last executing test programs: 4m12.674555058s ago: executing program 3 (id=382): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000340)={0x54, r1, 0x1, 0xfffffffc, 0x0, {0x1e}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3e}, {0xc}, {0xc}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000081}, 0x10) syz_emit_ethernet(0x76, &(0x7f0000000680)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0x40, 0x3a, 0x0, @private2, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0x0, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f07000000000000000000002d56"}}}}}}}, 0x0) 4m12.459862939s ago: executing program 3 (id=386): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x810, r0, 0x0) socket$packet(0x11, 0x3, 0x300) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$inet(r1, &(0x7f0000001580)={0x0, 0x0, 0x0}, 0x20044881) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba02000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd30", 0x10) 4m12.256458809s ago: executing program 3 (id=387): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x30, 0x2, 0x6, 0x101, 0x0, 0x0, {0x0, 0x0, 0x3}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x2, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000300000000000000fe02001085000000070000"], 0x0, 0x0, 0x0, 0x0, 0x100, 0x70, '\x00', 0x0, @fallback=0x30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="300000001d0001000000000004086aa42d"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@newtaction={0x60, 0x30, 0x63a6b35e7882d7fd, 0x70bd27, 0x0, {}, [{0x4c, 0x1, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x5, 0x10000, 0x1, 0xfff, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0xc0f1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000880)=@newqdisc={0x24, 0x24, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xffff, 0x2}, {0xffff, 0xffff}, {0xb, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000000}, 0x843) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r5, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r5, 0x84, 0x23, &(0x7f0000000340)={0x0, 0x5}, 0x8) setsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000140)={r4, @multicast2, @empty}, 0xc) 4m12.015211734s ago: executing program 3 (id=391): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x201, 0x0, 0x0, {0xa}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x60000}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x80}, 0x4020) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x4c, r4, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_SERVICE={0x38, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_SCHED_NAME={0x8, 0x6, 'wlc\x00'}, @IPVS_SVC_ATTR_NETMASK={0x8, 0x9, 0x71}, @IPVS_SVC_ATTR_FWMARK={0x8}, @IPVS_SVC_ATTR_NETMASK={0x8}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_FLAGS={0xc}]}]}, 0x4c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x38, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x2}, @RTA_ENCAP={0x14, 0x16, 0x0, 0x1, @LWTUNNEL_IP_OPTS={0x10, 0x8, 0x0, 0x1, @LWTUNNEL_IP_OPTS_ERSPAN={0xc, 0x3, 0x0, 0x1, @LWTUNNEL_IP_OPT_ERSPAN_VER={0x5, 0x1, 0x2}}}}]}, 0x38}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 4m11.731685847s ago: executing program 3 (id=393): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000018c0)={{r0, 0xffffffffffffffff}, &(0x7f0000001840), &(0x7f0000000100)='%pi6 \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={r1, 0xffffffffffffffff}, 0x4) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x10, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000008000000b7080000000000007b8af8ff00000000b7080000000039000600000000000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x41, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, @void, @value}, 0x94) r4 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) getsockopt$ax25_int(r4, 0x101, 0x7, &(0x7f0000000140), &(0x7f00000002c0)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r3, 0x0, 0xe, 0x0, &(0x7f0000000000)="40f0538ef047b21fb60068305500", 0x0, 0x1200, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4m11.312071304s ago: executing program 3 (id=395): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_stats_latency\x00', r1, 0x0, 0x8001}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, 0x0, 0x0) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000080)={0x9, 0x900, '@2W', 0x0, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r3, 0x0, 0xf}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x557, 0x4) write(r6, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b36598b8cb08591ffc2467faa14eba6144e8129396", 0x28) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071101800000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 3m56.247244753s ago: executing program 32 (id=395): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_int(r0, 0x29, 0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x20, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000140)='rpc_stats_latency\x00', r1, 0x0, 0x8001}, 0x18) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, 0x0, 0x0) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000080)={0x9, 0x900, '@2W', 0x0, 0x1}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r3, 0x0, 0xf}, 0x18) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r4, &(0x7f0000000200)={0xa, 0x4e20, 0x0, @empty, 0x3}, 0x1c) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000000)=0x557, 0x4) write(r6, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b36598b8cb08591ffc2467faa14eba6144e8129396", 0x28) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071101800000000001d400500000000004704000001ed00000f030000000000001d44000000000000620a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b45294fbba468df3e1b583cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb8791c3c"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 2m48.567236985s ago: executing program 2 (id=1075): r0 = socket$inet6(0xa, 0x80002, 0x0) sendto$inet6(r0, 0x0, 0x0, 0x8c844, &(0x7f0000000700)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @local}, 0x7}, 0x1c) (async) setsockopt$inet6_udp_int(r0, 0x11, 0x1, &(0x7f0000000080), 0x4) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r3, r4, 0x5, 0x0, 0x0, @void, @value}, 0x10) (async) r5 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, 0x0) (async) recvmsg(r2, &(0x7f0000000840)={&(0x7f00000005c0)=@pptp={0x18, 0x2, {0x0, @initdev}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000140)=""/40, 0x28}, {&(0x7f0000000300)=""/59, 0x3b}, {&(0x7f00000009c0)=""/249, 0xf9}], 0x3}, 0x10000) recvmsg$unix(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140), 0x0, &(0x7f0000000280)=[@cred={{0x1c}}, @rights={{0x10}}, @cred={{0x1c}}], 0x50}, 0x10000) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611948000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 32) r7 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_VENDOR(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="bd838681401cc190000067f0ff0008000300", @ANYRES32=r8, @ANYBLOB="0800c300741300000800c400"], 0x30}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)=r2}, 0x20) (async) sendmsg$inet(r1, &(0x7f0000000980)={0x0, 0x6000, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0xa00120}], 0x1}, 0x3) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x5, 0xf, &(0x7f0000000340)=ANY=[], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @fallback=0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000001300), 0x4) connect$inet6(r10, &(0x7f0000001380)={0xa, 0x4e22, 0x1000, @private0, 0x9b}, 0x1c) (async) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async, rerun: 32) r11 = socket$kcm(0x2, 0xf, 0x2) (rerun: 32) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) write$tun(r9, &(0x7f00000000c0)=ANY=[@ANYRESDEC=0x0, @ANYRESDEC=r9, @ANYRES8=r11, @ANYRESDEC=r9, @ANYRES64=0x0, @ANYRESDEC=r9], 0xfdef) (rerun: 64) 2m48.342246438s ago: executing program 2 (id=1077): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r1 = socket$inet_udplite(0x2, 0x2, 0x88) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'dummy0\x00', &(0x7f0000000000)=@ethtool_cmd={0x8, 0x6, 0x1, 0x389, 0x8, 0x2, 0x4, 0x6, 0x0, 0x1, 0x5, 0x5, 0xfffb, 0x8, 0x5, 0x0, [0xe, 0xff]}}) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x41, 0x3, 0x228, 0x0, 0xa, 0x9a000000, 0xf8, 0x0, 0x190, 0x1f0, 0x1f0, 0x190, 0x1f0, 0x3, 0x0, {[{{@ip={@multicast1, @remote, 0x0, 0x0, 'veth0\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xd0, 0xf8, 0x0, {0x0, 0xffffffffa0028000}, [@common=@inet=@tcp={{0x30}}, @common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2, 0xf}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @broadcast, 0x0, 0x0, 'veth0_vlan\x00', 'ip6gretap0\x00'}, 0x0, 0x70, 0x98}, @common=@inet=@SET1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x288) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r4, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r3, 0x84, 0x75, &(0x7f0000000180)={r5, 0x54b}, 0x8) bind$bt_hci(r0, &(0x7f0000000000)={0x2}, 0x62) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x70bd25, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x60000}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}, @IFLA_ADDRESS={0xa}]}, 0x40}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000004c0)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x40e}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="40000000090601020000000000000000000000000900020073797a31000000000500010007000000180007800c00018008000140fffffffe050003000c"], 0x40}, 0x1, 0x0, 0x0, 0x10000047}, 0x4000084) 2m46.566248863s ago: executing program 2 (id=1081): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000a00)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(camellia)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18, 0x48814}, 0x14000012) (async) recvmmsg$unix(r2, &(0x7f00000029c0)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000002a00)=""/4100, 0x1004}], 0x1}}], 0x1, 0x10000, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) readv(r0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/105, 0x69}], 0x1) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) 2m44.792159337s ago: executing program 2 (id=1086): syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0xa, 0xfff1}}}, 0x24}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x20000000) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000e40)=@newtfilter={0x34, 0x2c, 0x601, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0xffe0}, {}, {0xc, 0x1}}, [@filter_kind_options=@f_basic={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x48080}, 0x24000840) (async, rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000002c00000018000180140002007665746830"], 0x2c}}, 0x0) (async) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xf8}], 0x1}, 0xbf82) sendmsg$tipc(r7, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}}, 0x4044004) recvmmsg(r8, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x4008101}, {{0x0, 0x0, 0x0}, 0xfffffff8}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001a00)=[{&(0x7f00000000c0)=""/177, 0xb1}, {&(0x7f00000004c0)=""/262, 0x106}, {&(0x7f0000000000)=""/67, 0x43}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000003bc0)=""/4109, 0x100d}, {&(0x7f0000000840)=""/227, 0xe3}], 0x6}, 0x80000000}], 0x4, 0x0, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000000)={@remote, 0x0, 0x0, 0x2, 0x3, 0xf7}, 0x20) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r10, 0x29, 0x20, &(0x7f0000000380)={@private1={0xfc, 0x1, '\x00', 0x1}, 0x7, 0x1, 0x2, 0x2, 0x7ff, 0xc}, 0x20) (async) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="7a00000304000000003a00000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32, @ANYRES16=r10, @ANYRES32=r9], 