last executing test programs: 2m13.242564238s ago: executing program 0 (id=2208): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="9075f3419b84e5d56d50bb71650692c833689cee0b97c1bba5fc9a8ba3dfb4f5537f24000092a397a143c893d230f90b096c865d04affd4097cf2eb2275a91284f52492a72ead9f8aacb7a9c02b9c38d1bce675911843924ade30cd218fbc042cd236655feb1208d1593b3e847aa77f3235ad4b277adbbc9aa", 0x79) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'ipvlan1\x00'}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'team0\x00', 0x44}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x965}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x2a}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000000)="8e791f6c9a237a283715ac30dfae67d913f98a765defe510d20eeedc3cd0f8ea0ed8eda92f0c58c67d1aa212c4ce662dc49907c6aa9680a5121bb7e42be0729e477849da2c94618ebdfaa0dafa52d0bcad5537efd8a8a1545b8513d5629da9ebeb295b70b0d780b6b912d10e92f490447a6ec68a226e0adbe31d8bd333c22e0790ded2d94cb7d4b621fed814370698b6dd6768811a1d9379c430c9baa364bb52f4a92ff6a000d360271c75c6caa5a2aec9c468f1136160126769ccff7db5d03b5e7fbb88255f54177ce5221d431e7c4431c6228376e0aed45b69ca45811bc91163b6dd6c8f2f31d99fe629297978bb18beb9e7"}, 0x20) 1m57.394226722s ago: executing program 0 (id=2208): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="9075f3419b84e5d56d50bb71650692c833689cee0b97c1bba5fc9a8ba3dfb4f5537f24000092a397a143c893d230f90b096c865d04affd4097cf2eb2275a91284f52492a72ead9f8aacb7a9c02b9c38d1bce675911843924ade30cd218fbc042cd236655feb1208d1593b3e847aa77f3235ad4b277adbbc9aa", 0x79) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'ipvlan1\x00'}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'team0\x00', 0x44}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x965}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x2a}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000000)="8e791f6c9a237a283715ac30dfae67d913f98a765defe510d20eeedc3cd0f8ea0ed8eda92f0c58c67d1aa212c4ce662dc49907c6aa9680a5121bb7e42be0729e477849da2c94618ebdfaa0dafa52d0bcad5537efd8a8a1545b8513d5629da9ebeb295b70b0d780b6b912d10e92f490447a6ec68a226e0adbe31d8bd333c22e0790ded2d94cb7d4b621fed814370698b6dd6768811a1d9379c430c9baa364bb52f4a92ff6a000d360271c75c6caa5a2aec9c468f1136160126769ccff7db5d03b5e7fbb88255f54177ce5221d431e7c4431c6228376e0aed45b69ca45811bc91163b6dd6c8f2f31d99fe629297978bb18beb9e7"}, 0x20) 1m38.739197151s ago: executing program 0 (id=2208): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="9075f3419b84e5d56d50bb71650692c833689cee0b97c1bba5fc9a8ba3dfb4f5537f24000092a397a143c893d230f90b096c865d04affd4097cf2eb2275a91284f52492a72ead9f8aacb7a9c02b9c38d1bce675911843924ade30cd218fbc042cd236655feb1208d1593b3e847aa77f3235ad4b277adbbc9aa", 0x79) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'ipvlan1\x00'}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'team0\x00', 0x44}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x965}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x2a}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000000)="8e791f6c9a237a283715ac30dfae67d913f98a765defe510d20eeedc3cd0f8ea0ed8eda92f0c58c67d1aa212c4ce662dc49907c6aa9680a5121bb7e42be0729e477849da2c94618ebdfaa0dafa52d0bcad5537efd8a8a1545b8513d5629da9ebeb295b70b0d780b6b912d10e92f490447a6ec68a226e0adbe31d8bd333c22e0790ded2d94cb7d4b621fed814370698b6dd6768811a1d9379c430c9baa364bb52f4a92ff6a000d360271c75c6caa5a2aec9c468f1136160126769ccff7db5d03b5e7fbb88255f54177ce5221d431e7c4431c6228376e0aed45b69ca45811bc91163b6dd6c8f2f31d99fe629297978bb18beb9e7"}, 0x20) 1m32.119026571s ago: executing program 1 (id=3577): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) bind$bt_l2cap(r1, &(0x7f0000000000)={0x1f, 0x8, @any, 0x0, 0x2}, 0xe) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1d, 0x2, 0x6) (async) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x34, 0x10, 0x503, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x6230}, [@IFLA_GSO_MAX_SIZE={0x8, 0x29, 0x73f9a}, @IFLA_ADDRESS={0xa, 0x3, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1d}}]}, 0x34}}, 0x44001) (async) getsockopt$bt_BT_DEFER_SETUP(r0, 0x12, 0x7, 0x0, &(0x7f00000000c0)) (async) ioctl$BTRFS_IOC_FS_INFO(r1, 0x8400941f, &(0x7f0000000a00)) (async) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r3, 0x11, 0x1, &(0x7f00000000c0), 0x4) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r1) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000540)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000340)={&(0x7f0000000580)=ANY=[@ANYRES64=r4, @ANYRES16=r4, @ANYBLOB="02002bbd7000fbdbdf25120000000c009900030000005a0000000500e40001000000050013010000000006001a0103000000"], 0x38}, 0x1, 0x0, 0x0, 0x60}, 0x40045) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.numa_stat\x00', 0x26e1, 0x0) r6 = socket$inet6(0xa, 0x80002, 0x88) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r6, 0x0, r8, 0x0, 0x2000010003, 0xc) (async) socket$inet6(0xa, 0x1, 0x6) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000bc0)=@delchain={0x230, 0x65, 0x2, 0x70bd27, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x6}, @TCA_CHAIN={0x8, 0xb, 0x6}, @filter_kind_options=@f_bpf={{0x8}, {0x1f4, 0x2, [@TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0x0, 0xfff1}}, @TCA_BPF_ACT={0x1cc, 0x1, [@m_simple={0xd4, 0x1e, 0x0, 0x0, {{0xb}, {0x4}, {0xa5, 0x6, "7cee023b5f3eda3235f08479c7298f668df83784a515f37b98b970243b6cbce1e335c2408b15403736d879a1ff7d155c0e663a2fb26c229f6ccccb0a1ae920fac0e6eea12e7e454c4410109ee309bf75b728f165da6d47c757cadb6ed9c661a8cbf08a277aa2ae51382e3047475fc5e626293a7b6677605ad9a4a5010c58bedde2ef8326482734038d4447d40c5e50de5e0ad4260129abbda0702548badc81b5a7"}, {0xc}, {0xc, 0x8, {0x1}}}}, @m_simple={0xf4, 0x1e, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x15, 0x3, '\x00\xe1\'\x9d\xae\x12\'\x96S\xbd\x0e\xfe\x14Q\x00\xff\xf2'}]}, {0xad, 0x6, "9787c29d6ac649e7ec160dfef7c4cea330102e688fe12213d2bf7dae04880a34e7bf775010128401ec7b2a9ceab9c40c5f9bd00ceff17d69ca7a27324ef7a1ad28d4b3c6a826826e9c291c16ab3d13e1f337751959e47bf0fe515b70ea5a3584d9cdba83a705d3257305f931866cf9f1faa34fce0e8a7ee76e20f05d4e1adbee4ba00ddd7b896197ea2a0391ef62c651d59ed7e0e8964192a2c1c29308d03650349840a4d759fc9421"}, {0xc, 0x7, {0x0, 0x79d0f023c2b305dd}}, {0xc, 0x8, {0x3, 0x2}}}}]}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_FD={0x8}]}}]}, 0x230}, 0x1, 0x0, 0x0, 0x81}, 0x20000080) (async) r9 = socket(0x10, 0x803, 0x0) sendto(r9, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r9, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) (async) r10 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r10, 0x11, 0x65, &(0x7f0000000040), &(0x7f00000005c0)=0x4) bind$inet6(r7, &(0x7f00000006c0)={0xa, 0x4e22, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80000000}, 0x1c) (async) setsockopt$SO_BINDTODEVICE(r6, 0x1, 0x19, 0x0, 0x0) (async) syz_emit_ethernet(0x83, &(0x7f0000000140)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaf9ff030086dd601b8b97004d88c19edace00000000000000002100000002ff02000000000000000000000000000104004e20004d13"], 0x0) (async) close(r5) (async) ioctl$SIOCSIFHWADDR(r5, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="09000000008d"}) 1m31.972474262s ago: executing program 1 (id=3579): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010040000000000002034400000008000300", @ANYRES32=r3, @ANYBLOB="08002600851600000a00180000000000000000001c005a8018000180140002"], 0x4c}}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000340)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x78, r1, 0x4, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x24}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0xffffffff}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x40004000}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x109}, @NL80211_ATTR_CENTER_FREQ2={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xb}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x5}], @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0x1300, 0x8, 0x4, 0x2, 0xfe1f, 0x4, 0x10, 0xfff9, 0x80]}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x78}}, 0x40080) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff"], 0x48) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r6, 0x400448ca, 0x0) (async) bind$bt_hci(r6, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x42, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r7}, 0x10) (async) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) r9 = socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) (async) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000100)=0x9, 0x4) (async) setsockopt$packet_int(r9, 0x107, 0x12, &(0x7f0000000080)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000980)={'wg2\x00', 0x0}) socket$pppl2tp(0x18, 0x1, 0x1) (async) sendto$packet(r9, &(0x7f0000000180)="0b031407e0ff640f0200475400f6a13bb1000e00080008004803", 0x10000, 0x0, &(0x7f0000000140)={0x11, 0x0, r10}, 0x14) 1m31.834285345s ago: executing program 1 (id=3581): ioctl$BTRFS_IOC_GET_FEATURES(0xffffffffffffffff, 0x80189439, &(0x7f0000000000)) syz_emit_ethernet(0x246, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x210, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x3a, '\x00', [@ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769e4246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x33, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379fe"}, @pad1, @generic={0x1, 0x59, "08f1390b0c74cba47ed1dbe3290dbd16fe15f3802c8f12d8687cb72f6783172e63fafc0bc19fc7ea5e20fe65290cc5531784929dd4b5c8ff0df008542d00f6159b80595da8d72872864da820552af488c1cea2b483cc5fa05f"}]}]}}}}}}}, 0x0) 1m31.69517878s ago: executing program 1 (id=3582): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="0218000019000000000000000000000005000600000000000a0000000000000000000000000000000000ffffac1e00010000000000000000080012000000000000000000000000000600000000000000000000000000000000000000000000000000000000000000ffffffff00000000000000000000000005000500000000000a00000000000000ff02000000000000000000479e00a84bb27c00000000000005001900000000000a"], 0xc8}}, 0x0) bind$inet(r0, &(0x7f0000000440)={0x2, 0x6e20, @empty}, 0x10) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)={0x90, 0x9, 0x6, 0x801, 0x0, 0x0, {0x7, 0x0, 0x5}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x853e}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0x5}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}]}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1c00000}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}]}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP2_TO={0xc, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1}}, @IPSET_ATTR_SKBMARK={0xc, 0x1b, 0x1, 0x0, 0xd13}, @IPSET_ATTR_PACKETS={0xc, 0x19, 0x1, 0x0, 0x6}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0xfffffffd}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x90}, 0x1, 0x0, 0x0, 0x8800}, 0x0) syz_emit_ethernet(0x3a, &(0x7f0000002a40)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x15}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x18, 0x0, @wg=@data={0x4, 0x4, 0x81}}}}}}, 0x0) 1m31.677406177s ago: executing program 1 (id=3583): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000003c0)="5c00000013006bcd9e3fe3dceb48aa31086b8703110000001fa1ff0000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r1, 0x6, 0x24, &(0x7f0000000240)=0x80000000, 0x4) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000000)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x87, 0x4, 0xc, 0x22, @private1={0xfc, 0x1, '\x00', 0x1}, @rand_addr=' \x01\x00', 0x7, 0x10, 0x9, 0x6}}) ioctl$sock_inet6_SIOCDIFADDR(r1, 0x8936, &(0x7f0000000140)={@mcast2, 0x8, r2}) 1m31.461719738s ago: executing program 4 (id=3586): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x10290}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) bind$inet6(r0, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) sendmmsg(0xffffffffffffffff, &(0x7f00000030c0), 0x0, 0x9200000000000000) r3 = socket(0x10, 0x3, 0x0) write(r3, &(0x7f00000003c0)="2000000012005f0214f9f4070000fbe40a000000000085b5ca8d7c10277582b9", 0x20) recvmmsg(r3, &(0x7f0000000040), 0x0, 0x2, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r5) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r8, &(0x7f0000000400)={0xa, 0x2, 0x13, @loopback, 0x9}, 0x1c) getsockopt$inet_sctp6_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000040)={0x0, 0x9}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x19, &(0x7f00000002c0)={r9, 0x1000}, 0x8) setsockopt$inet6_tcp_int(r8, 0x6, 0xa, &(0x7f0000000100)=0x4b, 0x4) setsockopt$sock_int(r8, 0x1, 0x21, &(0x7f0000000080)=0xfffffffe, 0x4) sendto$inet6(r8, 0x0, 0x0, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000000c0)=ANY=[@ANYBLOB="98030000", @ANYRES16=r6, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r7, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001bae9ee14d4284d73c8"], 0x398}}, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000140)=ANY=[@ANYRES32=r2, @ANYRES32=r10, @ANYBLOB="02"], 0x10) close(r2) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r11, 0x2, 0x0, 0x0, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) close(r0) 1m31.29585013s ago: executing program 1 (id=3588): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e23, 0x0, @mcast1, 0x9}}, 0x5, 0x9, 0x351, 0x4, 0x40, 0x5, 0xfe}, &(0x7f0000000080)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000006c0)={r2, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe40, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd000000000000000088a8f5df86dd", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000300)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000001fc0)=""/4098, 0x1002}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000480)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040041, &(0x7f0000003700)) 1m31.009046041s ago: executing program 4 (id=3591): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="04ed00200000"], 0x6) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x9, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r2, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/152, 0x98}], 0x5}, 0x1}], 0x2, 0x0, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) openat$cgroup_subtree(r0, &(0x7f0000000080), 0x2, 0x0) (async) write$cgroup_subtree(r1, &(0x7f0000000500)=ANY=[@ANYBLOB="04ed00200000"], 0x6) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x1, 0x9, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r2, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) (async) socket$kcm(0x10, 0x2, 0x10) (async) sendmsg$kcm(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000000)="1400000010003507d25a806f8c6394f90324fc60", 0x14}], 0x1}, 0x0) (async) recvmmsg(r3, &(0x7f0000000bc0)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000ec0)=""/136, 0x88}, {&(0x7f0000001340)=""/4094, 0xffe}, {&(0x7f0000000040)=""/114, 0x72}, {&(0x7f00000001c0)=""/60, 0x3c}, {&(0x7f0000000200)=""/152, 0x98}], 0x5}, 0x1}], 0x2, 0x0, 0x0) (async) 1m30.636468068s ago: executing program 4 (id=3594): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x1) 1m29.66972117s ago: executing program 2 (id=3598): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0xa) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000100), 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x18, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x3}]}, 0x18}}, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000500)={@in6={{0xa, 0x4e24, 0x0, @loopback, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) socket$packet(0x11, 0x3, 0x300) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4040810) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r9 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r9, 0x29, 0x40, &(0x7f0000000240)=@filter={'filter\x00', 0x2, 0x4, 0x3f8, 0xffffffff, 0x0, 0x0, 0x1a0, 0xfeffffff, 0xffffffff, 0x328, 0x328, 0x328, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00'}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@rand_addr=' \x01\x00', @empty, [], [], 'sit0\x00', 'dvmrp0\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@eui64={{0x28}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback, @remote}}]}, @common=@inet=@SYNPROXY={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x458) bind$bt_hci(r8, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x4) write(r8, &(0x7f0000000000)='\n\x00', 0x2) pipe(0x0) poll(0x0, 0x0, 0x2e90) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r10, 0x400448ca, 0x0) listen(r7, 0x0) socket$netlink(0x10, 0x3, 0x8000000004) 1m28.673231867s ago: executing program 2 (id=3604): setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r0 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmsg$alg(r0, 0x0, 0x40004000) sendmsg$nl_route_sched_retired(r0, 0x0, 0x0) (async) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) (async) recvmsg$qrtr(r0, &(0x7f0000004140)={&(0x7f0000001080), 0xc, &(0x7f0000003080)=[{&(0x7f0000002dc0)=""/44, 0x2c}, {&(0x7f0000002e00)=""/183, 0xb7}, {&(0x7f0000002ec0)=""/33, 0x21}, {&(0x7f0000002f00)=""/231, 0xe7}, {&(0x7f0000003000)=""/80, 0x50}], 0x5, &(0x7f0000003100)=[{0x1010, 0x0, 0x0, ""/4096}], 0x1010, 0x2002}, 0x38, 0x40) (async, rerun: 64) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (async, rerun: 64) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0x0) (async) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008004000000ffe809000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) r4 = socket$phonet(0x23, 0x2, 0x1) (async, rerun: 64) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) (rerun: 64) socketpair(0x22, 0x4, 0x8, &(0x7f0000001040)={0xffffffffffffffff, 0xffffffffffffffff}) shutdown(r6, 0x1) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{r5}, &(0x7f0000000080), &(0x7f0000000240)=r7}, 0x20) (async) r8 = getpid() syz_open_procfs$namespace(r8, &(0x7f0000000040)='ns/time_for_children\x00') (async) write$cgroup_pid(r7, &(0x7f00000000c0)=r8, 0x12) r9 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r9, 0x110, 0x1, &(0x7f0000000100)='\x00', 0x1) (async) recvmmsg(r4, &(0x7f0000002ac0)=[{{&(0x7f0000002cc0)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}}}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000000)=""/26, 0x1a}], 0x1, &(0x7f0000000180)=""/43, 0x2b}, 0x8}, {{&(0x7f0000000200)=@in={0x2, 0x0, @initdev}, 0x80, &(0x7f0000000280), 0x0, &(0x7f00000002c0)=""/146, 0x92}, 0x30}, {{&(0x7f0000000380)=@tipc, 0x80, &(0x7f0000000b40)=[{&(0x7f0000000500)=""/50, 0x2b}, {&(0x7f0000000540)=""/166, 0xa6}, {&(0x7f0000000600)=""/183, 0xb7}, {&(0x7f00000006c0)=""/172, 0xac}, {&(0x7f0000000780)=""/61, 0x3d}, {&(0x7f00000007c0)=""/237, 0xed}, {&(0x7f00000008c0)=""/113, 0x71}, {&(0x7f0000000940)=""/218, 0xda}, {&(0x7f0000000a40)=""/146, 0x92}, {&(0x7f0000000b00)=""/19, 0x13}], 0xa, &(0x7f0000000c00)=""/203, 0xcb}, 0x3ff}, {{&(0x7f0000000d00)=@un=@abs, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000d80)=""/77, 0x4d}], 0x1, &(0x7f0000000e40)=""/219, 0xdb}, 0x200}, {{&(0x7f0000000f40)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000001200)=[{&(0x7f0000000fc0)=""/16, 0x10}, {&(0x7f0000001000)=""/36, 0x24}, {&(0x7f0000002d40)=""/96, 0x99}, {&(0x7f00000010c0)=""/214, 0xd6}, {&(0x7f00000011c0)=""/54, 0x36}], 0x5, &(0x7f0000001280)=""/12, 0xc}, 0x6}, {{&(0x7f00000012c0)=@un=@abs, 0x80, &(0x7f0000001400)=[{&(0x7f0000001340)=""/13, 0xd}, {&(0x7f0000001380)=""/114, 0x72}], 0x2, &(0x7f0000001440)=""/83, 0x53}, 0x7}, {{&(0x7f00000014c0)=@qipcrtr, 0x80, &(0x7f0000001a40)=[{&(0x7f0000001540)=""/150, 0x96}, {&(0x7f0000001600)=""/158, 0x9e}, {&(0x7f00000016c0)=""/204, 0xcc}, {&(0x7f00000017c0)=""/158, 0x9e}, {&(0x7f0000001880)=""/217, 0xd9}, {&(0x7f0000001980)=""/35, 0x23}, {&(0x7f00000019c0)=""/84, 0x54}], 0x7, &(0x7f0000001ac0)=""/4096, 0x1000}, 0x6}], 0x7, 0x10000, &(0x7f0000002c80)) (async, rerun: 64) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x5, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000000000000000000000006110000000000000620002000000000095"], &(0x7f0000000100)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x5, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 64) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a54000000060a0b0400000000000000000200000028000480240001800b00010072656a656374000014000200080001400000009205000200000000000900010073797a30000000000900020073797a32"], 0x7c}}, 0x0) (async, rerun: 64) setsockopt$inet6_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='illinois\x00', 0x9) (async, rerun: 64) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1a, 0x0, &(0x7f00000001c0)) 1m28.18312966s ago: executing program 2 (id=3605): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r0) r1 = accept4$packet(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x14, 0x80000) recvfrom$packet(r1, &(0x7f0000000080)=""/145, 0x91, 0x2, 0x0, 0x0) 1m28.004576431s ago: executing program 2 (id=3607): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$ARPT_SO_SET_REPLACE(r0, 0x0, 0x60, &(0x7f0000000600)={'filter\x00', 0xd, 0x4, 0x3f0, 0x308, 0x0, 0x110, 0x110, 0x308, 0x308, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @multicast2, @empty}}}, {{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xffffffffffffffff}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x11, {@empty, @empty, @multicast2, @dev}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) ioctl$sock_inet_SIOCSARP(r0, 0x8955, &(0x7f0000000000)={{0x2, 0x4e20, @multicast2}, {0x306, @random="7b9f415cbebd"}, 0x32, {0x2, 0x4e24, @broadcast}, 'virt_wifi0\x00'}) 1m27.791077843s ago: executing program 2 (id=3608): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000080)="ab553fec94248c32e27d04000000288a", 0x10) r1 = accept$alg(r0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000001840)={0x0, 0x0, 0x0, 0x0, &(0x7f00000017c0)=[@op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7e}], 0x30}, 0x0) bind$alg(0xffffffffffffffff, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x0) recvmmsg$unix(r2, &(0x7f0000003740)=[{{0x0, 0x0, &(0x7f0000001b00)=[{&(0x7f0000000680)=""/237, 0xed}], 0x1}}], 0x1, 0x42, 0x0) sendmmsg$alg(r1, &(0x7f0000000180)=[{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000001640)="553e12df315719c9cddfbe1f03774b1d49d6fc51d5b185", 0x17}, {&(0x7f0000001680)="33caaff65bbb49384ba3fa03220c730c8531786e424bfa1ee6d344e5ca70fa4e68f9ad2bd7a154c3da71f3d9548c", 0x2e}, {&(0x7f0000001700)="7082b8d45f4cc86d0267eabd24340e1911fe3ceeb757ca4a090897a00b8d106a8ceb5beaa118a5652769ec67e809e68ca18f0241349dc53502", 0x39}, {&(0x7f0000001880)="371f6caa2f6c27730337ec033b032851897cee7054e7e1e0702321a402356d2f7728fc212abddf577e94277f3d9ceea00b26d2cd0dc790b14423d5766bfd60897fa6b4a3e5bec0e118bc0934219dc3b4a8dce9c5223696b152635e6ca4761490d5832d84c80176a3b48e27cb64d7498ce458ec00afb5ceb41e55ee19e6ecdf", 0x7f}], 0x4}], 0x1, 0x840) recvmsg(r1, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000003c0)=""/120, 0x78}, {&(0x7f0000000300)=""/149, 0x95}], 0x2}, 0x10001) 1m27.738853732s ago: executing program 2 (id=3609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0xe1e571d2193a0e72) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x54d7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xfffd, 0x89c77fb34cc3db7f}, {0xa, 0x1}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) close(0x3) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000100)={0x14, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) socket(0x1d, 0x2, 0x6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0xe1e571d2193a0e72) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x54d7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r6, 0x1, 0x6, 0x0, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xfffd, 0x89c77fb34cc3db7f}, {0xa, 0x1}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) close(0x3) (async) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000100)={0x14, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async) 1m25.443548921s ago: executing program 0 (id=2208): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="9075f3419b84e5d56d50bb71650692c833689cee0b97c1bba5fc9a8ba3dfb4f5537f24000092a397a143c893d230f90b096c865d04affd4097cf2eb2275a91284f52492a72ead9f8aacb7a9c02b9c38d1bce675911843924ade30cd218fbc042cd236655feb1208d1593b3e847aa77f3235ad4b277adbbc9aa", 0x79) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'ipvlan1\x00'}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'team0\x00', 0x44}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x965}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x2a}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000000)="8e791f6c9a237a283715ac30dfae67d913f98a765defe510d20eeedc3cd0f8ea0ed8eda92f0c58c67d1aa212c4ce662dc49907c6aa9680a5121bb7e42be0729e477849da2c94618ebdfaa0dafa52d0bcad5537efd8a8a1545b8513d5629da9ebeb295b70b0d780b6b912d10e92f490447a6ec68a226e0adbe31d8bd333c22e0790ded2d94cb7d4b621fed814370698b6dd6768811a1d9379c430c9baa364bb52f4a92ff6a000d360271c75c6caa5a2aec9c468f1136160126769ccff7db5d03b5e7fbb88255f54177ce5221d431e7c4431c6228376e0aed45b69ca45811bc91163b6dd6c8f2f31d99fe629297978bb18beb9e7"}, 