last executing test programs: 2m37.602426075s ago: executing program 4 (id=998): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0xa}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008900000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r1}, 0x20) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket(0x2b, 0x1, 0x0) getsockopt$inet6_tcp_int(r3, 0x6, 0x1, 0x0, &(0x7f00000003c0)) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000500)={'wlan1\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_int(r4, 0x29, 0x1, 0x0, &(0x7f0000001e80)) getsockopt$inet_pktinfo(r2, 0x0, 0x8, 0x0, 0x0) ioctl$TUNSETFILTEREBPF(0xffffffffffffffff, 0x800454e1, &(0x7f0000000480)=r1) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0x1c, &(0x7f0000001840)=@ringbuf={{0x18, 0x7}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1b}}, {}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x5}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x8, 0xa, 0x4}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x1, 0xb, 0x0}, {0x7, 0x0, 0x0, 0x0}, {}, {0x18, 0x2, 0x2, 0x0, r0}, {}, {0x17, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0xb, 0x8}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x2, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f00000002c0)={'wg2\x00'}) connect$vsock_stream(r3, &(0x7f00000004c0)={0x28, 0x0, 0x2711, @my=0x1}, 0x10) sendmsg$inet(r2, &(0x7f0000000580)={&(0x7f0000000100)={0x2, 0x4e20, @multicast2}, 0x10, &(0x7f0000000200)=[{0x0}], 0x1, &(0x7f0000000400)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0x2, [{0x5, 0x2}]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @local}}}, @ip_retopts={{0x10}}], 0x48}, 0x20000040) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000280)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0x6b}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r6, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000740)=ANY=[@ANYBLOB="3000000003010102000000e318946c000a0000000c0019800800010094fb"], 0x30}}, 0x0) 2m37.197733969s ago: executing program 4 (id=1004): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000780), 0x4) (async) setsockopt$llc_int(r1, 0x10c, 0x8, &(0x7f0000000780), 0x4) r2 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$PPPIOCGMRU(r2, 0x80047453, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) (async) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x200000, 0x0, 0xff, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000002280)={@private0, 0x200000, 0x2, 0x0, 0x0, 0xfffd}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000002280)={@private0, 0x200000, 0x2, 0x0, 0x0, 0xfffd}, 0x20) r4 = socket$kcm(0x2, 0xa, 0x2) socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r3, 0x29, 0x20, &(0x7f00000000c0)={@ipv4={'\x00', '\xff\xff', @local}, 0x9b, 0x2, 0x1, 0x1, 0x4, 0x7}, &(0x7f00000004c0)=0x20) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) recvmsg(r4, &(0x7f0000000480)={&(0x7f0000000040)=@pptp, 0x80, &(0x7f0000000340)=[{&(0x7f00000000c0)}, {&(0x7f0000000100)=""/106, 0x6a}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f00000001c0)=""/56, 0x38}, {&(0x7f0000000200)=""/71, 0x47}, {&(0x7f0000000280)=""/134, 0x86}], 0x6, &(0x7f00000003c0)=""/133, 0x85}, 0x12181) 2m36.943193448s ago: executing program 4 (id=1008): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe, 0x0, &(0x7f00000002c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000380)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6fabfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x31) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x8004800}, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a0002000000836b00000000ac"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x7c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000480)={&(0x7f00000000c0), 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x3c, r2, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x60}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0xc40) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="ff7f", @ANYRES16=r2, @ANYBLOB="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"], 0xa64}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe, 0x0, &(0x7f00000002c0)="9f44948721919580684010a40800", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f0000000380)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6fabfee09f8342da437fce5dcdf658e453e3132bb42067575318c39"}, 0x31) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) socket$inet_smc(0x2b, 0x1, 0x0) (async) socket(0x10, 0x3, 0x0) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000000)={0x8004800}, 0x10) (async) sendmsg$nl_generic(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="180000001600010a0002000000836b00000000ac"], 0x78}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)={0x7c, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @dev}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @multicast2}}}]}, @CTA_TIMEOUT={0x8}, @CTA_NAT_SRC={0x18, 0x6, 0x0, 0x1, [@CTA_NAT_V4_MAXIP={0x8, 0x2, @dev}, @CTA_NAT_PROTO={0x4}, @CTA_NAT_V4_MINIP={0x8, 0x1, @multicast2}]}]}, 0x7c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000001c0)={'wlan1\x00'}) (async) sendmsg$NL80211_CMD_UPDATE_OWE_INFO(r1, &(0x7f0000000480)={&(0x7f00000000c0), 0xc, &(0x7f0000000440)={&(0x7f0000000300)={0x3c, r2, 0x20, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x60}, @NL80211_ATTR_MAC={0xa}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4000040}, 0xc40) (async) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000b40)=ANY=[@ANYBLOB="ff7f", @ANYRES16=r2, @ANYBLOB="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"], 0xa64}, 0x1, 0x0, 0x0, 0x4000000}, 0x10) (async) 2m36.652519213s ago: executing program 4 (id=1012): bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x3010, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$rds(0x15, 0x5, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0xc, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'tunl0\x00'}]}]}]}], {0x14}}, 0x94}}, 0x0) close(r2) bind$rds(r0, &(0x7f0000000200)={0xa, 0x0, @private}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x3010, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socket$rds(0x15, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x28, 0xc, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4040000) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'wg2\x00'}, {0x14, 0x1, 'tunl0\x00'}]}]}]}], {0x14}}, 0x94}}, 0x0) (async) close(r2) (async) bind$rds(r0, &(0x7f0000000200)={0xa, 0x0, @private}, 0x1c) (async) 2m36.183995851s ago: executing program 4 (id=1019): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e80)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000260000000820000095000000000000002ba7e1d30c04aa8b3382022ce2a1d97411a0f6b599e83f24a3aa81d36bb7019c13bd23212fb56f040026fbfefc4a056bdc17487902317142fac7e7be168c1886d0d4d94f2f4eb45c652fbc1626cca2a28d67974cbc7651ee988e6e06c8cedf7ceb9fc40400ae5e4aa74c92c6a51cbf9b0a4def23d410f6accd3641130bfc4e90a6341865c3f5ab3e89cf6c66052ed4148d3b3e22278d00031e5388ee5c867de2c6211d6ececb0c18ce7400dae15cb7947c491b8bea3fd2e23902eb82277d9800011b405bbf7b02433a9bcd715f5888b2007f000000001c000000010000000000000600000000309329170ee5b567e70f000006a10f58fa64533500000000000000000000000031000000000000001208e75a89faffbfb11b7dc6ea31001e846c12423a169f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc21b3f904fef5d7d617de7a6520655a80d0900f4d433623c850af895abba14f6fbd7fbad1f98e26ad4deaf1a4f40a4bc5e3abd378af7c9676a08e774c48785f895b4ec8d1141d5e8744d7f09ab4df6027bf48cabecead649f96ea24d32872c494160cb7f46ae680eeb80157eb23f9902519ac655fa73103170cbc496d7122034b85e7e87a2db762cbb253fbd76b9117c1a11d18aa2040c5f0c289906000000000000005ffc91ff799a11d9b219c00c369a12bf8885b862d0dbdd956cbda1bae489ef5ae59136aaadc59609f4d42617c0e6066938b521a0f2e2467a6c435ad5b800262a5da053ced5e95394e500000072737638ac44fb61310e2df511c60b3c88113996a81fb64bce5eb95ce91738640ff7ae6ed6b62086e699955926934389cdf9bcffff3ffd86fe9ce05268bf8a3958f2206cdc7095682c14f10be1075832956762b2dcc6251e7b74cb1da627e332765511c58215bf84d263e8778e6e8ffe4ea50b076446f35efffc806b340658342d2d9e1ef68c6ef3e98407d2fcefb34a0000000000000000895ddbb76122b1222e4da37177fe833e4fcaa67997e92a206ebd085bd9f90008d3fdd528efe6c1dca17f45ba5e8bd311a40030f9ffce75ffff996a80153a0077bb43f8a63dd390d18f0239b41da1a52383a4c6768ca1bb66b8fb3c5000f6f246fd20356a60769b461b6cdf133de073b1df08ae09268b0073bb97d88d741a5546e76caf4b6b1387ff37ec13d262dae0260be74cdf7bb6d3107597430ef5bbd476bb9d69b2aef9f3cb644b4bf01ccf16d40720939daf2ac59b1605989793859df469bdfb361b9c015dd026fd0fffe3c66f5c343afb78a7cfd852f3e05c089887d7df2ff4f9982030019421af6b78ff9c444a17091875cfe4eab0e7f50eb69c860b1613a6b4f5af04f9c635d8d646c89f8b85f820ce7464c731deba39f9ff7b81b7614bc9fd5f7b0acba754c01ed8bf1bba0010a8c6a2b966d861f9dd547abf2e9b23e5607f00f80b58fd76e4bc46c84799aa792cdaeb6cfb20ec8e3e10e3bbd12fd84dfb858e577dacff607ba513250e13ae696cd6ed7d318190a93b9ee07927efca6b8d1f5980994690bbe002db5146439d906a0d4aef065214b15666cdca81091b69acee2c7ce0821fc19e0891f0b53469f935c5ac420100010000000000fb53faf4420638489e6a1c696d8c414a87b60000000000080000b6be1557951854c01dbc2d061827ae6349a045b780893771524a424335b9fc34616ee9f0914105726253060000009b969938779736ece7b470078ac0b1b4b528000000009866e9994ca9096672ec9f3800c2fc35ba6516e542624c47bdba76a816c3a3dc6c3fa87a3ec91df199a9af910500bf2b8d0e7b77e6dfb4bbc9817847b705000000a100000000e795ace0d52bb3e9f2bf29960000ab8353f3800f045b90b0eaab6d731199c9447eabbc8c740183aff5389742e47de5000000826a570d14310700cf2ae3366ebdb7f1000000000000333c00e6addbf4c71ffad6bfb5babb49109f92a5a52042c425190a6e3f1a8a3abfe6059da9c952cf35c98ce7616355493d280f2d0be99e18fd0900c769e7eb4edc1c03a33676047229e0237c1e34641840531712ff09e89fb062a3e66e4fced0ae679733830039cb61ea0691f0b4e0b33194404e643243c3841e1e7fe301f7f47a7f89512d92e83624e3dfbfd0e5e381398e9d5428a10cc8a6d097d97e6ac8bd09b1a5577920a650114a522c1e2dcdc4f606fcbcee91770a9fada34d38cd7976a9228a0a0dd8661be8162e966aac26bea4c11458cd6ce22ddf7054cdd0a60ef3ec000000000000000000425cb75dc7ec92e9a5d29f9c99697d2a98ae0a9f35e419fbd7aeb7a60a0290bf897846f6f0f1c163d6075119169d55d10da9ad0e4b2c636d200000009baaf94e2b2c48e70d8453f832eecfb1de2a3f38a5c986de9e37737dac74db251d5e9ea2b8ed39e91a7a17d01b49f7aaff7c4c73c3484bdcab362838ed940035b239a3646ef55b9f070ae14466b3acef9f8b28fb918a237e2e068ae4a6bce4407b54cc14614c7b69122cdf877f000000000000000000000000bdcf23144e6c16b9235552aed83b6428f34d88c258a9ad16386bba51b60838fb11bc193a206b5a25b7233b222e4e68e0d1e88f26b9a45b6c29469530a37ea92aaf421cdcdaf594ecfaff9a79b56f8b38038002d25ddb1ce347e8d4c0f4c04be8fa72dc8a4e5d51468bce285102a0863e9b7785df924059ca5fa9380c2124adf160b644f2b2edc369046f654dadd5401b35b85b0aea58bb471c818c5ff9d5f7262d96c3977731459d231f00be487b9753d377e268d237cfd768d6883e9cc575dbb452052f5c676a75a51b50f9b5de8ffe3405a7a687ca8dbdedfc10268f3bf52cb9f72c7c1134067238399c9f16ac25877a09f9f8a614a087db4f347994c3b693ec5a99c9ee01eaf01b373ed85bc66b44f9c7c9dd061f6ce78d7e6b00a5a706ffa4bad65af70bb9188c8d5329d7acdc475ba330bb52"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xb8) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000005c0)=r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$kcm(0x29, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="330000001000010000000000000000000000000a20000000000a0103000000000000000001000000090001007359e25da4ccdf431aace6797a300000000040000000030a01020000000000000000010000090900030073797a320000000014000480080002400004000008000138000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a3000aa000028000480240001800b000100736f636b657400001400028008000140000000010800024000020000000000001100010000008c3bc1f6b0dd417b4a"], 0xd8}}, 0x4000040) ioctl$TUNSETSTEERINGEBPF(r2, 0x800454e0, &(0x7f00000001c0)=r3) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001900010000000000000000cd0258"], 0x24}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5800000010004b0400000000000000007a000000", @ANYRES32=0x0, @ANYBLOB="3c840300000000002c00128093000100697036677265746170000400180802801400470000000000000000000000ffffffffffffd1000100aaaaaaaaaa0000002363dd3b743d62ffc74c117610da6652a7ccf7c5814ad70cb242425ca757d86087364b7ee4581c3bf242ffb3899f70860216a6db89fe6cacec1b32a5a618283f4f49c3825ec83e915e4333b3033a5139d056e40063b079e9c273432a27adb64e0049427a2544955d25efe778033b6c700e7f6f8631a93979a7bd462eaad87d26bb53038ecef36a1eeaa060e92c40a581184cb5b976922278e83bc47ad5d88fa2f268b68a8d14df2d3a5e3d323560355aaaa870101dc3cc2d6fc2ff5c8b1bbb5b2371ac4f3a801f473d3ab65249a95c3589732e0d3c81328c1d387f112ed5f02e91fde3f83ef3ad2c9e2d0fcf4b88c1398d71c503a1b60e67ad6ecc"], 0x58}}, 0x80) socket(0xa, 0x3, 0x7) 2m35.79878859s ago: executing program 4 (id=1024): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000680001000000000000000000020000000000000006000700040000000c000880050005000000000008000600f200000008000500", @ANYRES32=r5], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf254300000008000300", @ANYRES32=r6, @ANYBLOB='\f\x00X'], 0x28}}, 0x40000) bind$inet(r1, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) socket$inet(0x2, 0x4, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r1, 0x1, 0x42, &(0x7f0000000200), 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'veth1_virt_wifi\x00', {0x7f}, 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@gettaction={0x3c, 0x32, 0x300, 0x70bd28, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7fffffff}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x3c}}, 0x0) 2m29.340063855s ago: executing program 1 (id=1127): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000480)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) setsockopt$ALG_SET_KEY(r0, 0x117, 0x19, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000631108000000000085100000020000008500000005000000950000000000232b8237a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000480)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_sha256\x00'}, 0x58) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@ipv4_newrule={0x24, 0x20, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_IP_PROTO={0x5, 0x19, 0x3c}]}, 0x24}}, 0x48850) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x19, 0x0, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x50, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x6, 0x0}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x50}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="0500000000000000631108000000000085100000020000008500000005000000950000000000232b8237a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) 2m29.174924159s ago: executing program 1 (id=1129): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000006c0)=@ipv4_newroute={0x34, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @LWT_BPF_IN={0xc, 0x1, 0x0, 0x1, @LWT_BPF_PROG_FD={0x8}}}]}, 0x34}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000000)={0x44, 0x2, 0x6, 0x1, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0x1}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000003c0)=@newqdisc={0x78, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xca9, 0x0, 0x0, 0x0, 0xf407}, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x11, 0x6, 0x1ff, {0x0, 0x0, 0x0, 0x3}}}}]}, 0x78}}, 0x0) 2m28.918487029s ago: executing program 1 (id=1131): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[@ANYRES16, @ANYRES64=r0, @ANYRES16=r0], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_DYING(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x6, 0x1, 0x3}, 0x14}}, 0x0) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x16, 0x0, &(0x7f00000000c0)) 2m28.68390428s ago: executing program 1 (id=1133): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x2, 0x79, 0x10, 0x28}, [@ldst={0x6, 0x3, 0x0, 0x0, 0x5}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = socket(0x10, 0x803, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0xc00}}}]}, 0x38}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6_sctp(0xa, 0x5, 0x84) socket(0x11, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000200)=@framed, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r4, &(0x7f0000000000), &(0x7f00000006c0)=""/73, 0x4}, 0x20) (async) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r5) sendmsg$NLBL_MGMT_C_ADDDEF(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100fbdfd09172c182c604000000140005000000000000000000000000000000000108000200050000001400060020010000000000000000000000000001060005"], 0x4c}}, 0x0) (async) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000840)=@newtfilter={0x5c, 0x2c, 0xd27, 0x40, 0x0, {0x0, 0x0, 0x0, r3, {0xf0, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_CT_LABELS={0x14, 0x61, "9aa5b988c0362d189ccb2c2c6de8acab"}, @TCA_FLOWER_KEY_CT_LABELS_MASK={0x14, 0x62, "91b6ffb363c3d6b8fecb0cb3eaec4087"}]}}]}, 0x5c}}, 0x0) (async) bind$packet(r0, &(0x7f0000000080)={0x11, 0xf7, r3, 0x1, 0xff, 0x6, @local}, 0x14) 2m28.603061981s ago: executing program 1 (id=1135): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000100)={0xd, 0x4, &(0x7f0000001340)=ANY=[@ANYBLOB="18000000000000000000000000000000611234000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0xf, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x9}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x40, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) bind$packet(r0, &(0x7f0000000200)={0x11, 0x15, r2, 0x1, 0x9, 0x6, @multicast}, 0x14) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e23, 0xfffffffe, @private0={0xfc, 0x0, '\x00', 0x1}, 0x8}, 0x1c) 2m28.456139412s ago: executing program 1 (id=1136): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8000, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x2c1673f55626d92b}, 0x41080) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000080)={0x0, 0x5, [@broadcast, @local, @multicast, @remote, @remote]}) (async) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000080)={0x0, 0x5, [@broadcast, @local, @multicast, @remote, @remote]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa2}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$pppl2tp(0x18, 0x1, 0x1) 2m20.754514538s ago: executing program 32 (id=1024): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) accept4(r0, 0x0, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c000000680001000000000000000000020000000000000006000700040000000c000880050005000000000008000600f200000008000500", @ANYRES32=r5], 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000003c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010027bd7000fcdbdf254300000008000300", @ANYRES32=r6, @ANYBLOB='\f\x00X'], 0x28}}, 0x40000) bind$inet(r1, 0x0, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)={0x14, 0x25, 0x1, 0x70bd2c, 0x25dfdbfe, {0x6}}, 0x14}, 0x1, 0x0, 0x0, 0x40080c0}, 0x24000100) socket$inet(0x2, 0x4, 0x4) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r1, 0x1, 0x42, &(0x7f0000000200), 0x10) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000040)={0x7, 'veth1_virt_wifi\x00', {0x7f}, 0x1}) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@gettaction={0x3c, 0x32, 0x300, 0x70bd28, 0x25dfdbff, {}, [@action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x7fffffff}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8, 0x4, 0x9}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x0, 0x1}}]}, 0x3c}}, 0x0) 2m13.356282065s ago: executing program 33 (id=1136): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r4, @ANYBLOB="379500000000000000007200000008000300", @ANYRES32=r5], 0x1c}}, 0x0) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x34, r1, 0x2, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x8000, 0x7d}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x2c1673f55626d92b}, 0x41080) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000080)={0x0, 0x5, [@broadcast, @local, @multicast, @remote, @remote]}) (async) ioctl$TUNSETTXFILTER(r6, 0x400454d1, &(0x7f0000000080)={0x0, 0x5, [@broadcast, @local, @multicast, @remote, @remote]}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x6a, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xa2}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) socket$pppl2tp(0x18, 0x1, 0x1) 1m51.03297255s ago: executing program 5 (id=1588): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r1, @ANYBLOB="33030000000000000000150000000c0001800800030004"], 0x20}}, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000700)={0x3, &(0x7f0000000000)=[{0x50}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010000100"/20, @ANYRES32=r4, @ANYBLOB="000000000000000014001680100001800c0005000000000000000000040014"], 0x38}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r5) 1m50.724074965s ago: executing program 5 (id=1592): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) getsockopt$IP_VS_SO_GET_DESTS(0xffffffffffffffff, 0x0, 0x484, &(0x7f0000000500)=""/4096, &(0x7f0000000040)=0x1000) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000002d80)={0x6, 0xf, &(0x7f0000002d00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xe3e, 0x0, 0x0, 0x0, 0x1}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x1}}}, &(0x7f0000000280)='GPL\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0)={0x0, 0xfffffffc}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m50.574362558s ago: executing program 5 (id=1596): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r0, 0x0, 0x0, 0x20004041, 0x0, 0x0) r1 = socket(0xa, 0x3, 0x3a) getsockopt$nfc_llcp(r1, 0x3a, 0x1, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r1, 0x84, 0x65, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0xda, @mcast1, 0x100}, @in={0x2, 0x4e23, @broadcast}, @in={0x2, 0x4e23, @remote}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e21, 0x1, @local, 0x2}, @in6={0xa, 0x4e24, 0x9, @empty, 0x18cdfdbe}, @in6={0xa, 0x4e20, 0x2, @private0, 0x6}, @in6={0xa, 0x4e22, 0x6, @loopback}], 0xbc) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0xcc15, @dev={0xfe, 0x80, '\x00', 0x3}, 0x7}, 0x1c) close(r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x7, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r3}, 0x0, &(0x7f00000002c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r4}, 0x10) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) setsockopt$packet_int(r5, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) sendto$packet(r5, &(0x7f0000000100)="3f031c000302140006001e00890000004a1b7880610cc945000088a800"/38, 0x26, 0x1, &(0x7f0000000540)={0xc9, 0x88a8, r6, 0x1, 0x1, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}, 0x14) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_FLUSH_ADDRS(r2, &(0x7f0000000f00)={0x0, 0x1fff, &(0x7f0000000ec0)={&(0x7f0000000e40)={0x14, r7, 0x1, 0x70bd27, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x40}, 0x48010) 1m50.292039288s ago: executing program 5 (id=1599): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x34, r1, 0x1, 0x100, 0x25dfdbfc, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_TYPE={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x24000854}, 0x20000010) 1m50.107988551s ago: executing program 5 (id=1603): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000380)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) (async) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001900)=@bridge_setlink={0x24, 0x13, 0xa29, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x1000000}, [@IFLA_AF_SPEC={0x4, 0xc, 0x0, 0x0}]}, 0x24}}, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) (async) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r6 = socket(0x8, 0x2, 0x0) (async) getsockopt$inet_sctp_SCTP_CONTEXT(0xffffffffffffffff, 0x84, 0x11, &(0x7f0000000240)={0x0}, &(0x7f00000002c0)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000003c0)={r7, 0x2c, &(0x7f0000000300)=[@in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e24, 0x3, @rand_addr=' \x01\x00', 0xe1c}]}, &(0x7f0000000400)=0x10) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) (async) ioctl$SIOCX25SFACILITIES(r6, 0x89e3, &(0x7f0000000440)={0xd, 0x0, 0x8, 0x9, 0x1, 