0x78}}, 0x0) 2m43.573502737s ago: executing program 5 (id=1099): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) connect$phonet_pipe(r1, &(0x7f0000000140)={0x23, 0x68, 0x2, 0xfc}, 0x10) r2 = socket(0xa, 0x3, 0x4) ioctl$sock_SIOCBRDELBR(r2, 0x89a2, &(0x7f0000000000)='bridge0\x00') ioctl$sock_netdev_private(r1, 0x89fc, &(0x7f0000000000)="c976a1ebc460965423e04eac02509736ee77785f7ff183a740f99a4d44da166d8611b255fe04b95764d9c6512421384dcca49ff09abf099b1e0e69e12ada988665185a807856f7d4cd3c86c90de6217dc70d1525fedadb993426b7da56f5dd3a540c2419a4fb17ad4c3f8a4e3186291256f94dcd708cc1652d94646d38807ff7aecda6cac3aa9c7bdcfc5f58f36a668ba017263662fb6d06f7cd91b86bfcb3aa5592dfd8a9b5dcec5810fcedef3721bd22c1ad4f0169ed75425c6f550f19ad3f59e906fa42c0ce70ab61ff71e6ab544c5c6085546e0b76ccd72406a73a592eba2fed60b6b413fa041528f4ef955194e8fcddde5dec2f28d804") setsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x10, &(0x7f0000000100)=0x40000, 0x4) 2m43.197107938s ago: executing program 5 (id=1102): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x16, 0xe, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x8000, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xff03) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r0, 0x0, 0xe, 0x0, &(0x7f0000000080)="05804ae0ff1f0006d758e60803dc", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m43.096644403s ago: executing program 5 (id=1103): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x3a) getsockopt$MRT6(r0, 0x29, 0xce, 0x0, &(0x7f0000000040)) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r2, 0x29, 0xca, 0x0, 0x0) setsockopt$MRT6_FLUSH(r2, 0x29, 0xd4, &(0x7f0000000080)=0x6, 0x4) sendmsg(r0, &(0x7f0000000400)={&(0x7f00000000c0)=@generic={0x18, "4c3373e05a68facc428f7c86a95a3c00c5dcbecc93eb4c1d22bd7fc1fb7da2cadc4925c1cdad4c3036b77f4d6627e1dffeecd2351a39883fcde6b5c7cdf38b44d3d3f3de7863a4a790c2187d84e194ba3b8cd32d2db7899fe5046a7367bea153b58dbc6c8ea6e81e7ca6ba26bc67d2e758dabf0df7546fea51243851d42d"}, 0x80, &(0x7f00000001c0)=[{&(0x7f0000000140)="610603c1020c2b490e847f057df05e2f43ebbe36c69f86a1c365d9051e5f2c24b4876c03c4156cba363d3c6bd7c362b3d4a786813e7767caf514675498898cf8cd89b7f5b4d1c2d9959273e87ee1db4e825fc00711e08b0cc6b9", 0x5a}, {&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000000240)="2f44dfcab4b78b36cdf3667f58262013cb0ae716df3482b4e7e1ef42c9be66f0f49829c97786721bdfa1a03c811f6cb0bb1c25b855c939522dd35490f2581d10dbc773d1e7361bfb3a08609c87cd96a35b6b88806134e9fc4a60b583a9c6c56177d084a295d498fbc33cd28b69d5ad8ad3010dad3a38696108d1369271dcf1d339644ce7018d3c28af", 0x89}], 0x3, &(0x7f0000000300)=[{0xe0, 0x10d, 0xb, "58c697eadeb6831699410d4dd97b531d96389b09470d4199200ca664cfb2e46eb3dd9380b5af7b5d4a6b0748dc2ff597fe3a0e942a733e1cb2943821cb2bdf6c81305d9c14bec958d51600550097365b5ce1e92934c7cdd94ee29555dedfbb06da30333e3feab69e3d68f91956c3a991ab50a5acd25668f4017b2a1196dd98b69490e6d744c822d77c5cc7fc35e344b462a693bb680deeaa8857f092586059d684ed625b9d142e77edc4b7958d1d89ade0bec9d0116526b3a4378783cf3ef3e184245c5a7a74562b1b51fa6517"}, {0x20, 0x0, 0x4, "fb6f3b73981d2d3f91278d6363325533"}], 0x100}, 0x4000) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000600)={{{@in6=@mcast2, @in6=@private1, 0x4e24, 0x0, 0x4e24, 0x6, 0xa, 0x20, 0x130, 0x33, 0x0, 0xee01}, {0x7, 0xfffffffffffffffc, 0x100, 0xfffffffffffffffa, 0x0, 0x7fff, 0xfc, 0x6}, {0x5, 0x6, 0x5, 0xb5}, 0x3, 0x0, 0x0, 0x1, 0x2, 0x3}, {{@in6=@mcast2, 0x4d2, 0x6c}, 0xa, @in=@broadcast, 0x3505, 0x4, 0x0, 0x9d, 0x2, 0x9, 0xc}}, 0xe8) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000080)=0x4) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$sock_cred(r3, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0}, &(0x7f0000000580)=0xc) sendmsg$nl_xfrm(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@dev={0xac, 0x14, 0x14, 0x1d}, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0xa, 0x180, 0x0, 0x0, 0x0, r4}, {0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3}, {0x0, 0x0, 0x2}}}, 0xb8}, 0x1, 0x0, 0x0, 0x20000888}, 0x0) 2m42.945656594s ago: executing program 5 (id=1105): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r0, 0xf, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) (async, rerun: 32) r5 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r6, 0x5452, &(0x7f0000000180)=0x401) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) (async) write$tun(r7, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r7, 0x0) (async) ioctl$sock_SIOCSPGRP(r6, 0x8902, &(0x7f0000000000)=0xffffffffffffffff) connect$inet(r6, &(0x7f0000000200)={0x2, 0x4e20, @loopback}, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)={0x2c, r8, 0x1, 0x4, 0x100, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6, 0x48, 0x5a}, @NL80211_ATTR_TDLS_ACTION={0x5, 0x88, 0x7}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0xa0, 0x30, 0x51b, 0x0, 0x0, {}, [{0x8c, 0x1, [@m_skbmod={0x5c, 0x1, 0x0, 0x0, {{0xb}, {0x30, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}]}, {0x4, 0x14}, {0xc}, {0xc, 0x6}}}, @m_ct={0x2c, 0x2, 0x0, 0x0, {{0xffffff69}, {0x4}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0xa0}}, 0x0) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r9) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) (async, rerun: 64) r12 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000026c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34665c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbccbddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e712a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd13f4cec49669e443dcb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ef8dba2f23b01a9ae44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af40000000000000005f58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef07000000000000006da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405a07feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09c0e5a3bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea10d3cfb41b92ecbb422a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f74562adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b4412331d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225a53072423b907c6682f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd100fcffff007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711c6529ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a22c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29008000000000000005ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc030ea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efd936b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800001f00000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351b9332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d9890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b0783883ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a138d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fce43d8c53a8031e64026e0d36b6401064c49a729f11ab377f7132c5232bb80195dd5d43d29646a9378eea0761b7ed9d2172e33ed87c7413c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828b07f1dc7df9c8e5da22dfb9dacbf5529e4e994128d835f85465173ea7bbcc519a0c9798ce8b1b07567e3e07169c8c3e4da8bf725c050000000000000000000000000000000000000000004775abdf0c62728eb55a9e2849a1ce05bed60dfe4cc9fa43f9684297c02382c0a35829be7a86305792a9d2e80ca9e8fc50f31f6e0fa810303da03d8b74b42c1ebaf16bb343256405a3a07229a54de09a97b269cd29e8b2f0b0d46c51a6a93eec37f4bc6e29a8e19120ae050ab682662e9b2cc3263a4aba62b63ca9123a53c0f4bf3c4463b8144c89bf058a0af0ae9fc2b7cdfc4817703e267cddc193637d7fd97646090da37093657643daae3840c7f5c10f93524f7ae4791ec6e9d9722e5f670ccb358e051a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async, rerun: 64) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000003c0)={0x0, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000480)={@cgroup=r12, r12, 0x2f, 0x20, 0x4, @void, @void, @void, @value=r13}, 0x20) (async) sendmsg$NL80211_CMD_SET_NOACK_MAP(r9, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000300)={0x1c, r10, 0x1, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r11}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40) sendmsg$NL80211_CMD_AUTHENTICATE(r9, &(0x7f0000000400)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x34, r8, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0xa}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x116}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}]]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4004054) (async) sendmsg$netlink(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180100002e00010000000000fcdbdf250801f2800c00180008ac0f0000000000140001"], 0x118}], 0x1, 0x0, 0x0, 0x1}, 0x0) (async, rerun: 32) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=ANY=[@ANYBLOB="3c0000001000010800"/20, @ANYRES32=0x0, @ANYBLOB="312000000000000014002b8008000100", @ANYRES32=r0, @ANYBLOB="08f857998107cea87df2cf4dd1a4c35b28000300"], 0x3c}, 0x1, 0x0, 0x0, 0x20048054}, 0x0) (rerun: 32) 2m42.231011279s ago: executing program 5 (id=1108): bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xb, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x38}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1b, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x10, @void, @value}, 0x94) (async) socket$pppoe(0x18, 0x1, 0x0) (async) r0 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r0, &(0x7f0000000100)={0x18, 0x0, {0x11ff, @broadcast, 'bond_slave_1\x00'}}, 0x1e) (async) r1 = socket$kcm(0x10, 0x2, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000040)="2e00000010008108040f80ecdb4cb92e0a480e000f000000e8bd6efb250314000e000100240248ff050005001200", 0x2e}], 0x1}, 0x40880) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000600)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) (async) connect$pppoe(r0, &(0x7f00000016c0)={0x18, 0x0, {0x3, @random="3c38448f3736", 'macvlan1\x00'}}, 0x1e) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x2c0, 0x0, 0x25, 0x148, 0x108, 0x60, 0x228, 0x2a8, 0x2a8, 0x228, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0xc0, 0x108, 0x0, {0x200003ae, 0x7f00}, [@inet=@rpfilter={{0x28}, {0x7}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x80, 'syz0\x00', {0xfffffffffffffffd}}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@addrtype={{0x30}, {0x180, 0xe00}}, @common=@unspec=@statistic={{0x38}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x8, 'syz0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x320) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xe, 0x16, &(0x7f0000001900)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x0, 0xf, &(0x7f00000002c0)=@ringbuf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r5, r4, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405000000000000611087000000000063013800000000009500098300000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xbe, &(0x7f000000cf3d)=""/190, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, r5, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m42.000544421s ago: executing program 5 (id=1109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r2, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 2m35.623974876s ago: executing program 2 (id=1118): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xa9, "2cfbaed716c2ccf73e9fed5c298de5420a6a3ac6231dd9673ffc0b791f4bcd9744cbc1f2442096ad20756ba1736cfe5e3196205d995a444c6b5f9eebaf74c5f9f627c242bbdeea3049cf2ce94aa2d3e26fbac669bb263da0ab74bc64864a20a1105d2f53a53e04cf1cf46d0eeebb968fe589d53481315dec118aad20dfeae4a1b8672f7b159a7f27b7e096c5133de14f5d0748bf923e66bf673f598a75a872e9a1a2762a8d206b7751"}, &(0x7f00000000c0)=0xb1) setsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000100)={r1, 0x7, 0x1, 0x3, 0xbe, 0x80}, 0x14) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f0000000140)={r1, 