0x20) 1m23.395739111s ago: executing program 4 (id=3594): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x1) 1m15.920932308s ago: executing program 32 (id=3588): r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket(0x2, 0x80805, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f0000000540)={0x0, @in6={{0xa, 0x4e23, 0x0, @mcast1, 0x9}}, 0x5, 0x9, 0x351, 0x4, 0x40, 0x5, 0xfe}, &(0x7f0000000080)=0x9c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000006c0)={r2, 0x0, &(0x7f0000000080)}, &(0x7f0000000100)=0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062430bc068829afff36b31fa7e35ce95d04"], &(0x7f0000281ffc)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r3, 0x2000000, 0xe40, 0x0, &(0x7f0000000240)="5cdd3086ddff0066b3c9bbac88a8862c00dffd0013dd000000000000000088a8f5df86dd", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f0000000300)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x64}, {&(0x7f0000000280)=""/85, 0x55}, {&(0x7f0000001fc0)=""/4098, 0x1002}, {&(0x7f0000000400)=""/106, 0x6a}, {&(0x7f0000000980)=""/73, 0x49}, {&(0x7f0000000200)=""/77, 0x4d}, {&(0x7f0000000480)=""/154, 0x9a}, {&(0x7f00000001c0)=""/17, 0x11}], 0x8, &(0x7f0000000600)=""/191, 0xbf}}], 0x1, 0x2040041, &(0x7f0000003700)) 1m15.716673198s ago: executing program 0 (id=2208): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="9075f3419b84e5d56d50bb71650692c833689cee0b97c1bba5fc9a8ba3dfb4f5537f24000092a397a143c893d230f90b096c865d04affd4097cf2eb2275a91284f52492a72ead9f8aacb7a9c02b9c38d1bce675911843924ade30cd218fbc042cd236655feb1208d1593b3e847aa77f3235ad4b277adbbc9aa", 0x79) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'ipvlan1\x00'}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'team0\x00', 0x44}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x965}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x2a}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000000)="8e791f6c9a237a283715ac30dfae67d913f98a765defe510d20eeedc3cd0f8ea0ed8eda92f0c58c67d1aa212c4ce662dc49907c6aa9680a5121bb7e42be0729e477849da2c94618ebdfaa0dafa52d0bcad5537efd8a8a1545b8513d5629da9ebeb295b70b0d780b6b912d10e92f490447a6ec68a226e0adbe31d8bd333c22e0790ded2d94cb7d4b621fed814370698b6dd6768811a1d9379c430c9baa364bb52f4a92ff6a000d360271c75c6caa5a2aec9c468f1136160126769ccff7db5d03b5e7fbb88255f54177ce5221d431e7c4431c6228376e0aed45b69ca45811bc91163b6dd6c8f2f31d99fe629297978bb18beb9e7"}, 0x20) 1m13.935202663s ago: executing program 4 (id=3594): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x1) 1m12.547619809s ago: executing program 33 (id=3609): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00', 0x0}) r3 = socket(0x1d, 0x2, 0x6) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0xe1e571d2193a0e72) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x54d7) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r6, 0x1, 0x6, 0x0, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xfffd, 0x89c77fb34cc3db7f}, {0xa, 0x1}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) close(0x3) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000100)={0x14, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$packet(0x11, 0x2, 0x300) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth0\x00'}) (async) socket(0x1d, 0x2, 0x6) (async) setsockopt$bt_hci_HCI_TIME_STAMP(r3, 0x0, 0x3, 0x0, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) setsockopt$inet6_MCAST_MSFILTER(r4, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0xe1e571d2193a0e72) (async) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f00000001c0)={r2, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0xe}}, 0x54d7) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r6, &(0x7f0000000340)={0x1d, r7, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r6, 0x1, 0x6, 0x0, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000005000)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x74, r7, {0xfffd, 0x89c77fb34cc3db7f}, {0xa, 0x1}, {0xfff2, 0x7}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) close(0x3) (async) sendmsg$IPSET_CMD_TYPE(r0, &(0x7f0000002a40)={0x0, 0x0, &(0x7f0000002a00)={&(0x7f0000000100)={0x14, 0xd, 0x6, 0x3, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) (async) 1m0.92990082s ago: executing program 0 (id=2208): r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="9075f3419b84e5d56d50bb71650692c833689cee0b97c1bba5fc9a8ba3dfb4f5537f24000092a397a143c893d230f90b096c865d04affd4097cf2eb2275a91284f52492a72ead9f8aacb7a9c02b9c38d1bce675911843924ade30cd218fbc042cd236655feb1208d1593b3e847aa77f3235ad4b277adbbc9aa", 0x79) r1 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCGIFMTU(r1, 0x8921, &(0x7f0000000000)={'ipvlan1\x00'}) ioctl$SIOCSIFMTU(r1, 0x8922, &(0x7f0000000180)={'team0\x00', 0x44}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1, 0x8, &(0x7f0000000740)=@framed={{0x18, 0x0, 0x0, 0x0, 0x965}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x8c}}]}, &(0x7f0000001840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newtaction={0x98, 0x30, 0x301, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x84, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0x2a}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20}]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x30, 0x0, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x98}}, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_TABLE(r4, 0x0, 0xcf, &(0x7f00000001c0)=0x1, 0x4) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r2, &(0x7f0000000000)="8e791f6c9a237a283715ac30dfae67d913f98a765defe510d20eeedc3cd0f8ea0ed8eda92f0c58c67d1aa212c4ce662dc49907c6aa9680a5121bb7e42be0729e477849da2c94618ebdfaa0dafa52d0bcad5537efd8a8a1545b8513d5629da9ebeb295b70b0d780b6b912d10e92f490447a6ec68a226e0adbe31d8bd333c22e0790ded2d94cb7d4b621fed814370698b6dd6768811a1d9379c430c9baa364bb52f4a92ff6a000d360271c75c6caa5a2aec9c468f1136160126769ccff7db5d03b5e7fbb88255f54177ce5221d431e7c4431c6228376e0aed45b69ca45811bc91163b6dd6c8f2f31d99fe629297978bb18beb9e7"}, 0x20) 59.568637665s ago: executing program 4 (id=3594): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000040), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) syz_80211_join_ibss(&(0x7f0000000080)='wlan1\x00', 0x0, 0x0, 0x1) 52.707721145s ago: executing program 6 (id=3762): syz_emit_ethernet(0x36, &(0x7f0000000040)={@local, @random, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010100, @multicast1}, @timestamp={0xd, 0x0, 0x0, 0x4, 0x1, 0x4, 0xbb, 0x8}}}}}, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$l2tp6(0xa, 0x2, 0x73) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r2, r4, 0x81, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f0000000000)=@gcm_128={{0x304}, "ca4696cedbbf357c", "c428e57e066d02385ae50c60b4db90db", "fd901300", "144f25ff951916ff"}, 0x28) (async) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000) (async) r6 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000400)=r6, 0x4) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={{0x14, 0x10, 0x9000, 0x6}, [@NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x605, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x14}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x64}}, 0x0) sendfile(r3, r1, &(0x7f00000000c0)=0x413d, 0xfffffffffffffffd) (async) r8 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r8, &(0x7f0000000780)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xffffffff}, 0x1c) (async) bind$inet6(r8, &(0x7f0000000040)={0xa, 0xe21, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) socket(0x2a, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) close(0x3) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_inet_SIOCSIFADDR(r4, 0x891c, &(0x7f0000000540)={'gre0\x00', {0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x1b}}}) (async) r9 = socket$inet6(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000300)={'virt_wifi0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x2000, {0x0, 0x0, 0x74, r10, {0xfffd, 0x10}, {0x1, 0xfff1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x30004804}, 0x840) 52.414014316s ago: executing program 6 (id=3764): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {0x2, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2}, [@FRA_FLOW={0x8, 0xb, 0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r1 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)}, 0x1, 0x0, 0x0, 0x40000c0}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r3, 0x89e0, &(0x7f0000000040)) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000000c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "fc414a", 0x30, 0x3c, 0x0, @private0, @local, {[@srh={0x2f, 0x4, 0x4, 0x2, 0xe5, 0x70, 0x8, [@private1, @private0]}], {0x0, 0x0, 0x8}}}}}}, 0x0) 52.112765633s ago: executing program 3 (id=3766): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) ioctl$AUTOFS_IOC_EXPIRE(r1, 0x810c9365, &(0x7f0000000240)={{0x10001, 0x1ff}, 0x100, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa\x00'}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)={0x4c, r0, 0x801, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_KEY={0x30, 0x50, 0x0, 0x1, [@NL80211_KEY_DATA_WEP104={0x11, 0x1, "5a080039084eeef16f162471f4"}, @NL80211_KEY_MODE={0x5, 0x9, 0x2}, @NL80211_KEY_IDX={0x5}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac08}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x24000084}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r3 = accept(r1, 0x0, &(0x7f00000000c0)) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_NOACK_MAP(r3, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x2c, r0, 0x4, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0x81}, @NL80211_ATTR_NOACK_MAP={0x6, 0x95, 0xbed}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 52.063203108s ago: executing program 5 (id=3767): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x3) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018"], 0x44}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c8, &(0x7f0000000100)) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) 52.060004376s ago: executing program 6 (id=3768): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r1, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) connect$inet6(r1, &(0x7f0000000040)={0xa, 0x4e23, 0x1, @empty, 0x6fb}, 0x1c) syz_emit_ethernet(0x32, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffff0180c20000000800450000240000018000119078e09078f0531659c67f665d00"/50], 0x0) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfe, 0x4000}, 0xc) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000390400"/20, @ANYRESDEC=r0, @ANYBLOB="0000000000000000240012800b000100627269646765009a740000c75b33e500000000000000000006002700"], 0x44}}, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100000056000000000000850000006d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r2}, 0x18) syz_genetlink_get_family_id$wireguard(0x0, 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="1900000004000000040000000c", @ANYRESHEX, @ANYRESHEX=r1], 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r3}, &(0x7f0000000080), &(0x7f0000000240)=r5}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r4, 0x18000000000002a0, 0xd50, 0x0, &(0x7f0000000580)="b9ff03076804268c989e14f088a8", 0x0, 0x500, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket$netlink(0x10, 0x3, 0x5) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'pcbc(fcrypt)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000412ff8)="3665a1ab415b7ac7", 0x8) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r8, 0x6, 0x1e, 0x0, 0x0) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000001880)=@gcm_256={{0x304}, "e1a8375b6f203410", "88f8e480a74417a80f7404e3d15f0249400522bb3e39a720b4775071312959c9", "81e850ca", "a555464693bd1103"}, 0x38) listen(r7, 0xfcdc) 51.922191693s ago: executing program 3 (id=3769): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000140)={'batadv0\x00', 0x0}) socketpair(0x1, 0x100000005, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, 0x0) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$BATADV_CMD_GET_NEIGHBORS(r0, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x24, r1, 0x331, 0x1, 0x0, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000095}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="b4080000000000006110800000000000a60000000000000095000000000000002708bf5d6df57e4036e97f802a67fdc2ee21b92ca9f507707dd754479a8dcf28b7ce595ab47e7a5396f780ee222b42395b5664f0c435febc86e01cd2cf1190b290320885b36f24493454294552dfaa3a17a7462612e5f8980fd439b09ee96e4c0ca8581e36cc8acfdfdd08b7856e8cf498d2d7ff6abd"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0xfffffffe}, 0x8, 0x10, &(0x7f0000000080)={0x0, 0x20000, 0xfffffffc}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 51.854375831s ago: executing program 5 (id=3770): socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) (async) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000b80)={0x24, r1, 0x1, 0x4, 0x0, {}, [@NLBL_CIPSOV4_A_MTYPE={0x8, 0x2, 0x3}, @NLBL_CIPSOV4_A_DOI={0x8, 0x1, 0x3}]}, 0x24}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) poll(&(0x7f00000044c0)=[{r2, 0x209}], 0x1, 0x8000) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00'}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB=' \x00\x00\x00j\x00\a'], 0x20}}, 0x0) (async) r6 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000006040)=ANY=[@ANYBLOB="84010000", @ANYRES16=r6, @ANYBLOB="010000000000000000000100000004000480080002000100000008000100000000000400088058010c8054000b800800090000000000050009"], 0x184}}, 0x0) 51.651228128s ago: executing program 3 (id=3771): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r0, &(0x7f0000000080), 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f00000000c0)=@gcm_256={{0x304}, '\a\x00', "c0a9b92b592a8e91a6934cb6b7b18f7a7a6eaa9cbd8ef3b0fbc326100136e976", '\x00', "2a1e833e7af32011"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000280)=@gcm_256={{0x304}, "54164ace389ff5c0", "faad50724acb18aba4e3bc654d684ad9c694f3e96ca4b72643dd3689727968e9", "5cb6d054", "29a78ab9b0a4e8ae"}, 0x38) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00008feff0)={&(0x7f0000000f00)=ANY=[@ANYBLOB="020101090800000000170006ffffff00030006001000000002000000e0000009f9ff0f0005000000030005007217440502000000e000e401"], 0x40}}, 0x0) sendmsg$key(r1, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="020300090a00000000000000000000000300060000000e0002000000e0000009001000000000000002000100000000000000000200000000030005000000000002000000e0000001"], 0x50}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newlink={0x44, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB="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"], 0x194}, 0x1, 0x0, 0x0, 0x40010}, 0xc0) 51.581791891s ago: executing program 6 (id=3772): r0 = socket(0xa, 0x1, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0x7, &(0x7f0000000580)={0x0, 0x7e, 0x3, 0x2}, 0x10) close(r0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) writev(r2, &(0x7f0000003500)=[{&(0x7f00000035c0)='42', 0x2}, {&(0x7f0000000080)='C&', 0x2}, {0x0}, {&(0x7f0000001240)="d3", 0x1}], 0x4) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000540)={@map, 0x32, 0x1, 0x3d, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x5, 0x0, &(0x7f0000000480)=[0x0, 0x0, 0x0], &(0x7f00000004c0)=[0x0], &(0x7f0000000500)=[0x0, 0x0]}, 0x40) (async) socket$igmp(0x2, 0x3, 0x2) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0xb) (async) pipe(&(0x7f0000000080)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) (async) socket$pppoe(0x18, 0x1, 0x0) pipe(&(0x7f0000000040)) (async) close(0x4) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000040)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001400000008000a00fc00000018000180140002006e657464657673696d300000000000000800050000fcffff08000900fc000000080011000700000008000e00800000000800", @ANYRES32=r4], 0x5c}, 0x1, 0x0, 0x0, 0x800}, 0x48008) (async) pipe(&(0x7f00000005c0)) (async) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000600)={0x6316}, 0x8) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) 51.439559578s ago: executing program 5 (id=3773): socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x4010, r2, 0xe44a0000) (async) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0x2000005, 0x4010, r2, 0xe44a0000) r3 = socket(0x10, 0x3, 0x0) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000000), 0x4) (async) setsockopt$inet6_udp_int(r4, 0x11, 0x65, &(0x7f0000000000), 0x4) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) (async) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)={0x30, r8, 0x1, 0x0, 0x2, {}, [@MPTCP_PM_ATTR_ADDR={0x1c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0xf}]}]}, 0x30}}, 0xc001) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000004640)={&(0x7f00000000c0)=@newqdisc={0x78, 0x24, 0xf0b, 0xfffffffe, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}, {0xb, 0x9}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x48, 0x2, {{0x3, 0x0, 0x2, 0x0, 0x0, 0xbfffffff}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0x92, 0x0, 0x0, 0x0, 0x3}}]}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x2004c084}, 0x40000d0) 51.339295504s ago: executing program 6 (id=3774): r0 = socket$unix(0x1, 0x2, 0x0) sendmsg$unix(r0, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, 0x5) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newtaction={0x7c, 0x30, 0x9, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x1, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x2}}, @TCA_MPLS_TTL={0x5, 0x7, 0x40}, @TCA_MPLS_LABEL={0x8}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x7c}}, 0x0) sendmsg$IPSET_CMD_GET_BYINDEX(r1, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000000f06010100839d00000000000500000805000100070000000500010007000700"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x24004000) socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$kcm(0x21, 0x2, 0x2) getsockopt$IP_VS_SO_GET_DAEMON(r3, 0x0, 0x487, 0x0, 0x0) sendmsg$IPSET_CMD_HEADER(r1, &(0x7f0000003c00)={0x0, 0x0, &(0x7f0000003bc0)={&(0x7f0000000000)=ANY=[@ANYBLOB="950000000c061b0400e4ffffffffffff06000000"], 0x14}, 0x1, 0x0, 0x0, 0x20040000}, 0x0) 51.235395694s ago: executing program 6 (id=3775): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x8, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, &(0x7f0000000300), 0x0}, 0x20) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000001c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20\x00'}, 0x58) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001b00), 0xffffffffffffffff) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000001d40)={&(0x7f0000001ac0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001d00)={&(0x7f0000001b40)={0x1a0, r3, 0x4, 0x70bd29, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x11}}}}, [@NL80211_ATTR_IE={0xad, 0x2a, [@fast_bss_trans={0x37, 0x95, {0x1, 0x4, "a087642ba053d881ca17b154674326bc", "6432efa49bcee94c80a789beefdd7f260c2b2811e9ad1c54693c8def91a6a687", "be0878391bb244690862463a10e6d2b7074c7b3ee2a1d4d453b0a4d695468bad", [{0x4, 0x7, "c33f2074edc488"}, {0x4}, {0x3, 0x18, "3f00e0a8934529aa784148f2019fda672be073b9a9114b98"}, {0x4, 0x1c, "33ae71ee3d4a634ad62f5da0b345f7ae8e38e5440345c85f1ee425ab"}]}}, @challenge={0x10, 0x1, 0xbf}, @dsss={0x3, 0x1, 0xe}, @sec_chan_ofs={0x3e, 0x1}, @mesh_config={0x71, 0x7, {0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4a, 0x8}}]}, @NL80211_ATTR_IE={0x18, 0x2a, [@ssid={0x0, 0x6, @default_ap_ssid}, @mesh_chsw={0x76, 0x6, {0x7f, 0x83, 0xb, 0x3}}, @ibss={0x6, 0x2, 0x7f}]}, @fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0xb6, 0xfc, "06a53ed6f69fbad9614ad6fc52b3a286d71fc89330c15a7843cbc4d3d15001d6292bb38ee86210613fe68bb37b920df4b6550e5a9a0d378a9dcd55825151db6ff8757fa6cc2153e18a51e69d8304239c5ab0d9a45b4d41b90d7db790e3ea97a4dd13b8a26c831adf58249027593042a1e0a9f97de0489eedbf2dcfd9b47f2525092a29893000daedd42cdb3d33d5563a63d25672771cd94e3b16af843f83b5752120b95deaf9aa9b1ec06a811ac6c1d4c78f"}]]}, 0x1a0}, 0x1, 0x0, 0x0, 0x4004040}, 0x800) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) (async) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYRESOCT=r4], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001a00)={0x11, 0xc, &(0x7f00000004c0)=ANY=[@ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x29, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r8}, 0x10) (async) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001d80)=@newqdisc={0xac, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x7c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x4, 0x2, 0x0, 0x8, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x7], [0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x8001]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x873}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x5}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xac}}, 0x0) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) (async) r9 = socket$unix(0x1, 0x2, 0x0) recvmsg$unix(r9, &(0x7f00000019c0)={&(0x7f0000000340), 0x6e, &(0x7f0000001940)=[{&(0x7f0000000540)=""/142, 0x8e}, {&(0x7f00000002c0)=""/58, 0x3a}, {&(0x7f0000000600)=""/187, 0xbb}, {&(0x7f00000006c0)=""/242, 0xf2}, {&(0x7f0000000800)=""/115, 0x73}, {&(0x7f0000000880)=""/187, 0xbb}, {&(0x7f0000000940)=""/4096, 0x1000}], 0x7}, 0x2120) (async) r10 = accept4(r2, 0x0, 0x0, 0x0) (async) r11 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000240)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=r12, @ANYBLOB="000000000000000024001280110001006272696467655f736c617665000000000c0005800500190003"], 0x4c}}, 0x0) (async) r13 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) r14 = socket$packet(0x11, 0x3, 0x300) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r13, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r15, 0x3000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_MULTICAST_ROUTER={0x5, 0x19, 0x2}]}}}]}, 0x44}}, 0x0) (async) bind$packet(r14, &(0x7f0000000580)={0x11, 0xf6, r12, 0x1, 0xaf, 0x6, @random="baecc852a754"}, 0x14) syz_genetlink_get_family_id$devlink(&(0x7f0000000080), r10) sendmsg$NL80211_CMD_SET_COALESCE(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000e40)=ANY=[], 0x238}, 0x1, 0x0, 0x0, 0xd0}, 0x4048010) 51.103750461s ago: executing program 3 (id=3776): syz_emit_ethernet(0x83, &(0x7f0000000000)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2}, @void, {@x25={0x805, {0x3, 0x7, 0xf, "ae9d397b58e72105314f39600fcba75c0b460b625aea0b88aa57168e344898526c51685b091ddf368363a501fec7545901f236a0bb2451475b8d918dfc6767f34966842ac2d163e76e1a3a1ba7151e6ab3a5c7ebaca024772f61be94b6c1cf23e336fad8148971928a177bd532ac16a1afcb"}}}}, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_buf(r1, 0x1, 0x3b, 0xffffffffffffffff, &(0x7f00000003c0)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0xffffffffffffffdd, &(0x7f0000000000)='/proc/0KgOq\xee\x00!