0xea459e5bfea2ab1b}) (async) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) (async) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f0000000140), 0x4) getsockopt$bt_hci(r5, 0x11a, 0x2, 0x0, &(0x7f0000000000)) (async) ppoll(&(0x7f0000000000)=[{0xffffffffffffffff, 0x82}, {r4, 0x81}, {}, {r0}, {}, {}, {0xffffffffffffffff, 0x9608}, {}], 0x8, &(0x7f0000000040)={0x77359400}, &(0x7f0000000080)={[0xae5]}, 0x4) 1m50.041878841s ago: executing program 5 (id=1605): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={r0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x3002}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000a79e873aed8ccb30c369f8ff69dacf96b48e18cbeefb98a0922e0ba5940b", @ANYRES16=r2, @ANYBLOB="00022abd7000fedbdf25120000000500300000000000080031000900000008000600", @ANYRES32=r3, @ANYBLOB="080039000200000008000b00030000000500370001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfc, {0x1}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@gettfilter={0x5c, 0x2e, 0x104, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8, 0xf}, {0x0, 0xd}, {0x6, 0xa}}, [{0x8, 0xb, 0x1000}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xd2}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2c}, {0x8, 0xb, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8004) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r7, &(0x7f0000000180)="4326fad6b472bed6cc85a2cb17f3e0002fb738718cd1ee19c0b23cb4904a28fcb1eb944369e9d965ad5d9e1741e47e6382", 0xfffffffffffffd98, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8948, &(0x7f0000000000)={'vlan0\x00', 0x10001}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e0020000280080001001000000008000300010000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r8, @ANYBLOB="af9640fc761202ce56184a6177ed9500ac8459c00d"], 0x58}}, 0x0) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x800}, 0x8) 1m36.058290879s ago: executing program 2 (id=1813): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x2, 0x3, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={r1, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x2, 0x5, 0x370, 0x150, 0x220, 0xffffffff, 0xa8, 0x150, 0x2d8, 0x2d8, 0xffffffff, 0x2d8, 0x2d8, 0x5, 0x0, {[{{@uncond, 0xae01, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x2, {0x0, @local, @rand_addr, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @loopback, @private, @gre_key}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x1a03000000000000}, [@common=@icmp={{0x28}, {0x0, "e286"}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast1, @port, @icmp_id}}}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'veth1_vlan\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4, @ipv6=@loopback, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) mmap(&(0x7f0000aec000/0x3000)=nil, 0x3000, 0xc, 0x3032, r0, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f7, &(0x7f00000010c0)={'bond0\x00', 0x0}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0x2}, 0xe) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x32, 0x0, 0x0, 0x0, 0x7ffffffe}}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c09000000000000008680400000000000000000", @ANYRES32=0x0, @ANYBLOB="cb840400000000001c00128009000100626f6e64000000000c0002800800070005000000"], 0x3c}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xe37, 0x8000000, 0x0, {0x0, 0x0, 0x0, r10, {0x6, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x8}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}]}}]}, 0x44}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="20002abd7000ffdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="e9c03ed6d9214b7a7623f5cb3c28a0005cf34c470289fde4ab89611ff66485f8e7e46b5cde9010ae3cf7e7741e3c1a77674e0d435ace1e4dad478446841189fc2ed4c7e0c92d6a591c072ca5b48894"], 0x5c}, 0x1, 0x0, 0x0, 0x40000d5}, 0x81) 1m34.922192405s ago: executing program 34 (id=1605): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000300)={r0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000380), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000400)=0x14) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x3002}, 0xc, &(0x7f00000004c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="44000000a79e873aed8ccb30c369f8ff69dacf96b48e18cbeefb98a0922e0ba5940b", @ANYRES16=r2, @ANYBLOB="00022abd7000fedbdf25120000000500300000000000080031000900000008000600", @ANYRES32=r3, @ANYBLOB="080039000200000008000b00030000000500370001000000"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, 0x25, 0x301, 0x270bd24, 0x25dfdbfc, {0x1}}, 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'veth0_to_bond\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)=@gettfilter={0x5c, 0x2e, 0x104, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x8, 0xf}, {0x0, 0xd}, {0x6, 0xa}}, [{0x8, 0xb, 0x1000}, {0x8, 0xb, 0x9}, {0x8, 0xb, 0xd2}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0x2}, {0x8, 0xb, 0x2c}, {0x8, 0xb, 0x4}]}, 0x5c}, 0x1, 0x0, 0x0, 0x20000001}, 0x8004) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r7, 0x29, 0x33, &(0x7f0000000000)=0x6, 0x4) bind$inet6(r7, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) sendto$inet6(r7, &(0x7f0000000180)="4326fad6b472bed6cc85a2cb17f3e0002fb738718cd1ee19c0b23cb4904a28fcb1eb944369e9d965ad5d9e1741e47e6382", 0xfffffffffffffd98, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2, 0x18115, @rand_addr, 0x983a}, 0x1c) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) r9 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r9, 0x8948, &(0x7f0000000000)={'vlan0\x00', 0x10001}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=ANY=[@ANYBLOB="580000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800c0001006d6163766c616e0020000280080001001000000008000300010000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r8, @ANYBLOB="af9640fc761202ce56184a6177ed9500ac8459c00d"], 0x58}}, 0x0) setsockopt$sock_linger(r9, 0x1, 0xd, &(0x7f00000000c0)={0x0, 0x800}, 0x8) 1m24.150426668s ago: executing program 2 (id=1813): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x2, 0x3, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={r1, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x2, 0x5, 0x370, 0x150, 0x220, 0xffffffff, 0xa8, 0x150, 0x2d8, 0x2d8, 0xffffffff, 0x2d8, 0x2d8, 0x5, 0x0, {[{{@uncond, 0xae01, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x2, {0x0, @local, @rand_addr, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @loopback, @private, @gre_key}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x1a03000000000000}, [@common=@icmp={{0x28}, {0x0, "e286"}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast1, @port, @icmp_id}}}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'veth1_vlan\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4, @ipv6=@loopback, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) mmap(&(0x7f0000aec000/0x3000)=nil, 0x3000, 0xc, 0x3032, r0, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f7, &(0x7f00000010c0)={'bond0\x00', 0x0}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0x2}, 0xe) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x32, 0x0, 0x0, 0x0, 0x7ffffffe}}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c09000000000000008680400000000000000000", @ANYRES32=0x0, @ANYBLOB="cb840400000000001c00128009000100626f6e64000000000c0002800800070005000000"], 0x3c}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xe37, 0x8000000, 0x0, {0x0, 0x0, 0x0, r10, {0x6, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x8}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}]}}]}, 0x44}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="20002abd7000ffdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="e9c03ed6d9214b7a7623f5cb3c28a0005cf34c470289fde4ab89611ff66485f8e7e46b5cde9010ae3cf7e7741e3c1a77674e0d435ace1e4dad478446841189fc2ed4c7e0c92d6a591c072ca5b48894"], 0x5c}, 0x1, 0x0, 0x0, 0x40000d5}, 0x81) 1m15.964205531s ago: executing program 3 (id=1961): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x40, 0x16, 0xa, 0x203, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x14, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x68}}, 0x0) syz_init_net_socket$x25(0x9, 0x5, 0x0) (async) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCAUSEDIAG(r1, 0x89ec, &(0x7f0000000340)) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a40000000160a01010000000000000000020000000900020073797a32000000000900010073797a7a34fc86001400038008000240000000000800014000000000140000001100010000000000000000000000000a"], 0x68}}, 0x0) 1m15.538831458s ago: executing program 3 (id=1966): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffff3, @random="ebc7a00e38a8"}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x54}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061112800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 1m10.142447761s ago: executing program 2 (id=1813): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x2, 0x3, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={r1, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x2, 0x5, 0x370, 0x150, 0x220, 0xffffffff, 0xa8, 0x150, 0x2d8, 0x2d8, 0xffffffff, 0x2d8, 0x2d8, 0x5, 0x0, {[{{@uncond, 0xae01, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x2, {0x0, @local, @rand_addr, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @loopback, @private, @gre_key}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x1a03000000000000}, [@common=@icmp={{0x28}, {0x0, "e286"}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast1, @port, @icmp_id}}}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'veth1_vlan\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4, @ipv6=@loopback, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) mmap(&(0x7f0000aec000/0x3000)=nil, 0x3000, 0xc, 0x3032, r0, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f7, &(0x7f00000010c0)={'bond0\x00', 0x0}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0x2}, 0xe) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x32, 0x0, 0x0, 0x0, 0x7ffffffe}}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c09000000000000008680400000000000000000", @ANYRES32=0x0, @ANYBLOB="cb840400000000001c00128009000100626f6e64000000000c0002800800070005000000"], 0x3c}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xe37, 0x8000000, 0x0, {0x0, 0x0, 0x0, r10, {0x6, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x8}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}]}}]}, 0x44}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="20002abd7000ffdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="e9c03ed6d9214b7a7623f5cb3c28a0005cf34c470289fde4ab89611ff66485f8e7e46b5cde9010ae3cf7e7741e3c1a77674e0d435ace1e4dad478446841189fc2ed4c7e0c92d6a591c072ca5b48894"], 0x5c}, 0x1, 0x0, 0x0, 0x40000d5}, 0x81) 1m0.457277146s ago: executing program 3 (id=1966): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffff3, @random="ebc7a00e38a8"}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x54}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061112800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 53.643250564s ago: executing program 2 (id=1813): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x2, 0x3, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={r1, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x2, 0x5, 0x370, 0x150, 0x220, 0xffffffff, 0xa8, 0x150, 0x2d8, 0x2d8, 0xffffffff, 0x2d8, 0x2d8, 0x5, 0x0, {[{{@uncond, 0xae01, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x2, {0x0, @local, @rand_addr, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @loopback, @private, @gre_key}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x1a03000000000000}, [@common=@icmp={{0x28}, {0x0, "e286"}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast1, @port, @icmp_id}}}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'veth1_vlan\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4, @ipv6=@loopback, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) mmap(&(0x7f0000aec000/0x3000)=nil, 0x3000, 0xc, 0x3032, r0, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f7, &(0x7f00000010c0)={'bond0\x00', 0x0}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0x2}, 0xe) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x32, 0x0, 0x0, 0x0, 0x7ffffffe}}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c09000000000000008680400000000000000000", @ANYRES32=0x0, @ANYBLOB="cb840400000000001c00128009000100626f6e64000000000c0002800800070005000000"], 0x3c}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xe37, 0x8000000, 0x0, {0x0, 0x0, 0x0, r10, {0x6, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x8}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}]}}]}, 0x44}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="20002abd7000ffdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="e9c03ed6d9214b7a7623f5cb3c28a0005cf34c470289fde4ab89611ff66485f8e7e46b5cde9010ae3cf7e7741e3c1a77674e0d435ace1e4dad478446841189fc2ed4c7e0c92d6a591c072ca5b48894"], 0x5c}, 0x1, 0x0, 0x0, 0x40000d5}, 0x81) 44.079203113s ago: executing program 3 (id=1966): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffff3, @random="ebc7a00e38a8"}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x54}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061112800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 34.663471819s ago: executing program 2 (id=1813): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x2, 0x3, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={r1, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x2, 0x5, 0x370, 0x150, 0x220, 0xffffffff, 0xa8, 0x150, 0x2d8, 0x2d8, 0xffffffff, 0x2d8, 0x2d8, 0x5, 0x0, {[{{@uncond, 0xae01, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x2, {0x0, @local, @rand_addr, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @loopback, @private, @gre_key}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x1a03000000000000}, [@common=@icmp={{0x28}, {0x0, "e286"}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast1, @port, @icmp_id}}}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'veth1_vlan\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4, @ipv6=@loopback, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) mmap(&(0x7f0000aec000/0x3000)=nil, 0x3000, 0xc, 0x3032, r0, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f7, &(0x7f00000010c0)={'bond0\x00', 0x0}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0x2}, 0xe) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x32, 0x0, 0x0, 0x0, 0x7ffffffe}}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c09000000000000008680400000000000000000", @ANYRES32=0x0, @ANYBLOB="cb840400000000001c00128009000100626f6e64000000000c0002800800070005000000"], 0x3c}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xe37, 0x8000000, 0x0, {0x0, 0x0, 0x0, r10, {0x6, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x8}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}]}}]}, 0x44}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="20002abd7000ffdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="e9c03ed6d9214b7a7623f5cb3c28a0005cf34c470289fde4ab89611ff66485f8e7e46b5cde9010ae3cf7e7741e3c1a77674e0d435ace1e4dad478446841189fc2ed4c7e0c92d6a591c072ca5b48894"], 0x5c}, 0x1, 0x0, 0x0, 0x40000d5}, 0x81) 25.570072661s ago: executing program 3 (id=1966): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffff3, @random="ebc7a00e38a8"}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x54}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061112800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 14.081149942s ago: executing program 2 (id=1813): r0 = socket$inet(0x2, 0x2, 0x1) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000015c0)={0x2, 0x3, &(0x7f0000001bc0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000140)='syzkaller\x00', 0x6, 0x1000, &(0x7f0000000180)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0x1c, &(0x7f0000000000)={r1, 0x1}, 0xc) setsockopt$sock_int(r0, 0x1, 0x5, &(0x7f0000000440)=0x1, 0x4) sendmsg$inet(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000400)='\b', 0x1}, {&(0x7f0000000040)="000000070020ac", 0x7}], 0x2}, 0x0) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000400)=@nat={'nat\x00', 0x2, 0x5, 0x370, 0x150, 0x220, 0xffffffff, 0xa8, 0x150, 0x2d8, 0x2d8, 0xffffffff, 0x2d8, 0x2d8, 0x5, 0x0, {[{{@uncond, 0xae01, 0x70, 0xa8}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x2, {0x0, @local, @rand_addr, @icmp_id}}}}, {{@uncond, 0x0, 0x70, 0xa8}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @loopback, @private, @gre_key}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {0x1a03000000000000}, [@common=@icmp={{0x28}, {0x0, "e286"}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x0, @multicast1, @multicast1, @port, @icmp_id}}}}, {{@ip={@broadcast, @local, 0x0, 0x0, 'veth1_vlan\x00', 'netdevsim0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4, @ipv6=@loopback, @icmp_id, @icmp_id}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3d0) mmap(&(0x7f0000aec000/0x3000)=nil, 0x3000, 0xc, 0x3032, r0, 0x2000) mmap(&(0x7f0000000000/0xfff000)=nil, 0xfff002, 0x0, 0x2000000000032, 0xffffffffffffffff, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x89f7, &(0x7f00000010c0)={'bond0\x00', 0x0}) bind$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0)={0x1f, 0x2, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7, 0x2}, 0xe) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x8, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0xfff2}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x32, 0x0, 0x0, 0x0, 0x7ffffffe}}}}]}, 0x78}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="3c09000000000000008680400000000000000000", @ANYRES32=0x0, @ANYBLOB="cb840400000000001c00128009000100626f6e64000000000c0002800800070005000000"], 0x3c}}, 0x0) socket$can_j1939(0x1d, 0x2, 0x7) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$team(&(0x7f00000002c0), 0xffffffffffffffff) r9 = socket(0x2a, 0x2, 0x0) getsockname$packet(r9, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@newtfilter={0x44, 0x2c, 0xe37, 0x8000000, 0x0, {0x0, 0x0, 0x0, r10, {0x6, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_CT_MARK_MASK={0x8, 0x60, 0x8}, @TCA_FLOWER_KEY_CT_MARK={0x8, 0x5f, 0x9}]}}]}, 0x44}}, 0x0) sendmsg$TEAM_CMD_OPTIONS_GET(r7, &(0x7f00000003c0)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000380)={&(0x7f0000000800)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="20002abd7000ffdbdf250200000008000100", @ANYRES32=r5, @ANYBLOB="400002803c00010024000100757365725f6c696e6b75705f656e61626c65640000000000000000000000000005000300060000000400040008000600", @ANYRES32=r10, @ANYBLOB="e9c03ed6d9214b7a7623f5cb3c28a0005cf34c470289fde4ab89611ff66485f8e7e46b5cde9010ae3cf7e7741e3c1a77674e0d435ace1e4dad478446841189fc2ed4c7e0c92d6a591c072ca5b48894"], 0x5c}, 0x1, 0x0, 0x0, 0x40000d5}, 0x81) 8.708912215s ago: executing program 3 (id=1966): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@newlink={0x54, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0xfffffff3, @random="ebc7a00e38a8"}}]}]}, @IFLA_IFALIASn={0x4}]}, 0x54}}, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x17) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="650a00000000000061112800000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r2}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2.856748046s ago: executing program 7 (id=2427): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x100, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x6f, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_TAIL={0x6, 0xf, [@supported_rates]}, @NL80211_ATTR_FTM_RESPONDER={0x4c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x35, 0x2, "a5bc32d771f31d8d1919ceb0a054ff22ff9e013bb1ffe45731b1701d2e52ed137935f4ff720434084462ae57068cdb86c5"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) 2.443714767s ago: executing program 7 (id=2429): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001240)=ANY=[@ANYBLOB="0200000004000000080000000100000080"], 0x50) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, &(0x7f0000000180)=0x9, 0x1, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000007bc0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_KEY(r5, &(0x7f0000009240)={0x0, 0x0, &(0x7f0000009200)={&(0x7f0000000040)={0x40, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "f149010980000202000000270a"}, @NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac0c}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x5}]}, 0x40}}, 0x0) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000005000000180001801400020073797a5f74756e00000008000000000018000380140003801000018004000300080001"], 0x44}}, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)={0x44, r6, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x18, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}]}]}, 0x44}}, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000300)={{r0, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000180)='%ps \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000040)={r7}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r8}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000014000000850000002a00000095"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000380)='kvm_dirty_ring_reset\x00', r8, 0x0, 0x2000000008}, 0x18) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ipvs(&(0x7f0000009380), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_SERVICE(r11, &(0x7f0000009440)={0x0, 0x0, &(0x7f0000009400)={&(0x7f00000093c0)=ANY=[@ANYBLOB="94ce0000", @ANYRES16=r12, @ANYBLOB="893b2dbd7000fcdbdf2504000000"], 0x14}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.677162957s ago: executing program 6 (id=2433): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000040)={'wg0\x00'}) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r1, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3c8, 0x0, 0x0, 0x1d0, 0x2e0, 0x2e0, 0x2e0, 0x4, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE1={0x28}}, {{@arp={@multicast2, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@link_local}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'xfrm0\x00', 'pim6reg\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast}}}], {{'\x00', 0xc0, 0xe8}, {0x28, '\x00', 0x0, 0xfffffffb}}}}, 0x418) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) getsockopt$inet6_mreq(r2, 0x29, 0x14, &(0x7f0000000000)={@mcast2}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)=@newtaction={0x148, 0x30, 0xc808e8d6fcb00ba1, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x134, 0x1, [@m_connmark={0x130, 0x11, 0x0, 0x0, {{0xd}, {0x100, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x81, 0x1, 0xe, 0x7}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x48, 0x3, 0xd14, 0x8}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1000, 0xfffffffffffffff8, 0x0, 0x6}, 0x1}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x6, 0x1, 0x6, 0x5, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0x6, 0x1, 0x6}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2, 0x4ad, 0x8, 0xffff, 0x5}, 0xffff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xd, 0x46d, 0x20000000, 0xc1, 0x2}, 0x6}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x2a, 0x32, 0x10000000, 0x5, 0x3ff}, 0x1ff}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x7f, 0xffff, 0x69ed29e4e43b1, 0x1, 0x8}}}]}, {0x4}, {0xc}, {0xfffffe74, 0x8, {0x2, 0x2}}}}]}]}, 0x148}}, 0x0) 1.503994819s ago: executing program 0 (id=2434): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f33ef60916e6e893f1eeb0be2566cd0723043c47c896ce0bce66a245ad98a6f77ef26dcca5582054d54d53cd2b6db714e4b94bdae214fa68a0557343c5ca683a4b6fc89398f2b0000f224ab1bf906536e11d3f38e5c27891060017cfa6fa26fa7a34700de60beac671e8e8fdecb03588aa623fa71f871ab5c2ff88afc715f9fa75b52710aeee835cf0d78e45f70983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed55b0d18a93ee"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000380)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0ffc40bffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400210000000404000001000000b7050000220000006a0a00fe00000000850000000b000000b7000000592000009500000000000000a3028cb5af6c8f5d76781dcb7729f0170720596bb3b4d821d976f5843061cc2e3afbae82d7932d192321fa3b3042f100"/172], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0xa002a0, 