0x86, "ea480a7e15a5b81c78658f939e2ad7533affec988feb83293fac58369fa544fd41dde146ee5cf2136fb975480c92c5dcd587342477fe6da4570958b9d209d089a0082940a1348f2fddd8a742a84b56aed1d1e6032ff11fdd6ccb040ac2ed135b08ccbdf2df83078f47c865fb84db95c7279f1b0275c2c89dc28c107541ae95571ad49e6cc6fe"}, &(0x7f0000000200)=0x8e) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000240)=0xffffff01, 0x4) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x1d, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x800}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@generic={0xff, 0x2, 0xd, 0x9, 0xfffffffc}, @printk={@llx}, @tail_call], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000380)='GPL\x00', 0xfffffffd, 0x0, 0x0, 0x40f00, 0x21, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0xa, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000400)=[0x1, 0xffffffffffffffff], &(0x7f0000000440)=[{0x3, 0x2, 0x6, 0x6}, {0x4, 0x2, 0x3, 0x9}, {0x0, 0x1, 0x4, 0x6}, {0x3, 0x1, 0x4, 0x1}], 0x10, 0x2, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000540)=r3, 0x4) setsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000580)=0x400, 0x4) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGFLAGS(r5, 0x8004745a, &(0x7f00000005c0)) writev(r4, &(0x7f00000008c0)=[{&(0x7f0000000600)="d8d321794c28f3c190891e0c2003bd0c9ac4a4b59ca30d5208f1e4e6cf072af4e7e97fe4294fa7fad1273ce76ca9208f136f732ce0f8b3fd95d340fa74b096dfc6dc60ac851fca86a90f28bc8f263fd01b82777c32c0c5be68bdf8ba530d7d3b1e5f8e4c84724f345b4ed235b376cb0989ec58a1715dbe6a9f4581cfdda125291a732e71bd787235e552d03e09a284f7da2aa7bc466eaca5ebd6bd086954586294b8c782a063d9fb6541616fc12511", 0xaf}, {&(0x7f00000006c0)="d2e8659d332809c501f8d5d0472945596437cda9918927bcc86381155994cec336acc2a9486ff283d2d75df76ceef64a4c5871389ff3347c156329180dc0baa2eee64b3855066790576211751f4e2c34cf13e30632eed4733c23f740482c7600723c7cc2ebbc5f52162e8161b15364b499432163a25cb3c5d4c10ed06d0e2e0cd50963737628dfb98da08bf80a61f2c0758c6605aebb191d23ae33f2f348a3a6ce4354db50b5b907bb6680a5994132164030593cf98aba04ea2d02d93b9f514862a053d3d0ba0cbb705ab5322c0b29108e4c", 0xd2}, {&(0x7f00000007c0)="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", 0xfd}], 0x3) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), r6) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000980)={'erspan0\x00', 0x0}) getpeername$packet(r6, &(0x7f00000009c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000a00)=0x14) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000b00)={'syztnl2\x00', &(0x7f0000000a40)={'gre0\x00', 0x0, 0x7, 0x7, 0x0, 0x6, {{0x27, 0x4, 0x2, 0x33, 0x9c, 0x64, 0x0, 0x5, 0x2f, 0x0, @private=0xa010102, @rand_addr=0x64010100, {[@cipso={0x86, 0x10, 0x3, [{0x0, 0xa, "1a3254d5d23261ee"}]}, @timestamp_addr={0x44, 0x2c, 0x20, 0x1, 0x8, [{@multicast1, 0x7fff}, {@empty, 0x2}, {@multicast2, 0x1}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x7f}, {@private=0xa010101, 0x2}]}, @noop, @timestamp_prespec={0x44, 0x1c, 0x2c, 0x3, 0xd, [{@multicast2, 0x100}, {@empty, 0xe0}, {@rand_addr=0x64010102, 0x6}]}, @noop, @timestamp={0x44, 0x10, 0x2b, 0x0, 0x9, [0x6, 0x1ff, 0x2]}, @rr={0x7, 0x1b, 0x5b, [@local, @rand_addr=0x64010102, @remote, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c80)={'gre0\x00', &(0x7f0000000b40)={'gre0\x00', 0x0, 0x8, 0x7800, 0xf9, 0x1, {{0x39, 0x4, 0x2, 0x0, 0xe4, 0x65, 0x0, 0x5, 0x2f, 0x0, @local, @empty, {[@generic={0x7, 0xe, "00be50e924b8fdf8376974e7"}, @timestamp_prespec={0x44, 0x2c, 0x31, 0x3, 0x3, [{@broadcast, 0x4}, {@loopback, 0x2}, {@private=0xa010100}, {@broadcast, 0x3132}, {@rand_addr=0x64010101, 0x40000000}]}, @timestamp_prespec={0x44, 0x4c, 0xed, 0x3, 0x1, [{@empty, 0x1}, {@local}, {@multicast2, 0x8}, {@loopback, 0x3}, {@rand_addr=0x64010102, 0x8}, {@dev={0xac, 0x14, 0x14, 0x2e}, 0x2}, {@rand_addr=0x64010100, 0x7}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x2}, {@loopback, 0x7ff}]}, @noop, @timestamp={0x44, 0x8, 0x78, 0x0, 0x3, [0x9]}, @lsrr={0x83, 0x17, 0x8d, [@loopback, @multicast1, @broadcast, @loopback, @broadcast]}, @end, @end, @ssrr={0x89, 0x1f, 0x88, [@remote, @private=0xa010102, @multicast2, @rand_addr=0x64010101, @empty, @local, @rand_addr=0x64010100]}, @ssrr={0x89, 0x7, 0x91, [@empty]}]}}}}}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000cc0)={'bond0\x00', 0x0}) sendmsg$ETHTOOL_MSG_DEBUG_SET(r7, &(0x7f0000000f00)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000d00)={0x1b0, r8, 0x300, 0x70bd29, 0x25dfdbff, {}, [@ETHTOOL_A_DEBUG_HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}]}, @ETHTOOL_A_DEBUG_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_DEBUG_HEADER={0x84, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netdevsim0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r13}]}, @ETHTOOL_A_DEBUG_MSGMASK={0xa8, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x99, 0x5, "ab9c6225f18198528940ef5766e650cabf2d32746c627f9429cf93b47fc259a72f56f2400f6a5c5e9e8f70da7771c96782ccebdd7b79289e1a220b578d181469cec5a960b9dea2f6ed5cb7db1d6f74846e8a6a00ad571e453abdc22c02bb9f4be9ccac1ff9484a650789ba1b3d2b9bf60fb1de56710866da5c3452495eb77b04856f355be394a290e040905cf4950260d7bad2f669"}]}]}, 0x1b0}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r5, 0xc020f509, &(0x7f0000000f40)={r5, 0x81, 0xb, 0x2}) setsockopt$inet_sctp6_SCTP_RTOINFO(r14, 0x84, 0x0, &(0x7f0000000f80)={r2, 0x40, 0x9ed6, 0x6}, 0x10) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r14, &(0x7f0000001140)={&(0x7f0000000fc0)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000001100)={&(0x7f0000001040)={0xbc, r15, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x3, 0x33}}}}, [@NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0x94, 0x3, 0x0, 0x1, [{0x48, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x43, 0x2, "7443e544b37c367099c85bee1f7fc42347ef601de7bd1aefc82fcf481ad8295193cdb288996eca5702875e306e432bcb546f23c95055a16d5309402fdbafde"}}, {0x48, 0x0, 0x0, 0x1, @NL80211_PKTPAT_PATTERN={0x41, 0x2, "8e8d92b84b5fbb474c05fa2d3fb264ed78a972b9ac2660abcedc08469be1042bced21351ea0bdd7a5a150e280daefefb96dba97dfd844afc3fe083c6ce"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0xbc}}, 0x4) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, &(0x7f0000001180)={r2, @in={{0x2, 0x4e24, @remote}}, 0x10, 0x6, 0x2, 0x6, 0x12, 0x8, 0x6}, &(0x7f0000001240)=0x9c) bpf$MAP_CREATE(0x0, &(0x7f0000001280)=@bloom_filter={0x1e, 0x800, 0x5, 0x88, 0x10140, r14, 0x1, '\x00', r13, r14, 0x1, 0x3, 0x2, 0xb, @void, @value, @value=r14}, 0x50) r16 = syz_genetlink_get_family_id$fou(&(0x7f0000001340), r14) sendmsg$FOU_CMD_GET(r7, &(0x7f0000001400)={&(0x7f0000001300)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x2c, r16, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V4={0x8, 0x8, @initdev={0xac, 0x1e, 0x0, 0x0}}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_AF={0x5, 0x2, 0x2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4c001}, 0x0) ioctl$SIOCAX25DELFWD(r14, 0x89eb, &(0x7f0000001440)={@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null}) 2m35.504463734s ago: executing program 2 (id=1119): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003f00)={0x18, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r3, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 2m26.294342613s ago: executing program 33 (id=1109): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000001700)={&(0x7f0000001580)=ANY=[@ANYBLOB="14000000250001002c040000ffdbdf2507"], 0x14}}, 0x24000100) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000840)={0x1c, r2, 0x1, 0x0, 0x25dfdbfd, {0x54}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x3, 0x3}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8010}, 0x8000) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x14, r2, 0x1, 0x0, 0x25cfdbfc, {0x54}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40010) 2m20.429493202s ago: executing program 34 (id=1119): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000003f00)={0x18, 0x3e, 0x107, 0xfffffffe, 0x0, {0x1, 0x7c}, [@nested={0x4, 0x142}]}, 0x18}, 0x1, 0x0, 0x0, 0x4048011}, 0xc000) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r3, 0x0, 0xb9b}, 0x18) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 1m53.137189397s ago: executing program 0 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061105f000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f00000002c0)={0x2, 0x4}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf253a00000008000300", @ANYRES32=r3, @ANYBLOB="04005b00e2fae544806e701ea64145d29f84ca10ed484fa7e9f3b57d01c179c5d59acc025891a29b348244ae1d34a4f8e8a10650cde08ac66da51548f79f8eab0578659000"/92], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0xf}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x8001) 1m51.636500877s ago: executing program 4 (id=1117): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x38, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xb}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0x38}}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x1, 0x9, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x38, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xb}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0x38}}, 0x80) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x1, 0x9, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) 1m50.613799944s ago: executing program 1 (id=875): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x810, r0, 0x0) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x810, r0, 0x0) (async) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) 1m37.748541046s ago: executing program 6 (id=1268): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = getpid() sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)={0x1c, 0x44, 0x107, 0xfffffffc, 0x0, {0x1, 0x7c}, [@typed={0x8, 0x1, 0x0, 0x0, @pid=r2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in={0x2, 0x4e23, @empty}, @in6={0xa, 0x4e24, 0x1, @initdev={0xfe, 0x88, '\x00', 0x3, 0x0}, 0xf}], 0x2c) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$AUTOFS_IOC_FAIL(r3, 0x9361, 0x3ff) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x76, 0x0, &(0x7f0000000040)) 1m37.35283152s ago: executing program 6 (id=1269): r0 = socket$inet(0x2, 0x802, 0x1) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth1_to_hsr\x00'}, 0x4}) 1m31.262549178s ago: executing program 1 (id=875): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x810, r0, 0x0) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x810, r0, 0x0) (async) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) 1m26.715993221s ago: executing program 4 (id=1117): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x38, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xb}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0x38}}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x1, 0x9, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x38, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xb}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0x38}}, 0x80) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x1, 0x9, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) 1m25.827150117s ago: executing program 0 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061105f000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f00000002c0)={0x2, 0x4}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf253a00000008000300", @ANYRES32=r3, @ANYBLOB="04005b00e2fae544806e701ea64145d29f84ca10ed484fa7e9f3b57d01c179c5d59acc025891a29b348244ae1d34a4f8e8a10650cde08ac66da51548f79f8eab0578659000"/92], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0xf}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x8001) 1m14.781597665s ago: executing program 6 (id=1269): r0 = socket$inet(0x2, 0x802, 0x1) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth1_to_hsr\x00'}, 