\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) close(r0) 51.050586818s ago: executing program 5 (id=3777): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r1, 0x200, 0x70bd2a, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x2}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x9}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x420}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x1}]}, 0x54}, 0x1, 0x0, 0x0, 0x80}, 0x4080) (async) sendmmsg$sock(r0, &(0x7f0000003600)=[{{&(0x7f00000001c0)=@l2tp={0x2, 0x0, @rand_addr=0x64010100, 0x3}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000240)="556c84eae08b520c9aff13a5c5a0301c5403c0aa540c90fd79decda8afcc9b489c0a", 0x22}, {&(0x7f0000000280)="9f660b6a517a5eb0c5f4d53b39eb85eeb4ef15c0299e15878bc26e49b291659a164c7adb1b88fb8047ad58508e0e7008a23158d668d1748bf76ab728d826110b0b2e31021392b42a36c778bb3cf82497792d8fa5ff04b91fa9ac7fc291a8a32554c1b0d3543808e6408012c9ed34ddb1c65199e313d3776f198e4bfb43d76e4bb9db33772fb11b55aaae2c5d417e7acfa12aaa0a7a68eef83a7f0b3ff7c226f084d96820dbbf894297201ead41d25f99fb8d7d6b4f15015d93573f23aebc134aa9d32f", 0xc3}, {&(0x7f0000000380)="21c81b2fb6c659e977465f380b9fe9d53888f60e5d3eeac306b59c50a9281eeb0ac861c65983999cbbb447670cef6654dfa7c1aa371e9f1474bb7cd54ded8c1fed90dc1b15aad95c95", 0x49}], 0x3, &(0x7f0000000440)=[@txtime={{0x18, 0x1, 0x3d, 0x7098f8a2}}], 0x18}}, {{&(0x7f0000000480)=@l2tp6={0xa, 0x0, 0x7fff, @loopback, 0x3, 0x3}, 0x80, &(0x7f0000001700)=[{&(0x7f0000000500)="316b0c30b1cf4c162fabb9275b1e031c00389c4157cb612ce897f4ab800fbf98a4a807c25420b28094188417d69491d5a2a10dee9c3195f1a6418e8ea433ff32cfe1", 0x42}, {&(0x7f0000000580)="12b445ef6347b10712a8999e0c39ed7d6a28cb07e3d42062fa5de79eb7c6261d85f3b2f0992f11d9f03a353ad6c82a8f259074c813d0ae17400078dae2b939c72ca1678341a8c36eaf8cf1cbadc59c92639b4bb7685431629a801396b2011bedf7ba2bda", 0x64}, {&(0x7f0000000600)="96bd43ca04800c4c1e24dc405ed45285cc32947a63f693dbf4baa9590922b01e661b86a65cc076a24c46dc6b08abbbb65c62131368f8f8b61844c549387c4cc9bcc27ded051033432f29b000ca38763302393898ebd4959988b3f4c421498697d8b4cb7908d19b2985b58ff76b3b3bb6a039ecabcbcdd3e4de61102def87fe0016d18a1d48699cddfe8d0b386e49089a", 0x90}, {&(0x7f00000006c0)="a75d2d637b384ec3fa8bbc8d086abfbcfbb3168e17f7f320244e91949f876fe31d259676f116559039d712110522768c1211", 0x32}, {&(0x7f0000000700)="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", 0x1000}], 0x5, &(0x7f0000001780)=[@timestamping={{0x14, 0x1, 0x25, 0x100}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @mark={{0x14, 0x1, 0x24, 0x6}}, @timestamping={{0x14, 0x1, 0x25, 0x6}}, @mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x1}}, @timestamping={{0x14, 0x1, 0x25, 0x10}}], 0xa8}}, {{&(0x7f0000001840)=@vsock={0x28, 0x0, 0x2710, @hyper}, 0x80, &(0x7f0000002e00)=[{&(0x7f00000018c0)="7a77d858e5bc850d320361cbd0a0a68dca896c1fcf27aa771c617592a7795740d4b53c6633bb9ad8a7dceac87b9c7bc00966e70ecfe3b7d3f9de748b829be31b4e0f0d6ec67b76a7", 0x48}, {&(0x7f0000001940)="1d439a75cf16f0adc21657ffccb9e2d4c7cc612829024864c1b1b55e99135820af59fe65241f9bed7d51f3e58de53d0b6541f4d45f0c98f146bc391e3bfebb882626fa33ac4d6f5ddd31f400c395d7b1", 0x50}, {&(0x7f00000019c0)="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", 0x1000}, {&(0x7f00000029c0)="392dbcce45da2ccecaf44506e2d3bd842887805175ff06b10c69132a2dea703bbf1139f7e3acf12b640641f77a838f4bbee5394d060d430a60bb2280d88881311096ecdeb13239aaae7aa67f3ae29b99a0ff9b619ebf5df18d7ea7e0388173c121e5e26da17253f06a3d2c373e48d830310a849e7cafefe3fea436d7c2f1388b605ef3a21042b3c16644", 0x8a}, {&(0x7f0000002a80)="dac74535cc901b98b9fc688dbc79f05c21252f837dd83de7bb396ce9c3a3e1cae314ba892ff0339796c2991f5fd5e7ff720f1a68901e73732bdd78de2b00c88fe2e90e9b0760f55af9fcf61c95178f285a2199b47feeedc29f9a90b603b6247de5e093ad63e21d1a0c3508b9c0260f922218713b3856780ca124713a2ff9b58a4c6fe1aae64b3701f5b7d0edee5988cecf0eb92b8b51", 0x96}, {&(0x7f0000002b40)="b580761ef0302e73b943256f6ee70db78e4d0f651ff44005449c1cd34840ba823065f5e8e42e714fbc552e40469e4333e2938b9b990d04c026329f82fb1c44b4c14810", 0x43}, {&(0x7f0000002bc0)="1d689bd4159f1b9759af35bd8b042f97b163b36713332e4dd41b6fd28009185c12b184378db182f87725fb54d9e5fac183e2dba174ce214d841c2288c1caba41e4a38886fad696fd4253e8f26701e0c17f8575dcb3177c1ce12a524127b854da18a64901e0e7f3e70321c5df4558e03315b15e7713f207e70a71f56daed86cc69191da01e7330c89c25b00c6e345d0b955ed87a7303d5a7f460a0552841f28167a4e72810c37a14bb2b0a6f3d41b4039cd86c660b5f936eb48b2a5dad360693f081c36fe727a85ab720c9f57e991fd1f2292098f09514afdc71424f8cab1b2", 0xdf}, {&(0x7f0000002cc0)="b751eec1f9c0c3b1bb03d1adbab7eff5daf583eb0f8c786f02ac88d1a17ce0c2454fba1fd4711b4a66ceb1244fe7c98da35ae64e97fe434adb99c4cdfba91a40af714d4d80345b18", 0x48}, {&(0x7f0000002d40)="a289f0e593e394cd798f342ab1cfa9cf7f6434a41e7c7ca00f30c00ce10daf0669aaf2c35864a96bdd43376f9643522f94391f0a57b6a7e737b6f9ccd10e50e65d8f17cb5131a95fd48a0329b6e32c235da9760dddf69444a30e9fa107d9832a27c8c9e8b7c05d7fbf70f444fbc7e98986279b9c69a810d62071f11508a424b1590628888969db112aaa157790", 0x8d}], 0x9, &(0x7f0000002ec0)=[@mark={{0x14, 0x1, 0x24, 0x2}}, @txtime={{0x18, 0x1, 0x3d, 0x800}}, @mark={{0x14, 0x1, 0x24, 0x1a7}}, @mark={{0x14, 0x1, 0x24, 0x3}}], 0x60}}, {{&(0x7f0000002f40)=@can, 0x80, &(0x7f0000003580)=[{&(0x7f0000002fc0)="050325b7f2ec6e650afc1cdeb8f0c1452e0ab9f389443a0562e823f533ca6244035ed684dccf2311812f3fef9be15a704cef7c70da0bfd91b4d0caddeca1547e5a82d0c9ca5436a4b6d198eafee3c13cae5fdccb44968d3bb68c7d1cb872d1fb40a1e911d51417d2680d445b45698d69f5ca501bff9b2c7474ce", 0x7a}, {&(0x7f0000003040)="c048c75a5e2d7a4986749ce6a453cf575e2bea83bdbfcada15858b143ca48f59feb9a2c85088be5be2cc0128250bbc111e1f2c59e97e6a6366f092bbc38f9b4de469ad6c703dbb3415bcb3472ded2eea6a47a62012455c28523d521c684acbdd06341fcfd28a49c20512ae363c6f6eddfe08f9817a2ea8546efcfa02dab35699dcb18222742b9d1e89e92aa24bd27f9b2b590b688caa56f44d6bb5700f4fa0fde0063b94a18cc52a2b90ecb609dbf810740330cbcabf8b7e12ba6cc3260a12500421628d82edeeeb60b76f9d5428b46ee9c17711", 0xd4}, {&(0x7f0000003140)="1a1552fdb8dbc9629cb1efb48466b0ca8d3d5751ed72904ec97229c0f01a966dfde5a190426abacc2de6e56e2b3b1a0b3bd30c47bfdb9cdb4224a71255feb913c9e085b8e7c23e179c5308462a322e0d175a49e1a33b0c3232e3ef9e36abe55638ea17f6b3f8ceda3b7653c44bd5651e7a9426fd74c8739504f7d62c05d119a899774d2c498b801dc3238a51fed7b92c93de4b09242bb830296d1d0070017ce91d4d093c64196993cc867516d6770f724c620e9e01db5dde7e62a59939e3d1aa5d8f7e2e2569345c05c2c7f574109d8076663e81bd153400fa04", 0xda}, {&(0x7f0000003240)="fd7c9ef0d440077cdf8dfacdf4441fe7612c26a16da2a0b16ce87afd4096bb8c436e6a4e53a8027c39aa83542564c67a371b05c6897a5cf9d5b981525df61ebf3d593a0ec743b93a1067c4192cb72d1fc79f733c20f623c0815955ae8756325da7abf4163964c1188ab9887d97a3029526c88368ff843b897fad3dfb5d8fb6a506fe73a3a596ff6e2058c4a403df2f401fbdbb6b50bd7f04f7541343c9e0488e9cf165baa6099bcb9ee648554dbf318b334c632e0e1333d19d5bd77cee0e0e0ebda19441", 0xc4}, {&(0x7f0000003340)="45c8ba122fe20fe651f9bfd7cce94f316170d67bb1ecb3ceff54e272d93df5c9619177abc2e710120a769f05c01a42c55b13981fc74c69e708b96dc5d3b3b85be908e012062e24d8624e473fa302837644ec4e6bf9d6edc699150a80959e68a4", 0x60}, {&(0x7f00000033c0)="8257aec3b92fb8e08df4387d4a4e4fb846aead30cc52248d1052323eea6c4876b76259988ac04b0283659fb4f9c3160878381d5c83f7df531d85f78cba4aca94a95ad0e9e4b54b959754cea80215403f28723e0eb466a700e398bafc3d1653e149eeeb12131d56d08bb1faf68371fe6f2137cec4cf49d78dbaa00ce0ffeabec481fa29370b83a8a72d38c7eec876687a286cfd60143044461543b4c6fbf50fb4f72a843438403dcab8ef8bfb0d9c52fbecf61e8145913650f8c2e3e0022a304a12f204", 0xc3}, {&(0x7f00000034c0)="65735c07ff3a6992d4267ba2991416e4231f397d0d468b51db315b43529e67bec1e600a41fbddd87a2390a7f242f94d9de37658dac3fe890ad7f1bf26fecc43da98856e3a43c6980d94341e5fc48fd9d01623e1c7266a3b482acbe0975a3a4ddefa5037691b3fcffa04970bc6ce95c883deaf358a5a730d95010d66c7d3c43e42406f48b27973e27324592eaf08b762723b6e4eafcd1253bc0c4934dd60588eb81adc76d", 0xa4}], 0x7}}], 0x4, 0x20000000) (async) sendto$unix(0xffffffffffffffff, &(0x7f0000003700)="b43093d9c3884eeffce496e84ac9da972fa18144137308515b95b32f9dbe669d88075330f1f7bf0ffff53bf9c8ae15c8ef507aa34cb055ba3bda3e3fb06d5d858a692ef417a0f0d54dc1654ff1bb498062e4fa7e448ddbd24d3f9a96ca2d03109a0607791c7cc961cb9f4931874e4791401728adb3ad4a5160ad256056281a0e8003a641b568ec8f0a808e99b6034fdcdea15867293107a63eec19201b6193d86e9efaf7840629f50f52743c0722585e38c2b74da2730a725dab5e4ab578b72fec9d04e0b2509fe0454baacf7d8ef6db1ceb1d28bc0aac5a43d659eea49c93f3cc12a3eab49c40aeaabb2e07b0aa1c68471f74f4", 0xf4, 0x40000c0, &(0x7f0000003800)=@abs={0x0, 0x0, 0x4e22}, 0x6e) bind$netlink(r0, &(0x7f0000003880)={0x10, 0x0, 0x25dfdbfb, 0x400}, 0xc) ioctl$FITHAW(r0, 0xc0045878) (async) r2 = accept4$llc(0xffffffffffffffff, &(0x7f00000038c0)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000003900)=0x10, 0x0) ioctl$sock_inet_SIOCGIFDSTADDR(r2, 0x8917, &(0x7f0000003940)={'bridge0\x00', {0x2, 0x0, @dev}}) (async) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000003980)={'vxcan1\x00', 0x0}) clock_gettime(0x0, &(0x7f0000003a00)={0x0, 0x0}) (async) clock_gettime(0x0, &(0x7f0000003a40)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000003b40)={&(0x7f00000039c0)={0x1d, r4}, 0x10, &(0x7f0000003b00)={&(0x7f0000003a80)={0x5, 0x89, 0x0, {r5, r6/1000+10000}, {r7, r8/1000+10000}, {0x4, 0x1, 0x1, 0x1}, 0x1, @can={{0x1, 0x1, 0x1}, 0x1, 0x3, 0x0, 0x0, "9ee9a9e5c5a9d91c"}}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x8000) (async) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000003bc0), r0) sendmsg$IPVS_CMD_GET_INFO(r0, &(0x7f0000003cc0)={&(0x7f0000003b80)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000003c80)={&(0x7f0000003c00)={0x64, r9, 0x400, 0x70bd2a, 0x25dfdbff, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x2}, @IPVS_CMD_ATTR_DAEMON={0x2c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}, @IPVS_DAEMON_ATTR_MCAST_GROUP={0x8, 0x5, @broadcast}, @IPVS_DAEMON_ATTR_STATE={0x8}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e20}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x3}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x8}, @IPVS_CMD_ATTR_SERVICE={0xc, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}]}, 0x64}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000003d00), r0) (async) r10 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r10, &(0x7f0000003d40)="eca89adbfa4a14d987163054ed82f73f791dba8033fcd5497a8f9e3d886adc5426fde1bd1670b713375196f3362656fe7cc36d65681778b2b5f4", 0x3a, 0x4, &(0x7f0000003d80)={0x11, 0x10, r4, 0x1, 0x0, 0x6, @link_local}, 0x14) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r10, 0x84, 0x16, &(0x7f0000003dc0)={0xa, [0x4, 0x6308, 0xeb, 0x7, 0x7, 0x4, 0x4, 0xffc0, 0x2, 0x4]}, 0x18) (async) syz_genetlink_get_family_id$team(&(0x7f0000003e00), r0) (async) r11 = epoll_create1(0x80000) epoll_wait(r11, &(0x7f0000003e40)=[{}, {}, {}], 0x3, 0x5) (async) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000003e80)='freezer.self_freezing\x00', 0x0, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r12, 0x89f1, &(0x7f0000003f80)={'ip6gre0\x00', &(0x7f0000003f00)={'syztnl2\x00', r4, 0x4, 0x7, 0x0, 0x9, 0x4, @rand_addr=' \x01\x00', @private2={0xfc, 0x2, '\x00', 0x1}, 0x8000, 0x1, 0xfffffffa, 0x3}}) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f00000040c0)={&(0x7f0000003ec0)={0x10, 0x0, 0x0, 0x200800}, 0xc, &(0x7f0000004080)={&(0x7f0000003fc0)={0x84, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @private=0xa010100}, @MPTCP_PM_ADDR_ATTR_ID={0x5}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_ADDR={0x2c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @remote}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r13}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x5}]}, 0x84}, 0x1, 0x0, 0x0, 0x44c41}, 0x40000) r14 = syz_genetlink_get_family_id$nl80211(&(0x7f0000004140), r0) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000004200)={&(0x7f0000004100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000041c0)={&(0x7f0000004180)={0x3c, r14, 0x100, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @void, @val={0xc, 0x99, {0x9, 0x2c}}}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'syz_tun\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40010}, 0x2c000080) 50.785284583s ago: executing program 3 (id=3778): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x8001000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0xb, 0x5, 0x148, 0x128, 0x0, 0x248, 0x2a8, 0x2a8, 0x248, 0x2a8, 0x3, 0x0, {[{{@ip={@remote, @loopback, 0x0, 0x0, 'wg0\x00', 'nr0\x00'}, 0x0, 0x100, 0x128, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@physdev={{0x68}, {'veth1_to_batadv\x00', {}, 'wlan1\x00', {}, 0x4, 0x6}}]}, @common=@inet=@SYNPROXY={0x28}}, {{@ip={@local, @multicast2, 0x0, 0x0, 'xfrm0\x00', 'team0\x00'}, 0x0, 0xc0, 0x120, 0x0, {}, [@common=@socket0={{0x20}}, @common=@ah={{0x30}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @random="6f79fb339557"}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x340) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmmsg(r1, &(0x7f0000000480)=[{{&(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @rand_addr=0x64010105}, 0x2, 0x3, 0x2, 0x1}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000140)="75b20462044ef35121041df4f0e029013e1c8979ba0783943c09b0dd7dc6a6f37d309592d69a3ab0d3ea0326b9e8dc61a08cf90e4158b4c8a811ca158d03c3ef1016f8d67a8299ce677ac69006721ac4db25e7627059b77b6481d2cedf67386829cd5f4db2dc720d0343e3ee42ac48bf86ef9fdaf19e086d0da545dd2866016dbd59026f0c6742a8392650962452712b26d9bbe292cf343eef22061ef68ae24b2fe5df51cf9d1ad92b18f8f8f9341c71dc0bcc59de6f3c95908fd40f315f73e7124dcb7253c7b77c032f870f798f2360fae1b1526d60fa4d3ea14b151694a574d6f2332c607b4a5a470b3cdc14d03b", 0xef}, {&(0x7f0000000b40)="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", 0x1000}, {&(0x7f0000000040)="f5ff53a96669d511be7d7be5f724cd2781", 0x11}, {&(0x7f0000000240)="ec50178edf84a73d2cb3bcb4e2a2a2c4e967542fa37f07ad04eee5ce4f63ccd65be503530f8607524f650850bd936c74ec592347504fc0b02854c02cb67383bad0a5d62aa23deaec911f7fd26b595ca4d10f5552555c14f6a64674d015", 0x5d}, {&(0x7f00000004c0)="8463b3aecc9e4e3c670300e7d372d302e5ca69d27a30628eef4df5501f244e63c0000981d61e45498afd312d546ecc3aa2d405d1282e64f4fd0b9d466d4bddd0e98a41238901ea9723655e1712f605790986228aa54b79ad154d603a7dd8bbcfc67951d4948008bdae9909556a62e45ad7253a28c0ceaaec549598f89f46c53b82376de1ca41213f695884680bc11765f36cd53ea44afb8a21a74ffbb7e7d2593602dccafb1203b72e7d27710fcbe10777d49e8f195e1740ed988dc701a093c173e40166da8b35656f38a676443e096097fb5e4d792ea4aa1ba87ed7ba101d70a3efbaccb3ffea3f55", 0xe9}, {&(0x7f00000003c0)="d6df69a81ed7e6bac3d355", 0xb}], 0x6, &(0x7f0000001b40)=ANY=[@ANYBLOB="8000000000000000020000000d00000058c7fbbeb68e6aa9335766f9fda2ca75b0efd1b3e36728b49eb061ad3fa5cfc090e93b2f3988fa37eeb52a1d78e313db9d87ddebfeb5e3c63b23055b0d9b43f77085e697d8a58fde50364ce1d4eca35e68d00c1ba4853663594847b2a8ebd13f056e9484572b09e1f0d28ac4871300c398000000000000000c010000310600007d17003b6d118ab180b9d3ad52a9838a9aceb6206745d7ef046207cb6631ac6d85f78620548594a451653fc5a082c913294519badead655259f4f4c6c3751abd13b873b267baaeada98c10e40a319f55fc6869fc274431d5fecd12aa4f108524ba73d60eb983d97801784a2fe4e264231af927603c56f83566c53f6a118218d41700000000000000980000000000000029000000000000006921f3027c35b3d3249e57a4b9e27a2f3aa9b55e05f287081c63be0c06af79035e618a02ffd2863414a40bd410b29d74d9a1bb3df8b57e35f92caefa53073922501aaca1826c595fc96f6afb8c545c7c9e73b3e4d5d376d13bd3f2e50d58b094bbd737ff9e3bf06454d1558460addfff351c14c1b9415432733e88809de9c4fa7200000000000000680000000000000006000000060000009bccd409babd44760fe1a2acc4bc9970cbfa7aaaad81797c7e0ca803d042ef1bfee678e5e547834f1cd26894a7fe14b5d39f7b1ac39eb3180bb3b6b3ff38eee9f11b8f74cd3224748a24be072980611ab10613a2180e350098000000000000000401000005000000b643fc8b4de613608b952ac40867b42a96c47f2457abfe1aa59b182779beb17e99d73fc1b7ce912ba8f37af1dd85355203075ba8d4e5c55eddddad98258c07aec7d36278ee9db77d790ba8659dbcc2e3bbca7570ca3db91ee13b0ff7e42b48e38d5669ae1263b11305f2c4215a8725f9663588b4e2977055ae4a8365a2efb6590ec1f661f50000009800000000000000a985b128080000000bdd7f979b94295395f7d495dfdc105e3c3e646325e800cdaefe014d38714975e4fd2baa2440079f1962b2400b7dd1d73ef5015dd3f2f53321674f4bae7165c7464607c769b8700b0a631c9610978ea9acce706b8ac62a506b9989cab6ee6d49789a72d4622120dba7ff24f2752790c6390ab6681b6e7f40e2df3dcca791af2efb95d6000000000070000000000000009f000000040000fb29000ecb8e336c5f2726e824cce86ee628105c761921b60a50d11a06f7e56be91850b3bb52a86580b0401d925dd102da97733208a2f3b4f849810adf824c558d3568210d357ec4b848c3d7d2cf06652e49b8c6e9c0b12cdfdbe065c35d98f6000000d800000000000000010100000500000054c27f6b16ae5593e07eaa581b901d0c7435e5908dac53cad808bf5990469e867502ac6f316b5aad01e1b47070518726c2b3ba83ee3628114650c3bd4c4eb2f18fca2c33c0a240b00243ba4ca6f3e6c79fd484cdc4a470c984d6172a4ab73465fc678e0dc261742d93fac4e5456e7c8f206696ea89a2d1b732c00191338460169ce7fbbeee87409ce981ca2ce20ebc01cb457ced828f1e78adf9588a6b829e4f58f800d77872e25c47b9772588ee9bf41a48407292a52f39ddd834d3bc1df3ea283c699d3f00"], 0x490}}], 0x1, 0x41) ioctl$sock_SIOCGIFVLAN_GET_VLAN_REALDEV_NAME_CMD(0xffffffffffffffff, 0x8982, &(0x7f0000000000)={0x8, 'macsec0\x00', {'netpci0\x00'}, 0x1}) r2 = socket$inet(0x2, 0x3, 0x30) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000)=0x6, 0x4) getsockopt$inet_mreqsrc(r2, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000080)=0x2c) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@filter={'filter\x00', 0x4, 0x4, 0x4b8, 0xffffffff, 0xe8, 0x0, 0x260, 0xfeffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, [0xffffffff, 0xff, 0xff, 0xff000000], [0x0, 0xff, 0xff000000, 0xffffff00], 'macvtap0\x00', 'veth1_to_hsr\x00', {}, {}, 0x87, 0x6, 0x4, 0xa}, 0x2f2, 0xa8, 0xe8}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x5, {0x7}}}}, {{@ipv6={@private2, @empty, [], [0x0, 0x0, 0xff000000], 'sit0\x00', 'batadv_slave_1\x00'}, 0x0, 0x138, 0x178, 0x0, {}, [@common=@srh1={{0x90}, {0x21, 0x12, 0xbc, 0x7, 0x5aa9, @remote, @private1, @local, [0xff000000, 0xff000000, 0x0, 0xff], [0xffffff00, 0xff000000, 0xff], [0x0, 0xffffff, 0xffffff00, 0x7fffff7f], 0x3980}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x0, 0x0, {0x2000000}}}}, {{@uncond, 0x0, 0x160, 0x188, 0x0, {}, [@common=@unspec=@addrtype1={{0x28}, {0x21, 0x180, 0x5}}, @common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x3, 0x0, @loopback, @mcast1, @private1, [0x0, 0x0, 0xff], [], [], 0x843, 0x1400}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x518) 50.781985617s ago: executing program 5 (id=3779): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha384\x00'}, 0x58) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000004c0)={0xd, 0x3, &(0x7f0000001300)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000005c0)={r4, 0x0, 0x3, 0x2, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) (async) r5 = socket$inet_tcp(0x2, 0x1, 0x0) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) 49.527043598s ago: executing program 5 (id=3780): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000200)={@val={0xa, 0x6003}, @void, @eth={@multicast, @empty, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x4, 0x0, 0x1}}, {@ipv6={0x86dd, @generic={0x3, 0x6, "9fa837", 0x8, 0x2c, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x44}, {[@dstopts={0x21}]}}}}}}, 0x4a) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) (async) pipe(&(0x7f0000002740)) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000240)=0x80000000, 0x4) (async, rerun: 32) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x114, r5, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x114}}, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x1, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x1000000, [{0xe, 0x4, 0x1000000}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0xa, 0xffffffff, 0x10000, @value=r7}, 0x28) (async) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)='syz_tun\x00') 45.729398178s ago: executing program 3 (id=3781): r0 = socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x5, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a300000001f0900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$netlink(0x10, 0x3, 0x4) sendmsg$NFT_BATCH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @dynset={{0xb}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_DYNSET_SET_NAME={0x9, 0x1, 'syz2\x00'}]}}}]}]}], {0x14}}, 0x78}}, 0x0) setsockopt$sock_linger(r0, 0x1, 0xd, &(0x7f00000000c0)={0x1, 0x1000}, 0x8) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x2, 0x1}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000080)={0x6, &(0x7f0000000000)=[{0xfc4f, 0xa6, 0x3d, 0x3}, {0x1, 0x2, 0x8, 0x7}, {0xe, 0x3, 0x40, 0xff}, {0x8f, 0xa, 0x7f, 0x2}, {0x9, 0x5, 0x9, 0x101}, {0x3, 0x5c, 0x8, 0x80000000}]}, 0x10) 0s ago: executing program 34 (id=3780): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000001000/0x4000)=nil, 0x4000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r2, &(0x7f0000000200)={@val={0xa, 0x6003}, @void, @eth={@multicast, @empty, @val={@val={0x88a8, 0x1, 0x1, 0x4}, {0x8100, 0x4, 0x0, 0x1}}, {@ipv6={0x86dd, @generic={0x3, 0x6, "9fa837", 0x8, 0x2c, 0x0, @mcast2, @dev={0xfe, 0x80, '\x00', 0x44}, {[@dstopts={0x21}]}}}}}}, 0x4a) (async) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r1, 0x0) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c00028005000300000000000800014000000001080002400000000c0900010073797a30000000000900020073797a320000000014000000110001"], 0x80}}, 0x0) (async) pipe(&(0x7f0000002740)) (async) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000180), r0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x1e, &(0x7f0000000240)=0x80000000, 0x4) (async, rerun: 32) sendmsg$NLBL_MGMT_C_ADD(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)={0x114, r5, 0xe701ac47a3d23ecd, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}, @NLBL_MGMT_A_DOMAIN={0xce, 0x1, 'C\xec\xf8\xa0w\x15|\xd8\xbcs\xe1\xb93\x14\xcd\xcb\xb6\xb9\xbb\x84\xe5\xbc\xdb\x7f\x9a\xf2\xea\xcc\x91:v@\xe83-\x1d\xaagQl\x7f\tKt\fc\x1f\x17]\xd5\xd0\xf0\xa8\xeb\xd2g\x92\x04\x02\v\x00od\xe6,\xd3@I\x17\xf3\xbees0\xad\xc6\xbf/*\xb6(o\x91t\x12\x93U6\xf4@n\xdc\xdc\x8a7y\x81FY\xbe\xbbc\xd2\xc3\x01\xa5\xe2V\x8c\xb3im~\xd2V\xdaG\xbdbF\xc8n\x86\xac\x9c\xfb\xda\xe2&\"\xb4:\x13\xe9\tc\x85\xb4\xcb\x17\xbfm\x846\xe7\x7fp\x9eCdb\xad;\xa2\x8fs\xbf6\xe8\xe3Xg3&\xe2 \xd6\n\x9d=~<\x93/\xaf\x89\x06+\x96]\xb5+\xee\xff8^D*\xdb\xb8\xd8t\x80\xd4\x8fK=E0\xe8R\x83'}, @NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @dev}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @mcast1}]}, 0x114}}, 0x0) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000040)={0xffffffffffffffff, 0x4, 0x1, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f00000000c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x7, [@struct={0x5, 0x1, 0x0, 0xf, 0x0, 0x1000000, [{0xe, 0x4, 0x1000000}]}]}, {0x0, [0x5f, 0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x37, 0x0, 0xa, 0xffffffff, 0x10000, @value=r7}, 0x28) (async) ioctl$sock_SIOCBRDELBR(0xffffffffffffffff, 0x89a1, &(0x7f0000000080)='syz_tun\x00') kernel console output (not intermixed with test programs): omiscuous mode [ 370.871453][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 370.883255][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 370.897532][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 370.912299][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 370.921290][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 371.367145][ T5839] Bluetooth: hci0: command tx timeout [ 371.460433][ T154] team0 (unregistering): Port device team_slave_1 removed [ 371.512549][ T154] team0 (unregistering): Port device team_slave_0 removed [ 372.272644][T16482] lo speed is unknown, defaulting to 1000 [ 372.373583][T16497] __nla_validate_parse: 7 callbacks suppressed [ 372.373606][T16497] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3097'. [ 372.473035][T16499] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3097'. [ 372.525899][T16501] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3098'. [ 372.563124][T16498] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3097'. [ 372.585514][T16505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 372.592858][T16505] IPv6: NLM_F_CREATE should be set when creating new route [ 372.600356][T16505] IPv6: NLM_F_CREATE should be set when creating new route [ 372.607707][T16505] IPv6: NLM_F_CREATE should be set when creating new route [ 372.677728][T16505] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 372.687669][T16443] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.694899][T16443] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.721590][T16443] bridge_slave_0: entered allmulticast mode [ 372.733288][T16443] bridge_slave_0: entered promiscuous mode [ 372.775545][T16443] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.788462][T16443] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.797408][T16443] bridge_slave_1: entered allmulticast mode [ 372.804853][T16443] bridge_slave_1: entered promiscuous mode [ 372.915720][T16443] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.938821][T16443] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.967507][ T5839] Bluetooth: hci3: command tx timeout [ 373.032817][ T154] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.207950][T16443] team0: Port device team_slave_0 added [ 373.245214][ T154] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.283989][T16443] team0: Port device team_slave_1 added [ 373.411710][ T154] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.440203][T16443] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.446963][ T5839] Bluetooth: hci0: command tx timeout [ 373.447403][T16443] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.527003][T16443] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.590195][T16443] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.606944][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 373.608316][T16443] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.647212][T16548] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3110'. [ 373.662933][T16443] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.718162][T16552] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3109'. [ 373.804465][ T154] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.903438][T16558] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3112'. [ 373.998437][T16555] netlink: 116 bytes leftover after parsing attributes in process `syz.4.3112'. [ 374.042264][T16443] hsr_slave_0: entered promiscuous mode [ 374.067933][T16443] hsr_slave_1: entered promiscuous mode [ 374.156049][T16482] chnl_net:caif_netlink_parms(): no