0x10, 0x18, &(0x7f0000000000)="5ae02efc441a80536af0d1d905c723fa", &(0x7f0000000040)=""/24, 0x6414}, 0x28) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000140)={@map=r1, r0, 0x4, 0x0, 0x0, @void, @value}, 0x10) 1.431572627s ago: executing program 7 (id=2435): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x14, 0x4, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x4, &(0x7f00000000c0)={r1, &(0x7f0000000000), 0x0}, 0x20) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket(0x22, 0x6, 0x5) bind$alg(r2, &(0x7f0000000100)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r2) sendmsg$DEVLINK_CMD_SB_OCC_SNAPSHOT(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x20008045}, 0x0) 1.392479509s ago: executing program 0 (id=2436): unshare(0x20000400) bpf$TOKEN_CREATE(0x24, &(0x7f0000000540), 0x8) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000580)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x1}]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000004c0)={r1, 0xc0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0}}, 0x10) r2 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000600)=@generic={&(0x7f00000005c0)='./file0\x00', 0x0, 0x10}, 0x18) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000640)={0x0, @broadcast, @broadcast}, &(0x7f0000000680)=0xc) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000006c0)={0x2, 0x4, 0x8, 0x1, 0x80, r2, 0x400000, '\x00', r3, r0, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(r4, &(0x7f0000000500)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x18, 0x0, 0x10, 0x70bd25, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x44000}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000100)={'tunl0\x00', &(0x7f0000000080)={'sit0\x00', 0x0, 0x1, 0x0, 0x7, 0x0, {{0x5, 0x4, 0x1, 0x4, 0x14, 0x68, 0x0, 0x9, 0x29, 0x0, @multicast2, @multicast2}}}}) ioctl$SIOCAX25OPTRT(0xffffffffffffffff, 0x89e7, &(0x7f00000003c0)={@default, @bcast, 0x2, 0x20}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d080218000000110000a1180008000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d9303f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) sendmsg$NL80211_CMD_CONNECT(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000100)={0x2c, r7, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @crypto_settings=[@NL80211_ATTR_AKM_SUITES={0x4}]]}, 0x2c}}, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r10, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r10, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYRES16=r5], &(0x7f0000000000)='GPL\x00', 0xfffffffc, 0x0, 0x0, 0x40f00, 0x0, '\x00', r5, 0x1b, r10, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.235974656s ago: executing program 6 (id=2437): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f0000000200)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050427fd7000fedbdf2501e0bd0008000100618f7d26a48f6cdeaf4cb47528b1fa9a4213a5338bfcd0185463a2682c77bcd946b69478b129fc268d9d303b6c355df96b55b9e9daaa208627d20c249984fb2d8e502e022adfb2259f7285b2b36fe194e59d932b3ced44853438c343550b789de03add8a950a86b6d51dccc3b557b055c10d8ee2b2d667d5bb6dbc3d658be523e643c2404789152c064818a32d9f4b98f66196754eea710a646d594908d592fb5d7b789e38f20e3f9bb845dc026cf5f7aa5d2daedc68346cbb83f1dfc22cab63068c82fc1ae6f10034c07e3396a81816c131afc2b920d42d", @ANYRES32=r2, @ANYBLOB="440002057367f356c9cd8040000100240001006d6f646500000000000000000000000000000000000000030005000000100004006c6f616462616c616e636500"/75], 0x60}, 0x1, 0x0, 0x0, 0x4000401}, 0x4084) 1.234796642s ago: executing program 7 (id=2438): r0 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000340)={'wpan1\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f00000000c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_MAX_FRAME_RETRIES(r1, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000640)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="00022dbd7000ffdbdf250f00000008000300", @ANYRES32=r4, @ANYBLOB="0c15060002000000e1ecd1399bfb34f9717799d4b8d57aaf6b37269d1b4c7767ef3b0141020008000300"/54, @ANYRES32=r2, @ANYBLOB="05000f000800000008000300", @ANYRES32=r2, @ANYBLOB="0c0006000100000001000000"], 0x64}, 0x1, 0x0, 0x0, 0x10}, 0x20000050) r5 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d0800050000000000080005000000000008000500000000000800050000ebffff070005"], 0x134}}, 0x4048014) write$tun(0xffffffffffffffff, &(0x7f0000000300)={@void, @void, @eth={@broadcast, @remote, @val={@void, {0x8100, 0x0, 0x0, 0x4}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x2, 0x9, 0x5c, 0x167, 0x0, 0x5d, 0x11, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x4e23, 0x4e22, 0x48, 0x0, @wg=@cookie={0x3, 0x1, "cf24e32481831aec3d74ad335d981f9cead0ce9ab78a3c6e", "6346a8d16a4263470cfd0b63ec6331239ed149bff2dd6edbfe35572f5292dc21"}}}}}}}, 0x6e) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000005c0)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="010000000000c06347bb52444184380a83af9087fe2ffbdbdf25250000ff0d0001006e657464657673696d00004d2d819183c3000f0002006e657464657673696d300000"], 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x91) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r6, &(0x7f0000000500)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x60, r8, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x40}, {0x6, 0x16, 0xa}, {0x5, 0x12, 0x1}, {0x6, 0x11, 0x3}, {0x8, 0xb, 0x100}}]}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x24000850) sendmsg$key(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00008feff0)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000100)={0x4, 0x0, &(0x7f00008feff0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="020d0000100000002f3144e8edffffff03000600ff18000002004909000100000000000000001e0e080012000200010000d200000000000030006c540203009f7eae02000000adb20200000000f52c000000cdff00000001020014bb000001000000002300001300030005000020000002"], 0x80}}, 0x0) r9 = socket$key(0xf, 0x3, 0x2) sendmmsg(r9, &(0x7f00000000c0), 0x2c8, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r12, &(0x7f00000bd000), 0x318, 0x0) r13 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r13, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x0, @remote, 0x18}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000b40)="56501366ff47fd29ff39cc10d7e7ae240fee90ea7a4c89f1cdfe3f2e0f12891baba90886caf8977d0dcc633ed17d0397c438fe56f4fd24f0d26f089b56063df93af577207668dd8d7529d7193dd969a7bde4830ccde8d43cf987", 0x5a}], 0x1, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}, {{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000100)="13c21a", 0x3}], 0x1}}], 0x2, 0x8008801) connect$unix(r11, &(0x7f0000000000)=@abs={0x0, 0x0, 0x2}, 0x6e) connect$unix(r11, &(0x7f0000000800)=@file={0x0, './file0\x00'}, 0x6e) syz_genetlink_get_family_id$devlink(&(0x7f00000007c0), 0xffffffffffffffff) r14 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) connect$inet(r14, &(0x7f00000000c0)={0x2, 0x4e24, @remote}, 0x10) sendmsg$DEVLINK_CMD_RATE_NEW(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYRES16=r3, @ANYRES16=r11, @ANYBLOB="0100000000ab0000000000420000000e0001006e657464657673696d0000e60f0002006e657464657673696d3000"], 0x34}}, 0x40e5) sendmsg$NL802154_CMD_SET_CHANNEL(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x24, r0, 0x3, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_PAGE={0x5, 0x7, 0x2}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x806) 1.136368371s ago: executing program 0 (id=2439): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)={0x100, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x6f, 0xe, {{{}, {}, @device_b, @device_b}, 0x0, @default, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val, @void, @void, @void, @val={0x5, 0x3}, @void, @val={0x2a, 0x1}, @void, @val={0x2d, 0x1a}, @val={0x72, 0x6}, @val={0x71, 0x7}, @val={0x76, 0x6}}}, @NL80211_ATTR_BEACON_TAIL={0x6, 0xf, [@supported_rates]}, @NL80211_ATTR_FTM_RESPONDER={0x4c, 0x10e, 0x0, 0x1, [@NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_ENABLED={0x4}, @NL80211_FTM_RESP_ATTR_LCI={0x35, 0x2, "a5bc32d771f31d8d1919ceb0a054ff22ff9e013bb1ffe45731b1701d2e52ed137935f4ff720434084462ae57068cdb86c5"}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}, @NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x1}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000044}, 0x0) 1.050704019s ago: executing program 6 (id=2440): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) (async) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x114, r1, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83\xc1\xee\x8eM\xcev\x9b\xd3\x9b5\xb0\x05f\x89,\x13\xb7h\xd2\xe1\xe9\x7f\x91\xd2{\xe01\x1a\xea\xd9\x13\x82uo\xc4n\x9f\xeb\xf9\xd9*\x9bn\x8a\n\xa4!\xc7\xac4'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0xfe892ee8618106ea, 0x6, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}]}, 0x114}}, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) (async) r2 = socket$netlink(0x10, 0x3, 0x400000000000004) socket$inet(0x2b, 0x801, 0x0) (async) r3 = socket$inet(0x2b, 0x801, 0x0) r4 = accept4$x25(0xffffffffffffffff, &(0x7f00000001c0)={0x9, @remote}, &(0x7f0000000240)=0x12, 0x80000) splice(r3, &(0x7f0000000180)=0x4, r4, &(0x7f0000000280)=0x6, 0x2, 0x7) (async) splice(r3, &(0x7f0000000180)=0x4, r4, &(0x7f0000000280)=0x6, 0x2, 0x7) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000000)={@remote, @loopback, @multicast1}, 0xc) socket$inet6(0xa, 0x802, 0x0) (async) r5 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r5, 0x29, 0x39, &(0x7f0000000040)="ff0204000000000100000000000000000000000000000205", 0x18) getsockopt$inet6_opts(r5, 0x29, 0x39, 0x0, &(0x7f0000000080)=0x35) socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@ifindex, r9, 0x5, 0x0, 0x0, @void, @value}, 0x20) sendmsg$inet(r6, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000c80)="5ba57073", 0x4}], 0x1}, 0x1) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r8}, &(0x7f00000006c0), &(0x7f0000000700)=r7}, 0x20) sendmsg$inet(r6, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) pipe(&(0x7f0000000380)) (async) pipe(&(0x7f0000000380)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r10, 0x29, 0x41, &(0x7f00000003c0)={'security\x00', 0x4, [{}, {}, {}, {}]}, 0x68) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000200)="4800000075fd0000000000a2bc5603000000007f89000000200000004a2471083ec6811778581acb6c0101ff000000030900000000000000", 0x38}], 0x1) socket$xdp(0x2c, 0x3, 0x0) recvfrom$phonet(r10, &(0x7f0000000440)=""/221, 0xdd, 0x20, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r11 = socket$inet_tcp(0x2, 0x1, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_buf(r11, 0x0, 0x8008000000010, &(0x7f00000000c0)="17000000020001000003be8c5ee17688a2002b08030300ecff3f0000000300000a0000000098fc5ad9485bbb6a880000d6c8db0000dba67e06000000e28900000200df018000000000f50607bdff59100ac45761547a681f009cee4a5acb3da400001fb700674f00c88ebbf9315033bf79ac2dff060115003901000000000000ea000000000000000002ffff02dfccebf6ba000840024f0298e9e90554062a80e605007f71174aa951f3c63e5c83f1ba2112ce68bf17a6e0", 0x11a) syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000540), r0) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), r2) 759.848348ms ago: executing program 6 (id=2441): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x80000000) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000240)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000100)=0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x2, 0x6, &(0x7f0000000180)=@framed={{0x18, 0x2}, [@map_fd={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x5f5e0ff}, @call]}, &(0x7f0000000000)='GPL\x00', 0xc, 0x26, &(0x7f00000001c0)=""/226, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x21) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000000)={r3, 0x2, 0x4}, 0x8) r4 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="85000000070000004d0000000000000045000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x1e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x64) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x81}, 0x50) r5 = socket(0x15, 0x5, 0x0) getsockopt(r5, 0x200000000114, 0x2721, 0x0, &(0x7f0000000040)) getsockname$unix(r5, &(0x7f0000000040), &(0x7f00000000c0)=0x6e) 710.390744ms ago: executing program 6 (id=2442): syz_80211_inject_frame(0x0, 0x0, 0x262) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="b702000047000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a876d839240d29c035055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7e8dc34f17e3946ef3bb622e03b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3106d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bb44b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334583239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd713089856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bf4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fd3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff22dc508afc9ffc2cc788bee1b47683db01a469398685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd360000000000000000ae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae526aca54183fb01c73f979ca9857399537f5831808b0dc2a2d0e0000000000000578673f8b6e74ce23877a6b24db0e067345560942fa629fbef2461c97a088a22e8b15c3e233db00002e30d46a0024d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90d3add8eebc8619d73415cda2130f5011e4845535a8b90dfae158b94f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c29c5c0ed5bcdf510c3c7b400000000000007ff57c39495c826b956ba859ac8e3c177b91bd7d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c29877a308bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9003f07000099d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ced92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f68fa8d7c2dfb28e1f05e46b0933c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4eda0545c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708294cd6f496e5dee734fe7da3770845cf442d588afd80e17000000000000000000000000000000000000000000000000000005205000000dc1c56d59f35d367632952a93466ae595c6a8cda6900002a070886df42b27098773b45198b4a34ac97febd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a56224e49d9ea955a5f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d63521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c407081c6281e2d8429a8639034a75f4c7df3ea8fc2018d07afef12ef060cd4403a099f32468f658000b4082d43e12186195cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea209b53b230ef0f2ab85cbdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bd3339403004b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab900000000000000000000d71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033bb9cc16bd83a00840e31d828ec78e116ae46c4897e2795b6ff92e9a1e24b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdbf24a0c5441ce046078492b53467cfb1e2bb10b50000eb4acff90756dba1ecf9f58afd3c19b5c4558ba9af6b7333c894a1fb29ade9ad75c9c022e8d03fe28bc358684492aa771dbfe80745fe89cb349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b53f2fb0e16d8262c080c159ce1d9bc7ef3e3f40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb15f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af263b3dc1cab794c00c57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380e2f1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734137df47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb74b558982016b0679b5d6fccbecfae5553d9950d48c774eaa35b24fce69a20d8b49e3d0168bf7eac90529cd6af061c9e53addddc620ce73c5d177e3d097159f2768636fc10276c6a0adc57483b3f7083f66b87ef296ee85a3009a5d30f479e293a3302e11350ea857b37e76ca3f50378e4092ce2c574ad278b9b7b717c571afb2077b019fd9d89efd59b41f051ec5a8ff87ecc8df917a1e386d849fcd10e2f9ca52e02339c2f4666b0c8ffe0d508dcee3070e8b42ac38545e25f1cd62421c28d25994be0cff7271a0dee38d7ac4ac736b090e1d29f98117919472b61b20026d7e646174b55d251f7f8ca5ccc22a5efb33b217eff5597a3c3a5f3a9bb54abb40e54593e1a7ce4cfa17b3c3fe91c06363496341eae20dcc59b6179b32ddddef5c34000096a54c0c571a91878f61f74912e2299e5501d4d6943bfd74c856511726f0ac8f7d17f1c6b4451c1bcdc6b6e1700e4cd87709d97afc5423c96fa981873d4369b04bbf1fb9f68f17991540868e408201ad1a74179e489aa61f021a437a3fa935588be2068f7ff9b253106326fde795e530b93626cc68e06e602198724249b4444e69902e4d8f5da4e94cc36794258fd4032de7ab36bc24000000000000000000000000000000000000cd3211b3842b68a4eddca2eae28529e97a98d7ec3fd902df1ba8fc2ad2377e72d4e7aeacbbccef5614cd965511558f40720025c022bc9c213e407f6bc4b673c55aa8e729299a37fd6339acd906ac861ba56c9fa9b8b12b5e68a3cdadb906355e1f1d336a243172affe50d0fb36c3718a7498eed3d398f405a34d494414e87ef1ce1845510d43d00171d6b4b762f89564c22d542a119878709cd6822c3a3eb47a849b0737929fe9e1eecd1bff5a2b9880e2a6d8a3b3b7e88a673c96cda4455eff1c530db0e6598a2686aa09aeaf0f1aed95aeb8b0a2cc5ca31c0f56285cc05f7090a0e0583cf540d18cd8817e685c7b4ff176178ac1234f23e54445ec20b2689832d78409897a0307e89ebcd5f4ba042a3d10237a5a8a9a6eda36d2f337dc54537b80e8433341b135b4c5bb0173ffde46ccd260e1d4f2c51e8b07bb256f1317912cb1fc9e491e0bb9109e475cc795c23ad9f4f0042c5e9c655a4d865bc4a266e6a1d3d2b7ee53be9efb33a98933b5ba74ee3ac8d34b6af8c1fdbffade3abc80842b74354162f5b994ab5254cb068bc5e2ae242a1d37d0d49947c9317fa1a46c9e259ce0e1f9db992c53f7830a5e8f4fac6b187eb9f15ba61f730f86d7d7b63bbc7a1d9ff37e87a90a14e0655304da069f9009b62717649b6c6af94fcba713f8ee6fcce25aef44d009966614b61be9369ffc589a79051b0a0000000000000003ebd34c41afe268c33c9322c3a783772aec998f51a6e70fb932a8019e72ef5ab127bb30c79ebfd867441083546305fb39449c40a166ea389a6b77b7c87f66e8bf5806726b8fc50b943627314803a12c33312dce0a10f852da3e000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0xc980000, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000100)=0xffffffffffffffff, 0x4) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000001c0), 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0xff, 0x0, 0x2, 0x8000, r1, 0x5, '\x00', 0x0, r2, 0x5, 0x1, 0x2, 0x9, @value=r3, @void, @void, @value}, 0x50) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000480)="b9ff03076844268cb89e14f088a847", 0x0, 0xfe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 662.715003ms ago: executing program 0 (id=2443): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0xb, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="620ac4ff00000000711064000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000200)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffffe, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x40) r1 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000040)=ANY=[@ANYBLOB="33fe0000180091c8b14a0778a8123d181d"], 0xfe33) listen(r1, 0xfffffff8) 423.579659ms ago: executing program 0 (id=2444): socket$packet(0x11, 0x2, 0x300) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000800)=ANY=[@ANYBLOB="b702000007000000bfa30000000000000702000000feffff7a0af0ffe100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010001010404000049000000b7030000000000006a0a00fe000000008500000032000000b700000001000000950000000000000075cdc4b57b0c65752a3ad50000007ddd0000cb4500639100f51f00000000000000ff7f00000000000000001f99649a2079fd00cb04fcbb0b9bafe3ba431351a58a885ba9918d37b056b9bbd11b6b9f6cf7db6d574620260000000000008062d77e84cef4a2ab938f65aac33c4d620de2c9b7dc10d7d313f9f57606b83b994fb484510bef2e4872f5c2fe6faaf75e5cc4051ade12f41deff6df6a936b4ec3827c739bb39aad16d875fe369258673b5df11cc2afb53611cc320000bc0b80e80eae8f5e64be2c41f629db3d36dd015c7bb41fcb6cf9f6b59ca01685108e61aa000000000000000000000000008b798b4f7458d1863cc67c4c6a06e828e5216f603419db1af1b5d356d0f062137d866d11be4ba3f0151f07bd4e97d62ecc645e143a60f1c6edc76609077909826151e2b42bf0ed0c7e8b0db51662de6d87c493db845b10e9468bda6f82881eb8c9cfa72b08eecc952a3fd2c46f3c1cde71a19d1a2000000000000000bfea3b8d188df2eff8d56aaae7d32a2e183722537395019f02ec4b85f6aad7faca088de9b26797a8446b16c28d85f225992dbdd5bb01ba51508951c7a7d6ca0916c3a12912715649c2b1edd1a74851b59d378d0616a48c7957e122665c8b7e89eddfc3783f6c9129a7c5f8ee5f50579e2f638f7eb12f63be72a3d817b324d6e417b1c2cbfdcada0a16e31790e26cf101000080496ee2782224cf30f810da86cf1a3204f4c9404f5d7321a4fefc4d1c9139ca4b65b99909950000006b4207e6078625cb2717e21f8f187b1866108b6e8c71e26032176066599783568628f0309c3afa716d3706e1fa89917e131f4034a8383e9dc3568fd04201b37cd92ca6d2676bef8310f7032775cfd75652f87b039d543000000000000000008ce31344b554aca78a00000000000000e63a0dba7f6b25e8d5e40a3a571a5dfde3b4dca2d38a9c0ea7b5bcd49f977c609915c7601080d10b96af1eb55922765313a0eeefae505f4535cd9dc69fbab92150c7e74e5c5b051ddf6399b0d00eee5c3afee38cdc55b8d3fbbe210bdec686a23503f4a547327caf3811718c9002be6d89f5734a9e204dbc327ec8f9851d273fa07369c419942509198605ff2781f4d2d4685d762d4764f7ff762e09116946137b7ab812a2d408b57206"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000100), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x14) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x1f2f, 0xe, 0x0, &(0x7f00000007c0)="9f4494872191958068404d90ee48", 0x0, 0x241, 0x0, 0xb1, 0x0, &(0x7f00000004c0)="389ceff69d08b0af1cc71b6262d50660bbaf31a7f8cd6a6f911beb65d5fe6b54bf21a66489121f24fefd198059288c9b735e1898e77a7469489a249292c02a72bc193a3008ebdbf4e9dd4ee8fcceef55402c913c8dd0ebece1330aaa93ece835c5044a246a5967e3acd7c950b3b19f351830e545eb9bc3a9c6dd22ce97f1f857cfe8b68a2370b69ea336006b589368f92deb68f3dfc6f2bfee09f8342da437fce5dcdf658e453e3132bb42067575318c39", 0x0}, 0x50) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r1, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x1c, r2, 0x1, 0x0, 0x200000, {{}, {@val={0x8, 0x3, r3}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r4) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000100)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003c00)=ANY=[@ANYBLOB="3400000010000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="524301000000000014001680100001800c00050000804a8f"], 0x34}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000cc0)={0xffffffffffffffff, 0x20, &(0x7f0000000780)={&(0x7f00000006c0)=""/150, 0x96, 0x0, &(0x7f0000000bc0)=""/222, 0xde}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0x6, 0xd, &(0x7f00000002c0)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5361}}], &(0x7f0000000d40)='syzkaller\x00', 0xfff00000, 0x6c, &(0x7f0000000d80)=""/108, 0x41100, 0x4, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x8, &(0x7f0000000e00)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000e40)={0x0, 0x9, 0x0, 0x93}, 0x10, 0x0, r0, 0x7, &(0x7f0000000e80)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff], &(0x7f0000001000)=[{0x6, 0x3, 0x6, 0xb}, {0x4, 0x1, 0xc, 0x4}, {0x0, 0x4, 0x4, 0xa}, {0x3, 0x4, 0x9, 0x9}, {0x0, 0x3, 0x0, 0x4}, {0x1, 0x4, 0x3, 0x7}, {0x5, 0x3, 0xf, 0x3}], 0x10, 0x9, @void, @value}, 0x94) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)={0x9c, 0x0, 0x5, 0x0, 0x0, {{}, {@void, @void}}, [@mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "d90971762dc5960c2681650e22a934d9db04df31058a3de1"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @mon_options=[@NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa, 0xe8, @device_b}], @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options]}, 0x9c}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001fc0)={0x4c, 0x0, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_HE_BSS_COLOR={0x1c, 0x11b, 0x0, 0x1, [@NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x34}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_DISABLED={0x4}, @NL80211_HE_BSS_COLOR_ATTR_COLOR={0x5, 0x1, 0x37}]}, @NL80211_ATTR_P2P_CTWINDOW={0x5, 0xa2, 0xdb}, @NL80211_ATTR_DTIM_PERIOD={0x8}, @beacon=[@NL80211_ATTR_BEACON_TAIL={0x4}]]}, 0x4c}}, 0x8004) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r9, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) getpid() socket$inet_sctp(0x2, 0x7, 