0x4}) 1m9.241896328s ago: executing program 1 (id=875): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x810, r0, 0x0) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x810, r0, 0x0) (async) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) 1m7.966722135s ago: executing program 4 (id=1117): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x38, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xb}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0x38}}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x1, 0x9, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x38, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xb}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0x38}}, 0x80) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x1, 0x9, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) 1m3.228043301s ago: executing program 0 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061105f000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f00000002c0)={0x2, 0x4}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf253a00000008000300", @ANYRES32=r3, @ANYBLOB="04005b00e2fae544806e701ea64145d29f84ca10ed484fa7e9f3b57d01c179c5d59acc025891a29b348244ae1d34a4f8e8a10650cde08ac66da51548f79f8eab0578659000"/92], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0xf}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x8001) 52.409280753s ago: executing program 6 (id=1269): r0 = socket$inet(0x2, 0x802, 0x1) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth1_to_hsr\x00'}, 0x4}) 46.537351485s ago: executing program 1 (id=875): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x810, r0, 0x0) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x810, r0, 0x0) (async) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) 45.291142639s ago: executing program 4 (id=1117): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x38, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xb}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0x38}}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x1, 0x9, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x38, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xb}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0x38}}, 0x80) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x1, 0x9, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) 43.670468775s ago: executing program 0 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061105f000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f00000002c0)={0x2, 0x4}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf253a00000008000300", @ANYRES32=r3, @ANYBLOB="04005b00e2fae544806e701ea64145d29f84ca10ed484fa7e9f3b57d01c179c5d59acc025891a29b348244ae1d34a4f8e8a10650cde08ac66da51548f79f8eab0578659000"/92], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0xf}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x8001) 28.458457576s ago: executing program 6 (id=1269): r0 = socket$inet(0x2, 0x802, 0x1) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth1_to_hsr\x00'}, 0x4}) 26.133717369s ago: executing program 1 (id=875): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x810, r0, 0x0) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x810, r0, 0x0) (async) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) 21.875710459s ago: executing program 4 (id=1117): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x38, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xb}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0x38}}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x1, 0x9, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x38, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xb}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0x38}}, 0x80) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x1, 0x9, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) 20.542452682s ago: executing program 0 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061105f000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f00000002c0)={0x2, 0x4}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf253a00000008000300", @ANYRES32=r3, @ANYBLOB="04005b00e2fae544806e701ea64145d29f84ca10ed484fa7e9f3b57d01c179c5d59acc025891a29b348244ae1d34a4f8e8a10650cde08ac66da51548f79f8eab0578659000"/92], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0xf}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x8001) 6.969596038s ago: executing program 6 (id=1269): r0 = socket$inet(0x2, 0x802, 0x1) write(r0, &(0x7f0000000080)="08008edf773c8000", 0xfd) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r1, 0x8983, &(0x7f0000000000)={0x8, 'veth0\x00', {'veth1_to_hsr\x00'}, 0x4}) 4.592490755s ago: executing program 1 (id=875): r0 = socket$xdp(0x2c, 0x3, 0x0) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x810, r0, 0x0) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) mmap$xdp(&(0x7f000042a000/0x800000)=nil, 0x800000, 0x0, 0x810, r0, 0x0) (async) mmap$xdp(&(0x7f0000791000/0x4000)=nil, 0x4000, 0x0, 0x4188031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) (async) 2.607072174s ago: executing program 7 (id=1460): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x9, 0x400, 0x8001, 0x1, 0x3, 0x1c, 0x4}}]}}]}, 0x148}}, 0x0) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, &(0x7f0000000080)) r4 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) close(r4) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00'}) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)=@newqdisc={0x148, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_STAB={0x104, 0x2, "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"}, @TCA_RED_PARMS={0x14, 0x1, {0x9, 0x400, 0x8001, 0x1, 0x3, 0x1c, 0x4}}]}}]}, 0x148}}, 0x0) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) socket$l2tp(0x2, 0x2, 0x73) (async) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x40, &(0x7f0000000000)=0x4, 0x4) (async) getsockopt$SO_TIMESTAMP(r3, 0x1, 0x23, 0x0, &(0x7f0000000080)) (async) syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) (async) close(r4) (async) 2.355461818s ago: executing program 7 (id=1461): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x0, 0xa888, 0x0, 0x5000000}}]}}]}, 0x48}}, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080080000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) splice(r3, 0x0, r2, 0x0, 0x10000008ebc, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000f00)={0x1f, 0xb, &(0x7f0000000680)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r2}}, @call={0x85, 0x0, 0x0, 0x60}, @ldst={0x3, 0x2, 0x2, 0x9, 0x0, 0x18}, @map_idx_val={0x18, 0x9, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x8, 0x1, 0x0, r1}], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1d, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0000000000000000280012800a00010063616e", @ANYRES32, @ANYBLOB="480000001000810500"/20], 0x48}}, 0x0) socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x18, 0x8, 0x43, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000140)={r4, &(0x7f0000001240), 0x0}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r6, 0x0, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x10000, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000400)={'dvmrp0\x00', @remote}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'ipvlan1\x00', 0x0}) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), r0) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r11 = accept4(r10, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r11, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={0x0, 0x12f4}}, 0x0) recvmsg$unix(r11, &(0x7f0000000840)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000200)=""/6, 0x6}], 0x1}, 0x2000) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000540)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000500)={&(0x7f0000000fc0)={0x1288, r9, 0x400, 0x70bd2a, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_IE={0x11b9, 0x2a, [@measure_req={0x26, 0x1003, {0x6b, 0x2e, 0xfc, "ce9d10c2c2493ef665bb0ff0e8b14ab6623835ccd4a5c98f0b87e07e52b1483564fbd4715b1ab49f63dd498494663829d28cbe205a403d85c65c4a5d78d9415b8a4f44c10d5f4dfa1f4aafe34477e7b1ba33453327da23a1f6cff5005074927588d76d89ab5e3c091506881e6974fbbc43ae9a7f5d8f6aac60a1e71f375953cb575a82071532c801c43ebafa4ab69b765074c7422d5114f0ab59442161a782856fd1fa58d0bf2b5c7f04f72d993ee25c582f3c38348538fd63be9b0429f3e1e545a7ee4d8196c26845efadfca6d433fe5704537436f6100baa3e96bb4cb64aa6e085d14238427b125a6a5f755ec216de3c8a54d29a3ef20b26a24e2ac015e714c875017c194c7895a6dab3520efcdc80ba3f1bb2094d66d19533888bfda95a13326405b0c4a8057f0e35ea8374244d3acdab3425b450d40f6bda29a54e5b3e5f6934f01d23c67d86c3fbea9651b9e8d0de0153dffbd027e1ce23771a921acc123007702f5ce95ee775c6ab823662497105059efe2502df3a61fd0f1737db5633aeb130de2621dff236c4c7986dadf80712022edfdddc5623776f9f6fc53d3e038893389511a55a69f156ff7a549287e0ffaccf2900e61a23f25cdac4a8bf8577066af405a0bf45c6106fe6f4b795f07a5f06da8bd761550cf96219c978c82bd7e3ab0d99d3b9b72ee0d28f8530500b35460979696011408bc5e89e8927f841b6a55d229fb8234ee1d74c42c4f6fabf97860bb06ea2785b44c4aa5701062507ad65bd1b596e6cfb3323a4e09c6546c272440c17b615dcc1721ac895485c9aae833265e1b0ce2cd95bb9b53d2f14b299c34496079a44dbad8bd5785979d1b82ab76defc4152839c68d9ddd135fccdcd02e4b66d444d426786a6e5545fd337f98ae6cd977fa19d9a24217aa81a47e6f0428c06dd18b1f64a7a54f80214071af09835657c33c3e2ad6766d2653e4e7aceef836cec65f6f34475139e65750eee7080fb76c357b873def2f297a7b4339a37bc826a0e952950b6ca667f88e1e4d0a6047d4e20df0bea0621a4bb45c647f133e7b4cabed3aeae7aa638825f4f12db3d67a07406149288c6dbf90bd1637c80a549ae6e2955624f121b19f73516bb7d8df053f7458310564e1a03471a6fed639245fb2b832524f7f77a671b9602c52b0eca3f8164f50f891ef1cdd7a3df30b7379ea0d87377befc03700fd07e0fe45fbc66138451320e7bd71546588ca6875ad38e4f689a2cd638f0b5cc02669110927f00393511798edd9a5879f59d9ba2280ba6659a1ff2c4beee80d1c4150d0ffbdcf6e5cb18af5519cea6ba1391772f9597fe884aa36bf0c660ca599e540e5feb3bf1f00a7fd2348ce1cbc17e4688db237580d14566b5b7d6678512d3892b21e8fd72a7a577f107374fea26a2f90fbcb4612734a03c1ebcd14c3da89eb2422a1bd17c70e8540ffdf44519bba879f4983b493d627d669622f43af601b6a82bff64d825a05dae736166ab7312086670800a7523f0b190030935a71da024e3a1ec60111080abf52050b07ae5879003f917d5de532ad717fb061381cb4047b0365eb4d291e473026f09f3da20f4c3fcbd6f904924c6de9b4b599420235febc8ad08e7d5b9ea211e2113a5fc22f01a0c2cf57cc993510aa082c75af4cc04f35a13554d004edcb3a51cd582549a2c25a70648299801304644bcfd1ff27c0e3fab2e82b2311ecd749c05ff8d3f3a982ad450dc2cfe20a85d4ecd149c1388a115ce29c0d4ae6c5e78c50853420a990fcaedd102223b798974ce29e741b194d238c6f02aad4c969ca0e3fff15a38b3100ddcf0bce90b64d95d5e5b03427958a8111d78d308bc34a435c51f1a01f73d8db96aebb637216a8fbef2d7c4182101e2aaea4b51361ef2721190abed0f674bd8f5fb2ba32047d5eb3f8f93cedb66b367d6df16c4453d8ec730ebba83ccff8ad721bb3cc7040e81001dd864be1c0ee42829dab83afd909d2c1c61bb9197ae337a7a5bb610ab2dc0d57d5643290b10533e961cd1480436f924b60fb00bd64cb2a3a8d28aca9cdbb117403b6418e902547a9a259b55f49fbb8591784328c42538d48ad622896630807757a1724ee0430b4cfecbe4e34b3d3755c9d6ddaabef48d8e3eb16041dc7b13f66e6b89b741d2dc6d14c7fddcdf29114492241343b5f86ba873aff685b29bc4e1301cd4c662149241641c3cebf8dafb6f493f82e7e50e3ad6fea9f8ac58998d8a0afb7cf581870a0116d49cc4a3a9c91ff7affa0f040257b4ebbaa70fb25d43a2ae304d7d294d0fea8b381537849cc8ce4f4f7d9813f5125be1db77520d72affc3dc71ebebec2f1318f4daa91af29aedebe9139db598f20fc8eaa6ab2b011815ecc1f6ae148b54e585e2c381621cbbe7cda9db703a3e0a7e3428f24b7266761c04cb115c39da19cfa63ef214fad2ec02419bf3557e309f7187757952baf29568a20dcc1d758e785249d37ef0a5f102ab19578b5183b033315591bc151bcee8e42064c9e289f8af980d85216bd421b47c7ab8b410c0bec0f02142b102764e06967894f11233631f69b53a232a8b6d169497d460c6205acbcbd15b4e859da198348be16441efb7dbf50a5186acd5ab4e7f64f134ecef02a96d4fee7e6cef01d234dde21874bc0a8d4907bdbd5545c48f9