params data found [ 374.211546][T16570] openvswitch: netlink: IP tunnel dst address not specified [ 374.530967][T16581] bond6: (slave gretap0): Releasing active interface [ 374.548838][T16581] bond4: (slave veth0_to_bond): Releasing active interface [ 374.574528][T16581] team0: Port device C removed [ 374.591496][T16581] team0: Port device team_slave_1 removed [ 374.609690][T16581] bond5: (slave veth3): Releasing active interface [ 374.791597][T16590] netlink: 284 bytes leftover after parsing attributes in process `syz.1.3122'. [ 374.837768][T16593] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3122'. [ 375.048994][ T5839] Bluetooth: hci3: command tx timeout [ 375.059093][T16482] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.066299][T16482] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.080271][T16482] bridge_slave_0: entered allmulticast mode [ 375.089544][T16482] bridge_slave_0: entered promiscuous mode [ 375.107247][T16482] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.114727][T16482] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.122591][T16482] bridge_slave_1: entered allmulticast mode [ 375.132695][T16482] bridge_slave_1: entered promiscuous mode [ 375.528407][ T5839] Bluetooth: hci0: command tx timeout [ 376.672282][ T154] bond4 (unregistering): (slave ip6gretap1): Releasing backup interface [ 376.887818][ T154] bond8 (unregistering): (slave gretap4): Releasing backup interface [ 376.955204][ T154] dvmrp0 (unregistering): left allmulticast mode [ 377.066182][ T154] geneve0 (unregistering): left promiscuous mode [ 377.077083][ T154] team0: Port device geneve0 removed [ 377.126887][ T5839] Bluetooth: hci3: command tx timeout [ 377.476238][ T154] bond0 (unregistering): Released all slaves [ 377.496021][ T154] bond1 (unregistering): Released all slaves [ 377.513634][ T154] bond2 (unregistering): Released all slaves [ 377.527177][ T154] bond3 (unregistering): Released all slaves [ 377.547288][ T154] bond4 (unregistering): Released all slaves [ 377.562224][ T154] bond5 (unregistering): Released all slaves [ 377.611949][ T5839] Bluetooth: hci0: command tx timeout [ 377.700366][ T154] bond6 (unregistering): Released all slaves [ 377.815219][ T154] bond7 (unregistering): Released all slaves [ 377.829334][ T154] bond8 (unregistering): Released all slaves [ 377.895611][T16614] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 377.896470][T16622] netlink: 'syz.4.3129': attribute type 4 has an invalid length. [ 378.028936][T16482] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.150924][T16482] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.255280][T16640] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 378.256544][T16482] team0: Port device team_slave_0 added [ 378.274759][T16482] team0: Port device team_slave_1 added [ 378.317632][T16634] (unnamed net_device) (uninitialized): option primary: mode dependency failed, not supported in mode balance-rr(0) [ 378.348028][T16640] __nla_validate_parse: 1 callbacks suppressed [ 378.348047][T16640] netlink: 52 bytes leftover after parsing attributes in process `syz.4.3136'. [ 378.384993][T16482] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.405080][T16482] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.441405][T16482] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.455973][T16482] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 378.487998][T16482] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.548027][T16482] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 378.795861][T16482] hsr_slave_0: entered promiscuous mode [ 378.818731][T16482] hsr_slave_1: entered promiscuous mode [ 378.825446][T16482] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 378.836794][T16482] Cannot create hsr debugfs directory [ 379.220280][ T5839] Bluetooth: hci3: command tx timeout [ 379.298322][T16662] netlink: 'syz.3.3141': attribute type 5 has an invalid length. [ 379.325403][T16662] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3141'. [ 379.424501][T16443] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 379.478597][T16443] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 379.563026][T16443] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 379.575504][T16668] netlink: 9 bytes leftover after parsing attributes in process `syz.3.3144'. [ 379.591462][T16443] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 379.621680][T16668] gretap0: entered promiscuous mode [ 379.698271][T16668] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3144'. [ 379.733372][ T154] tipc: Disabling bearer [ 379.738966][T16668] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3144'. [ 379.747159][T16678] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3145'. [ 379.772517][ T154] tipc: Left network mode [ 380.475916][ T154] hsr_slave_0: left promiscuous mode [ 380.507243][ T154] hsr_slave_1: left promiscuous mode [ 380.515937][ T154] veth0_macvtap: left allmulticast mode [ 381.401599][T16693] syzkaller1: entered promiscuous mode [ 381.407604][T16693] syzkaller1: entered allmulticast mode [ 381.493902][T16712] netlink: 'syz.1.3153': attribute type 5 has an invalid length. [ 381.522948][T16712] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3153'. [ 381.549373][T16482] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 381.621577][T16443] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.640945][T16482] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 381.673481][T16482] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 381.748482][T16482] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 381.817219][T16443] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.883990][ T4833] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.891613][ T4833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.963355][ T4833] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.970793][ T4833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.187743][ T154] IPVS: stop unused estimator thread 0... [ 382.423588][T16482] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.526201][T16482] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.577720][ T1158] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.584948][ T1158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.656275][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.663667][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.950451][T16773] vlan4: entered allmulticast mode [ 382.956022][T16773] mac80211_hwsim hwsim10 wlan0: entered allmulticast mode [ 383.107081][T16443] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.276536][T16781] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3171'. [ 383.345255][T16786] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3174'. [ 383.357837][T16443] veth0_vlan: entered promiscuous mode [ 383.383142][T16482] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 383.465886][T16443] veth1_vlan: entered promiscuous mode [ 383.641578][T16443] veth0_macvtap: entered promiscuous mode [ 383.666194][T16482] veth0_vlan: entered promiscuous mode [ 383.688436][T16443] veth1_macvtap: entered promiscuous mode [ 383.705656][T16796] netlink: 'syz.4.3178': attribute type 1 has an invalid length. [ 383.722312][T16482] veth1_vlan: entered promiscuous mode [ 383.735533][T16443] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 383.749443][T16797] netlink: 36 bytes leftover after parsing attributes in process `syz.3.3179'. [ 383.813761][T16796] 8021q: adding VLAN 0 to HW filter on device bond5 [ 383.821948][T16801] netlink: 'syz.1.3180': attribute type 1 has an invalid length. [ 383.836083][T16443] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 383.853373][T16443] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.863921][T16443] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.873994][T16443] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.883512][T16443] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.919954][T16799] bond5: (slave geneve2): making interface the new active one [ 383.931040][T16799] bond5: (slave geneve2): Enslaving as an active interface with an up link [ 383.963490][T16796] veth9: entered promiscuous mode [ 383.974961][T16796] bond5: (slave veth9): Enslaving as an active interface with a down link [ 384.020602][T16802] vlan5: entered allmulticast mode [ 384.025772][T16802] bond5: entered allmulticast mode [ 384.047902][T16802] geneve2: entered allmulticast mode [ 384.055427][T16802] bond5: (slave vlan5): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 384.110480][T16810] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3182'. [ 384.183678][T16482] veth0_macvtap: entered promiscuous mode [ 384.233142][T16482] veth1_macvtap: entered promiscuous mode [ 384.384545][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.410141][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 384.436874][T16482] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.509797][T16482] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.552852][T16482] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.582045][T16482] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.607472][T16482] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.636834][T16482] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.661032][T16826] netlink: 96 bytes leftover after parsing attributes in process `syz.4.3187'. [ 384.726346][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 384.740028][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.015234][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.042772][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.089350][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.120298][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.257261][T16844] netlink: 'syz.1.3194': attribute type 1 has an invalid length. [ 385.274936][T16844] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3194'. [ 385.505548][T16851] netlink: 'syz.3.3196': attribute type 1 has an invalid length. [ 385.525471][T16833] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3190'. [ 385.591008][T16851] 8021q: adding VLAN 0 to HW filter on device bond8 [ 385.610911][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3190'. [ 385.621093][T16833] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3190'. [ 385.621449][T16861] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3199'. [ 385.957674][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.984969][T16867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3201'. [ 386.243792][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.480114][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.577482][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 386.591679][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 386.609543][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 386.614941][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 386.632058][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 386.641660][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 386.680911][T16868] lo speed is unknown, defaulting to 1000 [ 386.853467][ T154] bridge_slave_1: left allmulticast mode [ 386.860624][ T154] bridge_slave_1: left promiscuous mode [ 386.867018][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.876147][ T154] bridge_slave_0: left allmulticast mode [ 386.882682][ T154] bridge_slave_0: left promiscuous mode [ 386.889934][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.287533][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.301186][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.312391][ T154] bond0 (unregistering): Released all slaves [ 387.468656][T16868] chnl_net:caif_netlink_parms(): no params data found [ 387.964833][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022b65400: rx timeout, send abort [ 388.021613][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 388.037978][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 388.050718][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 388.062774][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 388.064969][T16868] bridge0: port 1(bridge_slave_0) entered blocking state [ 388.080462][T16868] bridge0: port 1(bridge_slave_0) entered disabled state [ 388.088561][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 388.088692][T16868] bridge_slave_0: entered allmulticast mode [ 388.123053][T16868] bridge_slave_0: entered promiscuous mode [ 388.187432][T16868] bridge0: port 2(bridge_slave_1) entered blocking state [ 388.204953][T16868] bridge0: port 2(bridge_slave_1) entered disabled state [ 388.227739][T16868] bridge_slave_1: entered allmulticast mode [ 388.242947][T16868] bridge_slave_1: entered promiscuous mode [ 388.297955][T16868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 388.319763][T16868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 388.390542][ T154] hsr_slave_0: left promiscuous mode [ 388.402108][T16906] netlink: 'syz.3.3210': attribute type 11 has an invalid length. [ 388.412646][ T154] hsr_slave_1: left promiscuous mode [ 388.420008][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 388.428217][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 388.436363][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 388.444220][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 388.464983][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022b65800: rx timeout, send abort [ 388.469168][ T154] veth1_macvtap: left promiscuous mode [ 388.473556][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022b65400: abort rx timeout. Force session deactivation [ 388.479147][ T154] veth0_macvtap: left promiscuous mode [ 388.495092][ T154] veth1_vlan: left promiscuous mode [ 388.505746][ T154] veth0_vlan: left promiscuous mode [ 388.729453][ T5835] Bluetooth: hci1: command tx timeout [ 388.981633][ C1] vcan0: j1939_tp_rxtimer: 0xffff888022b65800: abort rx timeout. Force session deactivation [ 389.254005][ T154] team0 (unregistering): Port device team_slave_1 removed [ 389.305812][ T154] team0 (unregistering): Port device team_slave_0 removed [ 389.844194][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3211'. [ 389.863250][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3211'. [ 389.874085][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3211'. [ 389.885269][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3211'. [ 389.895354][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3211'. [ 389.905535][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3211'. [ 389.915429][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3211'. [ 389.925610][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3211'. [ 389.943574][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3211'. [ 389.954274][T16916] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3211'. [ 390.044835][T16899] lo speed is unknown, defaulting to 1000 [ 390.172601][ T5835] Bluetooth: hci3: command tx timeout [ 390.221557][T16868] team0: Port device team_slave_0 added [ 390.318476][T16868] team0: Port device team_slave_1 added [ 390.448236][T16945] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 390.492401][T16868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.502197][T16868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.544489][T16868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.594343][T16951] netlink: 'syz.2.3220': attribute type 27 has an invalid length. [ 390.623230][T16868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.634245][T16868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.663498][T16868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.806965][ T5835] Bluetooth: hci1: command tx timeout [ 390.824561][T16868] hsr_slave_0: entered promiscuous mode [ 390.834633][T16868] hsr_slave_1: entered promiscuous mode [ 390.841938][T16868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.849903][T16868] Cannot create hsr debugfs directory [ 391.075851][T16899] chnl_net:caif_netlink_parms(): no params data found [ 391.514266][T16985] netlink: 'syz.2.3231': attribute type 1 has an invalid length. [ 391.613716][T16993] netlink: 'syz.4.3234': attribute type 11 has an invalid length. [ 391.638214][T16993] netlink: 'syz.4.3234': attribute type 11 has an invalid length. [ 391.640312][T16899] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.664100][T16899] bridge0: port 1(bridge_slave_0) entered disabled state [ 391.682285][T16899] bridge_slave_0: entered allmulticast mode [ 391.713046][T16899] bridge_slave_0: entered promiscuous mode [ 391.783895][T16899] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.798343][T16899] bridge0: port 2(bridge_slave_1) entered disabled state [ 391.806591][T16899] bridge_slave_1: entered allmulticast mode [ 391.815390][T16899] bridge_slave_1: entered promiscuous mode [ 391.934162][T16868] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 391.984958][T16899] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.005136][T16899] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.199245][T16868] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.246982][ T5835] Bluetooth: hci3: command tx timeout [ 392.267410][T16899] team0: Port device team_slave_0 added [ 392.313079][T17022] veth11: entered allmulticast mode [ 392.323149][T16899] team0: Port device team_slave_1 added [ 392.357604][T17025] netlink: 'syz.3.3242': attribute type 33 has an invalid length. [ 392.372277][T16868] netdevsim netdevsim1 netdevsim1 (unregistering): left allmulticast mode [ 392.383042][T16868] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.541311][T16868] netdevsim netdevsim1 ÿÿÿÿÿÿ (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.571600][T16899] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.591894][T16899] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.666155][T16899] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.884714][T17025] veth0_macvtap (unregistering): left allmulticast mode [ 392.893580][ T5835] Bluetooth: hci1: command tx timeout [ 392.959414][T16899] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.968889][T16899] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.005185][T16899] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.029664][T17045] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 393.044334][T17045] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 393.227739][T17049] x_tables: duplicate underflow at hook 3 [ 393.273542][T16899] hsr_slave_0: entered promiscuous mode [ 393.294900][T16899] hsr_slave_1: entered promiscuous mode [ 393.366575][T16899] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.396584][T16899] Cannot create hsr debugfs directory [ 393.434671][T17051] netlink: 'syz.2.3250': attribute type 1 has an invalid length. [ 393.665801][T16868] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 393.713309][T16868] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 393.742338][T17073] netlink: 'syz.2.3254': attribute type 8 has an invalid length. [ 393.820666][T17077] netlink: 'syz.2.3254': attribute type 1 has an invalid length. [ 393.834564][T16868] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 393.837092][T17077] netlink: 'syz.2.3254': attribute type 10 has an invalid length. [ 393.850346][T17077] netlink: 'syz.2.3254': attribute type 4 has an invalid length. [ 393.854431][T16868] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 394.327068][ T5835] Bluetooth: hci3: command tx timeout [ 394.588342][T16868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 394.782931][T16868] 8021q: adding VLAN 0 to HW filter on device team0 [ 394.825097][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.832387][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 394.893375][ T1158] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.901060][ T1158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.967435][ T5835] Bluetooth: hci1: command tx timeout [ 395.320219][T16899] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 395.378198][T16899] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 395.430222][T17130] __nla_validate_parse: 114 callbacks suppressed [ 395.430247][T17130] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3266'. [ 395.437290][T16899] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 395.493576][T16899] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 395.493637][T17135] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3269'. [ 395.737226][T16899] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.770870][T16868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 395.803294][T16899] 8021q: adding VLAN 0 to HW filter on device team0 [ 395.827898][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.835245][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 395.900155][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.907456][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.417251][ T5835] Bluetooth: hci3: command tx timeout [ 398.057880][T16868] veth0_vlan: entered promiscuous mode [ 398.231957][T17161] netlink: 'syz.4.3276': attribute type 1 has an invalid length. [ 398.242273][T16868] veth1_vlan: entered promiscuous mode [ 398.328558][T17161] 8021q: adding VLAN 0 to HW filter on device bond6 [ 398.348077][T17170] ipvlan1: entered allmulticast mode [ 398.363853][T17170] veth0_vlan: entered allmulticast mode [ 398.453919][T16868] veth0_macvtap: entered promiscuous mode [ 398.463148][T17170] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 398.511572][T16868] veth1_macvtap: entered promiscuous mode [ 398.637384][T16868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.662213][T16868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.721056][T17181] netlink: 'syz.4.3281': attribute type 2 has an invalid length. [ 398.747512][T16868] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.768769][T17181] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.3281'. [ 398.787627][T16868] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.799594][T17181] nbd: must specify a device to reconfigure [ 398.816067][T16868] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.844239][T16868] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.075706][T16899] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 399.187786][ T4833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.206254][ T4833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.268163][T17177] infiniband syz1: set active [ 399.275629][T17177] infiniband syz1: added bridge_slave_0 [ 399.349408][ T154] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 399.361236][T17177] RDS/IB: syz1: added [ 399.366278][T17177] smc: adding ib device syz1 with port count 1 [ 399.403708][ T154] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 399.427670][T17177] smc: ib device syz1 port 1 has pnetid [ 399.499818][T16899] veth0_vlan: entered promiscuous mode [ 399.540492][T16899] veth1_vlan: entered promiscuous mode [ 399.860361][T16899] veth0_macvtap: entered promiscuous mode [ 399.908271][T17204] IPVS: Error connecting to the multicast addr [ 399.997850][T16899] veth1_macvtap: entered promiscuous mode [ 400.094106][T17208] netlink: 'syz.4.3289': attribute type 4 has an invalid length. [ 400.119492][T16899] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 400.144692][T16899] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 400.194357][T16899] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.207551][T16899] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.220184][T16899] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.229787][T16899] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 400.504483][ T78] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.536851][ T78] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.604385][ T4833] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 400.628870][ T4833] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 400.880519][T17226] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3294'. [ 400.916030][T17226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3294'. [ 400.948924][T17228] netlink: 'syz.4.3296': attribute type 1 has an invalid length. [ 401.076592][ T6739] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.099525][T17233] netlink: 'syz.2.3297': attribute type 2 has an invalid length. [ 401.270037][ T6739] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.380336][ T6739] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.476072][ T6739] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 401.763286][ T6739] bridge_slave_1: left allmulticast mode [ 401.777172][ T6739] bridge_slave_1: left promiscuous mode [ 401.785428][ T6739] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.795185][ T6739] bridge_slave_0: left allmulticast mode [ 401.801889][ T6739] bridge_slave_0: left promiscuous mode [ 401.808143][ T6739] bridge0: port 1(bridge_slave_0) entered disabled state [ 402.199280][ T6739] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.212645][ T6739] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.223277][ T6739] bond0 (unregistering): Released all slaves [ 402.627943][T17236] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3298'. [ 402.912280][T17245] netlink: 'syz.2.3302': attribute type 7 has an invalid length. [ 402.920418][T17245] netlink: 'syz.2.3302': attribute type 8 has an invalid length. [ 402.997245][T17249] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3303'. [ 403.021665][T17249] bridge_slave_0: default FDB implementation only supports local addresses [ 403.052912][T17249] netlink: 'syz.4.3303': attribute type 83 has an invalid length. [ 403.100937][T17253] netlink: 56 bytes leftover after parsing attributes in process `syz.1.3305'. [ 403.120064][T17253] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3305'. [ 403.149011][T17253] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3305'. [ 403.194326][T17253] netlink: 'syz.1.3305': attribute type 3 has an invalid length. [ 403.235011][T17253] netlink: 'syz.1.3305': attribute type 2 has an invalid length. [ 403.259055][T17253] netlink: 31 bytes leftover after parsing attributes in process `syz.1.3305'. [ 403.432170][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 403.446265][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 403.457281][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 403.467333][ T5839] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 403.477976][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 403.714345][ T6739] hsr_slave_0: left promiscuous mode [ 403.757901][ T6739] hsr_slave_1: left promiscuous mode [ 403.764192][ T6739] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.804996][ T6739] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.831999][ T6739] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.842718][ T6739] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.887833][ T6739] veth1_macvtap: left promiscuous mode [ 403.893500][ T6739] veth0_macvtap: left promiscuous mode [ 403.900256][ T6739] veth1_vlan: left promiscuous mode [ 403.905841][ T6739] veth0_vlan: left promiscuous mode [ 404.455307][ T6739] team0 (unregistering): Port device team_slave_1 removed [ 404.506473][ T6739] team0 (unregistering): Port device team_slave_0 removed [ 405.169986][T17261] lo speed is unknown, defaulting to 1000 [ 405.372959][T17295] : renamed from bridge_slave_0 (while UP) [ 405.566087][T17300] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3317'. [ 405.592308][T17298] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 405.618523][ T5839] Bluetooth: hci3: command tx timeout [ 405.683735][T17301] netlink: 252 bytes leftover after parsing attributes in process `syz.4.3317'. [ 406.223953][T17331] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3325'. [ 406.261091][T17331] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3325'. [ 406.425508][T17342] netlink: 56 bytes leftover after parsing attributes in process `syz.4.3330'. [ 406.622516][T17261] chnl_net:caif_netlink_parms(): no params data found [ 406.662037][T17358] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3332'. [ 406.721880][T17353] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 407.192068][T17261] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.205157][T17261] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.223756][T17261] bridge_slave_0: entered allmulticast mode [ 407.241500][T17261] bridge_slave_0: entered promiscuous mode [ 407.268531][T17387] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3339'. [ 407.298331][T17261] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.313284][T17261] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.335960][T17261] bridge_slave_1: entered allmulticast mode [ 407.364920][T17261] bridge_slave_1: entered promiscuous mode [ 407.389953][T17387] 8021q: adding VLAN 0 to HW filter on device ipvlan4 [ 407.437281][T17392] nbd: must specify an index to disconnect [ 407.601705][T17395] IPVS: set_ctl: invalid protocol: 24930 100.118.95.115:27745 [ 407.604177][T17261] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 407.629005][T17261] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 407.687153][ T5839] Bluetooth: hci3: command tx timeout [ 407.845456][T17261] team0: Port device team_slave_0 added [ 407.891630][T17261] team0: Port device team_slave_1 added [ 408.120855][T17261] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.148122][T17261] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.182802][T17261] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.205283][T17261] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.215185][T17261] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.296075][T17261] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.633607][T17452] netlink: 212408 bytes leftover after parsing attributes in process `syz.3.3354'. [ 408.651934][T17442] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.687073][T17452] netlink: zone id is out of range [ 408.694428][T17452] netlink: zone id is out of range [ 408.712653][T17452] netlink: zone id is out of range [ 408.746204][T17452] netlink: get zone limit has 8 unknown bytes [ 408.756297][T17261] hsr_slave_0: entered promiscuous mode [ 408.778086][T17261] hsr_slave_1: entered promiscuous mode [ 408.784373][T17261] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.817062][T17261] Cannot create hsr debugfs directory [ 408.956606][T17467] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3358'. [ 409.183268][T17481] netlink: 'syz.2.3364': attribute type 5 has an invalid length. [ 409.204057][T17479] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3363'. [ 409.334963][T17479] smc: net device erspan0 applied user defined pnetid SYZ0 [ 409.407699][T17485] netlink: 'syz.1.3365': attribute type 21 has an invalid length. [ 409.432019][T17485] netlink: 176 bytes leftover after parsing attributes in process `syz.1.3365'. [ 409.478188][T17488] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3366'. [ 409.624636][T17494] netlink: 'syz.1.3368': attribute type 1 has an invalid length. [ 409.759764][T17499] dummy0: left allmulticast mode [ 409.777595][ T5839] Bluetooth: hci3: command tx timeout [ 409.784607][T17499] bridge0: port 2(dummy0) entered disabled state [ 409.802540][T17499] bond0: (slave batadv0): Releasing backup interface [ 409.820084][T17499] bridge_slave_0: left allmulticast mode [ 409.826944][T17499] bridge0: port 1(bridge_slave_0) entered disabled state [ 409.842788][T17499] bond0: (slave bond_slave_0): Releasing backup interface [ 409.854038][T17499] bond0: (slave bond_slave_1): Releasing backup interface [ 409.875704][T17499] team0: Port device C removed [ 409.890847][T17499] team0: Port device team_slave_1 removed [ 409.899013][T17499] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.907407][T17499] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.930778][T17499] bond3: (slave ip6erspan0): Releasing active interface [ 409.945945][T17499] batman_adv: batadv0: Removing interface: gretap0 [ 409.963138][T17499] bond5: (slave geneve2): Releasing active interface [ 409.974070][T17499] bond5: (slave geneve2): the permanent HWaddr of slave - d6:bf:39:df:b7:e0 - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 410.008329][T17499] geneve2: left allmulticast mode [ 410.019718][T17499] bond5: (slave veth9): Releasing active interface [ 410.051100][ T978] srz1: Port: 1 Link DOWN [ 410.161572][T17261] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 410.169653][T17513] netlink: 'syz.4.3373': attribute type 58 has an invalid length. [ 410.186937][T17261] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 410.212934][T17261] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 410.224394][T17261] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 410.353205][T17524] netlink: 'syz.4.3374': attribute type 1 has an invalid length. [ 410.430033][T17528] xt_ecn: cannot match TCP bits for non-tcp packets [ 411.857281][ T5839] Bluetooth: hci3: command tx timeout [ 412.631714][T17541] __nla_validate_parse: 6 callbacks suppressed [ 412.631734][T17541] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3378'. [ 412.665244][T17541] netlink: 72 bytes leftover after parsing attributes in process `syz.3.3378'. [ 412.768183][T17543] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3379'. [ 412.769149][T17261] 8021q: adding VLAN 0 to HW filter on device bond0 [ 412.852568][T17261] 8021q: adding VLAN 0 to HW filter on device team0 [ 412.905605][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 412.912999][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 413.072926][T17552] 8021q: adding VLAN 0 to HW filter on device bond1 [ 413.091104][T17562] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3386'. [ 413.109803][T17552] bridge0: port 3(bond1) entered blocking state [ 413.135867][T17552] bridge0: port 3(bond1) entered disabled state [ 413.156178][T17552] bond1: entered allmulticast mode [ 413.204167][T17552] bond1: entered promiscuous mode [ 413.213407][T17552] bridge0: port 3(bond1) entered blocking state [ 413.219944][T17552] bridge0: port 3(bond1) entered forwarding state [ 413.387639][ T1098] bridge0: port 3(bond1) entered disabled state [ 413.396668][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 413.403878][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 413.930626][T17598] sctp: [Deprecated]: syz.2.3393 (pid 17598) Use of struct sctp_assoc_value in delayed_ack socket option. [ 413.930626][T17598] Use struct sctp_sack_info instead [ 413.969105][T17595] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.321284][T17261] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 414.365406][T17619] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3400'. [ 414.488197][T17621] batman_adv: batadv0: Adding interface: dummy0 [ 414.506736][T17621] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 414.546425][T17628] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 414.558731][T17621] batman_adv: batadv0: Interface activated: dummy0 [ 414.615408][T17261] veth0_vlan: entered promiscuous mode [ 414.654582][T17261] veth1_vlan: entered promiscuous mode [ 414.745878][T17261] veth0_macvtap: entered promiscuous mode [ 414.800107][T17261] veth1_macvtap: entered promiscuous mode [ 414.822955][T17635] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 414.907412][T17636] x_tables: duplicate underflow at hook 1 [ 414.965991][T17261] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 415.032237][T17261] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 415.075334][T17261] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.135224][T17261] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.179335][T17261] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.231062][T17261] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 415.670178][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.719943][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 415.916897][ T1116] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 415.924778][ T1116] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 416.243460][T17652] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3408'. [ 416.654536][T17664] sctp: [Deprecated]: syz.3.3411 (pid 17664) Use of struct sctp_assoc_value in delayed_ack socket option. [ 416.654536][T17664] Use struct sctp_sack_info instead [ 416.674936][T17661] : renamed from bridge_slave_0 (while UP) [ 416.980926][ T154] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.273552][ T154] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.465066][ T154] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.672472][ T154] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.733144][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 417.745171][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 417.753923][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 417.762238][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 417.771777][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 417.953411][T17674] lo speed is unknown, defaulting to 1000 [ 418.017015][ T154] bridge_slave_1: left allmulticast mode [ 418.023940][ T154] bridge_slave_1: left promiscuous mode [ 418.039361][ T154] bridge0: port 2(bridge_slave_1) entered disabled state [ 418.073410][ T154] bridge_slave_0: left allmulticast mode [ 418.086915][ T154] bridge_slave_0: left promiscuous mode [ 418.092769][ T154] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.694886][ T154] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.709257][ T154] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.719631][ T154] bond0 (unregistering): Released all slaves [ 418.918435][T17682] netlink: 'syz.1.3416': attribute type 5 has an invalid length. [ 418.960316][T17682] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3416'. [ 419.178684][T17686] bridge0: port 2(bridge_slave_1) entered disabled state [ 419.186189][T17686] bridge0: port 1() entered disabled state [ 419.324657][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 419.340271][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 419.350664][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 419.372195][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 419.383109][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 419.866732][ T5835] Bluetooth: hci3: command tx timeout [ 421.451609][ T5835] Bluetooth: hci2: command tx timeout [ 421.512959][ T154] hsr_slave_0: left promiscuous mode [ 421.537799][ T154] hsr_slave_1: left promiscuous mode [ 421.544068][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 421.557351][ T154] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 421.580541][ T154] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 421.588327][ T154] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 421.612019][T17713] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3424'. [ 421.635113][T17713] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 421.643549][ T154] veth1_macvtap: left promiscuous mode [ 421.643645][ T154] veth0_macvtap: left promiscuous mode [ 421.643864][ T154] veth1_vlan: left promiscuous mode [ 421.644021][ T154] veth0_vlan: left promiscuous mode [ 421.939128][ T5835] Bluetooth: hci3: command tx timeout [ 422.147497][T17727] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3427'. [ 422.165011][T17727] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3427'. [ 422.191700][T17727] netlink: 'syz.1.3427': attribute type 5 has an invalid length. [ 422.462638][ T154] team0 (unregistering): Port device team_slave_1 removed [ 422.520189][ T154] team0 (unregistering): Port device team_slave_0 removed [ 423.007341][T17674] chnl_net:caif_netlink_parms(): no params data found [ 423.050724][T17690] lo speed is unknown, defaulting to 1000 [ 423.275894][T17739] netlink: 'syz.3.3431': attribute type 2 has an invalid length. [ 423.304903][T17739] netlink: 112 bytes leftover after parsing attributes in process `syz.3.3431'. [ 423.494768][T17749] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3434'. [ 423.527916][ T5835] Bluetooth: hci2: command tx timeout [ 423.544337][T17674] bridge0: port 1(bridge_slave_0) entered blocking state [ 423.571769][T17674] bridge0: port 1(bridge_slave_0) entered disabled state [ 423.610862][T17674] bridge_slave_0: entered allmulticast mode [ 423.631995][T17674] bridge_slave_0: entered promiscuous mode [ 423.674561][T17674] bridge0: port 2(bridge_slave_1) entered blocking state [ 423.684101][T17674] bridge0: port 2(bridge_slave_1) entered disabled state [ 423.692769][T17674] bridge_slave_1: entered allmulticast mode [ 423.701870][T17674] bridge_slave_1: entered promiscuous mode [ 423.729578][T17758] netlink: 'syz.1.3437': attribute type 1 has an invalid length. [ 423.742795][T17758] netlink: 'syz.1.3437': attribute type 3 has an invalid length. [ 423.753416][T17758] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3437'. [ 423.771097][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 423.783551][ T12] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 423.797135][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 423.959561][T17674] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 423.987798][T17674] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 424.017628][ T5835] Bluetooth: hci3: command tx timeout [ 424.153190][T17674] team0: Port device team_slave_0 added [ 424.197561][ T978] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.209556][T17674] team0: Port device team_slave_1 added [ 424.368235][T17674] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 424.375924][T17777] netlink: 'syz.3.3441': attribute type 7 has an invalid length. [ 424.383895][T17674] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.384113][T17674] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 424.473057][T17674] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 424.500599][T17674] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 424.529605][T17782] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3443'. [ 424.539202][T17674] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 424.738266][ T978] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 424.753531][T17674] hsr_slave_0: entered promiscuous mode [ 424.760853][T17674] hsr_slave_1: entered promiscuous mode [ 424.764266][T17790] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3445'. [ 424.768735][T17674] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 424.784413][T17674] Cannot create hsr debugfs directory [ 424.813636][T17790] Cannot find add_set index 0 as target [ 424.945005][ T154] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 424.955250][ T154] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.172014][ T154] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.190984][ T154] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.403080][ T154] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.438362][ T154] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.492110][T17821] tipc: Enabling of bearer rejected, media not registered [ 425.569724][T17834] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3458'. [ 425.584164][ T154] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 425.607389][ T5839] Bluetooth: hci2: command tx timeout [ 425.614130][ T154] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.745077][T17836] hsr0: entered promiscuous mode [ 425.759575][T17836] macsec1: entered promiscuous mode [ 425.765671][T17836] macsec1: entered allmulticast mode [ 425.772895][T17836] hsr0: entered allmulticast mode [ 425.780233][T17836] hsr_slave_0: entered allmulticast mode [ 425.786057][T17836] hsr_slave_1: entered allmulticast mode [ 425.798006][T17836] hsr0: left allmulticast mode [ 425.806342][T17836] hsr_slave_0: left allmulticast mode [ 425.823615][T17836] hsr_slave_1: left allmulticast mode [ 425.928726][T17690] chnl_net:caif_netlink_parms(): no params data found [ 426.090896][ T5839] Bluetooth: hci3: command tx timeout [ 426.237257][T17852] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3464'. [ 426.309452][T17858] nbd: must specify a size in bytes for the device [ 426.352663][T17858] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3464'. [ 426.384176][T17862] netlink: 'syz.2.3467': attribute type 1 has an invalid length. [ 426.397506][T17863] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 426.719689][ T154] erspan0 (unregistering): left promiscuous mode [ 426.756259][ T154] 0ªî{X¹¦ (unregistering): left promiscuous mode [ 427.435120][ T154] bond0 (unregistering): Released all slaves [ 427.572515][ T154] bond1 (unregistering): Released all slaves [ 427.587154][ T154] bond2 (unregistering): Released all slaves [ 427.696985][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 427.704970][ T5840] Bluetooth: hci2: command 0x0419 tx timeout [ 427.722251][ T154] bond3 (unregistering): Released all slaves [ 427.841883][ T154] bond4 (unregistering): Released all slaves [ 427.971001][ T154] bond5 (unregistering): Released all slaves [ 428.096232][ T154] bond6 (unregistering): Released all slaves [ 428.112624][ T154] bond7 (unregistering): Released all slaves [ 428.126085][ T154] bond8 (unregistering): Released all slaves [ 428.301563][T17864] bond1: (slave gretap1): making interface the new active one [ 428.310498][T17864] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 428.447717][T17690] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.463046][T17690] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.475062][T17690] bridge_slave_0: entered allmulticast mode [ 428.494463][T17690] bridge_slave_0: entered promiscuous mode [ 428.552950][T17690] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.563090][T17690] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.575065][T17690] bridge_slave_1: entered allmulticast mode [ 428.589053][T17690] bridge_slave_1: entered promiscuous mode [ 428.602917][T17876] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3472'. [ 428.710527][T17690] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.726586][T17690] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.852985][T17889] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3475'. [ 428.854435][T17690] team0: Port device team_slave_0 added [ 428.925653][T17690] team0: Port device team_slave_1 added [ 429.079406][T17690] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 429.092158][T17690] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.165496][T17690] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.215291][T17690] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.225111][T17690] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.259210][T17900] netlink: 'syz.2.3479': attribute type 1 has an invalid length. [ 429.266758][T17690] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.310079][T17900] mac80211_hwsim hwsim42 wlan0: entered promiscuous mode [ 429.318169][T17900] macsec1: entered allmulticast mode [ 429.323563][T17900] mac80211_hwsim hwsim42 wlan0: entered allmulticast mode [ 429.335110][T17900] mac80211_hwsim hwsim42 wlan0: left allmulticast mode [ 429.342601][T17900] mac80211_hwsim hwsim42 wlan0: left promiscuous mode [ 429.382031][T17674] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 429.515863][T17674] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 429.554114][T17905] netlink: 56 bytes leftover after parsing attributes in process `syz.2.3481'. [ 429.627832][T17690] hsr_slave_0: entered promiscuous mode [ 429.635055][T17690] hsr_slave_1: entered promiscuous mode [ 429.658135][T17690] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 429.665760][T17690] Cannot create hsr debugfs directory [ 429.681419][T17674] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 429.709235][T17674] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 429.767015][ T5835] Bluetooth: hci2: command 0x0419 tx timeout [ 430.004200][T17925] netlink: 'syz.2.3485': attribute type 7 has an invalid length. [ 430.054365][T17925] : entered promiscuous mode [ 430.152491][T17934] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3486'. [ 430.360600][T17942] netlink: 'syz.1.3490': attribute type 3 has an invalid length. [ 430.382761][T17942] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3490'. [ 430.485421][T17946] netlink: 'syz.1.3490': attribute type 3 has an invalid length. [ 430.495533][T17946] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.3490'. [ 430.646183][T17674] 8021q: adding VLAN 0 to HW filter on device bond0 [ 430.689001][T17951] xt_CT: You must specify a L4 protocol and not use inversions on it [ 430.770638][T17674] 8021q: adding VLAN 0 to HW filter on device team0 [ 430.861580][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.868817][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 430.916276][ T6739] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.923663][ T6739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 431.062735][T17956] smc: ib device syz1 ibport 1 applied user defined pnetid SYZ0 [ 431.122178][T17956] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 431.296075][T17690] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 431.348724][T17690] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 431.438865][T17690] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 431.521077][T17690] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 431.614340][T17970] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3495'. [ 431.737986][T17984] netlink: 'syz.3.3498': attribute type 1 has an invalid length. [ 431.797077][T17984] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.3498'. [ 