0x84) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="38010000100013070000000000000000ac1414bb000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff020000000000000000000000000001000000003c000000ac1414aa00000000000000000000000000002000000000000000000000000000ff7fffffffffffff000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000700000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c2900"/240], 0x138}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r9, 0x6, 0x13, &(0x7f00000001c0), 0xc7) close(0x3) ioctl$FS_IOC_SETFLAGS(r8, 0x40086602, &(0x7f0000000040)=0x20) writev(r8, &(0x7f0000000600)=[{&(0x7f0000000200)="ba57", 0x2}], 0x1) 242.979551ms ago: executing program 7 (id=2445): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000), &(0x7f00000002c0), 0x8, r1}, 0x38) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x38) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="580000001000010400000000000000000000ffff", @ANYRES32=0x0, @ANYBLOB="000000000000000024001280090001007866726d0000000014000280080002000000e3b60800010001000000140003"], 0x58}}, 0x0) 92.511658ms ago: executing program 7 (id=2446): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) sendmsg$inet(r0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x34004811) setsockopt$sock_attach_bpf(r0, 0x6, 0x25, &(0x7f0000000040), 0x4) socketpair(0xd, 0x3, 0x3, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CQM={0x1c, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x6}, @NL80211_ATTR_CQM_RSSI_THRESHOLD_EVENT={0x8, 0x3, 0x80000000}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x265}]}]}, 0x38}, 0x1, 0x0, 0x0, 0xc00c044}, 0x0) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x2c, r5, 0x200, 0x70bd26, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xffff, 0x53}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x200048c0}, 0x80a0) getsockopt$kcm_KCM_RECV_DISABLE(r0, 0x119, 0x1, &(0x7f00000002c0), 0x4) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000440)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_DELCHAIN={0x1c, 0x5, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x44}, 0x1, 0x0, 0x0, 0x40004}, 0x1) sendmsg$nl_route(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@bridge_newvlan={0x28, 0x70, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0x10, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_TUNNEL_INFO={0xc, 0x4, 0x0, 0x1, @BRIDGE_VLANDB_TINFO_ID={0x8, 0x1, 0x3}}}]}, 0xfffffd28}}, 0x0) 88.559211ms ago: executing program 0 (id=2447): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet6(0xa, 0x80002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="85000000ad000000799000000000000063008000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x13, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r1, 0x0, 0x0, 0x200c8004, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @mcast2}, 0x1c) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELFLOWTABLE={0x14, 0x18, 0xa, 0x101, 0x0, 0x0, {0xd, 0x0, 0x2}}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0x2}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x50}, 0x1, 0x0, 0x0, 0x10}, 0x2000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r3}, 0x10) sendto$inet6(r1, &(0x7f00000009c0)="c7cfcaaa22e10542fca5c0195350f15147657e0bfc59d383a47190db88690e6fedc3040ab5809ae02a54cd429cc3338c5afa0c9dce3f91950d1f567f358ac21154159130e88cbb6c43197813b2f23f3e442f80877490b393408142ebcfea6821f543e5ee9e27032e2b75d78f1b79f5a6bb6f0645e267770ef7e8f3a92148091217450ce8581e54223eeb6486205a209bf1fe854d211c03f8c3140fc3979d824082990d119473d20e94f253c9621fac339560ae46cb24b88bf2d01559bb658e343257b90f233b81bc5c398be3bbddb23a1e", 0xffffffffffffffe4, 0xc001, 0x0, 0xffffffffffffff0c) setsockopt$inet6_int(r1, 0x29, 0x19, &(0x7f0000000340), 0x4) 0s ago: executing program 6 (id=2448): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f000000c280)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000050000000900010073797a300000000054000000030a01030000000000000000050000000900010073797a30000000000900030073797a320000000028000480080002400000000008000140000000011400030076657468315f746f5f687372"], 0xb0}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f00000007c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x3a8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2d8, 0x2e8, 0x2e8, 0x2d8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00'}, 0x0, 0x190, 0xc8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x2, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@inet=@SET2={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x408) kernel console output (not intermixed with test programs): (bridge_slave_0) entered blocking state [ 211.158678][T12670] bridge0: port 1(bridge_slave_0) entered disabled state [ 211.166118][T12670] bridge_slave_0: entered allmulticast mode [ 211.173486][T12670] bridge_slave_0: entered promiscuous mode [ 211.181590][T12670] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.188853][T12670] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.196157][T12670] bridge_slave_1: entered allmulticast mode [ 211.203547][T12670] bridge_slave_1: entered promiscuous mode [ 211.485764][T12621] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.518271][T12670] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 211.537400][T12742] netlink: 'syz.6.1843': attribute type 1 has an invalid length. [ 211.594173][T12743] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 211.614812][T12670] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 211.690504][ T5144] Bluetooth: hci7: command tx timeout [ 211.816481][T12621] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.861555][T12670] team0: Port device team_slave_0 added [ 211.964280][T12621] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.997361][T12670] team0: Port device team_slave_1 added [ 212.060398][T12670] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.067392][T12670] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.093795][T12670] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.129338][T12768] bridge2: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 212.164290][T12766] __nla_validate_parse: 2 callbacks suppressed [ 212.164309][T12766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1850'. [ 212.189672][T12670] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.196908][T12670] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.231511][T12670] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.255494][T12766] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1850'. [ 212.397924][T12670] hsr_slave_0: entered promiscuous mode [ 212.429704][T12670] hsr_slave_1: entered promiscuous mode [ 212.535714][T12670] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.547724][T12670] Cannot create hsr debugfs directory [ 212.653606][T12792] netlink: 'syz.6.1857': attribute type 1 has an invalid length. [ 212.667477][ T5144] Bluetooth: hci1: command tx timeout [ 212.675326][T12792] netlink: 'syz.6.1857': attribute type 4 has an invalid length. [ 212.695542][T12792] netlink: 188 bytes leftover after parsing attributes in process `syz.6.1857'. [ 212.784516][T12792] NCSI netlink: No device for ifindex 458760 [ 212.811991][T12797] netlink: 'syz.6.1857': attribute type 9 has an invalid length. [ 212.813416][T12621] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 212.830414][T12797] netlink: 244 bytes leftover after parsing attributes in process `syz.6.1857'. [ 212.847161][T12621] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 212.872359][T12621] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 212.882356][T12621] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 212.967998][T12670] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 213.008299][T12670] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 213.034400][T12670] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 213.064743][T12670] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 213.190253][T12621] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.262733][T12670] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.295012][T12621] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.397044][T12670] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.413829][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.420978][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.453011][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.460215][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.526447][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.533653][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.599652][ T8196] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.606811][ T8196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 213.780034][ T5850] Bluetooth: hci7: command tx timeout [ 213.803596][T12832] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1865'. [ 213.850366][T12830] tipc: Enabled bearer , priority 0 [ 213.996759][T12830] syzkaller0: entered promiscuous mode [ 214.020655][T12830] syzkaller0: entered allmulticast mode [ 214.028238][T12830] tipc: Resetting bearer [ 214.045630][T12828] tipc: Resetting bearer [ 214.743378][ T5850] Bluetooth: hci1: command tx timeout [ 215.753107][T12828] tipc: Disabling bearer [ 215.848699][ T5850] Bluetooth: hci7: command tx timeout [ 215.936267][T12857] netlink: 'syz.6.1869': attribute type 4 has an invalid length. [ 215.996506][T12858] netlink: 'syz.6.1869': attribute type 4 has an invalid length. [ 216.065139][T12857] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 216.102123][T12670] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.117881][T12621] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 216.219703][T12866] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1872'. [ 216.234263][T12621] veth0_vlan: entered promiscuous mode [ 216.314641][T12621] veth1_vlan: entered promiscuous mode [ 216.432887][T12621] veth0_macvtap: entered promiscuous mode [ 216.479591][T12621] veth1_macvtap: entered promiscuous mode [ 216.530238][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.578644][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.634961][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.665265][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.691446][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.719136][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.748549][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.776851][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.791598][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.809344][ T5850] Bluetooth: hci1: command tx timeout [ 216.828515][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.839829][T12901] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1877'. [ 216.855636][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.866846][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.880871][T12621] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 217.052963][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1880'. [ 217.067746][T12901] netdevsim netdevsim6 netdevsim0: set [1, 1] type 2 family 0 port 20005 - 0 [ 217.070368][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1880'. [ 217.087720][T12901] netdevsim netdevsim6 netdevsim1: set [1, 1] type 2 family 0 port 20005 - 0 [ 217.096884][T12901] netdevsim netdevsim6 netdevsim2: set [1, 1] type 2 family 0 port 20005 - 0 [ 217.106297][T12901] netdevsim netdevsim6 netdevsim3: set [1, 1] type 2 family 0 port 20005 - 0 [ 217.116631][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1880'. [ 217.128485][T12901] geneve2: entered promiscuous mode [ 217.134964][T12901] geneve2: entered allmulticast mode [ 217.188951][T12909] __nla_validate_parse: 63 callbacks suppressed [ 217.188969][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1880'. [ 217.235368][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.289161][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1880'. [ 217.289348][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.342833][T12919] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1882'. [ 217.352131][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.372100][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.387224][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.398531][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.409117][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.420487][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.431039][T12621] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 217.445330][T12621] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 217.456942][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1880'. [ 217.475415][T12621] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 217.476843][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1880'. [ 217.495937][T12621] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.525328][T12621] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.545183][T12621] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.557210][T12621] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 217.587039][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1880'. [ 217.618296][T12670] veth0_vlan: entered promiscuous mode [ 217.639801][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1880'. [ 217.676029][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1880'. [ 217.696783][T12670] veth1_vlan: entered promiscuous mode [ 217.703289][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1880'. [ 217.750595][T12909] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1880'. [ 217.803615][T12670] veth0_macvtap: entered promiscuous mode [ 217.852903][T12670] veth1_macvtap: entered promiscuous mode [ 217.909075][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.931455][ T5850] Bluetooth: hci7: command tx timeout [ 217.970509][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.000683][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.046235][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.067938][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.088853][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.110525][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.128431][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.138263][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.151889][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.162260][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.173836][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.183805][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.194481][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.205538][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.216139][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.234490][T12670] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.361304][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.388014][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.419115][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.438387][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.448260][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.466272][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.480631][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.492344][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.502552][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.514521][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.524719][T12670] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.535568][T12670] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.546822][T12670] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 218.567000][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 218.598850][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 218.620840][T12670] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.640013][T12670] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.658649][T12670] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 218.680095][T12670] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.147436][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.157085][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.252235][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.270267][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.882491][ T8196] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.019564][ T5850] Bluetooth: hci7: command tx timeout [ 220.070371][ T8196] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.241290][ T8196] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.302403][T13013] bridge4: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 220.495928][ T8196] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 220.823801][ T8196] bridge_slave_1: left allmulticast mode [ 220.853360][ T8196] bridge_slave_1: left promiscuous mode [ 220.876720][ T8196] bridge0: port 2(bridge_slave_1) entered disabled state [ 220.957008][ T8196] bridge_slave_0: left allmulticast mode [ 220.965683][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.984954][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 221.002335][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 221.015736][ T8196] bridge_slave_0: left promiscuous mode [ 221.024241][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 221.032666][ T5144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 221.043582][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 221.044721][ T8196] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.049960][ T8196] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 222.066253][T12994] Set syz1 is full, maxelem 65536 reached [ 222.075982][ T8196] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 222.087804][ T8196] bond0 (unregistering): Released all slaves [ 222.220157][T13052] __nla_validate_parse: 5 callbacks suppressed [ 222.220175][T13052] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1907'. [ 222.259491][T13044] IPv6: sit2: Disabled Multicast RS [ 222.265354][T13044] sit2: entered allmulticast mode [ 222.454961][T13028] xfrm0 speed is unknown, defaulting to 1000 [ 222.627453][T13028] lo speed is unknown, defaulting to 1000 [ 222.671698][T13065] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.679959][T13065] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.726131][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1911'. [ 223.129096][ T5144] Bluetooth: hci1: command tx timeout [ 223.253835][T13102] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 223.706549][T13128] IPVS: length: 8 != 3090605352 [ 223.849572][ T8196] hsr_slave_0: left promiscuous mode [ 223.926782][ T8196] hsr_slave_1: left promiscuous mode [ 223.966907][ T8196] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.995186][ T8196] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 224.009214][ T8196] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 224.024895][ T8196] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.129658][T13145] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1928'. [ 224.135731][ T8196] veth1_macvtap: left promiscuous mode [ 224.145748][ T8196] veth0_macvtap: left promiscuous mode [ 224.157428][ T8196] veth1_vlan: left promiscuous mode [ 224.163139][ T8196] veth0_vlan: left promiscuous mode [ 224.631331][ T8196] team0 (unregistering): Port device team_slave_1 removed [ 224.682969][ T8196] team0 (unregistering): Port device team_slave_0 removed [ 225.088200][T13149] netlink: 256 bytes leftover after parsing attributes in process `syz.7.1928'. [ 225.176622][T13151] netlink: 'syz.7.1928': attribute type 5 has an invalid length. [ 225.227992][T13028] chnl_net:caif_netlink_parms(): no params data found [ 225.238777][ T5144] Bluetooth: hci1: command tx timeout [ 225.326687][T13156] netlink: 'syz.6.1930': attribute type 1 has an invalid length. [ 225.354326][T13156] netlink: 'syz.6.1930': attribute type 8 has an invalid length. [ 225.398462][T13156] netlink: 134664 bytes leftover after parsing attributes in process `syz.6.1930'. [ 225.563767][T13170] netlink: 104 bytes leftover after parsing attributes in process `syz.0.1934'. [ 225.742173][T13028] bridge0: port 1(bridge_slave_0) entered blocking state [ 225.767451][T13028] bridge0: port 1(bridge_slave_0) entered disabled state [ 225.819481][T13028] bridge_slave_0: entered allmulticast mode [ 225.849307][T13028] bridge_slave_0: entered promiscuous mode [ 225.907621][T13028] bridge0: port 2(bridge_slave_1) entered blocking state [ 225.916551][T13196] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.944926][T13028] bridge0: port 2(bridge_slave_1) entered disabled state [ 225.962105][T13197] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 225.970301][T13028] bridge_slave_1: entered allmulticast mode [ 225.987531][T13028] bridge_slave_1: entered promiscuous mode [ 226.180522][T13028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.217590][T13208] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1940'. [ 226.232440][T13213] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1941'. [ 226.249695][T13028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.259111][T13211] netlink: 'syz.0.1942': attribute type 12 has an invalid length. [ 226.269118][T13211] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1942'. [ 226.278903][T13215] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1940'. [ 226.491185][T13028] team0: Port device team_slave_0 added [ 226.522001][T13028] team0: Port device team_slave_1 added [ 226.596126][T13028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.624658][T13028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.664659][T13028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.680098][T13230] tunl0: entered promiscuous mode [ 226.687219][T13230] netlink: 'syz.0.1946': attribute type 3 has an invalid length. [ 226.699543][T13028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.737392][T13028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.828146][T13028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 227.037453][T13028] hsr_slave_0: entered promiscuous mode [ 227.055231][T13028] hsr_slave_1: entered promiscuous mode [ 227.095799][T13028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.107070][T13028] Cannot create hsr debugfs directory [ 227.292606][ T5144] Bluetooth: hci1: command tx timeout [ 227.605015][T13274] __nla_validate_parse: 3 callbacks suppressed [ 227.605035][T13274] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1954'. [ 227.703240][T13288] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1956'. [ 228.022150][T13301] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1960'. [ 228.469482][T13318] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1967'. [ 229.055236][T13344] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_macvtap, syncid = 0, id = 0 [ 229.212152][T13028] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 229.228733][T13347] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1972'. [ 229.253906][T13351] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 229.276049][T13028] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 229.332119][T13028] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 229.378551][ T5144] Bluetooth: hci1: command tx timeout [ 229.470677][T13028] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 229.519231][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 229.562151][T13028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.581116][T13028] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.601606][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.608738][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.626727][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.633830][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.648915][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 229.657629][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.665700][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.674491][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 