e4869e21a7b5ec5d0db78bf50e32f976161c9a42b0017c9d33696abe801e4226d5c14ce110b5ec40aaac6af3d1b319a96dc1865551fc6b71dbe6d9fb90d1b283a2ef67fc7a58848e345379df686e07b6fdfc6e6c826a57588ec2694379f4b52e92bc0734e2c32888ceb590b6255e2e3eedfc8e7d5166d72220f32f9282bc4c5562ebdc7e69758c51ff7053489a382ff59807e8a1b0289e31c9322a63c598a6034451b6587475422ea253632ca398f33297f30f942a1e60569937af8114b71065faefcc77d5587f068171862b98d94758b0eaef84eca500e9ab890a982397117f4d1f8bb1031388fbfe02155a37386ebb4661c8da90a1cc87abacecb4c5e81151b561e1654d343c515830625197e0112a39f15b6493bc482db129e467ede93e68cf45af8227ce4c538bdd520717199bdc31c14e3262a7cfed678f393fa78b8c29a10dcb95695454206d868dd9adfe155531d33ce525c7586f197c78b153f526c5f63d6a0680777cb33a5a49bb50ec94a16c69dab5e3a5b45a180c5032554efd0ced7f3669d6e097c3a0cb5de252a44dab117256bdb72ec3e4b02bb8697a55f69cc025beec45a0d071845856e18a2d0a765ff56789e626124c929184b2c9d259274c57386787341588ddf0dccb304e1daa96d7b1a3c0cced93a3c960908ab8f3f8ee399ff7cfefe82632c75a6c450215537599bdb4409e0d19d44018c2ac52703656d1b2d4e67ca0ceabc6bd1429a64178eb0473149b7f3ac7b4fa730b1869496aa7700dbd6a3079054366024e42077c7716d599ce8da58d9cf8a4482f61dbf1921b45101d228d3e94ec5f66082fc4aec9f7c29507561238e49c395bd225f6e7f9ebc004d4ab02146626956176f45d7b3cd290702a180d14b02c9518c9c9a3136a72a94aeb6bdff66ef6730031f56ef86ace63c49866326263aa7ac6eeb40527e08a897ed1164bad083829fb10d7721ce4893e9241469d095f43ed9bc0d63f5bad32572a4a4d1ebed0f22347ba00f8014723dac489de5e56367c0d836f877c93809663462b294d2eed13f701fad8baae9c00c6db50205e21b1586d2b1ff4fb1559b53be2323982ccbf6d477cbc5baf8518395665ece346d34a064b47c1cb3a1c4c68b77c587d1a75cc493b260be46fb20a558704ea626b1a149e5e0e35d55376b9969286acd216917b9f0dfe7f57c0874803e41fa0beff14ea31c9142be04116642bd927d24b826381250e9ae3c2471121fb37349880e33fd5801afd4f5022b63a828222a7f85450a08d8eac2fd3657f452bc0ebad933bcd5dee3fa2a7bd718899688a093decba62cfea385464ecd96a69c3c76e94986eaac674a0eb5f15fe380321f33512b8c35033b98da8fcbd6ae0b8070d1d1de00168c6ed5255acf90df4eeb65a349b7a66220701c9efd603c517a502ed210d49fd31df08cc508c50cf476ec1bfb31100f0dfb609bf4ea54d0f71654f1cb5d8684bdf5f40e1fa368eb4c6d16f61cdfd10f8cfa13ad316781fe8d4a3241a5b4d155aae1985b9cbb0c4e858a043f57ec4da4a915cdbe8ba5337fab6ec535446c73adf2065cbb7d0aac1d806ee19b6c9061d6fcdb0a0eeed3dd231ca0178aefdc341765a188b9819b34d1bb1c89208f49ed8f9e8734b92594f46cca9cd001c40a04d75e14944d5ae0dfbd5079a9a3bde1e3ad1c0a9bd5437d26c6c4b706c0d915f40259efef9461a8a5bd4c34639c89c0996bcd4d15bd627efac813b1aa3a22d4d1fcd737cd8d247729fd0c5636151f878edd6606f49fd844b0bf168b3528ae29adddcd9cc71c8b8a3eb3bb5a22e71ce3748f6f56a0903ed27fe6db3c09d53f0f9be0a501393a58014d498acb3cc796702e7272cd172989c0b2e8ffbfaac23fb9c4b673f4baece32adf4a3696b067a35849a4447c20097a4946b638469771f559f130bfbe9b9f6f8bf5e5d446c2835967059f79e8dad38643c4a56e030348f93bc4ce0a9c40bf8b0a877ee8e22b8f4f76addc742a353a1a40e130f26074f96e35709e31e86d159c83e92cd86406f86c912b6eef180574344f5de831d0b8eb9ec9d0d4fbbf272c180282382c0775983dfdce1b3b6c40d9429dcc17cf6ce8d6e612cfcc68264ec5925780252bbcd9cc65a1591707e00fb84f22ad81f15f1244d0f9ba4bb345eaefca531cc949ad14d5bb8df55309cc404d63da57d559579699d0666a5f3bd7a1af452f3263670e5c3d276b9cd1e4e09a13c924d8fc550a3b0d98747145fee1a23d8359509237eb254e0bf65f26d6e41159ea436731c486c5827777f71cc13408e61140563a2d246192a30569fe2b2059908ac45bedfc29388de0e0ecc3956df7fa77ef2e111284fa2027ca4b51c91e4972270c0915c91a23d14321cc58bd0c85d1f5268f67baf69fcbe5bcd919b4fea6f8bad002959a9d9a4a65df3f1e754bd3837ee16ddd56136b247bff9fccb005ce15fff5269ed844916475721534bdc325c174776f8733588c771fd3a26e549cdf745987c44bc2fcbd9dd76a79b82c9b2d69982fdffefb9b03cf25b3a6d7554e1b2e6cf019e0814f6dedebb0904f43f960a1f50997a409bcf4205a69d137ac5195032d3ff8451412487e11f9687408b26ebf8bf321e5528c205b942752d84bf2807a813419671d6c13d478b9d42cc39e009de429f6228ce76ee265eb06677362c446b99127317737faa1a23fe60e00655ab291d70ee5b838f1cefe0e525f90ad9681ba2ad82ed0bd4739d9ec80be45840b2c9c075740ac7981c7298dc510d4de16001a3bddc7ad51689425d7ed99d84f9e1683b0b5d6dc5c21f4b26b7fb806501f5ac64286dbe15a5b646040ceaa69f0c55a2087740e8004d3e0db224e895ef2fe3f0255a761e8a852fbad9072d356c1b17cf743b39cb0c8f52a2f03d868d0310f62b9f61811ceb386a198f687a1977c7b3330ee2946e7f6e7abebb9cccbbb83d3a23fc2216611f292da322936395efb16285bae652401eedfad206b106f54186abee13875134464d0f0544f72061d36e14ace9dfd62143242cf626d0cdef803eb64773cfe507a23803e48cf4b423f14110a76ebf58e3fd374210c3e10caef9a7924d669d463f0f34589436f53504032ea1adb0bbc1019f50b"}}, @cf={0x4, 0x6, {0x6, 0x8, 0x0, 0x6}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @peer_mgmt={0x75, 0x18, {0x1, 0x8001, @val, @val=0x3b, @val="4af5539960db7a832eab9198c9b262ed"}}, @erp={0x2a, 0x1, {0x0, 0x1}}, @peer_mgmt={0x75, 0x8, {0x1, 0x5, @val=0xb77, @val=0x22, @void}}, @ht={0x2d, 0x1a, {0x4000, 0x0, 0x7, 0x0, {0x8, 0x7, 0x0, 0x6a, 0x0, 0x0, 0x1, 0x1}, 0x8, 0x0, 0x8}}, @perr={0x84, 0xc9, {0x9, 0xd, [{{}, @broadcast, 0x86, @void, 0x42}, {{}, @device_b, 0xe, @void, 0x17}, {{0x0, 0x1}, @device_a, 0x1000, @value, 0x2d}, {{0x0, 0x1}, @device_b, 0x8000, @value=@broadcast, 0x1c}, {{}, @device_a, 0x423, @void, 0x32}, {{}, @device_b, 0x0, @void, 0x3d}, {{}, @broadcast, 0x10000, @void, 0x3}, {{0x0, 0x1}, @device_a, 0x0, @value, 0x32}, {{}, @device_b, 0x400, @void, 0x1}, {{0x0, 0x1}, @device_b, 0x3000, @value=@device_b, 0x5}, {{0x0, 0x1}, @device_a, 0xa7e, @value=@broadcast, 0x25}, {{}, @device_b, 0x8, @void, 0x1a}, {{}, @device_a, 0xc797, @void, 0x25}]}}, @chsw_timing={0x68, 0x4, {0x6, 0x3}}, @fast_bss_trans={0x37, 0x8f, {0xf9, 0x3, "63bcaaf015e9bbbaf002f46e1ae43bf9", "2435e9ccec2b9cbe44d06c953d652f6575992d0ce74cbe78d3abfbe4a48f74f2", "7504df5365f3aafc74ecae9333f8803673f12ae40731e71b3a3d8d0b938bc001", [{0x1, 0x8, "4c56870cbffc2bf1"}, {0x4, 0x21, "e883749c313088c832fa149a6aaef6e2c1b607bdc55b4c8c70f838bbdbd44cb549"}, {0x2, 0xe, "107d323d1a61fb468e83060d2dfb"}]}}]}, @NL80211_ATTR_SCAN_SSIDS={0x24, 0x2d, 0x0, 0x1, [{0x1e, 0x0, @random="ab204e4efd2cb0d4244fa64d447998cbb728e5bfdab45599ed1c"}]}, @NL80211_ATTR_BSSID={0xa, 0xf5, @random="26e86a497024"}, @NL80211_ATTR_SCAN_FREQUENCIES={0x4c, 0x2c, 0x0, 0x1, [{0x8}, {0x8, 0x0, 0x905}, {0x8, 0x0, 0x4}, {0x8, 0x0, 0xffff}, {0x8, 0x0, 0x1}, {0x8, 0x0, 0x5}, {0x8, 0x0, 0x101}, {0x8, 0x0, 0x9}, {0x8, 0x0, 0x2}]}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0x979}, @NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2110}, @NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0xfffffffa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}]}, 0x1288}, 0x1, 0x0, 0x0, 0x20000000}, 0x8800) bind$xdp(0xffffffffffffffff, &(0x7f0000000100)={0x2c, 0x8, r8, 0x27}, 0x10) r12 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_SENDSEQ(r12, 0x111, 0x3, 0x1, 0x4) 1.376893561s ago: executing program 7 (id=1462): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000006000000040000000000000e0200000001010000000000000a00000904000000000000000000000400000000040000000000000f030000000000000061"], 0x0, 0x52, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="3c01000013000100000000000000000000000000000000000000000000000001ffffffff0000000000000000000000000000000d040000090a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="020000000000000000000000000000000000000000000004ffffffffffffffff00000000000000000300000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000feffffff000000000000000000000000840005000a010100000000000000000000000000000000002b00000002000000ac1414aa0000000000000000000000000000000001000000040000000000000000000000fc020000000004000000000000000000000000002b0000000200000000000000000000000000ffffac1414bb0000000000000000feffffbf0000000000000000"], 0x13c}}, 0x0) 1.335214469s ago: executing program 7 (id=1463): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4) getsockopt$inet_tcp_int(r1, 0x6, 0x7, 0x0, &(0x7f0000000180)) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r3, 0x1, 0x28, 0x0, 0x0) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x10000, 0x4) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0xe9be}], 0x1, 0x2043, 0x0) socket$netlink(0x10, 0x3, 0x1b) socket$inet_udp(0x2, 0x2, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x16}}, 0x10) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) (async) setsockopt$WPAN_SECURITY(r2, 0x0, 0x1, &(0x7f0000000000)=0x2, 0x4) (async) setsockopt$inet_tcp_int(r1, 0x6, 0x7, &(0x7f0000001d80)=0x7, 0x4) (async) getsockopt$inet_tcp_int(r1, 0x6, 0x7, 0x0, &(0x7f0000000180)) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$sock_int(r3, 0x1, 0x28, 0x0, 0x0) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x4e20, @multicast2}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) setsockopt$inet_int(r0, 0x0, 0x19, &(0x7f0000000180)=0x10000, 0x4) (async) recvmmsg(r0, &(0x7f0000000600)=[{{0x0, 0x0, 0x0}, 0xe9be}], 0x1, 0x2043, 0x0) (async) socket$netlink(0x10, 0x3, 0x1b) (async) 710.406021ms ago: executing program 0 (id=165): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r1, 0x84, 0x1e, &(0x7f0000000000), 0x6) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000000000061105f000000000095"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) ioctl$F2FS_IOC_SET_COMPRESS_OPTION(r1, 0x4002f516, &(0x7f00000002c0)={0x2, 0x4}) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010025bd7000fbdbdf253a00000008000300", @ANYRES32=r3, @ANYBLOB="04005b00e2fae544806e701ea64145d29f84ca10ed484fa7e9f3b57d01c179c5d59acc025891a29b348244ae1d34a4f8e8a10650cde08ac66da51548f79f8eab0578659000"/92], 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x20008040) sendmsg$NL80211_CMD_PROBE_CLIENT(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x74, r2, 0x8, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x6, 0xf}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x74}, 0x1, 0x0, 0x0, 0x80}, 0x8001) 642.762493ms ago: executing program 7 (id=1464): socket$inet_icmp_raw(0x2, 0x3, 0x1) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x410, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x340, 0x20a, 0x278, 0x340, 0x278, 0x3, 0x0, {[{{@ipv6={@mcast1, @private2, [], [], 'ipvlan0\x00', 'team_slave_0\x00'}, 0x0, 0x208, 0x230, 0x0, {}, [@common=@hl={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x30, 0x0, [@mcast1, @rand_addr=' \x01\x00', @dev, @remote, @loopback, @empty, @empty, @mcast1, @mcast2, @empty, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @ipv4={'\x00', '\xff\xff', @broadcast}, @private1, @local, @mcast1]}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_to_hsr\x00', 'nr0\x00'}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x470) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000008d000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r4, 0x0, 0x0}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, 0x0, 0x28000000) syz_emit_ethernet(0x3e, &(0x7f0000000080)={@broadcast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0xfe, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x24, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x1, 0x7, @local, @rand_addr=0x64010102}}}}}}, 0x0) setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0) 909.52µs ago: executing program 7 (id=1465): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x18, 0xb, 0x0, 0x1, [{0x14, 0x2, 0x0, 0x1, @quota={{0xa}, @val={0x4}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0xa, 0x84}}}, 0xd8}}, 0x0) 0s ago: executing program 4 (id=1117): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x38, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xb}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0x38}}, 0x80) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r8 = socket$kcm(0x2, 0xa, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x1, 0x9, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) socket(0x10, 