431.859897][T17990] nbd: must specify a device to reconfigure [ 432.003592][T17996] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3501'. [ 432.018211][T17674] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.027992][T17996] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3501'. [ 432.236538][T17690] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.264383][T18005] netlink: 'syz.3.3502': attribute type 1 has an invalid length. [ 432.332853][T17690] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.385948][ T6739] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.393223][ T6739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.441508][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 432.448885][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.591504][T17690] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 432.805852][T17674] veth0_vlan: entered promiscuous mode [ 432.834945][T17674] veth1_vlan: entered promiscuous mode [ 432.949146][T17674] veth0_macvtap: entered promiscuous mode [ 432.991941][T17674] veth1_macvtap: entered promiscuous mode [ 433.135575][T17674] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 433.181090][T17674] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 433.200672][T17674] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.210676][T17674] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.220484][T17674] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.234993][T17674] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 433.400386][T17690] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 433.490547][T18047] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3513'. [ 433.506407][ T4833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.534892][ T4833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.690914][ T1158] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 433.720550][ T1158] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 433.793603][T17690] veth0_vlan: entered promiscuous mode [ 433.853745][T17690] veth1_vlan: entered promiscuous mode [ 433.876180][T18057] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3516'. [ 433.896760][T18057] netlink: 'syz.2.3516': attribute type 7 has an invalid length. [ 433.914027][T18057] netlink: 'syz.2.3516': attribute type 8 has an invalid length. [ 433.958028][T17690] veth0_macvtap: entered promiscuous mode [ 433.983628][T17690] veth1_macvtap: entered promiscuous mode [ 434.076250][T17690] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.194163][T17690] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.252578][T17690] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.265643][T17690] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.296859][T17690] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.317655][T17690] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 434.681812][T18086] __nla_validate_parse: 2 callbacks suppressed [ 434.681834][T18086] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3524'. [ 434.691612][ T6739] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.725212][T18087] netlink: 104 bytes leftover after parsing attributes in process `syz.1.3524'. [ 434.725513][ T6739] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.895922][ T6739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 434.944313][ T6739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 434.988423][T18101] mac80211_hwsim hwsim48 wlan1: entered promiscuous mode [ 435.098107][T18105] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3529'. [ 435.480510][T18126] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3536'. [ 435.508414][T18126] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3536'. [ 435.659257][T18128] netlink: 248 bytes leftover after parsing attributes in process `syz.4.3537'. [ 435.687155][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 437.266539][T18137] tipc: Enabled bearer , priority 10 [ 437.399655][T18142] IPv6: Can't replace route, no match found [ 437.532490][T18147] syzkaller0: create flow: hash 4288349674 index 1 [ 437.628377][ T1098] syzkaller0: tun_net_xmit 76 [ 437.642027][T18151] netlink: 212376 bytes leftover after parsing attributes in process `syz.2.3544'. [ 437.655744][ T1098] syzkaller0: tun_net_xmit 48 [ 437.661287][T17414] syzkaller0: tun_net_xmit 76 [ 437.867984][T18141] syzkaller0: delete flow: hash 4288349674 index 1 [ 437.916571][T18157] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3549'. [ 437.997173][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 438.009042][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 438.026799][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 438.043495][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 438.051431][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 438.219421][T18175] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3552'. [ 440.091214][ T5835] Bluetooth: hci2: command tx timeout [ 440.362721][T18163] lo speed is unknown, defaulting to 1000 [ 440.417518][T18198] netlink: 'syz.1.3558': attribute type 2 has an invalid length. [ 440.547344][T18206] tipc: Started in network mode [ 440.552384][T18206] tipc: Node identity 1a0923c1186c, cluster identity 4711 [ 440.563247][T18206] tipc: Enabled bearer , priority 0 [ 440.617449][T18201] syzkaller0: entered promiscuous mode [ 440.622993][T18201] syzkaller0: entered allmulticast mode [ 440.758517][T18212] netlink: 'syz.2.3563': attribute type 10 has an invalid length. [ 440.889061][T18212] team0: Port device bridge0 added [ 440.926501][T18205] tipc: Resetting bearer [ 440.962276][T18218] netlink: 'syz.1.3565': attribute type 21 has an invalid length. [ 440.979469][T18218] netlink: 128 bytes leftover after parsing attributes in process `syz.1.3565'. [ 441.003326][T18205] tipc: Disabling bearer [ 441.054585][T18218] netlink: 3 bytes leftover after parsing attributes in process `syz.1.3565'. [ 441.394522][T18232] netlink: 'syz.4.3569': attribute type 1 has an invalid length. [ 441.430703][T18232] netlink: 'syz.4.3569': attribute type 2 has an invalid length. [ 441.498071][T18163] chnl_net:caif_netlink_parms(): no params data found [ 441.506109][T18232] netlink: 1172 bytes leftover after parsing attributes in process `syz.4.3569'. [ 441.834846][T18163] bridge0: port 1(bridge_slave_0) entered blocking state [ 441.860818][T18163] bridge0: port 1(bridge_slave_0) entered disabled state [ 441.869214][T18253] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3572'. [ 441.889605][T18163] bridge_slave_0: entered allmulticast mode [ 441.896218][T18253] netlink: 24 bytes leftover after parsing attributes in process `syz.3.3572'. [ 441.914638][T18163] bridge_slave_0: entered promiscuous mode [ 441.924963][T18163] bridge0: port 2(bridge_slave_1) entered blocking state [ 441.944324][T18163] bridge0: port 2(bridge_slave_1) entered disabled state [ 441.953173][T18163] bridge_slave_1: entered allmulticast mode [ 441.972661][T18163] bridge_slave_1: entered promiscuous mode [ 442.075175][T18163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.114521][T18163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.166893][ T5840] Bluetooth: hci2: command tx timeout [ 442.273933][T18163] team0: Port device team_slave_0 added [ 442.304379][T18163] team0: Port device team_slave_1 added [ 442.397916][T18163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 442.405145][T18163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.435629][T18163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 442.452150][T18163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 442.459937][T18163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 442.489115][T18163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 442.597204][T18284] netlink: 'syz.1.3583': attribute type 10 has an invalid length. [ 442.628731][T18284] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3583'. [ 442.665802][T18284] dummy0: entered promiscuous mode [ 442.683754][T18284] batman_adv: batadv0: Interface deactivated: dummy0 [ 442.694114][T18284] batman_adv: batadv0: Removing interface: dummy0 [ 442.758479][T18284] bridge0: port 4(dummy0) entered blocking state [ 442.774467][T18284] bridge0: port 4(dummy0) entered disabled state [ 442.807441][T18284] dummy0: entered allmulticast mode [ 442.824171][T18163] hsr_slave_0: entered promiscuous mode [ 442.835698][T18163] hsr_slave_1: entered promiscuous mode [ 442.846330][T18163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 442.854917][T18163] Cannot create hsr debugfs directory [ 443.043078][T18291] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3586'. [ 443.322661][T18301] lo speed is unknown, defaulting to 1000 [ 443.415058][T18309] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3593'. [ 443.443665][T18309] netlink: 'syz.2.3593': attribute type 2 has an invalid length. [ 443.464939][T18309] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3593'. [ 443.717382][T18313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3595'. [ 443.936396][T18163] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.258152][ T5840] Bluetooth: hci2: command 0x040f tx timeout [ 444.262641][T18163] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.478633][T18163] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.630226][T18325] ip6t_REJECT: ECHOREPLY is not supported [ 444.637841][T18163] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 444.753621][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 444.764956][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 444.774468][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 444.782963][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 444.792453][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 444.935488][T18330] lo speed is unknown, defaulting to 1000 [ 445.005708][T18163] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 445.034514][T18163] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 445.069724][T18163] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 445.114535][T18163] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 445.340125][T18346] netlink: 'syz.3.3602': attribute type 21 has an invalid length. [ 445.349270][T18346] IPv6: NLM_F_CREATE should be specified when creating new route [ 445.522909][T18163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 445.635436][T18163] 8021q: adding VLAN 0 to HW filter on device team0 [ 445.721317][ T6739] bridge0: port 1(bridge_slave_0) entered blocking state [ 445.728570][ T6739] bridge0: port 1(bridge_slave_0) entered forwarding state [ 445.792742][ T6739] bridge0: port 2(bridge_slave_1) entered blocking state [ 445.800039][ T6739] bridge0: port 2(bridge_slave_1) entered forwarding state [ 445.892396][T18163] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 445.955482][T18330] chnl_net:caif_netlink_parms(): no params data found [ 446.171340][T18368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3606'. [ 446.193393][T18330] bridge0: port 1(bridge_slave_0) entered blocking state [ 446.202086][T18368] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3606'. [ 446.210365][T18330] bridge0: port 1(bridge_slave_0) entered disabled state [ 446.230198][T18330] bridge_slave_0: entered allmulticast mode [ 446.243843][T18330] bridge_slave_0: entered promiscuous mode [ 446.260709][T18330] bridge0: port 2(bridge_slave_1) entered blocking state [ 446.274850][T18330] bridge0: port 2(bridge_slave_1) entered disabled state [ 446.290888][T18371] x_tables: unsorted entry at hook 2 [ 446.291058][T18330] bridge_slave_1: entered allmulticast mode [ 446.313641][T18330] bridge_slave_1: entered promiscuous mode [ 446.336451][T18368] erspan0: entered promiscuous mode [ 446.346334][ T5835] Bluetooth: hci2: command 0x040f tx timeout [ 446.367519][T18368] erspan0: left promiscuous mode [ 446.488569][T18330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 446.512597][T18330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 446.529028][T18376] veth0: entered promiscuous mode [ 446.542954][T18376] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3609'. [ 446.606325][T18330] team0: Port device team_slave_0 added [ 446.618769][T18330] team0: Port device team_slave_1 added [ 446.675933][T18163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 446.684232][T18330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 446.693512][T18330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.721560][T18330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 446.735451][T18330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 446.742685][T18330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 446.769017][T18330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 446.840491][T18330] hsr_slave_0: entered promiscuous mode [ 446.847355][T18330] hsr_slave_1: entered promiscuous mode [ 446.853557][T18330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.862709][T18330] Cannot create hsr debugfs directory [ 446.887089][ T5835] Bluetooth: hci3: command tx timeout [ 446.979914][T18163] veth0_vlan: entered promiscuous mode [ 447.093415][T18163] veth1_vlan: entered promiscuous mode [ 447.273900][T18330] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.325728][T18163] veth0_macvtap: entered promiscuous mode [ 447.352264][T18385] netlink: 'syz.3.3611': attribute type 1 has an invalid length. [ 447.373379][T18385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 447.385779][T18163] veth1_macvtap: entered promiscuous mode [ 447.421132][T18330] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.512160][T18330] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.554300][T18163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.574585][T18163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 447.596204][T18163] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.621190][T18163] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.633588][T18163] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.650221][T18163] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 447.706028][T18330] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 447.944800][ T1098] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.973003][ T1098] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.110223][T18330] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 448.126174][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 448.126321][T18398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3612'. [ 448.143257][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 448.154854][T18330] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 448.163052][T18398] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3612'. [ 448.172782][T18398] netlink: 'syz.3.3612': attribute type 30 has an invalid length. [ 448.186526][T18330] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 448.193652][T18398] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3612'. [ 448.212758][T18330] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 448.475732][T18330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 448.522526][T18330] 8021q: adding VLAN 0 to HW filter on device team0 [ 448.557881][ T4833] bridge0: port 1(bridge_slave_0) entered blocking state [ 448.565101][ T4833] bridge0: port 1(bridge_slave_0) entered forwarding state [ 448.598072][ T4833] bridge0: port 2(bridge_slave_1) entered blocking state [ 448.605398][ T4833] bridge0: port 2(bridge_slave_1) entered forwarding state [ 448.705511][T18414] tipc: Bearer : already 2 bearers with priority 10 [ 448.713523][T18414] tipc: Bearer : trying with adjusted priority [ 448.731730][T18414] tipc: Enabling of bearer rejected, failed to enable media [ 448.968152][ T5835] Bluetooth: hci3: command tx timeout [ 449.088195][T18330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 449.354372][T18330] veth0_vlan: entered promiscuous mode [ 449.366671][T18330] veth1_vlan: entered promiscuous mode [ 449.401853][T18330] veth0_macvtap: entered promiscuous mode [ 449.421508][T18330] veth1_macvtap: entered promiscuous mode [ 449.443237][T18330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 449.460224][T18330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.479223][T18330] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.488461][T18330] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.498483][T18330] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.508677][T18330] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 449.600555][ T4833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.610545][ T4833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 449.654719][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 449.669625][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 450.577803][T18431] xt_connbytes: Forcing CT accounting to be enabled [ 450.957601][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 450.969031][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 450.988086][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 451.001662][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 451.009791][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 451.141168][T18442] lo speed is unknown, defaulting to 1000 [ 451.687508][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 451.907819][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 451.931752][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 451.940405][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 451.950132][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 451.958482][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 452.120266][T18448] lo speed is unknown, defaulting to 1000 [ 452.189617][T18442] chnl_net:caif_netlink_parms(): no params data found [ 452.536749][T18461] netlink: 'syz.3.3624': attribute type 4 has an invalid length. [ 452.566390][T18442] bridge0: port 1(bridge_slave_0) entered blocking state [ 452.581435][T18442] bridge0: port 1(bridge_slave_0) entered disabled state [ 452.597727][T18442] bridge_slave_0: entered allmulticast mode [ 452.609350][T18442] bridge_slave_0: entered promiscuous mode [ 452.622922][T18442] bridge0: port 2(bridge_slave_1) entered blocking state [ 452.632419][T18442] bridge0: port 2(bridge_slave_1) entered disabled state [ 452.639969][T18442] bridge_slave_1: entered allmulticast mode [ 452.649186][T18442] bridge_slave_1: entered promiscuous mode [ 452.720894][T18442] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 452.748355][T18442] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 452.862089][T18442] team0: Port device team_slave_0 added [ 452.873113][T18442] team0: Port device team_slave_1 added [ 453.024693][T18442] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 453.032063][T18442] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.062815][T18442] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 453.084788][T18470] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3626'. [ 453.094171][T18470] netlink: 56 bytes leftover after parsing attributes in process `syz.3.3626'. [ 453.124699][T18442] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 453.137195][T18442] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 453.137233][ T5835] Bluetooth: hci2: command tx timeout [ 453.225107][T18442] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 453.255969][T18448] chnl_net:caif_netlink_parms(): no params data found [ 453.362777][T18483] tipc: Enabled bearer , priority 0 [ 453.372655][T18483] netlink: 'syz.3.3629': attribute type 1 has an invalid length. [ 453.387486][T18483] netlink: 244 bytes leftover after parsing attributes in process `syz.3.3629'. [ 453.517198][T18442] hsr_slave_0: entered promiscuous mode [ 453.524335][T18442] hsr_slave_1: entered promiscuous mode [ 453.534663][T18442] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 453.543795][T18442] Cannot create hsr debugfs directory [ 453.589085][T18448] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.597367][T18448] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.604728][T18448] bridge_slave_0: entered allmulticast mode [ 453.621626][T18448] bridge_slave_0: entered promiscuous mode [ 453.649353][T18448] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.658511][T18448] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.665860][T18448] bridge_slave_1: entered allmulticast mode [ 453.674200][T18448] bridge_slave_1: entered promiscuous mode [ 453.738223][T18492] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 453.814723][T18448] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.831759][T18448] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.868636][T18492] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3632'. [ 454.006942][ T5835] Bluetooth: hci3: command tx timeout [ 454.021998][T18448] team0: Port device team_slave_0 added [ 454.054619][T18448] team0: Port device team_slave_1 added [ 454.182955][T18442] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.336261][T18442] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.365683][T18508] netlink: 'syz.3.3636': attribute type 24 has an invalid length. [ 454.376916][T18448] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 454.383930][T18448] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.442125][T18448] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 454.485985][T18442] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.503691][T18510] netlink: 80 bytes leftover after parsing attributes in process `syz.3.3637'. [ 454.515586][T18448] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 454.522886][T18448] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 454.549624][T18448] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 454.620161][T18442] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.715663][T18448] hsr_slave_0: entered promiscuous mode [ 454.723981][T18448] hsr_slave_1: entered promiscuous mode [ 454.736022][T18448] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 454.744845][T18448] Cannot create hsr debugfs directory [ 455.014377][T18442] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 455.062396][T18442] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 455.089783][T18442] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 455.123692][T18442] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 455.175477][T18523] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3642'. [ 455.207014][ T5835] Bluetooth: hci2: command tx timeout [ 455.304469][T18448] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.413976][T18448] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.519619][T18448] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.670904][T18448] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.731364][T18538] IPVS: sh: UDP 224.0.0.2:0 - no destination available [ 455.816535][T18442] 8021q: adding VLAN 0 to HW filter on device bond0 [ 455.897588][T18442] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.981947][T17975] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.989303][T17975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.026932][T17975] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.034188][T17975] bridge0: port 2(bridge_slave_1) entered forwarding state [ 456.088901][ T5835] Bluetooth: hci3: command tx timeout [ 456.335748][T18448] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 456.380896][T18448] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 456.415196][T18448] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 456.475630][T18448] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 456.744394][T18448] 8021q: adding VLAN 0 to HW filter on device bond0 [ 456.780454][T18448] 8021q: adding VLAN 0 to HW filter on device team0 [ 456.848636][T18448] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 456.859625][T18448] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 456.909954][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 456.917204][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 456.932279][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 456.939528][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 457.022313][T18442] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.150539][T18442] veth0_vlan: entered promiscuous mode [ 457.239087][T18442] veth1_vlan: entered promiscuous mode [ 457.287686][ T5835] Bluetooth: hci2: command tx timeout [ 457.315877][T18442] veth0_macvtap: entered promiscuous mode [ 457.329575][T18442] veth1_macvtap: entered promiscuous mode [ 457.355714][T18442] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 457.379189][T18442] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 457.393183][T18442] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.404990][T18442] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.414636][T18442] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.424095][T18442] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 