229.681899][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.800389][T13028] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 229.822306][T13028] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 229.953607][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1976'. [ 229.963601][T13365] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1976'. [ 230.090439][T13362] xfrm0 speed is unknown, defaulting to 1000 [ 230.097406][T13362] lo speed is unknown, defaulting to 1000 [ 230.193315][T13028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 230.368746][T13028] veth0_vlan: entered promiscuous mode [ 230.382961][T13028] veth1_vlan: entered promiscuous mode [ 230.766227][T13028] veth0_macvtap: entered promiscuous mode [ 230.775048][T13028] veth1_macvtap: entered promiscuous mode [ 230.789729][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.801292][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.812526][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.823277][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.833480][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.844267][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.854162][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.864726][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.874664][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.885171][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.895260][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.906518][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.917656][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.928249][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.940227][T13028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.996466][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.007762][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.018280][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.029063][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.038956][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.049620][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.059657][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.070257][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.080142][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.090715][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.100581][T13028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 231.111762][T13028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 231.123346][T13028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.154807][T13028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.165212][T13028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.179939][T13028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.219550][T13028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.283144][T13423] netlink: 'syz.7.1986': attribute type 1 has an invalid length. [ 231.400503][T13426] netlink: 'syz.6.1988': attribute type 1 has an invalid length. [ 231.408278][T13426] netlink: 212408 bytes leftover after parsing attributes in process `syz.6.1988'. [ 231.562914][T13431] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1991'. [ 231.673688][T13434] netlink: 'syz.6.1990': attribute type 2 has an invalid length. [ 231.681682][T13434] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1990'. [ 231.704941][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.713187][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.763558][ T8198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.778914][ T8198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.828612][T13362] chnl_net:caif_netlink_parms(): no params data found [ 232.013340][ T5144] Bluetooth: hci4: command tx timeout [ 232.143916][T13450] netlink: 'syz.6.1994': attribute type 1 has an invalid length. [ 232.153435][T13450] netlink: 'syz.6.1994': attribute type 2 has an invalid length. [ 232.202043][T13362] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.230189][T13362] bridge0: port 1(bridge_slave_0) entered disabled state [ 232.251719][T13362] bridge_slave_0: entered allmulticast mode [ 232.261865][T13362] bridge_slave_0: entered promiscuous mode [ 232.290437][T13362] bridge0: port 2(bridge_slave_1) entered blocking state [ 232.297190][T13461] netlink: 'syz.0.1996': attribute type 10 has an invalid length. [ 232.297637][T13362] bridge0: port 2(bridge_slave_1) entered disabled state [ 232.328964][T13362] bridge_slave_1: entered allmulticast mode [ 232.337992][T13362] bridge_slave_1: entered promiscuous mode [ 232.409739][T13362] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 232.456640][T13362] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 232.684242][ C1] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 232.708065][T13362] team0: Port device team_slave_0 added [ 232.764087][T13362] team0: Port device team_slave_1 added [ 232.924151][T13489] netlink: 'syz.6.2003': attribute type 1 has an invalid length. [ 232.954203][T13362] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 232.963946][T13488] netlink: 'syz.6.2003': attribute type 1 has an invalid length. [ 232.984858][T13362] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.002616][T13479] "syz.7.2001" (13479) uses obsolete ecb(arc4) skcipher [ 233.086792][T13362] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.105249][T13362] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.127617][T13362] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.188583][T13362] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.273580][T13501] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 233.353215][T13501] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 233.394856][T13517] openvswitch: netlink: Message has 1275 unknown bytes. [ 233.458705][T13517] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 233.576778][T13362] hsr_slave_0: entered promiscuous mode [ 233.600592][T13362] hsr_slave_1: entered promiscuous mode [ 233.607250][T13362] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.630328][T13362] Cannot create hsr debugfs directory [ 233.650925][T13526] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 233.667145][T13526] __nla_validate_parse: 4 callbacks suppressed [ 233.667161][T13526] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2009'. [ 233.731179][T13524] netlink: 'syz.7.2008': attribute type 32 has an invalid length. [ 233.784527][T13532] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2010'. [ 233.910833][ T8198] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.088947][ T5144] Bluetooth: hci4: command tx timeout [ 234.469691][T13362] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.481281][T13362] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.510958][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 234.527468][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 234.547731][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 234.578875][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 234.589201][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 234.595926][T13566] sctp: [Deprecated]: syz.6.2015 (pid 13566) Use of int in max_burst socket option deprecated. [ 234.595926][T13566] Use struct sctp_assoc_value instead [ 234.596462][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 234.722715][ T8198] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.778426][T13554] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2014'. [ 234.854629][T13362] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 234.874394][T13362] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.023539][ T8198] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.071128][T13561] xfrm0 speed is unknown, defaulting to 1000 [ 235.078087][T13561] lo speed is unknown, defaulting to 1000 [ 235.302705][T13362] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.314913][T13362] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.362256][ T8198] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.396211][T13591] veth1_to_hsr: entered promiscuous mode [ 235.487529][T13362] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 235.527434][T13362] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 235.542782][T13590] veth1_to_hsr: left promiscuous mode [ 235.949575][ T8198] bridge_slave_1: left allmulticast mode [ 235.955270][ T8198] bridge_slave_1: left promiscuous mode [ 235.974362][ T8198] bridge0: port 2(bridge_slave_1) entered disabled state [ 236.035362][ T8198] bridge_slave_0: left allmulticast mode [ 236.060088][ T8198] bridge_slave_0: left promiscuous mode [ 236.082738][ T8198] bridge0: port 1(bridge_slave_0) entered disabled state [ 236.168753][ T5850] Bluetooth: hci4: command tx timeout [ 236.715235][ T8198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 236.726982][ T8198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 236.740959][ T8198] bond0 (unregistering): Released all slaves [ 236.741894][ T5850] Bluetooth: hci1: command tx timeout [ 236.766140][T13639] IPv6: syztnl0: Disabled Multicast RS [ 236.861732][T13655] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2028'. [ 236.932194][T13362] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 236.983884][T13362] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 237.061476][T13668] netlink: zone id is out of range [ 237.088726][T13668] netlink: zone id is out of range [ 237.108619][T13668] netlink: zone id is out of range [ 237.142601][T13668] netlink: zone id is out of range [ 237.167580][T13668] netlink: zone id is out of range [ 237.175747][T13561] chnl_net:caif_netlink_parms(): no params data found [ 237.194503][T13668] netlink: zone id is out of range [ 237.252055][T13362] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 237.336739][T13362] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 237.440039][T13676] netlink: 'syz.6.2034': attribute type 1 has an invalid length. [ 237.673807][T13687] pim6reg1: entered promiscuous mode [ 237.687008][T13687] pim6reg1: entered allmulticast mode [ 237.888581][T13362] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.895569][T13561] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.904347][T13561] bridge0: port 1(bridge_slave_0) entered disabled state [ 237.912916][T13561] bridge_slave_0: entered allmulticast mode [ 237.920494][T13561] bridge_slave_0: entered promiscuous mode [ 237.982727][T13561] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.012430][T13561] bridge0: port 2(bridge_slave_1) entered disabled state [ 238.028912][T13561] bridge_slave_1: entered allmulticast mode [ 238.067692][T13561] bridge_slave_1: entered promiscuous mode [ 238.194760][T13561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 238.216050][T13362] 8021q: adding VLAN 0 to HW filter on device team0 [ 238.249959][ T5850] Bluetooth: hci4: command tx timeout [ 238.267016][ T8198] hsr_slave_0: left promiscuous mode [ 238.276452][ T8198] hsr_slave_1: left promiscuous mode [ 238.286950][ T8198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 238.295261][ T8198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 238.303456][ T8198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 238.311244][ T8198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 238.345094][T13713] net_ratelimit: 2 callbacks suppressed [ 238.345110][T13713] IPv4: Oversized IP packet from 172.20.20.24 [ 238.351375][ T8198] veth1_macvtap: left promiscuous mode [ 238.358162][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 238.369052][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 238.373097][ T8198] veth0_macvtap: left promiscuous mode [ 238.390367][ T8198] veth1_vlan: left promiscuous mode [ 238.393672][T13714] IPv4: Oversized IP packet from 172.20.20.24 [ 238.395786][ T8198] veth0_vlan: left promiscuous mode [ 238.402122][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 238.413139][ C0] IPv4: Oversized IP packet from 172.20.20.24 [ 238.616349][T13721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2044'. [ 238.813293][ T5850] Bluetooth: hci1: command tx timeout [ 238.927560][ T8198] team0 (unregistering): Port device team_slave_1 removed [ 238.973949][ T8198] team0 (unregistering): Port device team_slave_0 removed [ 239.394080][T13561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.672770][T13561] team0: Port device team_slave_0 added [ 239.682112][T13561] team0: Port device team_slave_1 added [ 239.824608][T13739] netlink: 12 bytes leftover after parsing attributes in process `syz.6.2047'. [ 239.836107][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.843301][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 239.866937][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.874101][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 239.965485][T13561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 239.987850][T13561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.035224][T13561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.065058][T13561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.081958][T13561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.119139][T13561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.145646][T13739] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.161416][T13733] IPVS: Error connecting to the multicast addr [ 240.217738][T13750] vxcan0: entered allmulticast mode [ 240.281013][T13750] 8021q: adding VLAN 0 to HW filter on device bond1 [ 240.301256][T13750] bond1: (slave vxcan1): The slave device specified does not support setting the MAC address [ 240.306524][T13762] xt_cgroup: path and classid specified [ 240.324111][T13750] bond1: (slave vxcan1): Error -95 calling set_mac_address [ 240.563466][T13561] hsr_slave_0: entered promiscuous mode [ 240.574750][T13774] netlink: 24 bytes leftover after parsing attributes in process `syz.6.2053'. [ 240.586159][T13770] netlink: 8 bytes leftover after parsing attributes in process `syz.7.2052'. [ 240.589878][T13561] hsr_slave_1: entered promiscuous mode [ 240.605755][T13561] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.613592][T13561] Cannot create hsr debugfs directory [ 240.891918][ T5850] Bluetooth: hci1: command tx timeout [ 241.099129][T13783] netlink: 'syz.6.2055': attribute type 12 has an invalid length. [ 241.122960][T13362] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 241.314229][T13362] veth0_vlan: entered promiscuous mode [ 241.384865][T13362] veth1_vlan: entered promiscuous mode [ 241.422817][ T5883] IPVS: starting estimator thread 0... [ 241.480999][T13362] veth0_macvtap: entered promiscuous mode [ 241.539172][T13812] IPVS: using max 22 ests per chain, 52800 per kthread [ 241.587328][T13362] veth1_macvtap: entered promiscuous mode [ 241.661233][T13561] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 241.711954][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.755297][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.798920][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.825726][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.836079][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.859555][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.871138][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.882110][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.892923][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.903485][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.913711][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.924438][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.934484][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 241.945239][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 241.956281][T13362] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 241.966079][T13561] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 241.985766][T13561] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 241.997982][T13826] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2065'. [ 242.023912][T13826] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2065'. [ 242.047723][T13826] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2065'. [ 242.059867][T13829] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2065'. [ 242.075527][T13829] netlink: 196 bytes leftover after parsing attributes in process `syz.6.2065'. [ 242.086674][T13829] netlink: 19 bytes leftover after parsing attributes in process `syz.6.2065'. [ 242.110866][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.122331][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.132278][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.143403][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.155420][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.178884][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.188933][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.200166][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.213639][ T5883] hid-generic 0005:04F3:0058.0002: item fetching failed at offset 0/1 [ 242.214500][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.226864][ T5883] hid-generic 0005:04F3:0058.0002: probe with driver hid-generic failed with error -22 [ 242.242352][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.242376][T13362] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 242.242393][T13362] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 242.253338][T13362] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 242.310455][T13561] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 242.351918][T13362] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.361660][T13362] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.373015][T13362] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.386689][T13362] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 242.570710][T13561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.623435][T13561] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.670142][ T8198] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.696010][ T8198] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.712193][T13840] netlink: 'syz.0.2069': attribute type 1 has an invalid length. [ 242.759747][ T1110] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.767068][ T1110] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.810705][ T1110] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.817820][ T1110] bridge0: port 2(bridge_slave_1) entered forwarding state [ 242.879092][T13852] netlink: 'syz.7.2070': attribute type 8 has an invalid length. [ 242.916940][ T1124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 242.936945][ T1124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 242.972656][ T5850] Bluetooth: hci1: command tx timeout [ 243.126885][T13860] netlink: 'syz.7.2071': attribute type 1 has an invalid length. [ 243.162034][T13860] netlink: 'syz.7.2071': attribute type 3 has an invalid length. [ 243.184570][T13860] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2071'. [ 243.219929][T13862] x_tables: duplicate underflow at hook 1 [ 243.444733][T13561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 243.584333][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.632810][T13888] netlink: set zone limit has 8 unknown bytes [ 243.663713][T13879] team_slave_0: entered promiscuous mode [ 243.669705][T13879] team_slave_1: entered promiscuous mode [ 243.676639][T13879] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 243.991431][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.294407][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.360492][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 244.370143][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 244.381206][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 244.435507][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 244.449236][ T5144] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 244.456606][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 244.537215][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.614390][T13919] xfrm0 speed is unknown, defaulting to 1000 [ 244.621537][T13919] lo speed is unknown, defaulting to 1000 [ 244.651985][T13561] veth0_vlan: entered promiscuous mode [ 244.679081][T13916] openvswitch: netlink: Flow actions attr not present in new flow. [ 244.692327][T13932] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 244.715203][T13932] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 244.738907][T13932] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 244.758975][T13932] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 244.791497][T13932] geneve3: entered promiscuous mode [ 244.810938][T13932] geneve3: entered allmulticast mode [ 244.849415][T13932] netdevsim netdevsim0 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 244.864638][T13932] netdevsim netdevsim0 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 244.886216][T13932] netdevsim netdevsim0 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 244.907425][T13932] netdevsim netdevsim0 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 244.989193][T13561] veth1_vlan: entered promiscuous mode [ 245.167840][T13561] veth0_macvtap: entered promiscuous mode [ 245.212974][T13941] __nla_validate_parse: 3 callbacks suppressed [ 245.212991][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2086'. [ 245.262949][T13938] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2085'. [ 245.290955][T13561] veth1_macvtap: entered promiscuous mode [ 245.297649][ T67] bridge_slave_1: left allmulticast mode [ 245.304227][ T67] bridge_slave_1: left promiscuous mode [ 245.312297][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.322105][T13941] netlink: 12 bytes leftover after parsing attributes in process `syz.7.2086'. [ 245.341974][ T67] bridge_slave_0: left allmulticast mode [ 245.347654][ T67] bridge_slave_0: left promiscuous mode [ 245.348551][T13939] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 245.365353][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.452984][T13948] netlink: 104 bytes leftover after parsing attributes in process `syz.6.2087'. [ 245.795662][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.806382][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.817388][ T67] bond0 (unregistering): Released all slaves [ 245.827523][T13938] ip6_vti0: Master is either lo or non-ether device [ 246.149741][T13962] xt_CT: You must specify a L4 protocol and not use inversions on it [ 246.235753][T13919] chnl_net:caif_netlink_parms(): no params data found [ 246.283610][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.309129][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.340834][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.386563][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.409785][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.434096][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.454623][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.469609][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.480330][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.496029][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.499319][ T5850] Bluetooth: hci4: command tx timeout [ 246.517761][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.541220][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.562163][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.585620][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.608218][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 246.630164][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 246.654666][T13561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 