0x3, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)={0x38, r2, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x1c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0xb}, @NL80211_MESHCONF_NOLEARN={0x5}, @NL80211_MESHCONF_HWMP_ROOTMODE={0x5, 0xe, 0x2}]}]}, 0x38}}, 0x80) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x4004944) (async) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a14000000110001"], 0x64}}, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000071122c000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r7, &(0x7f0000000280)={@val={0x6f01, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x20}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x3f, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x700, 0x0, 0x14, {[@window={0x9, 0xfffffffffffffec4}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r5, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0xea, 0x0, 0xfffd, 0x0, 0x9, 0x5}, {0x12, 0x2, 0x0, 0x401, 0x8001}, 0x1, 0x9, 0x10000000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) (async) kernel console output (not intermixed with test programs): ype 2 family 0 port 6081 - 0 [ 299.892767][T11147] team0: Port device geneve0 added [ 299.902920][T10837] veth0_vlan: entered promiscuous mode [ 299.997312][ T1335] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.026860][T10829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.126432][T10837] veth1_vlan: entered promiscuous mode [ 300.160626][ T1335] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.413272][T10829] veth0_vlan: entered promiscuous mode [ 300.437742][ T1335] bridge_slave_1: left allmulticast mode [ 300.447482][ T1335] bridge_slave_1: left promiscuous mode [ 300.455196][ T1335] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.468658][ T1335] bridge_slave_0: left allmulticast mode [ 300.475339][ T1335] bridge_slave_0: left promiscuous mode [ 300.481708][ T1335] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.816180][ T51] Bluetooth: hci3: command tx timeout [ 301.019809][ T1335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.042947][ T1335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.071643][ T1335] bond0 (unregistering): Released all slaves [ 301.128843][T10829] veth1_vlan: entered promiscuous mode [ 301.194454][T10837] veth0_macvtap: entered promiscuous mode [ 301.310535][T10837] veth1_macvtap: entered promiscuous mode [ 301.463716][T10837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 301.507587][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 301.520104][ T5851] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 301.528772][ T5851] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 301.543787][ T5851] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 301.555244][ T5851] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 301.556863][T10837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 301.622454][T10829] veth0_macvtap: entered promiscuous mode [ 301.635703][T10837] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.649998][T10837] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.658774][T10837] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.667900][T10837] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 301.757939][T10829] veth1_macvtap: entered promiscuous mode [ 301.887316][ T1335] hsr_slave_0: left promiscuous mode [ 301.903790][ T1335] hsr_slave_1: left promiscuous mode [ 301.911277][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 301.918956][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 301.927792][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 301.948301][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 302.021811][ T1335] veth1_macvtap: left promiscuous mode [ 302.029580][ T1335] veth0_macvtap: left promiscuous mode [ 302.035360][ T1335] veth1_vlan: left promiscuous mode [ 302.040981][ T1335] veth0_vlan: left promiscuous mode [ 302.631080][ T1335] team0 (unregistering): Port device team_slave_1 removed [ 302.688399][ T1335] team0 (unregistering): Port device team_slave_0 removed [ 302.895893][ T5851] Bluetooth: hci3: command tx timeout [ 303.313897][T10829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 303.386617][T10829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 303.428700][T10829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.438860][T10829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.448083][T10829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.457649][T10829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 303.478258][T11062] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 303.511208][T11062] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 303.550147][ T6831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.558060][ T6831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.618969][ T5851] Bluetooth: hci6: command tx timeout [ 303.627019][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 303.638004][T11062] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 303.644924][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 303.661987][T11062] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 304.114462][T11189] netlink: 'syz.7.1298': attribute type 2 has an invalid length. [ 304.148867][T11189] netlink: 199836 bytes leftover after parsing attributes in process `syz.7.1298'. [ 304.206696][T11189] nbd: must specify a device to reconfigure [ 304.318672][ T6844] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.392292][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.429893][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.484560][T11163] chnl_net:caif_netlink_parms(): no params data found [ 304.544519][ T6844] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.614151][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 304.625597][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 304.652137][ T6844] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.788108][ T6844] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 304.912581][T11062] 8021q: adding VLAN 0 to HW filter on device bond0 [ 304.929616][T11163] bridge0: port 1(bridge_slave_0) entered blocking state [ 304.936803][T11163] bridge0: port 1(bridge_slave_0) entered disabled state [ 304.951685][T11163] bridge_slave_0: entered allmulticast mode [ 304.963515][T11163] bridge_slave_0: entered promiscuous mode [ 304.990134][T11163] bridge0: port 2(bridge_slave_1) entered blocking state [ 304.997461][T11163] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.046563][T11163] bridge_slave_1: entered allmulticast mode [ 305.071137][T11163] bridge_slave_1: entered promiscuous mode [ 305.126971][T11062] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.397214][T11163] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.424511][T11163] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.472845][ T6831] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.480134][ T6831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 305.557717][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 305.571535][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 305.580672][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 305.593352][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 305.601485][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 305.647849][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.655131][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 305.684558][T11163] team0: Port device team_slave_0 added [ 305.694409][T11163] team0: Port device team_slave_1 added [ 305.699775][ T5851] Bluetooth: hci6: command tx timeout [ 305.796046][T11163] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.803289][T11163] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.830428][T11163] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.866295][ T6844] bridge_slave_1: left allmulticast mode [ 305.873367][ T6844] bridge_slave_1: left promiscuous mode [ 305.880442][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.893818][ T6844] bridge_slave_0: left allmulticast mode [ 305.900151][ T6844] bridge_slave_0: left promiscuous mode [ 305.905927][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.366145][ T6844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 306.384963][ T6844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 306.395932][ T6844] bond0 (unregistering): Released all slaves [ 306.411508][T11163] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 306.418513][T11163] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 306.446454][T11163] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 306.623066][T11163] hsr_slave_0: entered promiscuous mode [ 306.631890][T11163] hsr_slave_1: entered promiscuous mode [ 306.638203][T11163] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.650156][T11163] Cannot create hsr debugfs directory [ 306.834077][ T6844] hsr_slave_0: left promiscuous mode [ 306.842932][ T6844] hsr_slave_1: left promiscuous mode [ 306.848969][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 306.858716][ T6844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 306.866978][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 306.876404][ T6844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 306.904493][ T6844] veth1_macvtap: left promiscuous mode [ 306.910337][ T6844] veth0_macvtap: left promiscuous mode [ 306.916090][ T6844] veth1_vlan: left promiscuous mode [ 306.921910][ T6844] veth0_vlan: left promiscuous mode [ 307.645528][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 307.665901][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 307.675958][ T6844] team0 (unregistering): Port device team_slave_1 removed [ 307.685197][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 307.704249][ T51] Bluetooth: hci0: command tx timeout [ 307.706967][ T5154] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 307.727117][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 307.771670][ T5851] Bluetooth: hci6: command tx timeout [ 307.783355][ T6844] team0 (unregistering): Port device team_slave_0 removed [ 308.347377][T11062] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 308.374142][T11062] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 308.552706][T11220] netdevsim netdevsim7 netdevsim0: entered promiscuous mode [ 309.015808][T11208] chnl_net:caif_netlink_parms(): no params data found [ 309.035498][T11231] netlink: 'syz.7.1304': attribute type 29 has an invalid length. [ 309.046430][T11231] netlink: 'syz.7.1304': attribute type 29 has an invalid length. [ 309.131089][T11062] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 309.251433][ T6844] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.399672][ T6844] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.638208][T11248] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1307'. [ 309.648138][T11248] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1307'. [ 309.660121][ T6844] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.693642][T11208] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.710637][T11208] bridge0: port 1(bridge_slave_0) entered disabled state [ 309.728234][T11208] bridge_slave_0: entered allmulticast mode [ 309.737717][T11208] bridge_slave_0: entered promiscuous mode [ 309.751769][T11208] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.760190][T11208] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.767549][T11208] bridge_slave_1: entered allmulticast mode [ 309.773960][ T5851] Bluetooth: hci1: command tx timeout [ 309.774997][ T51] Bluetooth: hci0: command tx timeout [ 309.782828][T11208] bridge_slave_1: entered promiscuous mode [ 309.800453][T11217] chnl_net:caif_netlink_parms(): no params data found [ 309.849615][ T51] Bluetooth: hci6: command tx timeout [ 309.888200][ T6844] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.951340][T11252] netlink: 