [ 162.040375][ T9047] ? full_name_hash+0x92/0xe0 [ 162.040397][ T9047] netif_change_flags+0xe8/0x1a0 [ 162.040414][ T9047] dev_change_flags+0x130/0x260 [ 162.040431][ T9047] dev_ioctl+0x7b4/0x1150 [ 162.040445][ T9047] sock_do_ioctl+0x22c/0x300 [ 162.040466][ T9047] ? __pfx_sock_do_ioctl+0x10/0x10 [ 162.040491][ T9047] sock_ioctl+0x576/0x790 [ 162.040511][ T9047] ? __pfx_sock_ioctl+0x10/0x10 [ 162.040531][ T9047] ? __fget_files+0x3a0/0x420 [ 162.040547][ T9047] ? __fget_files+0x2a/0x420 [ 162.040569][ T9047] ? bpf_lsm_file_ioctl+0x9/0x20 [ 162.040586][ T9047] ? __pfx_sock_ioctl+0x10/0x10 [ 162.040605][ T9047] __se_sys_ioctl+0xf9/0x170 [ 162.040619][ T9047] do_syscall_64+0xf6/0x210 [ 162.040636][ T9047] ? clear_bhb_loop+0x45/0xa0 [ 162.040651][ T9047] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 162.040664][ T9047] RIP: 0033:0x7fb7ed78e969 [ 162.040676][ T9047] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 162.040687][ T9047] RSP: 002b:00007fb7ee68c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 162.040700][ T9047] RAX: ffffffffffffffda RBX: 00007fb7ed9b5fa0 RCX: 00007fb7ed78e969 [ 162.040710][ T9047] RDX: 0000200000000700 RSI: 0000000000008914 RDI: 0000000000000004 [ 162.040718][ T9047] RBP: 00007fb7ed810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 162.040726][ T9047] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 162.040734][ T9047] R13: 0000000000000000 R14: 00007fb7ed9b5fa0 R15: 00007ffeadbf2818 [ 162.040748][ T9047] [ 162.463059][ T8594] ieee80211 phy19: Selected rate control algorithm 'minstrel_ht' [ 162.480532][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.489525][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 162.513414][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 162.521376][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.861842][ T8281] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.279215][ T8281] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.340451][ T8281] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.389586][ T8281] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.497104][ T8281] bridge_slave_1: left allmulticast mode [ 164.502793][ T8281] bridge_slave_1: left promiscuous mode [ 164.509126][ T8281] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.517830][ T8281] bridge_slave_0: left allmulticast mode [ 164.523479][ T8281] bridge_slave_0: left promiscuous mode [ 164.529388][ T8281] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.630898][ T8281] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 164.641960][ T8281] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 164.651582][ T8281] bond0 (unregistering): Released all slaves [ 164.900689][ T8281] hsr_slave_0: left promiscuous mode [ 164.906733][ T8281] hsr_slave_1: left promiscuous mode [ 164.912589][ T8281] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 164.920694][ T8281] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 164.937469][ T8281] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 164.944904][ T8281] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 164.958397][ T8281] veth1_macvtap: left promiscuous mode [ 164.963984][ T8281] veth0_macvtap: left promiscuous mode [ 164.969984][ T8281] veth1_vlan: left promiscuous mode [ 164.975546][ T8281] veth0_vlan: left promiscuous mode [ 165.101408][ T8281] team0 (unregistering): Port device team_slave_1 removed [ 165.130677][ T8281] team0 (unregistering): Port device team_slave_0 removed