247.143222][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.177928][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.188895][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.204469][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.216307][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.227319][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.237779][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.248833][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.259106][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.269725][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.279993][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.291285][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.301392][T13561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 247.312216][T13561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 247.329649][T13561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 247.485640][T13561] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.495293][T13561] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.507904][T13561] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.536921][T13561] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 247.672038][T14019] netlink: 176 bytes leftover after parsing attributes in process `syz.0.2101'. [ 247.706372][T14019] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2101'. [ 247.881985][ T67] hsr_slave_0: left promiscuous mode [ 247.948104][ T67] hsr_slave_1: left promiscuous mode [ 247.976624][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 248.000136][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 248.024087][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 248.038907][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 248.092862][ T67] veth1_macvtap: left promiscuous mode [ 248.111461][ T67] veth0_macvtap: left promiscuous mode [ 248.117006][ T67] veth1_vlan: left promiscuous mode [ 248.126177][ T67] veth0_vlan: left promiscuous mode [ 248.568081][ T67] team0 (unregistering): Port device team_slave_1 removed [ 248.576629][ T5850] Bluetooth: hci4: command tx timeout [ 248.622599][ T67] team0 (unregistering): Port device team_slave_0 removed [ 249.035723][T13919] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.043177][T13919] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.054488][T13919] bridge_slave_0: entered allmulticast mode [ 249.061617][T13919] bridge_slave_0: entered promiscuous mode [ 249.175965][T13919] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.210995][T13919] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.218290][T13919] bridge_slave_1: entered allmulticast mode [ 249.231854][T13919] bridge_slave_1: entered promiscuous mode [ 249.300933][T14047] netlink: 'syz.0.2105': attribute type 14 has an invalid length. [ 249.391892][T14047] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2105'. [ 249.401067][T14047] netlink: 'syz.0.2105': attribute type 1 has an invalid length. [ 249.416392][T14047] netlink: 'syz.0.2105': attribute type 1 has an invalid length. [ 249.424517][T14047] netlink: 'syz.0.2105': attribute type 2 has an invalid length. [ 249.432769][T14047] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2105'. [ 249.550262][T13919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 249.574517][T13919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 249.699283][T14057] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 249.711848][T13919] team0: Port device team_slave_0 added [ 249.720384][T14060] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2111'. [ 249.778900][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.786736][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.860790][T13919] team0: Port device team_slave_1 added [ 249.884612][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.893450][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.982750][T14065] team0: Device wg2 is of different type [ 250.108156][T13919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 250.138596][T13919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.208604][T13919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 250.251012][T13919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 250.314754][T13919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 250.443613][T13919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 250.660876][ T5850] Bluetooth: hci4: command tx timeout [ 250.779237][T13919] hsr_slave_0: entered promiscuous mode [ 250.785435][T13919] hsr_slave_1: entered promiscuous mode [ 250.795671][T13919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 250.803455][T13919] Cannot create hsr debugfs directory [ 250.843097][ T1110] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.939030][ T1110] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.997240][ T1110] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.134848][ T1110] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.235072][T14116] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2117'. [ 251.321467][T14120] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2117'. [ 251.584397][T14126] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2120'. [ 251.912492][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 251.937769][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 251.980564][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 251.989006][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 251.998278][ T5144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 252.026310][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 252.176576][ T1110] bridge_slave_1: left allmulticast mode [ 252.182443][ T1110] bridge_slave_1: left promiscuous mode [ 252.188208][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.197220][ T1110] bridge_slave_0: left allmulticast mode [ 252.207339][ T1110] bridge_slave_0: left promiscuous mode [ 252.216175][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.265590][T14161] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2127'. [ 252.635738][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 252.652365][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 252.663120][ T1110] bond0 (unregistering): Released all slaves [ 252.703856][T14142] xfrm0 speed is unknown, defaulting to 1000 [ 252.738713][ T5144] Bluetooth: hci4: command tx timeout [ 252.747822][T14150] xfrm0 speed is unknown, defaulting to 1000 [ 252.759038][T14142] lo speed is unknown, defaulting to 1000 [ 252.920116][T14166] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 253.097985][T14150] lo speed is unknown, defaulting to 1000 [ 253.137936][T13919] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 253.205076][T14184] netlink: 'syz.0.2132': attribute type 9 has an invalid length. [ 253.271455][T13919] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 253.289683][T13919] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 253.378133][T13919] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 253.489720][T14192] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2134'. [ 253.614356][T14192] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2134'. [ 253.976078][ T1110] hsr_slave_0: left promiscuous mode [ 254.022676][ T1110] hsr_slave_1: left promiscuous mode [ 254.050455][T14228] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2138'. [ 254.060743][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.068203][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.084936][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.092871][ T5144] Bluetooth: hci1: command tx timeout [ 254.119572][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.127127][T14230] netlink: 'syz.0.2138': attribute type 3 has an invalid length. [ 254.199907][T14234] netlink: 'syz.7.2139': attribute type 1 has an invalid length. [ 254.212258][ T1110] veth1_macvtap: left promiscuous mode [ 254.214450][T14234] netlink: 224 bytes leftover after parsing attributes in process `syz.7.2139'. [ 254.217808][ T1110] veth0_macvtap: left promiscuous mode [ 254.232564][ T1110] veth1_vlan: left promiscuous mode [ 254.237862][ T1110] veth0_vlan: left promiscuous mode [ 254.691375][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 254.732349][ T1110] team0 (unregistering): Port device team_slave_0 removed [ 255.118860][T14232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2138'. [ 255.127950][T14232] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2138'. [ 255.251391][T14142] chnl_net:caif_netlink_parms(): no params data found [ 255.605246][T13919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 255.676602][T13919] 8021q: adding VLAN 0 to HW filter on device team0 [ 255.889916][ T8197] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.897084][ T8197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 255.912645][ T8197] bridge0: port 2(bridge_slave_1) entered blocking state [ 255.919809][ T8197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 255.938525][T14142] bridge0: port 1(bridge_slave_0) entered blocking state [ 255.945645][T14142] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.969039][T14142] bridge_slave_0: entered allmulticast mode [ 255.976169][T14142] bridge_slave_0: entered promiscuous mode [ 255.996481][T14142] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.017920][T14142] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.039214][T14142] bridge_slave_1: entered allmulticast mode [ 256.054199][T14142] bridge_slave_1: entered promiscuous mode [ 256.164140][T14142] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.178352][ T5144] Bluetooth: hci1: command tx timeout [ 256.192443][ T29] audit: type=1107 audit(1735327495.771:3): pid=14280 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='}—‹u¸?kFNÞuÈ– [ 256.192443][ T29] ^2ÿ¸`9ÁÇÐ8×æÈo±´.[þ8€}"â I [ 256.192443][ T29] ú' [ 256.202806][T14142] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.327813][T14142] team0: Port device team_slave_0 added [ 256.336302][T14142] team0: Port device team_slave_1 added [ 256.500061][T14142] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 256.532301][T14142] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.607083][T14142] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 256.633443][T14303] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2150'. [ 256.669765][T14305] netlink: 'syz.6.2149': attribute type 21 has an invalid length. [ 256.759051][T14142] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 256.766048][T14142] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 256.818839][T14142] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 256.877584][T14305] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode broadcast(3) [ 256.918125][T13919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.085421][T14142] hsr_slave_0: entered promiscuous mode [ 257.115619][T14142] hsr_slave_1: entered promiscuous mode [ 257.148699][T14142] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 257.156295][T14142] Cannot create hsr debugfs directory [ 257.572106][T13919] veth0_vlan: entered promiscuous mode [ 257.623812][T14349] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2156'. [ 257.683028][T13919] veth1_vlan: entered promiscuous mode [ 257.948254][T13919] veth0_macvtap: entered promiscuous mode [ 258.007674][T13919] veth1_macvtap: entered promiscuous mode [ 258.022993][T13919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.033680][T13919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.044165][T13919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.055186][T13919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.065165][T13919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.075663][T13919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.085612][T13919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.096709][T13919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.106623][T13919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.117136][T13919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.127062][T13919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.137529][T13919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.148017][T13919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.158951][T13919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.170125][T13919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.180935][T14368] can: request_module (can-proto-4) failed. [ 258.209356][T13919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.220106][T13919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.230053][T13919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.252628][ T5144] Bluetooth: hci1: command tx timeout [ 258.253818][T13919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.298160][T13919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.326105][T13919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.368442][T13919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.399265][T13919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.418428][T13919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.438431][T13919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.468509][T13919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.479043][T13919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.490190][T13919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.578736][T13919] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.587477][T13919] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.609012][T13919] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.617853][T13919] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.940579][T14403] netlink: 'syz.6.2170': attribute type 4 has an invalid length. [ 258.986164][ T1124] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.013160][ T1124] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.068017][T14142] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 259.178146][T14142] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 259.215554][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.219502][T14413] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2173'. [ 259.228911][T14142] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 259.266578][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.284183][T14142] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 259.760512][T14142] 8021q: adding VLAN 0 to HW filter on device bond0 [ 259.803011][T14443] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 260.035395][ T8197] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.124994][T14142] 8021q: adding VLAN 0 to HW filter on device team0 [ 260.249470][ T8197] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.296167][ T1124] bridge0: port 1(bridge_slave_0) entered blocking state [ 260.303340][ T1124] bridge0: port 1(bridge_slave_0) entered forwarding state [ 260.330002][ T5144] Bluetooth: hci1: command tx timeout [ 260.353492][ T1124] bridge0: port 2(bridge_slave_1) entered blocking state [ 260.360655][ T1124] bridge0: port 2(bridge_slave_1) entered forwarding state [ 260.552146][ T8197] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.821131][ T8197] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.923284][T14142] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 260.968952][T14142] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 261.022111][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.038269][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.057515][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.214529][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.227444][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 261.235102][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 261.482689][T14499] xfrm0 speed is unknown, defaulting to 1000 [ 261.489681][T14499] lo speed is unknown, defaulting to 1000 [ 261.819486][ T8197] bridge_slave_1: left allmulticast mode [ 261.825184][ T8197] bridge_slave_1: left promiscuous mode [ 261.827052][T14521] set match dimension is over the limit! [ 261.834309][ T8197] bridge0: port 2(bridge_slave_1) entered disabled state [ 261.849981][ T8197] bridge_slave_0: left allmulticast mode [ 261.855655][ T8197] bridge_slave_0: left promiscuous mode [ 261.857415][T14521] set match dimension is over the limit! [ 261.872749][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.315482][T14540] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 262.698033][T14557] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 262.872323][T14560] netlink: 'syz.7.2205': attribute type 5 has an invalid length. [ 262.884517][T14561] netlink: 56 bytes leftover after parsing attributes in process `syz.7.2205'. [ 262.912748][ T8197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.928677][ T8197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.945544][ T8197] bond0 (unregistering): Released all slaves [ 263.204960][T14567] ebtables: ebtables: counters copy to user failed while replacing table [ 263.373400][T14142] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.477177][T14572] netlink: 'syz.6.2209': attribute type 3 has an invalid length. [ 263.529951][ T5144] Bluetooth: hci4: command tx timeout [ 263.761074][ T8197] hsr_slave_0: left promiscuous mode [ 263.772794][ T8197] hsr_slave_1: left promiscuous mode [ 263.783451][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 263.795292][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 263.839999][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.847476][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.913012][ T8197] veth1_macvtap: left promiscuous mode [ 263.929317][ T8197] veth0_macvtap: left promiscuous mode [ 263.934950][ T8197] veth1_vlan: left promiscuous mode [ 263.947341][ T8197] veth0_vlan: left promiscuous mode [ 264.484898][ T8197] team0 (unregistering): Port device team_slave_1 removed [ 264.531701][ T8197] team0 (unregistering): Port device team_slave_0 removed [ 265.202818][T14142] veth0_vlan: entered promiscuous mode [ 265.249514][T14142] veth1_vlan: entered promiscuous mode [ 265.302245][T14499] chnl_net:caif_netlink_parms(): no params data found [ 265.476672][T14629] netlink: 24 bytes leftover after parsing attributes in process `syz.7.2217'. [ 265.498719][T14631] tipc: Enabled bearer , priority 0 [ 265.607914][T14142] veth0_macvtap: entered promiscuous mode [ 265.612997][ T5144] Bluetooth: hci4: command tx timeout [ 265.844562][T14142] veth1_macvtap: entered promiscuous mode [ 266.163440][T14499] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.178917][T14499] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.201844][T14499] bridge_slave_0: entered allmulticast mode [ 266.211378][T14499] bridge_slave_0: entered promiscuous mode [ 266.240485][T14142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.255136][T14142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.271634][T14142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.282521][T14142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.297647][T14142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.308674][T14142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.319182][T14142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.343322][T14142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.361564][T14142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.372540][T14142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.384360][T14142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.396612][T14142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.407814][T14142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 266.420313][T14142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.452158][T14142] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.469755][T14499] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.477482][T14499] bridge0: port 2(bridge_slave_1) entered disabled state [ 266.494810][T14499] bridge_slave_1: entered allmulticast mode [ 266.502354][T14499] bridge_slave_1: entered promiscuous mode [ 266.589864][T14499] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 266.634025][T14142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.667553][T14142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.688044][T14142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.708548][T14142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.721048][T14694] netlink: 96 bytes leftover after parsing attributes in process `syz.6.2231'. [ 266.733143][T14142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.755108][T14142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.759180][T14694] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2231'. [ 266.767685][T14142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.785313][T14142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.796432][T14142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.807494][T14142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.825027][T14142] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 266.844239][T14142] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 266.867461][T14142] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.878253][T14499] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 266.927821][T14142] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.947120][T14142] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.960319][T14142] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.970164][T14142] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.059630][T14499] team0: Port device team_slave_0 added [ 267.112716][T14499] team0: Port device team_slave_1 added [ 267.286553][T14711] 8021q: adding VLAN 0 to HW filter on device bond2 [ 267.296241][T14711] bond0: (slave bond2): Enslaving as an active interface with an up link [ 267.317063][T14715] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2234'. [ 267.339414][T14499] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 267.346738][T14499] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.383224][T14499] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 267.397238][T14499] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 267.404524][T14499] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 267.479353][T14499] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 267.510889][T14720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2237'. [ 267.539263][T14722] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2237'. [ 267.688721][ T5144] Bluetooth: hci4: command tx timeout [ 267.747952][T14722] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2237'. [ 267.803001][T14499] hsr_slave_0: entered promiscuous mode [ 267.838809][T14499] hsr_slave_1: entered promiscuous mode [ 267.887008][T14499] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 267.918490][T14499] Cannot create hsr debugfs directory [ 268.091667][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.105175][T14749] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2242'. [ 268.116089][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.342871][T14754] batadv0: entered promiscuous mode [ 268.388121][T14758] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 268.406770][T14754] netlink: 'syz.6.2243': attribute type 6 has an invalid length. [ 268.585810][ T8196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 268.599355][ T8196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 268.836435][T14773] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2247'. [ 269.570071][ T8197] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.693730][T14796] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2252'. [ 269.710611][T14796] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 269.717892][T14796] IPv6: NLM_F_CREATE should be set when creating new route [ 269.746397][ T8197] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.778998][ T5144] Bluetooth: hci4: command tx timeout [ 269.854948][ T8197] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.921300][T14499] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 269.971495][T14499] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 