'syz.7.1308': attribute type 1 has an invalid length. [ 309.969245][T11252] netlink: 220 bytes leftover after parsing attributes in process `syz.7.1308'. [ 310.000671][T11208] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 310.060628][T11208] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 310.174838][T11208] team0: Port device team_slave_0 added [ 310.248603][T11208] team0: Port device team_slave_1 added [ 310.262091][T11163] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 310.348225][T11163] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 310.378194][T11163] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 310.388982][T11262] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1311'. [ 310.441990][T11263] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1311'. [ 310.453779][T11217] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.464840][T11217] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.472365][T11217] bridge_slave_0: entered allmulticast mode [ 310.482970][T11217] bridge_slave_0: entered promiscuous mode [ 310.492323][T11208] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 310.500727][T11208] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.528516][T11208] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 310.541975][T11208] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 310.548974][T11208] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 310.577725][T11208] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 310.589109][T11163] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 310.627972][T11217] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.644117][T11217] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.653580][T11217] bridge_slave_1: entered allmulticast mode [ 310.665549][T11217] bridge_slave_1: entered promiscuous mode [ 310.813074][ T6844] bridge_slave_1: left allmulticast mode [ 310.818799][ T6844] bridge_slave_1: left promiscuous mode [ 310.825014][ T6844] bridge0: port 2(bridge_slave_1) entered disabled state [ 310.835180][ T6844] bridge_slave_0: left allmulticast mode [ 310.841575][ T6844] bridge_slave_0: left promiscuous mode [ 310.847319][ T6844] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.307683][ T6844] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 311.326152][ T6844] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 311.346391][ T6844] bond0 (unregistering): Released all slaves [ 311.391418][T11217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 311.422711][T11217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 311.473907][T11208] hsr_slave_0: entered promiscuous mode [ 311.491608][T11208] hsr_slave_1: entered promiscuous mode [ 311.498700][T11208] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 311.517282][T11208] Cannot create hsr debugfs directory [ 311.812242][T11062] veth0_vlan: entered promiscuous mode [ 311.828928][T11217] team0: Port device team_slave_0 added [ 311.850415][ T51] Bluetooth: hci0: command tx timeout [ 311.859461][ T51] Bluetooth: hci1: command tx timeout [ 311.925171][T11217] team0: Port device team_slave_1 added [ 312.007811][ T6844] hsr_slave_0: left promiscuous mode [ 312.025867][ T6844] hsr_slave_1: left promiscuous mode [ 312.037052][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 312.044928][ T6844] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 312.053466][ T6844] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.061304][ T6844] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 312.105868][ T6844] veth1_macvtap: left promiscuous mode [ 312.121481][ T6844] veth0_macvtap: left promiscuous mode [ 312.127267][ T6844] veth1_vlan: left promiscuous mode [ 312.139509][ T6844] veth0_vlan: left promiscuous mode [ 312.736484][ T6844] team0 (unregistering): Port device team_slave_1 removed [ 312.786802][ T6844] team0 (unregistering): Port device team_slave_0 removed [ 313.415663][T11217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 313.424094][T11217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.457100][T11217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 313.548244][T11217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 313.568218][T11217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 313.604409][T11217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 313.633328][T11282] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1315'. [ 313.645611][T11062] veth1_vlan: entered promiscuous mode [ 313.716286][T11282] netlink: 'syz.7.1315': attribute type 2 has an invalid length. [ 313.724373][T11282] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1315'. [ 313.741209][T11282] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1315'. [ 313.770306][T11282] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1315'. [ 313.818779][T11217] hsr_slave_0: entered promiscuous mode [ 313.833314][T11217] hsr_slave_1: entered promiscuous mode [ 313.844209][T11217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 313.852825][T11217] Cannot create hsr debugfs directory [ 313.929830][ T51] Bluetooth: hci1: command tx timeout [ 313.935352][ T51] Bluetooth: hci0: command tx timeout [ 314.163792][T11062] veth0_macvtap: entered promiscuous mode [ 314.203157][T11062] veth1_macvtap: entered promiscuous mode [ 314.222202][T11163] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.253905][T11290] Bluetooth: MGMT ver 1.23 [ 314.317063][T11290] netlink: 212376 bytes leftover after parsing attributes in process `syz.7.1317'. [ 314.382485][T11163] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.394232][T11062] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.454035][T11062] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.507645][T11062] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.517988][T11062] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.527942][T11062] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.537507][T11062] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.563932][ T6843] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.571194][ T6843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.587210][ T967] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.594517][ T967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.665190][T11208] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 314.676870][T11208] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 314.740780][T11208] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 314.759951][T11208] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 314.810196][T11296] __nla_validate_parse: 2 callbacks suppressed [ 314.810216][T11296] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1320'. [ 314.826530][T11296] x_tables: (null)_tables: SNAT target: only valid in nat table, not syz0 [ 314.956654][T11304] netlink: 'syz.7.1320': attribute type 1 has an invalid length. [ 314.980981][T11304] netlink: 172 bytes leftover after parsing attributes in process `syz.7.1320'. [ 315.164526][ T6844] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.183796][T11309] x_tables: ip6_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 315.196254][ T6844] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.325899][ T967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.380687][ T967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.396023][T11208] 8021q: adding VLAN 0 to HW filter on device bond0 [ 315.556545][T11208] 8021q: adding VLAN 0 to HW filter on device team0 [ 315.641029][ T6836] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.648213][ T6836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 315.694488][ T967] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.701776][ T967] bridge0: port 2(bridge_slave_1) entered forwarding state [ 315.729804][T11217] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 315.876644][T11163] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.896592][T11217] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 315.958741][T11217] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 316.008918][T11217] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 316.019618][ T51] Bluetooth: hci1: command tx timeout [ 316.035093][T11318] syzkaller0: entered allmulticast mode [ 316.051097][T11317] syzkaller0: left allmulticast mode [ 316.216042][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.402134][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.501350][T11329] syz.7.1324: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 316.521557][T11329] CPU: 1 UID: 0 PID: 11329 Comm: syz.7.1324 Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) [ 316.521591][T11329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 316.521612][T11329] Call Trace: [ 316.521621][T11329] [ 316.521630][T11329] dump_stack_lvl+0x189/0x250 [ 316.521683][T11329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 316.521717][T11329] ? __pfx__printk+0x10/0x10 [ 316.521740][T11329] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 316.521764][T11329] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 316.521789][T11329] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 316.521815][T11329] warn_alloc+0x214/0x310 [ 316.521840][T11329] ? stack_depot_save_flags+0x40/0x900 [ 316.521872][T11329] ? __pfx_warn_alloc+0x10/0x10 [ 316.521901][T11329] ? kasan_save_track+0x4f/0x80 [ 316.521941][T11329] ? xskq_create+0x56/0x170 [ 316.521970][T11329] ? xsk_init_queue+0xb0/0x110 [ 316.521997][T11329] ? xsk_setsockopt+0x43f/0x710 [ 316.522021][T11329] ? do_sock_setsockopt+0x257/0x3e0 [ 316.522044][T11329] ? __x64_sys_setsockopt+0x18b/0x220 [ 316.522066][T11329] ? do_syscall_64+0xfa/0x3b0 [ 316.522084][T11329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.522115][T11329] __vmalloc_node_range_noprof+0x125/0x12f0 [ 316.522173][T11329] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 316.522205][T11329] ? __kasan_kmalloc+0x93/0xb0 [ 316.522229][T11329] vmalloc_user_noprof+0xad/0xf0 [ 316.522252][T11329] ? xskq_create+0xbf/0x170 [ 316.522284][T11329] xskq_create+0xbf/0x170 [ 316.522317][T11329] xsk_init_queue+0xb0/0x110 [ 316.522349][T11329] xsk_setsockopt+0x43f/0x710 [ 316.522381][T11329] ? __pfx_xsk_setsockopt+0x10/0x10 [ 316.522407][T11329] ? __lock_acquire+0xab9/0xd20 [ 316.522449][T11329] ? bpf_lsm_socket_setsockopt+0x9/0x20 [ 316.522475][T11329] ? __pfx_xsk_setsockopt+0x10/0x10 [ 316.522506][T11329] do_sock_setsockopt+0x257/0x3e0 [ 316.522535][T11329] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 316.522566][T11329] ? __fget_files+0x2a/0x420 [ 316.522600][T11329] __x64_sys_setsockopt+0x18b/0x220 [ 316.522633][T11329] do_syscall_64+0xfa/0x3b0 [ 316.522651][T11329] ? lockdep_hardirqs_on+0x9c/0x150 [ 316.522681][T11329] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.522702][T11329] ? clear_bhb_loop+0x60/0xb0 [ 316.522730][T11329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 316.522751][T11329] RIP: 0033:0x7f26fa38e929 [ 316.522783][T11329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 316.522801][T11329] RSP: 002b:00007f26fb2a6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 316.522824][T11329] RAX: ffffffffffffffda RBX: 00007f26fa5b5fa0 RCX: 00007f26fa38e929 [ 316.522838][T11329] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 316.522851][T11329] RBP: 00007f26fa410b39 R08: 0000000000000004 R09: 0000000000000000 [ 316.522863][T11329] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 316.522874][T11329] R13: 0000000000000000 R14: 00007f26fa5b5fa0 R15: 00007ffeb95a2f38 [ 316.522904][T11329] [ 316.522931][T11329] Mem-Info: [ 316.841170][T11329] active_anon:5259 inactive_anon:0 isolated_anon:0 [ 316.841170][T11329] active_file:1338 inactive_file:39974 isolated_file:0 [ 316.841170][T11329] unevictable:768 