457.478391][T18570] netlink: 'syz.3.3652': attribute type 10 has an invalid length. [ 457.504552][T18570] tipc: Disabling bearer [ 457.624579][T18448] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 457.659022][ T4833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.679127][ T4833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 457.743814][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 457.770262][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.063426][T18577] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3654'. [ 458.154997][T18448] veth0_vlan: entered promiscuous mode [ 458.175407][T18448] veth1_vlan: entered promiscuous mode [ 458.181373][ T5835] Bluetooth: hci3: command tx timeout [ 458.232800][T18448] veth0_macvtap: entered promiscuous mode [ 458.244220][T18448] veth1_macvtap: entered promiscuous mode [ 458.309080][T18448] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 458.342743][T18448] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 458.384630][T18448] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.399356][T18448] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.419974][T18448] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.431458][T18448] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.631143][ T4833] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.662736][ T4833] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 458.795506][ T6739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 458.824362][ T6739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 459.055783][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 459.068128][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 459.078635][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 459.091284][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 459.106307][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 459.157180][T18586] lo speed is unknown, defaulting to 1000 [ 459.551396][T18586] chnl_net:caif_netlink_parms(): no params data found [ 459.657914][T18586] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.665126][T18586] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.673487][T18586] bridge_slave_0: entered allmulticast mode [ 459.681474][T18586] bridge_slave_0: entered promiscuous mode [ 459.692337][T18586] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.702430][T18586] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.710427][T18586] bridge_slave_1: entered allmulticast mode [ 459.718556][T18586] bridge_slave_1: entered promiscuous mode [ 459.760084][T18586] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.774196][T18586] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.832808][T18586] team0: Port device team_slave_0 added [ 459.854397][T18586] team0: Port device team_slave_1 added [ 459.933836][T18586] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.941667][T18586] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.969494][T18586] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.983806][T18586] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.991380][T18586] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 460.028166][T18586] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 460.174477][T18586] hsr_slave_0: entered promiscuous mode [ 460.181528][T18586] hsr_slave_1: entered promiscuous mode [ 460.188689][T18586] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.196285][T18586] Cannot create hsr debugfs directory [ 460.884244][T18586] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 460.920633][T18586] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 460.957787][T18586] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 460.986439][T18586] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 461.073407][ T5835] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 461.087144][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 461.099899][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 461.110822][ T5835] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 461.122106][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 461.130092][ T5839] Bluetooth: hci2: command tx timeout [ 461.170885][ T5835] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 461.189499][ T5835] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 461.198672][ T5835] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 461.237072][ T5835] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 461.247668][ T5835] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 461.349695][T18586] 8021q: adding VLAN 0 to HW filter on device bond0 [ 461.358220][T18611] lo speed is unknown, defaulting to 1000 [ 461.409603][T18613] lo speed is unknown, defaulting to 1000 [ 461.415628][T18586] 8021q: adding VLAN 0 to HW filter on device team0 [ 461.462649][T17975] bridge0: port 1(bridge_slave_0) entered blocking state [ 461.469921][T17975] bridge0: port 1(bridge_slave_0) entered forwarding state [ 461.500389][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 461.507660][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 462.020607][T18622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3662'. [ 462.062455][T18622] nbd: nbd0 already in use [ 462.086802][T18623] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3662'. [ 462.095830][T18623] nbd: nbd0 already in use [ 462.394204][T18629] netlink: 16178 bytes leftover after parsing attributes in process `syz.3.3663'. [ 462.443025][T18586] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 462.507066][T18611] chnl_net:caif_netlink_parms(): no params data found [ 462.574865][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 462.596917][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 462.612141][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 462.625380][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 462.634436][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 462.888412][T18632] lo speed is unknown, defaulting to 1000 [ 463.056155][T18611] bridge0: port 1(bridge_slave_0) entered blocking state [ 463.072587][T18611] bridge0: port 1(bridge_slave_0) entered disabled state [ 463.100875][T18611] bridge_slave_0: entered allmulticast mode [ 463.121086][T18611] bridge_slave_0: entered promiscuous mode [ 463.157678][T18611] bridge0: port 2(bridge_slave_1) entered blocking state [ 463.178629][T18611] bridge0: port 2(bridge_slave_1) entered disabled state [ 463.199562][T18611] bridge_slave_1: entered allmulticast mode [ 463.212084][ T5835] Bluetooth: hci3: command tx timeout [ 463.216023][ T5840] Bluetooth: hci2: command tx timeout [ 463.230488][T18611] bridge_slave_1: entered promiscuous mode [ 463.288996][ T5840] Bluetooth: hci5: command tx timeout [ 463.401219][T18611] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 463.435485][T18611] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 463.573179][T18611] team0: Port device team_slave_0 added [ 463.634930][T18611] team0: Port device team_slave_1 added [ 463.816498][T18613] chnl_net:caif_netlink_parms(): no params data found [ 463.833768][T18611] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 463.852800][T18652] netlink: 'syz.3.3666': attribute type 3 has an invalid length. [ 463.862682][T18611] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.862797][T18611] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 463.865424][T18611] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 463.914869][T18611] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 463.941850][T18611] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 464.005322][T18652] (unnamed net_device) (uninitialized): peer notification delay (1164) is not a multiple of miimon (100), value rounded to 1100 ms [ 464.047859][T18652] bond9: entered promiscuous mode [ 464.053033][T18652] bond9: entered allmulticast mode [ 464.065888][T18652] 8021q: adding VLAN 0 to HW filter on device bond9 [ 464.169639][T18586] veth0_vlan: entered promiscuous mode [ 464.263171][T18611] hsr_slave_0: entered promiscuous mode [ 464.278754][T18611] hsr_slave_1: entered promiscuous mode [ 464.285551][T18611] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 464.299655][T18611] Cannot create hsr debugfs directory [ 464.469880][T18613] bridge0: port 1(bridge_slave_0) entered blocking state [ 464.478037][T18613] bridge0: port 1(bridge_slave_0) entered disabled state [ 464.485430][T18613] bridge_slave_0: entered allmulticast mode [ 464.502338][T18613] bridge_slave_0: entered promiscuous mode [ 464.518543][T18586] veth1_vlan: entered promiscuous mode [ 464.558473][T18613] bridge0: port 2(bridge_slave_1) entered blocking state [ 464.565812][T18613] bridge0: port 2(bridge_slave_1) entered disabled state [ 464.574292][T18613] bridge_slave_1: entered allmulticast mode [ 464.583235][T18613] bridge_slave_1: entered promiscuous mode [ 464.654839][T18670] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3670'. [ 464.730777][ T5840] Bluetooth: hci6: command tx timeout [ 464.745946][T18613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 464.793529][T18632] chnl_net:caif_netlink_parms(): no params data found [ 464.819389][T18613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.030977][T18613] team0: Port device team_slave_0 added [ 465.041376][T18613] team0: Port device team_slave_1 added [ 465.079812][T18680] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3672'. [ 465.097721][T18680] openvswitch: netlink: Unknown nsh attribute 0 [ 465.117157][T18680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 465.215463][T18613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 465.222888][T18613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.252847][T18613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 465.266250][T18613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 465.273719][T18613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 465.301534][ T5840] Bluetooth: hci2: command tx timeout [ 465.308462][ T5835] Bluetooth: hci3: command tx timeout [ 465.314263][T18613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 465.350513][T18632] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.358110][T18632] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.365613][T18632] bridge_slave_0: entered allmulticast mode [ 465.372558][ T5840] Bluetooth: hci5: command tx timeout [ 465.380867][T18632] bridge_slave_0: entered promiscuous mode [ 465.441295][T18611] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.502621][T18632] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.523608][T18632] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.551964][T18632] bridge_slave_1: entered allmulticast mode [ 465.563705][T18632] bridge_slave_1: entered promiscuous mode [ 465.630270][T18611] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.707389][T18586] veth0_macvtap: entered promiscuous mode [ 465.802535][T18632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 465.862230][T18613] hsr_slave_0: entered promiscuous mode [ 465.870174][T18613] hsr_slave_1: entered promiscuous mode [ 465.877858][T18613] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 465.885664][T18613] Cannot create hsr debugfs directory [ 465.899650][T18632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 465.925603][T18611] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.009601][T18586] veth1_macvtap: entered promiscuous mode [ 466.035254][T18611] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 466.075983][T18632] team0: Port device team_slave_0 added [ 466.120502][T18632] team0: Port device team_slave_1 added [ 466.233688][T18692] veth0: entered promiscuous mode [ 466.278977][T18586] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 466.287825][T18632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 466.294898][T18632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.341182][T18632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 466.361112][T18632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 466.368543][T18632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 466.394761][T18632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 466.474221][T18586] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 466.490343][T18691] veth0: left promiscuous mode [ 466.674871][T18586] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.684667][T18586] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.693838][T18586] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.702777][T18586] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.811833][ T5840] Bluetooth: hci6: command tx timeout [ 466.816506][T18701] netlink: 88 bytes leftover after parsing attributes in process `syz.3.3679'. [ 466.827185][T18632] hsr_slave_0: entered promiscuous mode [ 466.834327][T18632] hsr_slave_1: entered promiscuous mode [ 466.841095][T18632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 466.848839][T18632] Cannot create hsr debugfs directory [ 466.876189][T18701] bridge0: entered promiscuous mode [ 467.036067][T18613] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.090518][T18611] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 467.110871][T18611] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 467.142996][T18613] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.215834][T18611] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 467.228977][T18611] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 467.327177][T18613] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.367722][ T5840] Bluetooth: hci2: command tx timeout [ 467.368669][ T5835] Bluetooth: hci3: command tx timeout [ 467.448063][ T5835] Bluetooth: hci5: command tx timeout [ 467.512574][T18613] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 467.662093][T18722] netlink: 'syz.3.3685': attribute type 2 has an invalid length. [ 467.678561][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.701773][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.862417][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.880220][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.938165][T18613] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 467.970567][T18613] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 468.009279][T18613] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 468.041537][T18613] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 468.270178][T18730] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3655'. [ 468.280346][T18730] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3655'. [ 468.283766][T18632] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 468.384243][T18632] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 468.405944][T18632] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 468.435594][T18632] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 468.621997][T18611] 8021q: adding VLAN 0 to HW filter on device bond0 [ 468.720248][T18761] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3692'. [ 468.779823][T18611] 8021q: adding VLAN 0 to HW filter on device team0 [ 468.877295][ T1116] bridge0: port 1(bridge_slave_0) entered blocking state [ 468.884715][ T1116] bridge0: port 1(bridge_slave_0) entered forwarding state [ 468.916983][ T5835] Bluetooth: hci6: command tx timeout [ 468.946112][ T1116] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.953426][ T1116] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.148962][T18613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.248610][T18632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 469.284045][T18613] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.304365][T18777] netlink: 'syz.5.3695': attribute type 1 has an invalid length. [ 469.339269][T18778] netlink: 'syz.5.3695': attribute type 4 has an invalid length. [ 469.354802][T18777] netlink: 'syz.5.3695': attribute type 1 has an invalid length. [ 469.378935][T18632] 8021q: adding VLAN 0 to HW filter on device team0 [ 469.402571][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.409887][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.421733][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.428995][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.456038][ T5835] Bluetooth: hci3: command tx timeout [ 469.500226][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.507620][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 469.529245][ T5835] Bluetooth: hci5: command tx timeout [ 469.590388][ T1098] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.597668][ T1098] bridge0: port 2(bridge_slave_1) entered forwarding state [ 469.718819][T18790] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3697'. [ 469.764574][T18613] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 469.796405][T18613] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 469.846336][T18790] macsec0: entered promiscuous mode [ 469.973855][T18611] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.325908][T18806] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3699'. [ 470.381090][T18806] openvswitch: netlink: nsh attr 8196 is out of range max 3 [ 470.409227][T18806] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 470.543225][T18613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.650008][T18815] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3700'. [ 470.715176][T18632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.775224][T18613] veth0_vlan: entered promiscuous mode [ 470.832917][T18613] veth1_vlan: entered promiscuous mode [ 470.969698][ T5835] Bluetooth: hci6: command tx timeout [ 471.081382][T18613] veth0_macvtap: entered promiscuous mode [ 471.115439][T18611] veth0_vlan: entered promiscuous mode [ 471.125500][T18613] veth1_macvtap: entered promiscuous mode [ 471.188149][T18611] veth1_vlan: entered promiscuous mode [ 471.293317][T18613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 471.386962][T18613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 471.431772][T18613] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.454452][T18613] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.486782][T18613] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.504744][T18613] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 471.684387][T18611] veth0_macvtap: entered promiscuous mode [ 471.751483][T18611] veth1_macvtap: entered promiscuous mode [ 471.967979][T18851] IPVS: length: 157 != 24 [ 471.997128][T18611] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.040535][T18611] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.054108][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.077665][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.116458][T18632] veth0_vlan: entered promiscuous mode [ 472.131684][T18611] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.141416][T18611] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.156684][T18611] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.179630][T18611] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.229097][T18856] netlink: 'syz.3.3710': attribute type 2 has an invalid length. [ 472.294344][T18858] netlink: 'syz.5.3711': attribute type 10 has an invalid length. [ 472.315844][T18858] bridge0: port 2(bridge_slave_1) entered disabled state [ 472.323798][T18858] bridge0: port 1(bridge_slave_0) entered disabled state [ 472.376390][T18858] bridge0: port 2(bridge_slave_1) entered blocking state [ 472.383670][T18858] bridge0: port 2(bridge_slave_1) entered forwarding state [ 472.391523][T18858] bridge0: port 1(bridge_slave_0) entered blocking state [ 472.398743][T18858] bridge0: port 1(bridge_slave_0) entered forwarding state [ 472.439830][T18862] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3712'. [ 472.454473][T18865] netlink: 8 bytes leftover after parsing attributes in process `syz.3.3712'. [ 472.455193][T18858] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 472.579074][T18872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 472.612641][T18632] veth1_vlan: entered promiscuous mode [ 472.649993][T18872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 472.924484][T18632] veth0_macvtap: entered promiscuous mode [ 473.002156][T18632] veth1_macvtap: entered promiscuous mode [ 473.177616][T18885] netlink: 16 bytes leftover after parsing attributes in process `syz.5.3715'. [ 473.196972][T18885] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3715'. [ 473.232644][ T1158] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.257388][ T1158] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.358665][T18632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 473.394107][ T6739] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.409566][T18632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 473.436962][ T6739] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 473.474616][T18632] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.507156][T18632] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.515934][T18632] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.561394][T18632] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.601297][T18889] ip6gre1: entered allmulticast mode [ 474.072475][T18872] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.112247][T18872] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.179842][T18872] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 474.188714][T18872] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.757083][T18897] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 475.271926][T18913] __nla_validate_parse: 2 callbacks suppressed [ 475.271957][T18913] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3720'. [ 475.892348][T18919] IPVS: length: 121 != 24 [ 476.147491][T18919] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3722'. [ 476.184617][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 476.197038][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 476.205716][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 476.214195][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 476.223944][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 476.309516][T18925] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3723'. [ 476.335172][T18924] lo speed is unknown, defaulting to 1000 [ 476.367109][T18925] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3723'. [ 476.425731][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 476.440478][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 476.458264][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 476.507665][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 476.527133][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 476.724620][T18929] lo speed is unknown, defaulting to 1000 [ 477.476303][T18957] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3730'. [ 477.506332][T18957] netlink: 12 bytes leftover after parsing attributes in process `syz.5.3730'. [ 477.528430][T18955] mac80211_hwsim hwsim6 syzkaller0: entered promiscuous mode [ 477.542676][T18955] mac80211_hwsim hwsim6 syzkaller0: entered allmulticast mode [ 478.049824][T18924] chnl_net:caif_netlink_parms(): no params data found [ 478.334577][ T5840] Bluetooth: hci3: command tx timeout [ 478.551436][T18992] netlink: 'syz.3.3739': attribute type 1 has an invalid length. [ 478.561155][T18992] Bluetooth: MGMT ver 1.23 [ 478.650038][ T5840] Bluetooth: hci5: command tx timeout [ 478.694098][T18992] netlink: 'syz.3.3739': attribute type 29 has an invalid length. [ 478.708666][T19001] netlink: 'syz.3.3739': attribute type 29 has an invalid length. [ 478.785669][T18924] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.804990][T18924] bridge0: port 1(bridge_slave_0) entered disabled state [ 478.830380][T18924] bridge_slave_0: entered allmulticast mode [ 478.839139][T18924] bridge_slave_0: entered promiscuous mode [ 478.865638][T18924] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.873567][T18924] bridge0: port 2(bridge_slave_1) entered disabled state [ 478.883551][T18924] bridge_slave_1: entered allmulticast mode [ 478.899660][T18924] bridge_slave_1: entered promiscuous mode [ 479.051411][T19009] netlink: 232 bytes leftover after parsing attributes in process `syz.3.3743'. [ 479.171532][T19014] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3744'. [ 479.243182][T18924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 479.308788][T19023] netlink: 'syz.3.3746': attribute type 10 has an invalid length. [ 479.309326][T18924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 479.535855][T18929] chnl_net:caif_netlink_parms(): no params data found [ 479.598913][T19032] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3747'. [ 479.608959][T18924] team0: Port device team_slave_0 added [ 479.616469][T19029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3748'. [ 479.715735][T18924] team0: Port device team_slave_1 added [ 479.955940][T18924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 479.964056][T18924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 479.994195][T18924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 480.008930][T18924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 480.016108][T18924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 480.042764][T18924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 480.249474][T18924] hsr_slave_0: entered promiscuous mode [ 480.256165][T18924] hsr_slave_1: entered promiscuous mode [ 480.264647][T18924] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 480.272431][T18924] Cannot create hsr debugfs directory [ 480.282572][T18929] bridge0: port 1(bridge_slave_0) entered blocking state [ 480.290744][T18929] bridge0: port 1(bridge_slave_0) entered disabled state [ 480.298717][T18929] bridge_slave_0: entered allmulticast mode [ 480.306120][T18929] bridge_slave_0: entered promiscuous mode [ 480.333236][T18929] bridge0: port 2(bridge_slave_1) entered blocking state [ 480.364892][T18929] bridge0: port 2(bridge_slave_1) entered disabled state [ 480.377619][T18929] bridge_slave_1: entered allmulticast mode [ 480.399087][T18929] bridge_slave_1: entered promiscuous mode [ 480.408395][ T5840] Bluetooth: hci3: command tx timeout [ 480.549489][T19051] xt_CT: No such helper "pptp" [ 480.716579][T18929] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 480.727127][ T5840] Bluetooth: hci5: command tx timeout [ 480.780804][T18929] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 480.845123][T19059] __nla_validate_parse: 1 callbacks suppressed [ 480.845145][T19059] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3756'. [ 480.955077][T19061] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3757'. [ 481.009685][T19064] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3758'. [ 481.055297][T19064] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3758'. [ 481.066804][T19061] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3757'. [ 481.119868][T19066] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 481.160292][T18929] team0: Port device team_slave_0 added [ 481.172841][T18929] team0: Port device team_slave_1 added [ 481.224704][T19061] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 481.319432][T18929] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 481.326458][T18929] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.365402][T18929] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 481.413607][T18929] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 481.421568][T18929] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 481.449260][T19070] netlink: 'syz.5.3760': attribute type 1 has an invalid length. [ 481.449613][T18929] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 481.503518][T19073] netlink: 'syz.5.3760': attribute type 1 has an invalid length. [ 481.560454][T19070] 8021q: adding VLAN 0 to HW filter on device bond1 [ 481.644680][T18924] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.723360][T19073] macvtap1: entered promiscuous mode [ 481.729368][T19073] macvtap1: entered allmulticast mode [ 481.745035][T19076] bond1: (slave gretap1): making interface the new active one [ 481.759035][T19076] bond1: (slave gretap1): Enslaving as an active interface with an up link [ 481.770022][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 481.952304][T18924] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 481.979017][T19090] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3764'. [ 482.049084][T18929] hsr_slave_0: entered promiscuous mode [ 482.056265][T18929] hsr_slave_1: entered promiscuous mode [ 482.063826][T18929] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 482.074547][T18929] Cannot create hsr debugfs directory [ 482.180529][T18924] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.252583][T19096] netlink: 36 bytes leftover after parsing attributes in process `syz.6.3768'. [ 482.487847][ T5840] Bluetooth: hci3: command tx timeout [ 482.520204][T19109] netlink: 256 bytes leftover after parsing attributes in process `syz.5.3770'. [ 482.545579][T18924] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.581496][T19109] netlink: 'syz.5.3770': attribute type 9 has an invalid length. [ 482.665938][T19108] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3770'. [ 482.714992][T19111] 8021q: adding VLAN 0 to HW filter on device ipvlan6 [ 482.748802][T19111] team0: Device ipvlan6 is already an upper device of the team interface [ 482.807325][ T5840] Bluetooth: hci5: command tx timeout [ 483.221901][ C0] hrtimer: interrupt took 16521898 ns [ 488.469381][ T5840] Bluetooth: hci3: command tx timeout [ 488.474891][ T5840] Bluetooth: hci5: command tx timeout [ 496.507043][ C1] ip6_tunnel: ip6tnl3 xmit: Local address not yet configured! [ 605.316556][ C1] rcu: INFO: rcu_preempt detected stalls on CPUs/tasks: [ 605.323568][ C1] rcu: 0-...!: (1 GPs behind) idle=502c/1/0x4000000000000000 softirq=89560/89561 fqs=3 [ 605.334249][ C1] rcu: Tasks blocked on level-0 rcu_node (CPUs 0-1): P5844/1:b..l [ 605.342288][ C1] rcu: (detected by 1, t=10506 jiffies, g=86661, q=2146 ncpus=2) [ 605.350372][ C1] Sending NMI from CPU 1 to CPUs 0: [ 605.350403][ C0] NMI backtrace for cpu 0 [ 605.350417][ C0] CPU: 0 UID: 0 PID: 17975 Comm: kworker/u8:2 Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) [ 605.350436][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 605.350447][ C0] Workqueue: events_unbound cfg80211_wiphy_work [ 605.350476][ C0] RIP: 0010:match_held_lock+0x0/0xc0 [ 605.350498][ C0] Code: 41 5e 41 5f e9 c1 ca 02 00 cc e8 fb f8 ff ff 66 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 <41> 56 53 bb 01 00 00 00 48 39 77 10 74 6a 81 7f 20 00 00 20 00 72 [ 605.350510][ C0] RSP: 0018:ffffc90000006f40 EFLAGS: 00000083 [ 605.350523][ C0] RAX: 0000000000000008 RBX: ffff8880346f4718 RCX: f19ee61164fd7b00 [ 605.350534][ C0] RDX: ffff8880346f3c00 RSI: ffff888020ab3300 RDI: ffff8880346f4718 [ 605.350545][ C0] RBP: 00000000ffffffff R08: 0000000000000003 R09: 0000000000000004 [ 605.350555][ C0] R10: dffffc0000000000 R11: fffff52000000de0 R12: 0000000000000046 [ 605.350566][ C0] R13: ffff8880346f3c00 R14: ffff888020ab3300 R15: 0000000000000001 [ 605.350576][ C0] FS: 0000000000000000(0000) GS:ffff888125c55000(0000) knlGS:0000000000000000 [ 605.350589][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 605.350600][ C0] CR2: 00007f21540e56c0 CR3: 0000000028bf4000 CR4: 00000000003526f0 [ 605.350615][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 605.350624][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 605.350634][ C0] Call Trace: [ 605.350642][ C0] [ 605.350648][ C0] lock_is_held_type+0xa8/0x190 [ 605.350671][ C0] advance_sched+0x1d2/0xc90 [ 605.350688][ C0] ? _raw_spin_unlock_irqrestore+0xad/0x110 [ 605.350707][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 605.350727][ C0] ? __pfx_advance_sched+0x10/0x10 [ 605.350742][ C0] __hrtimer_run_queues+0x529/0xc60 [ 605.350764][ C0] ? ktime_get_update_offsets_now+0x60/0x3d0 [ 605.350789][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 605.350810][ C0] ? ktime_get_update_offsets_now+0x3ab/0x3d0 [ 605.350831][ C0] hrtimer_interrupt+0x45b/0xaa0 [ 605.350862][ C0] __sysvec_apic_timer_interrupt+0x108/0x410 [ 605.350878][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 605.350896][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 605.350912][ C0] RIP: 0010:ip6t_do_table+0x460/0x1560 [ 605.350928][ C0] Code: 48 89 d8 48 c1 e8 03 42 80 3c 28 00 74 08 48 89 df e8 04 0b f3 f7 4c 8b 2b 4c 89 f0 48 c1 e8 03 48 b9 00 00 00 00 00 fc ff df <80> 3c 08 00 74 08 4c 89 f7 e8 e2 0a f3 f7 49 8d 5e 20 4d 33 2e 48 [ 605.350940][ C0] RSP: 0018:ffffc900000073e0 EFLAGS: 00000a02 [ 605.350953][ C0] RAX: 1ffff1100c796270 RBX: ffff8880667149d8 RCX: dffffc0000000000 [ 605.350964][ C0] RDX: 0000000000000100 RSI: 0000000000000004 RDI: ffff888063cb1000 [ 605.350974][ C0] RBP: ffffc900000075d0 R08: ffffc9000000754f R09: 0000000000000000 [ 605.350985][ C0] R10: ffffc90000007530 R11: fffff52000000eaa R12: ffff8880667149c0 [ 605.350996][ C0] R13: 00000000000080fe R14: ffff888063cb1380 R15: 0000000000000010 [ 605.351013][ C0] ? unwind_next_frame+0xa5/0x2390 [ 605.351034][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 605.351065][ C0] ? ip6t_do_table+0x1db/0x1560 [ 605.351081][ C0] ? __pfx_ip6t_do_table+0x10/0x10 [ 605.351097][ C0] ? ip6t_do_table+0x1376/0x1560 [ 605.351113][ C0] ? __local_bh_enable_ip+0x12d/0x1c0 [ 605.351135][ C0] ip6table_mangle_hook+0x2a2/0x6c0 [ 605.351155][ C0] ? __lock_acquire+0xab9/0xd20 [ 605.351175][ C0] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 605.351193][ C0] ? nf_hook+0x9d/0x380 [ 605.351209][ C0] ? nf_hook+0x9d/0x380 [ 605.351224][ C0] ? apparmor_ip_postroute+0xcb/0x200 [ 605.351238][ C0] ? __pfx_ip6table_mangle_hook+0x10/0x10 [ 605.351256][ C0] nf_hook_slow+0xc5/0x220 [ 605.351273][ C0] nf_hook+0x217/0x380 [ 605.351291][ C0] ? nf_hook+0x9d/0x380 [ 605.351306][ C0] ? __pfx_nf_hook+0x10/0x10 [ 605.351322][ C0] ? __pfx_ip6_finish_output+0x10/0x10 [ 605.351341][ C0] ip6_output+0x27d/0x3e0 [ 605.351355][ C0] ? __pfx_ip6_finish_output+0x10/0x10 [ 605.351372][ C0] ndisc_send_skb+0xb47/0x1400 [ 605.351392][ C0] ? ndisc_send_skb+0x208/0x1400 [ 605.351414][ C0] ? __pfx_ndisc_send_skb+0x10/0x10 [ 605.351434][ C0] ? __pfx_dst_output+0x10/0x10 [ 605.351461][ C0] addrconf_rs_timer+0x369/0x670 [ 605.351481][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 605.351502][ C0] call_timer_fn+0x17b/0x5f0 [ 605.351521][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 605.351537][ C0] ? call_timer_fn+0xbe/0x5f0 [ 605.351555][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 605.351577][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 605.351594][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 605.351610][ C0] ? __pfx_addrconf_rs_timer+0x10/0x10 [ 605.351628][ C0] __run_timer_base+0x61a/0x860 [ 605.351644][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 605.351667][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 605.351690][ C0] run_timer_softirq+0xb7/0x180 [ 605.351708][ C0] handle_softirqs+0x286/0x870 [ 605.351730][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 605.351752][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 605.351776][ C0] __irq_exit_rcu+0xca/0x1f0 [ 605.351796][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 605.351820][ C0] irq_exit_rcu+0x9/0x30 [ 605.351838][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 605.351856][ C0] [ 605.351861][ C0] [ 605.351867][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 605.351882][ C0] RIP: 0010:unwind_next_frame+0x12ee/0x2390 [ 605.351903][ C0] Code: 89 de e8 f5 df b4 ff e9 43 06 00 00 49 89 d5 48 89 d5 48 89 d8 48 29 e8 48 89 c1 48 c1 f9 02 48 c1 e8 3f 48 01 c8 48 83 e0 fe <4c> 8d 3c 45 00 00 00 00 49 01 ef 4c 89 f8 48 c1 e8 03 48 b9 00 00 [ 605.351915][ C0] RSP: 0018:ffffc900039065d8 EFLAGS: 00000246 [ 605.351928][ C0] RAX: 0000000000000000 RBX: ffffffff901e14c4 RCX: 0000000000000000 [ 605.351938][ C0] RDX: ffffffff901e14c4 RSI: ffffffff90ce1be6 RDI: ffffffff8be282e0 [ 605.351948][ C0] RBP: ffffffff901e14c4 R08: 0000000000000003 R09: ffffffff81729de5 [ 605.351959][ C0] R10: ffffc900039066f8 R11: ffffffff81acf670 R12: ffffffff8ad7a945 [ 605.351969][ C0] R13: ffffffff901e14c4 R14: ffffc900039066a8 R15: ffffffff901e14c8 [ 605.351982][ C0] ? ieee80211_bss_info_update+0x745/0x9e0 [ 605.352000][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 605.352017][ C0] ? unwind_next_frame+0xa5/0x2390 [ 605.352046][ C0] ? unwind_next_frame+0xd4/0x2390 [ 605.352069][ C0] ? unwind_next_frame+0xa5/0x2390 [ 605.352089][ C0] ? ieee80211_bss_info_update+0x746/0x9e0 [ 605.352108][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 605.352125][ C0] arch_stack_walk+0x11c/0x150 [ 605.352142][ C0] ? ieee80211_bss_info_update+0x746/0x9e0 [ 605.352161][ C0] stack_trace_save+0x9c/0xe0 [ 605.352177][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 605.352196][ C0] save_stack+0xf5/0x1f0 [ 605.352213][ C0] ? __pfx_save_stack+0x10/0x10 [ 605.352226][ C0] ? post_alloc_hook+0x240/0x2a0 [ 605.352241][ C0] ? get_page_from_freelist+0x21e4/0x22c0 [ 605.352258][ C0] ? __alloc_frozen_pages_noprof+0x181/0x370 [ 605.352275][ C0] ? alloc_pages_mpol+0x232/0x4a0 [ 605.352289][ C0] ? allocate_slab+0x8a/0x3b0 [ 605.352306][ C0] ? ___slab_alloc+0xbfc/0x1480 [ 605.352321][ C0] ? __kmalloc_noprof+0x305/0x4f0 [ 605.352334][ C0] ? cfg80211_inform_single_bss_data+0x905/0x1ac0 [ 605.352352][ C0] ? cfg80211_inform_bss_data+0x1fb/0x3b20 [ 605.352369][ C0] ? cfg80211_inform_bss_frame_data+0x417/0x7b0 [ 605.352386][ C0] ? ieee80211_bss_info_update+0x746/0x9e0 [ 605.352404][ C0] ? seqcount_lockdep_reader_access+0x102/0x180 [ 605.352429][ C0] __set_page_owner+0x8d/0x4a0 [ 605.352444][ C0] ? __pfx___set_page_owner+0x10/0x10 [ 605.352463][ C0] post_alloc_hook+0x240/0x2a0 [ 605.352480][ C0] get_page_from_freelist+0x21e4/0x22c0 [ 605.352503][ C0] ? stack_trace_save+0x9c/0xe0 [ 605.352519][ C0] ? stack_depot_save_flags+0x40/0x900 [ 605.352545][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 605.352563][ C0] ? cfg80211_wiphy_work+0x2df/0x460 [ 605.352582][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 605.352603][ C0] ? worker_thread+0x8a0/0xda0 [ 605.352617][ C0] ? __pfx_get_page_from_freelist+0x10/0x10 [ 605.352636][ C0] ? prepare_alloc_pages+0x213/0x610 [ 605.352657][ C0] __alloc_frozen_pages_noprof+0x181/0x370 [ 605.352676][ C0] ? __pfx___alloc_frozen_pages_noprof+0x10/0x10 [ 605.352696][ C0] ? __lock_acquire+0xab9/0xd20 [ 605.352716][ C0] ? policy_nodemask+0x27c/0x720 [ 605.352730][ C0] ? ___slab_alloc+0x240/0x1480 [ 605.352747][ C0] alloc_pages_mpol+0x232/0x4a0 [ 605.352764][ C0] allocate_slab+0x8a/0x3b0 [ 605.352783][ C0] ___slab_alloc+0xbfc/0x1480 [ 605.352802][ C0] ? __lock_acquire+0xab9/0xd20 [ 605.352819][ C0] ? cfg80211_inform_single_bss_data+0x905/0x1ac0 [ 605.352840][ C0] __kmalloc_noprof+0x305/0x4f0 [ 605.352854][ C0] ? cfg80211_inform_single_bss_data+0x905/0x1ac0 [ 605.352874][ C0] cfg80211_inform_single_bss_data+0x905/0x1ac0 [ 605.352896][ C0] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 605.352926][ C0] ? cfg80211_inform_bss_data+0x1e8/0x3b20 [ 605.352945][ C0] cfg80211_inform_bss_data+0x1fb/0x3b20 [ 605.352974][ C0] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 605.353003][ C0] ? __pfx__ieee802_11_parse_elems_full+0x10/0x10 [ 605.353023][ C0] ? __lock_acquire+0xab9/0xd20 [ 605.353056][ C0] cfg80211_inform_bss_frame_data+0x417/0x7b0 [ 605.353077][ C0] ? ieee80211_bss_info_update+0x2dc/0x9e0 [ 605.353096][ C0] ieee80211_bss_info_update+0x746/0x9e0 [ 605.353116][ C0] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 605.353132][ C0] ? sta_info_get+0x4f/0x2a0 [ 605.353155][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0 [ 605.353174][ C0] ieee80211_ibss_rx_queued_mgmt+0xa36/0x2ae0 [ 605.353196][ C0] ? worker_thread+0x8a0/0xda0 [ 605.353209][ C0] ? ret_from_fork_asm+0x1a/0x30 [ 605.353227][ C0] ? ieee80211_ibss_rx_queued_mgmt+0xf93/0x2ae0 [ 605.353244][ C0] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 605.353265][ C0] ? __lock_acquire+0xab9/0xd20 [ 605.353297][ C0] ieee80211_iface_work+0x806/0xfe0 [ 605.353320][ C0] cfg80211_wiphy_work+0x2df/0x460 [ 605.353340][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 605.353361][ C0] process_scheduled_works+0xae1/0x17b0 [ 605.353392][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 605.353420][ C0] worker_thread+0x8a0/0xda0 [ 605.353435][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 605.353455][ C0] ? __kthread_parkme+0x7b/0x200 [ 605.353474][ C0] kthread+0x70e/0x8a0 [ 605.353491][ C0] ? __pfx_worker_thread+0x10/0x10 [ 605.353505][ C0] ? __pfx_kthread+0x10/0x10 [ 605.353522][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 605.353539][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 605.353555][ C0] ? __pfx_kthread+0x10/0x10 [ 605.353572][ C0] ret_from_fork+0x3f9/0x770 [ 605.353592][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 605.353613][ C0] ? __switch_to_asm+0x39/0x70 [ 605.353627][ C0] ? __switch_to_asm+0x33/0x70 [ 605.353641][ C0] ? __pfx_kthread+0x10/0x10 [ 605.353657][ C0] ret_from_fork_asm+0x1a/0x30 [ 605.353678][ C0] [ 605.354398][ C1] task:syz-executor state:R running task stack:21960 pid:5844 tgid:5844 ppid:5830 task_flags:0x400140 flags:0x00004002 [ 606.451783][ C1] Call Trace: [ 606.455087][ C1] [ 606.458048][ C1] __schedule+0x16f5/0x4d00 [ 606.462599][ C1] ? __lock_acquire+0xab9/0xd20 [ 606.467581][ C1] ? preempt_schedule_common+0x83/0xd0 [ 606.473073][ C1] ? __pfx___schedule+0x10/0x10 [ 606.478008][ C1] ? do_raw_spin_lock+0x121/0x290 [ 606.483076][ C1] ? preempt_schedule+0xae/0xc0 [ 606.488052][ C1] preempt_schedule_common+0x83/0xd0 [ 606.493378][ C1] preempt_schedule+0xae/0xc0 [ 606.498175][ C1] ? __pfx_preempt_schedule+0x10/0x10 [ 606.503588][ C1] preempt_schedule_thunk+0x16/0x30 [ 606.508824][ C1] _raw_spin_unlock+0x3f/0x50 [ 606.513527][ C1] ? copy_pmd_range+0x66f1/0x7000 [ 606.518591][ C1] copy_pmd_range+0x6727/0x7000 [ 606.523470][ C1] ? arch_stack_walk+0xfc/0x150 [ 606.528385][ C1] ? __pfx_copy_pmd_range+0x10/0x10 [ 606.533636][ C1] copy_page_range+0xc46/0x1270 [ 606.538538][ C1] ? __lock_acquire+0xab9/0xd20 [ 606.543622][ C1] ? __pfx_copy_page_range+0x10/0x10 [ 606.548951][ C1] ? up_write+0x1c4/0x420 [ 606.553316][ C1] ? __pfx_vma_interval_tree_augment_rotate+0x10/0x10 [ 606.560582][ C1] dup_mmap+0xf57/0x1ac0 [ 606.564963][ C1] ? __pfx_dup_mmap+0x10/0x10 [ 606.569682][ C1] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 606.575619][ C1] ? mm_init+0xd20/0xf50 [ 606.580449][ C1] copy_mm+0x13c/0x4b0 [ 606.584640][ C1] copy_process+0x1706/0x3c00 [ 606.589360][ C1] ? copy_process+0x97f/0x3c00 [ 606.594171][ C1] ? __pfx_copy_process+0x10/0x10 [ 606.599326][ C1] kernel_clone+0x21e/0x870 [ 606.603953][ C1] ? __pfx_kernel_clone+0x10/0x10 [ 606.609117][ C1] __x64_sys_clone+0x18b/0x1e0 [ 606.613909][ C1] ? count_memcg_event_mm+0x21/0x260 [ 606.619238][ C1] ? __pfx___x64_sys_clone+0x10/0x10 [ 606.624568][ C1] ? do_user_addr_fault+0xc8a/0x1390 [ 606.629908][ C1] ? do_syscall_64+0xbe/0x3b0 [ 606.634617][ C1] do_syscall_64+0xfa/0x3b0 [ 606.639151][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 606.644573][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.650778][ C1] ? clear_bhb_loop+0x60/0xb0 [ 606.655514][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 606.661486][ C1] RIP: 0033:0x7f2153385193 [ 606.665945][ C1] RSP: 002b:00007ffc8d4c1828 EFLAGS: 00000246 ORIG_RAX: 0000000000000038 [ 606.674394][ C1] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f2153385193 [ 606.682575][ C1] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000001200011 [ 606.690669][ C1] RBP: 0000000000000001 R08: 0000000000000000 R09: 0000000000000001 [ 606.698787][ C1] R10: 00005555702f07d0 R11: 0000000000000246 R12: 0000000000000000 [ 606.706941][ C1] R13: 00000000000927c0 R14: 0000000000076521 R15: 00007ffc8d4c19c0 [ 606.715229][ C1] [ 606.718355][ C1] rcu: rcu_preempt kthread starved for 7110 jiffies! g86661 f0x0 RCU_GP_WAIT_FQS(5) ->state=0x0 ->cpu=1 [ 606.729483][ C1] rcu: Unless rcu_preempt kthread gets sufficient CPU time, OOM is now expected behavior. [ 606.739468][ C1] rcu: RCU grace-period kthread stack dump: [ 606.745463][ C1] task:rcu_preempt state:R running task stack:27128 pid:16 tgid:16 ppid:2 task_flags:0x208040 flags:0x00004000 [ 606.758990][ C1] Call Trace: [ 606.762300][ C1] [ 606.765259][ C1] __schedule+0x16f5/0x4d00 [ 606.769809][ C1] ? do_raw_spin_unlock+0x122/0x240 [ 606.775070][ C1] ? schedule+0x165/0x360 [ 606.779524][ C1] ? __lock_acquire+0xab9/0xd20 [ 606.784511][ C1] ? __pfx___schedule+0x10/0x10 [ 606.789414][ C1] ? schedule+0x91/0x360 [ 606.793690][ C1] schedule+0x165/0x360 [ 606.797894][ C1] schedule_timeout+0x12b/0x270 [ 606.802855][ C1] ? __pfx_schedule_timeout+0x10/0x10 [ 606.808342][ C1] ? _raw_spin_unlock_irqrestore+0x85/0x110 [ 606.814610][ C1] ? __pfx_process_timeout+0x10/0x10 [ 606.820103][ C1] ? prepare_to_swait_event+0x341/0x380 [ 606.825687][ C1] rcu_gp_fqs_loop+0x301/0x1540 [ 606.830583][ C1] ? __pfx_rcu_watching_snap_recheck+0x10/0x10 [ 606.836879][ C1] ? __pfx_rcu_gp_fqs_loop+0x10/0x10 [ 606.842193][ C1] ? _raw_spin_unlock_irq+0x2e/0x50 [ 606.847446][ C1] ? finish_swait+0xcd/0x1f0 [ 606.852080][ C1] rcu_gp_kthread+0x99/0x390 [ 606.856810][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 606.862107][ C1] ? __kthread_parkme+0x7b/0x200 [ 606.867085][ C1] ? __kthread_parkme+0x1a1/0x200 [ 606.872148][ C1] kthread+0x70e/0x8a0 [ 606.876251][ C1] ? __pfx_rcu_gp_kthread+0x10/0x10 [ 606.881587][ C1] ? __pfx_kthread+0x10/0x10 [ 606.886296][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 606.891520][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 606.896743][ C1] ? __pfx_kthread+0x10/0x10 [ 606.901363][ C1] ret_from_fork+0x3f9/0x770 [ 606.906000][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 606.911178][ C1] ? __switch_to_asm+0x39/0x70 [ 606.915986][ C1] ? __switch_to_asm+0x33/0x70 [ 606.921142][ C1] ? __pfx_kthread+0x10/0x10 [ 606.925861][ C1] ret_from_fork_asm+0x1a/0x30 [ 606.930843][ C1] [ 606.933885][ C1] rcu: Stack dump where RCU GP kthread last ran: [ 606.940232][ C1] CPU: 1 UID: 0 PID: 18872 Comm: kworker/u8:10 Not tainted 6.15.0-syzkaller-12425-g82cbd06f327f #0 PREEMPT(full) [ 606.952232][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 606.962321][ C1] Workqueue: events_unbound toggle_allocation_gate [ 606.968943][ C1] RIP: 0010:smp_call_function_many_cond+0xf69/0x12d0 [ 606.975656][ C1] Code: 00 45 8b 2f 44 89 ee 83 e6 01 31 ff e8 60 78 0b 00 41 83 e5 01 49 bd 00 00 00 00 00 fc ff df 75 07 e8 0b 74 0b 00 eb 37 f3 90 <43> 0f b6 04 2c 84 c0 75 10 41 f7 07 01 00 00 00 74 1e e8 f0 73 0b [ 606.995287][ C1] RSP: 0018:ffffc90004abf6a0 EFLAGS: 00000293 [ 607.001561][ C1] RAX: ffffffff81b4e7e0 RBX: ffff8880b873cb40 RCX: ffff888030599e00 [ 607.009574][ C1] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 607.017565][ C1] RBP: ffffc90004abf800 R08: ffffffff8fa101f7 R09: 1ffffffff1f4203e [ 607.025566][ C1] R10: dffffc0000000000 R11: fffffbfff1f4203f R12: 1ffff110170c86b5 [ 607.033649][ C1] R13: dffffc0000000000 R14: 0000000000000000 R15: ffff8880b86435a8 [ 607.042298][ C1] FS: 0000000000000000(0000) GS:ffff888125d55000(0000) knlGS:0000000000000000 [ 607.051254][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 607.057858][ C1] CR2: 0000556775498240 CR3: 000000000df38000 CR4: 00000000003526f0 [ 607.066290][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 607.074279][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 607.082275][ C1] Call Trace: [ 607.085610][ C1] [ 607.088611][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 607.095157][ C1] ? perf_event_text_poke+0x13d/0x190 [ 607.100643][ C1] ? kmem_cache_alloc_bulk_noprof+0x148/0x790 [ 607.106739][ C1] ? __pfx_perf_event_text_poke+0x10/0x10 [ 607.112494][ C1] ? preempt_schedule_thunk+0x16/0x30 [ 607.118080][ C1] ? __pfx_do_sync_core+0x10/0x10 [ 607.123213][ C1] on_each_cpu_cond_mask+0x3f/0x80 [ 607.128352][ C1] smp_text_poke_batch_finish+0xb0c/0x1100 [ 607.134280][ C1] ? __pfx_smp_text_poke_batch_finish+0x10/0x10 [ 607.140554][ C1] ? arch_jump_label_transform_queue+0x97/0x110 [ 607.146834][ C1] arch_jump_label_transform_apply+0x1c/0x30 [ 607.152870][ C1] static_key_enable_cpuslocked+0x128/0x250 [ 607.158811][ C1] static_key_enable+0x1a/0x20 [ 607.163617][ C1] toggle_allocation_gate+0xad/0x240 [ 607.168940][ C1] ? __pfx_toggle_allocation_gate+0x10/0x10 [ 607.174863][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 607.180629][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 607.186385][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 607.192142][ C1] process_scheduled_works+0xae1/0x17b0 [ 607.197759][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 607.203825][ C1] worker_thread+0x8a0/0xda0 [ 607.208460][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 607.214826][ C1] ? __kthread_parkme+0x7b/0x200 [ 607.219800][ C1] kthread+0x70e/0x8a0 [ 607.223906][ C1] ? __pfx_worker_thread+0x10/0x10 [ 607.229040][ C1] ? __pfx_kthread+0x10/0x10 [ 607.233657][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 607.239321][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 607.244557][ C1] ? __pfx_kthread+0x10/0x10 [ 607.249266][ C1] ret_from_fork+0x3f9/0x770 [ 607.253977][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 607.259124][ C1] ? __switch_to_asm+0x39/0x70 [ 607.264007][ C1] ? __switch_to_asm+0x33/0x70 [ 607.268827][ C1] ? __pfx_kthread+0x10/0x10 [ 607.273533][ C1] ret_from_fork_asm+0x1a/0x30 [ 607.278428][ C1]