270.090651][ T8197] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.153780][T14499] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 270.214565][T14499] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 270.493006][T14499] 8021q: adding VLAN 0 to HW filter on device bond0 [ 270.510871][T14499] 8021q: adding VLAN 0 to HW filter on device team0 [ 270.526125][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.533307][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 270.592266][ T8196] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.599474][ T8196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 270.685596][ T8197] bridge_slave_1: left allmulticast mode [ 270.708485][ T8197] bridge_slave_1: left promiscuous mode [ 270.727595][ T8197] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.769022][ T8197] bridge_slave_0: left allmulticast mode [ 270.774711][ T8197] bridge_slave_0: left promiscuous mode [ 270.803526][ T5850] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 270.813738][ T5850] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 270.816127][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.834894][ T5850] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 270.855543][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 270.867197][ T5850] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 270.875481][ T5850] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.526003][ T8197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 271.550430][ T8197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 271.573378][ T8197] bond0 (unregistering): Released all slaves [ 271.607189][T14844] veth0: entered promiscuous mode [ 271.612908][T14844] veth0: left promiscuous mode [ 271.771409][T14841] xfrm0 speed is unknown, defaulting to 1000 [ 271.805070][T14841] lo speed is unknown, defaulting to 1000 [ 271.812877][T14873] netlink: 8 bytes leftover after parsing attributes in process `syz.6.2262'. [ 271.824151][T14499] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 272.506256][T14912] netlink: 28 bytes leftover after parsing attributes in process `syz.7.2267'. [ 272.551357][T14912] netlink: 'syz.7.2267': attribute type 8 has an invalid length. [ 272.560352][T14912] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2267'. [ 272.926317][T14927] xt_TCPMSS: Only works on TCP SYN packets [ 272.968737][ T5144] Bluetooth: hci1: command tx timeout [ 273.087299][ T8197] hsr_slave_0: left promiscuous mode [ 273.148053][ T8197] hsr_slave_1: left promiscuous mode [ 273.155450][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 273.168640][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 273.193101][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 273.210842][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 273.279150][ T8197] veth1_macvtap: left promiscuous mode [ 273.288143][ T8197] veth0_macvtap: left promiscuous mode [ 273.299153][ T8197] veth1_vlan: left promiscuous mode [ 273.305790][ T8197] veth0_vlan: left promiscuous mode [ 273.335333][T14935] netlink: 'syz.7.2271': attribute type 4 has an invalid length. [ 273.403864][T14939] netlink: 'syz.7.2271': attribute type 4 has an invalid length. [ 273.550833][T14946] netlink: 16 bytes leftover after parsing attributes in process `syz.7.2271'. [ 273.984166][ T8197] team0 (unregistering): Port device team_slave_1 removed [ 274.039942][ T8197] team0 (unregistering): Port device team_slave_0 removed [ 274.493918][T14953] gre1: entered promiscuous mode [ 274.516339][T14953] gre1: entered allmulticast mode [ 274.571222][T14499] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.970333][T14499] veth0_vlan: entered promiscuous mode [ 275.034021][T14499] veth1_vlan: entered promiscuous mode [ 275.058651][ T5144] Bluetooth: hci1: command tx timeout [ 275.083667][T14841] chnl_net:caif_netlink_parms(): no params data found [ 275.684575][T15007] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 275.687798][T14499] veth0_macvtap: entered promiscuous mode [ 275.706368][T14499] veth1_macvtap: entered promiscuous mode [ 275.721950][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.734180][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.744080][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.754733][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.765490][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.777244][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.788056][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.799427][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.809531][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.820648][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.831381][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.842028][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.853464][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 275.864182][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.878814][T14499] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 275.912156][T14841] bridge0: port 1(bridge_slave_0) entered blocking state [ 275.930919][T14841] bridge0: port 1(bridge_slave_0) entered disabled state [ 275.938164][T14841] bridge_slave_0: entered allmulticast mode [ 275.950487][T14841] bridge_slave_0: entered promiscuous mode [ 275.959487][T14841] bridge0: port 2(bridge_slave_1) entered blocking state [ 275.970694][T14841] bridge0: port 2(bridge_slave_1) entered disabled state [ 275.989267][T14841] bridge_slave_1: entered allmulticast mode [ 276.026118][T14841] bridge_slave_1: entered promiscuous mode [ 276.090823][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.097680][T15020] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2289'. [ 276.125635][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.146378][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.165367][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.186435][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.197329][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.207692][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.218352][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.242284][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.266802][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.286821][T14499] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 276.299094][T14499] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.310066][T14499] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 276.436384][T14499] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.474613][T14499] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.521914][T14499] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.568642][T14499] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 276.654329][T14841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 276.700588][T14841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 276.821719][T15048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2295'. [ 276.851583][T15054] netlink: 'syz.7.2297': attribute type 1 has an invalid length. [ 276.860603][T15053] netlink: 'syz.7.2297': attribute type 1 has an invalid length. [ 276.901926][T14841] team0: Port device team_slave_0 added [ 276.933494][T14841] team0: Port device team_slave_1 added [ 277.091011][T14841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 277.112789][T14841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.150136][ T5144] Bluetooth: hci1: command tx timeout [ 277.192078][T14841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 277.299291][T14841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 277.317231][T14841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.343859][T14841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 277.467542][T14841] hsr_slave_0: entered promiscuous mode [ 277.482220][T14841] hsr_slave_1: entered promiscuous mode [ 277.507473][T14841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 277.518388][T14841] Cannot create hsr debugfs directory [ 277.706888][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.731342][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.859694][T15090] netlink: 36 bytes leftover after parsing attributes in process `syz.6.2306'. [ 277.879722][ T8196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.902705][ T8196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.164486][T15103] netlink: 'syz.0.2311': attribute type 29 has an invalid length. [ 278.607450][T15129] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2314'. [ 278.626631][ T8197] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.880892][ T8197] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 278.990947][ T8197] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.070721][ T8197] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 279.120090][T14841] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 279.137461][T14841] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 279.155601][T14841] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 279.208878][ T5144] Bluetooth: hci1: command tx timeout [ 279.248711][T14841] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 279.660375][ T8197] bridge_slave_1: left allmulticast mode [ 279.679184][ T8197] bridge_slave_1: left promiscuous mode [ 279.684951][ T8197] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.721055][ T8197] bridge_slave_0: left allmulticast mode [ 279.726743][ T8197] bridge_slave_0: left promiscuous mode [ 279.749105][ T8197] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.769994][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 279.781556][ T5850] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 279.791472][ T5850] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 279.805880][ T5850] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 279.814648][ T5850] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 279.822649][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 279.872872][T15171] netlink: 'syz.0.2319': attribute type 1 has an invalid length. [ 280.402289][ T8197] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 280.434113][ T8197] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 280.456735][ T8197] bond0 (unregistering): Released all slaves [ 280.483924][T15157] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2317'. [ 280.680417][T15166] xfrm0 speed is unknown, defaulting to 1000 [ 280.773213][T15166] lo speed is unknown, defaulting to 1000 [ 280.847531][T15198] netem: incorrect gi model size [ 280.892097][T15198] netem: change failed [ 281.270169][T15223] netlink: 'syz.0.2325': attribute type 1 has an invalid length. [ 281.287761][T15223] netlink: 244 bytes leftover after parsing attributes in process `syz.0.2325'. [ 281.348061][T14841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 281.415005][T15225] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2326'. [ 281.422083][T14841] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.491077][T15225] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 281.606785][T15235] netlink: 2 bytes leftover after parsing attributes in process `syz.0.2328'. [ 281.626325][T15235] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 281.651685][ T8197] hsr_slave_0: left promiscuous mode [ 281.669165][ T8197] hsr_slave_1: left promiscuous mode [ 281.690504][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 281.719421][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 281.740234][ T8197] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 281.765411][ T8197] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 281.838634][ T8197] veth1_macvtap: left promiscuous mode [ 281.848685][ T5144] Bluetooth: hci4: command tx timeout [ 281.866297][ T8197] veth0_macvtap: left promiscuous mode [ 281.876921][ T8197] veth1_vlan: left promiscuous mode [ 281.883367][ T8197] veth0_vlan: left promiscuous mode [ 282.442250][ T8197] team0 (unregistering): Port device team_slave_1 removed [ 282.492999][ T8197] team0 (unregistering): Port device team_slave_0 removed [ 282.966502][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 282.973698][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.094564][ T8196] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.101733][ T8196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.454080][T15166] chnl_net:caif_netlink_parms(): no params data found [ 283.844683][T15166] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.867554][T15166] bridge0: port 1(bridge_slave_0) entered disabled state [ 283.905432][T15166] bridge_slave_0: entered allmulticast mode [ 283.928937][ T5144] Bluetooth: hci4: command tx timeout [ 283.937009][T15166] bridge_slave_0: entered promiscuous mode [ 283.945590][T15166] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.956505][T15166] bridge0: port 2(bridge_slave_1) entered disabled state [ 283.964934][T15166] bridge_slave_1: entered allmulticast mode [ 283.973249][T15166] bridge_slave_1: entered promiscuous mode [ 284.093039][T15314] tipc: Started in network mode [ 284.097938][T15314] tipc: Node identity fe800000000000000000000000000013, cluster identity 4711 [ 284.126233][T15314] tipc: Enabled bearer , priority 10 [ 284.257372][T15166] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 284.276459][T15321] netlink: 228 bytes leftover after parsing attributes in process `syz.7.2341'. [ 284.281261][T15166] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 284.314220][T15309] netlink: 'syz.6.2338': attribute type 11 has an invalid length. [ 284.915906][T15330] netlink: 'syz.0.2344': attribute type 1 has an invalid length. [ 285.119138][ T5886] tipc: Node number set to 4269801491 [ 286.009201][ T5144] Bluetooth: hci4: command tx timeout [ 286.454304][T15166] team0: Port device team_slave_0 added [ 286.470002][T15324] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 286.567446][T14841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 286.587607][T15166] team0: Port device team_slave_1 added [ 286.720905][T15166] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 286.738195][T15166] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.819160][T15166] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 286.867560][T15166] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 286.880545][T15166] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 286.910451][T15166] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 286.927491][T15355] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 286.944655][T15346] tipc: Started in network mode [ 286.950288][T15346] tipc: Node identity 7, cluster identity 4711 [ 286.969250][T15346] tipc: Node number set to 7 [ 287.147622][T15166] hsr_slave_0: entered promiscuous mode [ 287.171832][T15366] netlink: 28 bytes leftover after parsing attributes in process `syz.6.2353'. [ 287.189912][T15166] hsr_slave_1: entered promiscuous mode [ 287.207401][T15166] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.218213][T15166] Cannot create hsr debugfs directory [ 287.230286][T15366] netlink: 576 bytes leftover after parsing attributes in process `syz.6.2353'. [ 287.380507][T14841] veth0_vlan: entered promiscuous mode [ 287.443381][T14841] veth1_vlan: entered promiscuous mode [ 287.622810][T14841] veth0_macvtap: entered promiscuous mode [ 287.636879][T14841] veth1_macvtap: entered promiscuous mode [ 287.717893][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.746449][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.769107][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.788573][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.806074][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.816788][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.838476][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.863757][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.883620][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.895307][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.906159][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.916501][T15359] delete_channel: no stack [ 287.917248][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.954090][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 287.965697][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 287.979729][T14841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 288.057732][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.089250][ T5841] Bluetooth: hci4: command tx timeout [ 288.108514][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.151595][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.162812][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.177220][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.188148][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.198945][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.210734][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.221260][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.232852][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.243070][T14841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 288.256218][T14841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 288.268926][T14841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 288.309833][T15404] netlink: 32 bytes leftover after parsing attributes in process `syz.7.2360'. [ 288.470367][T15412] netlink: 'syz.6.2362': attribute type 10 has an invalid length. [ 288.484435][T14841] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.496311][T14841] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.505608][T14841] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.514930][T14841] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 288.538110][T15415] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.565279][T15412] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.575586][T15416] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 288.600557][T15412] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.637015][T15412] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 288.731294][ T5841] Bluetooth: hci5: command 0x0406 tx timeout [ 288.745558][T15419] xt_CT: No such helper "pptp" [ 289.014282][T15166] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 289.124065][T15166] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 289.199310][T15166] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 289.212905][T15166] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 289.235341][ T8197] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.266665][ T8197] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.357439][ T8196] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 289.383218][ T8196] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 289.518180][T15166] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.671884][T15166] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.720623][ T8196] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.727747][ T8196] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.771688][ T8196] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.778894][ T8196] bridge0: port 2(bridge_slave_1) entered forwarding state [ 290.165428][ T67] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.176108][ T5144] Bluetooth: hci4: command 0x0405 tx timeout [ 290.315227][ T67] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.427549][T15166] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.469408][ T67] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.549650][ T67] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 290.586872][T15166] veth0_vlan: entered promiscuous mode [ 290.613638][T15166] veth1_vlan: entered promiscuous mode [ 290.698020][T15166] veth0_macvtap: entered promiscuous mode [ 290.761708][T15166] veth1_macvtap: entered promiscuous mode [ 290.846864][ T67] bridge_slave_1: left allmulticast mode [ 290.858177][ T67] bridge_slave_1: left promiscuous mode [ 290.879797][T15484] netlink: 20 bytes leftover after parsing attributes in process `syz.6.2373'. [ 290.899029][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 290.928075][ T67] bridge_slave_0: left allmulticast mode [ 290.959070][ T67] bridge_slave_0: left promiscuous mode [ 290.964836][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.176718][T15500] netlink: 92 bytes leftover after parsing attributes in process `syz.6.2375'. [ 291.395872][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 291.414197][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 291.425124][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 291.434517][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 291.459264][ T5144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 291.467047][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 291.695513][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 291.708425][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 291.719726][ T67] bond0 (unregistering): Released all slaves [ 291.733488][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.746876][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.756815][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.767673][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.782104][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.792750][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.802852][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.813307][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.823676][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.835020][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.845108][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.857856][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.867924][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.878653][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.889876][T15166] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.897243][T15487] netlink: 60 bytes leftover after parsing attributes in process `syz.0.2372'. [ 292.050176][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.085426][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.116908][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.151169][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.169281][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.194917][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.205736][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.216875][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.227845][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.239614][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.250926][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.261879][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.281135][T15166] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 292.303291][T15166] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 292.325520][T15166] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 292.457826][T15166] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.475886][T15166] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.486136][T15166] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.496119][T15166] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 292.595473][T15532] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 292.633861][T15507] xfrm0 speed is unknown, defaulting to 1000 [ 292.747681][T15507] lo speed is unknown, defaulting to 1000 [ 292.980986][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.000108][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.099632][ T1110] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 293.133016][ T1110] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 293.512186][ T67] hsr_slave_0: left promiscuous mode [ 293.519219][ T67] hsr_slave_1: left promiscuous mode [ 293.529461][ T5850] Bluetooth: hci1: command tx timeout [ 293.576571][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 293.623221][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 293.641065][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 293.669157][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 293.770077][ T67] veth1_macvtap: left promiscuous mode [ 293.791575][ T67] veth0_macvtap: left promiscuous mode [ 293.804665][ T67] veth1_vlan: left promiscuous mode [ 293.839031][ T67] veth0_vlan: left promiscuous mode [ 294.455140][ T67] team0 (unregistering): Port device team_slave_1 removed [ 294.497424][ T67] team0 (unregistering): Port device team_slave_0 removed [ 295.082489][T15507] chnl_net:caif_netlink_parms(): no params data found [ 295.290248][T15596] tipc: New replicast peer: 0.0.0.0 [ 295.295637][T15596] tipc: Enabled bearer , priority 10 [ 295.334848][T15598] tipc: New replicast peer: 100.1.1.1 [ 295.609279][ T5850] Bluetooth: hci1: command tx timeout [ 295.617077][T15507] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.635843][T15507] bridge0: port 1(bridge_slave_0) entered disabled state [ 295.648886][T15507] bridge_slave_0: entered allmulticast mode [ 295.661680][T15507] bridge_slave_0: entered promiscuous mode [ 295.681942][T15507] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.681976][T15608] netlink: 'syz.0.2396': attribute type 1 has an invalid length. [ 295.698440][T15507] bridge0: port 2(bridge_slave_1) entered disabled state [ 295.715337][T15507] bridge_slave_1: entered allmulticast mode [ 295.724173][T15507] bridge_slave_1: entered promiscuous mode [ 295.755443][T15608] 8021q: adding VLAN 0 to HW filter on device bond6 [ 295.841746][T15507] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 295.867382][T15507] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 296.006707][ T67] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.037784][T15507] team0: Port device team_slave_0 added [ 296.086538][ T67] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.166259][T15507] team0: Port device team_slave_1 added [ 296.236063][ T67] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.340049][T15507] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 296.347025][T15507] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.455481][T15507] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 296.467054][T15647] xt_bpf: check failed: parse error [ 296.560465][ T67] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.629426][T15507] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 296.636407][T15507] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 296.724009][T15507] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 296.759745][ T5144] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 296.770583][ T5144] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 296.798557][ T5144] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 296.807597][ T5144] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 296.827450][ T5144] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 296.835181][ T5144] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 297.153576][T15507] hsr_slave_0: entered promiscuous mode [ 297.169070][T15507] hsr_slave_1: entered promiscuous mode [ 297.178495][T15507] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 297.196364][T15507] Cannot create hsr debugfs directory [ 297.221977][T15653] xfrm0 speed is unknown, defaulting to 1000 [ 297.321113][T15653] lo speed is unknown, defaulting to 1000 [ 297.595062][ T67] bridge_slave_1: left allmulticast mode [ 297.619445][ T67] bridge_slave_1: left promiscuous mode [ 297.642539][ T67] bridge0: port 2(bridge_slave_1) entered disabled state [ 297.688558][ T5850] Bluetooth: hci1: command tx timeout [ 297.705969][ T67] bridge_slave_0: left allmulticast mode [ 297.712886][ T67] bridge_slave_0: left promiscuous mode [ 297.721142][ T67] bridge0: port 1(bridge_slave_0) entered disabled state [ 298.271327][ T67] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 298.283378][ T67] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 298.294226][ T67] bond0 (unregistering): Released all slaves [ 298.315995][T15688] batadv_slave_1: entered promiscuous mode [ 298.322221][T15688] batadv_slave_1: entered allmulticast mode [ 298.474667][T15703] netlink: 'syz.6.2411': attribute type 1 has an invalid length. [ 298.827497][T15711] netlink: 'syz.6.2413': attribute type 2 has an invalid length. [ 298.888903][ T5850] Bluetooth: hci4: command tx timeout [ 298.931799][T15724] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2418'. [ 299.224373][ T5923] IPVS: starting estimator thread 0... [ 299.329247][T15740] IPVS: using max 25 ests per chain, 60000 per kthread [ 299.375208][T15737] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 299.448895][ T67] hsr_slave_0: left promiscuous mode [ 299.474470][ T67] hsr_slave_1: left promiscuous mode [ 299.541944][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 299.550070][ T67] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 299.569066][ T67] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 299.576571][ T67] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 299.640659][ T67] veth1_macvtap: left promiscuous mode [ 299.646239][ T67] veth0_macvtap: left promiscuous mode [ 299.672323][ T67] veth1_vlan: left promiscuous mode [ 299.687867][ T67] veth0_vlan: left promiscuous mode [ 299.769461][ T5850] Bluetooth: hci1: command tx timeout [ 300.255784][ T67] team0 (unregistering): Port device team_slave_1 removed [ 300.303498][ T67] team0 (unregistering): Port device team_slave_0 removed [ 300.901888][T15771] netlink: 157 bytes leftover after parsing attributes in process `syz.7.2424'. [ 300.969234][ T5850] Bluetooth: hci4: command tx timeout [ 301.075346][T15653] chnl_net:caif_netlink_parms(): no params data found [ 301.318916][T15507] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 301.411919][T15507] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 301.450068][T15794] netlink: 4 bytes leftover after parsing attributes in process `syz.6.2428'. [ 301.511859][T15507] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 301.640029][T15507] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 301.814774][T15653] bridge0: port 1(bridge_slave_0) entered blocking state [ 301.834545][T15653] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.847633][T15653] bridge_slave_0: entered allmulticast mode [ 301.866751][T15653] bridge_slave_0: entered promiscuous mode [ 301.900874][T15653] bridge0: port 2(bridge_slave_1) entered blocking state [ 301.917605][T15653] bridge0: port 2(bridge_slave_1) entered disabled state [ 301.934911][T15653] bridge_slave_1: entered allmulticast mode [ 301.947134][T15653] bridge_slave_1: entered promiscuous mode [ 302.032048][T15820] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2432'. [ 302.048976][T15820] netlink: 64 bytes leftover after parsing attributes in process `syz.0.2432'. [ 302.063754][T15817] batman_adv: batadv0: Adding interface: ip6gretap1 [ 302.078330][T15817] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. If you experience problems getting traffic through try increasing the MTU to 1500. [ 302.090237][T15822] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 302.118441][T15817] batman_adv: batadv0: Interface activated: ip6gretap1 [ 302.256390][T15653] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 302.297538][T15653] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 302.501946][T15507] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.547564][T15653] team0: Port device team_slave_0 added [ 302.571215][T15653] team0: Port device team_slave_1 added [ 302.656300][T15836] netlink: 68 bytes leftover after parsing attributes in process `syz.6.2437'. [ 302.667093][T15833] netlink: 'syz.0.2436': attribute type 8 has an invalid length. [ 302.693315][T15833] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2436'. [ 302.717513][T15653] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 302.724785][T15653] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.752416][T15653] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 302.781295][T15507] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.800800][T15653] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 302.807773][T15653] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 302.866203][T15653] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 302.947314][T15847] netlink: 4 bytes leftover after parsing attributes in process `syz.7.2438'. [ 302.967510][T15847] netlink: 176 bytes leftover after parsing attributes in process `syz.7.2438'. [ 302.981452][ T8197] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.988614][ T8197] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.018857][T15847] netlink: 'syz.7.2438': attribute type 5 has an invalid length. [ 303.049448][ T5850] Bluetooth: hci4: command tx timeout [ 303.050203][T15653] hsr_slave_0: entered promiscuous mode [ 303.093570][T15653] hsr_slave_1: entered promiscuous mode [ 303.118887][T15653] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 303.148377][T15653] Cannot create hsr debugfs directory [ 303.163246][ T8197] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.170396][ T8197] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.895593][T15507] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.929050][ T30] INFO: task syz.1.1136:10185 blocked for more than 143 seconds. [ 303.936839][ T30] Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 303.960685][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 304.023027][ T30] task:syz.1.1136 state:D stack:26544 pid:10185 tgid:10184 ppid:5840 flags:0x00000004 [ 304.084430][ T30] Call Trace: [ 304.087772][ T30] [ 304.114035][ T30] __schedule+0x1850/0x4c30 [ 304.129881][ T30] ? __pfx___schedule+0x10/0x10 [ 304.134792][ T30] ? __pfx_lock_release+0x10/0x10 [ 304.145045][ T30] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 304.151555][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 304.157472][ T30] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 304.164759][ T30] ? schedule+0x90/0x320 [ 304.169636][ T30] schedule+0x14b/0x320 [ 304.173820][ T30] schedule_preempt_disabled+0x13/0x30 [ 304.179538][ T30] __mutex_lock+0x7e7/0xee0 [ 304.184066][ T30] ? __mutex_lock+0x5ef/0xee0 [ 304.189076][ T30] ? nfsd_nl_listener_get_doit+0x115/0x5e0 [ 304.194942][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 304.200053][ T30] ? __asan_memset+0x23/0x50 [ 304.204680][ T30] nfsd_nl_listener_get_doit+0x115/0x5e0 [ 304.210626][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 304.215303][ T30] ? genl_family_rcv_msg_attrs_parse+0x140/0x290 [ 304.222572][ T30] genl_rcv_msg+0xb14/0xec0 [ 304.227109][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 304.232853][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 304.237900][ T30] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 304.244528][ T30] ? __pfx___might_resched+0x10/0x10 [ 304.250718][ T30] netlink_rcv_skb+0x1e3/0x430 [ 304.255526][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 304.261160][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 304.266492][ T30] ? __netlink_deliver_tap+0x7aa/0x7f0 [ 304.272668][ T30] genl_rcv+0x28/0x40 [ 304.276656][ T30] netlink_unicast+0x7f6/0x990 [ 304.282981][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 304.288663][ T30] ? __virt_addr_valid+0x45f/0x530 [ 304.293806][ T30] ? __phys_addr_symbol+0x2f/0x70 [ 304.299603][ T30] ? __check_object_size+0x47a/0x730 [ 304.304918][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 304.310594][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.315938][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 304.322522][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 304.327832][ T30] __sock_sendmsg+0x221/0x270 [ 304.333068][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 304.337869][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 304.344016][ T30] ? __fget_files+0x2a/0x410 [ 304.349245][ T30] ? __fget_files+0x2a/0x410 [ 304.353865][ T30] __sys_sendmsg+0x269/0x350 [ 304.359007][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 304.364194][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 304.371206][ T30] ? do_syscall_64+0x100/0x230 [ 304.375970][ T30] ? do_syscall_64+0xb6/0x230 [ 304.381131][ T30] do_syscall_64+0xf3/0x230 [ 304.385636][ T30] ? clear_bhb_loop+0x35/0x90 [ 304.391006][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 304.396932][ T30] RIP: 0033:0x7fae25b85d29 [ 304.402142][ T30] RSP: 002b:00007fae26a38038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 304.411031][ T30] RAX: ffffffffffffffda RBX: 00007fae25d75fa0 RCX: 00007fae25b85d29 [ 304.419538][ T30] RDX: 0000000024000100 RSI: 0000000020001740 RDI: 0000000000000003 [ 304.427851][ T30] RBP: 00007fae25c01b08 R08: 0000000000000000 R09: 0000000000000000 [ 304.436246][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 304.444405][ T30] R13: 0000000000000000 R14: 00007fae25d75fa0 R15: 00007fffe64cb798 [ 304.452580][ T30] [ 304.455679][ T30] [ 304.455679][ T30] Showing all locks held in the system: [ 304.522693][ T30] 3 locks held by kworker/1:0/25: [ 304.548192][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 304.579530][ T30] #1: ffffc900001f7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 304.597125][ T30] #2: ffff888024f00240 (&data->fib_lock){+.+.}-{4:4}, at: nsim_fib_event_work+0x2d1/0x4130 [ 304.619063][ T30] 1 lock held by khungtaskd/30: [ 304.623953][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 304.635510][ T30] 2 locks held by getty/5583: [ 304.640629][ T30] #0: ffff888031b550a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 304.651173][ T30] #1: ffffc900032eb2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 304.662003][ T30] 3 locks held by kworker/u8:12/8198: [ 304.667404][ T30] #0: ffff8880b873e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 304.677816][ T30] #1: ffff8880b8728948 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x41d/0x7a0 [ 304.694534][ T30] #2: ffff8880b872a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 304.704806][ T30] 2 locks held by syz.4.1024/9787: [ 304.719066][ T30] #0: ffffffff8fd154d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 304.727322][ T30] #1: ffffffff8ec01d48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 304.739729][ T30] 2 locks held by syz.1.1136/10185: [ 304.744953][ T30] #0: ffffffff8fd154d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 304.753991][ T30] #1: ffffffff8ec01d48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x115/0x5e0 [ 304.764544][ T30] 3 locks held by syz.5.1605/11920: [ 304.770150][ T30] #0: ffffffff8fd154d0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 304.779487][ T30] #1: ffff888062d6c6c8 (nlk_cb_mutex-GENERIC){+.+.}-{4:4}, at: __netlink_dump_start+0x119/0x790 [ 304.790408][ T30] #2: ffffffff8ec01d48 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_rpc_status_get_dumpit+0xdc/0x1a60 [ 304.801314][ T30] 7 locks held by syz-executor/15653: [ 304.806712][ T30] #0: ffff888033f04420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x225/0xd30 [ 304.818262][ T30] #1: ffff88807e45c088 (&of->mutex){+.+.}-{4:4}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 304.828697][ T30] #2: ffff8881427fc2d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 304.840415][ T30] #3: ffffffff8f55e828 (nsim_bus_dev_list_lock){+.+.}-{4:4}, at: del_device_store+0xfc/0x480 [ 304.852093][ T30] #4: ffff888059caf0e8 (&dev->mutex){....}-{4:4}, at: device_release_driver_internal+0xce/0x7c0 [ 304.868820][ T30] #5: ffff888051f35250 (&devlink->lock_key#17){+.+.}-{4:4}, at: nsim_drv_remove+0x50/0x160 [ 304.889445][ T30] #6: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 304.913903][ T30] 1 lock held by syz.6.2448/15894: [ 304.923983][ T30] #0: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 304.936884][ T30] 3 locks held by cmp/15907: [ 304.951638][ T30] [ 304.953985][ T30] ============================================= [ 304.953985][ T30] [ 305.019176][ T30] NMI backtrace for cpu 1 [ 305.023543][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 305.034058][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 305.044129][ T30] Call Trace: [ 305.047423][ T30] [ 305.050363][ T30] dump_stack_lvl+0x241/0x360 [ 305.055066][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.060285][ T30] ? __pfx__printk+0x10/0x10 [ 305.064908][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 305.069868][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 305.075347][ T30] ? _printk+0xd5/0x120 [ 305.079521][ T30] ? __pfx__printk+0x10/0x10 [ 305.084125][ T30] ? __wake_up_klogd+0xcc/0x110 [ 305.088986][ T30] ? __pfx__printk+0x10/0x10 [ 305.093595][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 305.098634][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 305.104626][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 305.110624][ T30] watchdog+0xff6/0x1040 [ 305.114884][ T30] ? watchdog+0x1ea/0x1040 [ 305.119318][ T30] ? __pfx_watchdog+0x10/0x10 [ 305.124012][ T30] kthread+0x2f0/0x390 [ 305.128102][ T30] ? __pfx_watchdog+0x10/0x10 [ 305.132796][ T30] ? __pfx_kthread+0x10/0x10 [ 305.137403][ T30] ret_from_fork+0x4b/0x80 [ 305.141831][ T30] ? __pfx_kthread+0x10/0x10 [ 305.146438][ T30] ret_from_fork_asm+0x1a/0x30 [ 305.151231][ T30] [ 305.156095][ T30] Sending NMI from CPU 1 to CPUs 0: [ 305.162035][ C0] NMI backtrace for cpu 0 [ 305.162048][ C0] CPU: 0 UID: 0 PID: 15895 Comm: syz.7.2446 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 305.162067][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 305.162076][ C0] RIP: 0010:unwind_next_frame+0x160f/0x22d0 [ 305.162099][ C0] Code: 00 41 c6 06 01 48 8b 44 24 70 0f b6 04 28 84 c0 0f 85 6a 08 00 00 0f b6 04 2b 84 c0 0f 85 82 08 00 00 48 8b 44 24 28 0f b7 30 ee 04 83 e6 0f 83 fe 04 0f 84 d0 00 00 00 83 fe 01 0f 84 28 01 [ 305.162113][ C0] RSP: 0018:ffffc90002f673f0 EFLAGS: 00000246 [ 305.162127][ C0] RAX: ffffffff90a2ce86 RBX: 1ffffffff21459d0 RCX: 0000000000000000 [ 305.162139][ C0] RDX: 0000000000000000 RSI: 0000000000000215 RDI: ffffc90002f67580 [ 305.162150][ C0] RBP: dffffc0000000000 R08: ffffc90002f6757f R09: 0000000000000000 [ 305.162161][ C0] R10: ffffc90002f67570 R11: fffff520005eceb0 R12: ffffc90002f68000 [ 305.162173][ C0] R13: ffffc90002f67520 R14: ffffffff8141f5b5 R15: ffffc90002f67570 [ 305.162185][ C0] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 305.162198][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 305.162209][ C0] CR2: 00007f64583b0440 CR3: 000000000e736000 CR4: 00000000003526f0 [ 305.162224][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 305.162233][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 305.162243][ C0] Call Trace: [ 305.162249][ C0] [ 305.162255][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 305.162273][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 305.162291][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 305.162308][ C0] ? nmi_handle+0x2a/0x5a0 [ 305.162332][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 305.162347][ C0] ? nmi_handle+0x14f/0x5a0 [ 305.162363][ C0] ? nmi_handle+0x2a/0x5a0 [ 305.162381][ C0] ? unwind_next_frame+0x160f/0x22d0 [ 305.162397][ C0] ? default_do_nmi+0x63/0x160 [ 305.162413][ C0] ? exc_nmi+0x123/0x1f0 [ 305.162429][ C0] ? end_repeat_nmi+0xf/0x53 [ 305.162443][ C0] ? arch_stack_walk+0xe5/0x150 [ 305.162465][ C0] ? unwind_next_frame+0x160f/0x22d0 [ 305.162481][ C0] ? unwind_next_frame+0x160f/0x22d0 [ 305.162498][ C0] ? unwind_next_frame+0x160f/0x22d0 [ 305.162515][ C0] [ 305.162520][ C0] [ 305.162531][ C0] ? __unwind_start+0xf8/0x740 [ 305.162549][ C0] __unwind_start+0x59a/0x740 [ 305.162575][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 305.162590][ C0] arch_stack_walk+0xe5/0x150 [ 305.162610][ C0] ? arch_stack_walk+0xe5/0x150 [ 305.162629][ C0] stack_trace_save+0x118/0x1d0 [ 305.162644][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 305.162665][ C0] save_stack+0xfb/0x1f0 [ 305.162682][ C0] ? __pfx_save_stack+0x10/0x10 [ 305.162704][ C0] ? page_ext_get+0x20/0x2a0 [ 305.162722][ C0] __reset_page_owner+0x76/0x430 [ 305.162738][ C0] ? mod_memcg_page_state+0x531/0x800 [ 305.162758][ C0] ? mod_memcg_page_state+0x97/0x800 [ 305.162779][ C0] free_unref_page+0xd3f/0x1010 [ 305.162804][ C0] vfree+0x186/0x2e0 [ 305.162824][ C0] kcov_close+0x28/0x50 [ 305.162840][ C0] ? __pfx_kcov_close+0x10/0x10 [ 305.162854][ C0] __fput+0x23c/0xa50 [ 305.162879][ C0] task_work_run+0x24f/0x310 [ 305.162901][ C0] ? __pfx_task_work_run+0x10/0x10 [ 305.162917][ C0] ? do_exit+0xa2a/0x28e0 [ 305.162935][ C0] ? do_exit+0xa2a/0x28e0 [ 305.162953][ C0] do_exit+0xa2f/0x28e0 [ 305.162973][ C0] ? __pfx_do_exit+0x10/0x10 [ 305.162989][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 305.163006][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 305.163024][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 305.163040][ C0] ? _raw_spin_lock_irq+0xdf/0x120 [ 305.163060][ C0] do_group_exit+0x207/0x2c0 [ 305.163075][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 305.163093][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 305.163113][ C0] get_signal+0x16b2/0x1750 [ 305.163139][ C0] ? __pfx_get_signal+0x10/0x10 [ 305.163162][ C0] arch_do_signal_or_restart+0x96/0x860 [ 305.163184][ C0] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 305.163203][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 305.163226][ C0] ? syscall_exit_to_user_mode+0xa3/0x340 [ 305.163246][ C0] syscall_exit_to_user_mode+0xce/0x340 [ 305.163267][ C0] do_syscall_64+0x100/0x230 [ 305.163286][ C0] ? clear_bhb_loop+0x35/0x90 [ 305.163302][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 305.163321][ C0] RIP: 0033:0x7fa550f85d29 [ 305.163334][ C0] Code: Unable to access opcode bytes at 0x7fa550f85cff. [ 305.163341][ C0] RSP: 002b:00007fa551dc4038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 305.163357][ C0] RAX: 0000000000000038 RBX: 00007fa551176160 RCX: 00007fa550f85d29 [ 305.163368][ C0] RDX: 0000000000000000 RSI: 0000000020000200 RDI: 0000000000000006 [ 305.163378][ C0] RBP: 00007fa551001b08 R08: 0000000000000000 R09: 0000000000000000 [ 305.163388][ C0] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 305.163398][ C0] R13: 0000000000000000 R14: 00007fa551176160 R15: 00007ffe9bdea3d8 [ 305.163416][ C0] [ 305.706868][ T5850] Bluetooth: hci4: command tx timeout [ 305.749330][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 305.756221][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 305.766733][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 305.776804][ T30] Call Trace: [ 305.780096][ T30] [ 305.783041][ T30] dump_stack_lvl+0x241/0x360 [ 305.787746][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 305.792964][ T30] ? __pfx__printk+0x10/0x10 [ 305.797574][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 305.803578][ T30] ? vscnprintf+0x5d/0x90 [ 305.807925][ T30] panic+0x349/0x880 [ 305.811839][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 305.818009][ T30] ? __pfx_panic+0x10/0x10 [ 305.822438][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 305.827828][ T30] ? __irq_work_queue_local+0x137/0x410 [ 305.833389][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 305.838771][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 305.844938][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 305.851110][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 305.857280][ T30] watchdog+0x1035/0x1040 [ 305.861633][ T30] ? watchdog+0x1ea/0x1040 [ 305.866069][ T30] ? __pfx_watchdog+0x10/0x10 [ 305.870756][ T30] kthread+0x2f0/0x390 [ 305.874839][ T30] ? __pfx_watchdog+0x10/0x10 [ 305.879525][ T30] ? __pfx_kthread+0x10/0x10 [ 305.884130][ T30] ret_from_fork+0x4b/0x80 [ 305.888555][ T30] ? __pfx_kthread+0x10/0x10 [ 305.893158][ T30] ret_from_fork_asm+0x1a/0x30 [ 305.897944][ T30] [ 305.901235][ T30] Kernel Offset: disabled [ 305.905551][ T30] Rebooting in 86400 seconds..