dirty:47 writeback:0 [ 316.841170][T11329] slab_reclaimable:11355 slab_unreclaimable:127995 [ 316.841170][T11329] mapped:42241 shmem:1375 pagetables:1105 [ 316.841170][T11329] sec_pagetables:0 bounce:0 [ 316.841170][T11329] kernel_misc_reclaimable:0 [ 316.841170][T11329] free:1274564 free_pcp:13552 free_cma:0 [ 316.886949][T11329] Node 0 active_anon:21036kB inactive_anon:0kB active_file:5352kB inactive_file:159692kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:168964kB dirty:188kB writeback:0kB shmem:3964kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14304kB pagetables:4292kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 316.934442][T11329] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:128kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 316.971116][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.027779][T11163] veth0_vlan: entered promiscuous mode [ 317.030705][T11329] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 317.065891][T11329] lowmem_reserve[]: 0 2501 2502 2502 2502 [ 317.076045][T11329] Node 0 DMA32 free:1170908kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:21032kB inactive_anon:0kB active_file:5352kB inactive_file:157852kB unevictable:1536kB writepending:100kB present:3129332kB managed:2561036kB mlocked:0kB bounce:0kB free_pcp:34444kB local_pcp:17764kB free_cma:0kB [ 317.104014][T11163] veth1_vlan: entered promiscuous mode [ 317.132075][T11329] lowmem_reserve[]: 0 0 1 1 1 [ 317.149177][T11329] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1840kB unevictable:0kB writepending:0kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 317.203266][T11329] lowmem_reserve[]: 0 0 0 0 0 [ 317.208098][T11329] Node 1 Normal free:3900708kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20832kB local_pcp:10816kB free_cma:0kB [ 317.243220][T11329] lowmem_reserve[]: 0 0 0 0 0 [ 317.248056][T11329] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 317.248877][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.273560][T11329] Node 0 DMA32: 409*4kB (M) 576*8kB (UME) 181*16kB (M) 64*32kB (UME) 45*64kB (ME) 25*128kB (UME) 26*256kB (UME) 25*512kB (UM) 10*1024kB (UME) 11*2048kB (UM) 266*4096kB (M) = 1159028kB [ 317.302260][T11329] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 317.321680][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 317.330015][T11329] Node 1 Normal: 187*4kB (UE) 45*8kB (UME) 37*16kB (UME) 104*32kB (UME) 24*64kB (UME) 7*128kB (UME) 4*256kB (UME) 4*512kB (UME) 3*1024kB (UME) 2*2048kB (UE) 948*4096kB (M) = 3900708kB [ 317.332672][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 317.359940][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 317.371168][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 317.379224][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 317.399526][T11329] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.410391][T11217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.448301][T11208] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 317.449307][T11329] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.474388][T11329] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 317.551287][T11163] veth0_macvtap: entered promiscuous mode [ 317.565041][T11329] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 317.600460][T11217] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.619743][T11329] 42684 total pagecache pages [ 317.639173][T11329] 0 pages in swap cache [ 317.643439][T11329] Free swap = 124996kB [ 317.647638][T11329] Total swap = 124996kB [ 317.654817][T11163] veth1_macvtap: entered promiscuous mode [ 317.665189][T11329] 2097051 pages RAM [ 317.670243][T11329] 0 pages HighMem/MovableOnly [ 317.675100][T11329] 424686 pages reserved [ 317.681181][T11329] 0 pages cma reserved [ 317.730692][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.737903][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.835986][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.843264][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.891975][T11163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 317.990745][T11163] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 318.118083][T11163] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.148282][T11163] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.176447][T11163] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.206589][T11163] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 318.236021][ T13] bridge_slave_1: left allmulticast mode [ 318.250640][ T13] bridge_slave_1: left promiscuous mode [ 318.276850][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.314690][ T13] bridge_slave_0: left allmulticast mode [ 318.327343][ T13] bridge_slave_0: left promiscuous mode [ 318.338014][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.797478][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 318.808795][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 318.829006][ T13] bond0 (unregistering): Released all slaves [ 319.235047][T11354] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1326'. [ 319.251807][T11208] veth0_vlan: entered promiscuous mode [ 319.451485][T11334] chnl_net:caif_netlink_parms(): no params data found [ 319.460255][ T51] Bluetooth: hci3: command tx timeout [ 319.498588][ T967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.522019][ T967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.559878][T11208] veth1_vlan: entered promiscuous mode [ 319.606987][ T13] hsr_slave_0: left promiscuous mode [ 319.614149][ T13] hsr_slave_1: left promiscuous mode [ 319.622102][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 319.631559][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 319.639892][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 319.648252][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 319.687077][ T13] veth1_macvtap: left promiscuous mode [ 319.694655][ T13] veth0_macvtap: left promiscuous mode [ 319.700576][ T13] veth1_vlan: left promiscuous mode [ 319.705982][ T13] veth0_vlan: left promiscuous mode [ 320.326620][ T13] team0 (unregistering): Port device team_slave_1 removed [ 320.386014][ T13] team0 (unregistering): Port device team_slave_0 removed [ 321.064181][ T6844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 321.081116][ T6844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 321.137225][T11208] veth0_macvtap: entered promiscuous mode [ 321.158432][T11217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 321.206709][T11208] veth1_macvtap: entered promiscuous mode [ 321.489505][T11334] bridge0: port 1(bridge_slave_0) entered blocking state [ 321.496667][T11334] bridge0: port 1(bridge_slave_0) entered disabled state [ 321.522597][T11334] bridge_slave_0: entered allmulticast mode [ 321.530470][ T51] Bluetooth: hci3: command tx timeout [ 321.537505][T11334] bridge_slave_0: entered promiscuous mode [ 321.550799][T11208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 321.566066][T11334] bridge0: port 2(bridge_slave_1) entered blocking state [ 321.574830][T11334] bridge0: port 2(bridge_slave_1) entered disabled state [ 321.582692][T11334] bridge_slave_1: entered allmulticast mode [ 321.595025][T11334] bridge_slave_1: entered promiscuous mode [ 321.712155][T11208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 321.738855][T11334] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.764197][T11208] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.773593][T11208] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.783290][T11208] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.792324][T11208] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 321.818233][T11334] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.911917][T11334] team0: Port device team_slave_0 added [ 321.952916][T11217] veth0_vlan: entered promiscuous mode [ 321.972233][T11334] team0: Port device team_slave_1 added [ 322.017495][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.098847][T11334] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 322.113323][T11334] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.143479][T11334] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 322.160368][T11217] veth1_vlan: entered promiscuous mode [ 322.190127][T11334] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 322.197211][T11334] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 322.230713][T11334] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 322.272919][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.336246][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.349299][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.403009][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.424176][T11334] hsr_slave_0: entered promiscuous mode [ 322.431705][T11334] hsr_slave_1: entered promiscuous mode [ 322.443347][T11334] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 322.451178][T11334] Cannot create hsr debugfs directory [ 322.522533][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 322.540181][ T6836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 322.548072][ T6836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 322.688284][T11217] veth0_macvtap: entered promiscuous mode [ 322.784810][T11217] veth1_macvtap: entered promiscuous mode [ 323.030325][ T13] bridge_slave_1: left allmulticast mode [ 323.036056][ T13] bridge_slave_1: left promiscuous mode [ 323.059571][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.090695][ T13] bridge_slave_0: left allmulticast mode [ 323.096429][ T13] bridge_slave_0: left promiscuous mode [ 323.119444][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.580170][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 323.599467][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 323.616429][ T5154] Bluetooth: hci3: command tx timeout [ 323.622346][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 323.644477][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 323.655103][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 323.795392][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.806739][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.817282][ T13] bond0 (unregistering): Released all slaves [ 323.865056][T11217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 323.906072][T11217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 323.971950][T11217] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 323.989984][T11217] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.009244][T11217] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.018017][T11217] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 324.421339][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 324.447705][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 324.459338][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 324.491460][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 324.503644][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 324.822288][ T13] hsr_slave_0: left promiscuous mode [ 324.847290][ T13] hsr_slave_1: left promiscuous mode [ 324.859442][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 324.866974][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.886574][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 324.897234][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.940876][ T13] veth1_macvtap: left promiscuous mode [ 324.946517][ T13] veth0_macvtap: left promiscuous mode [ 324.952736][ T13] veth1_vlan: left promiscuous mode [ 324.958131][ T13] veth0_vlan: left promiscuous mode [ 325.631213][ T13] team0 (unregistering): Port device team_slave_1 removed [ 325.686385][ T13] team0 (unregistering): Port device team_slave_0 removed [ 325.693936][ T51] Bluetooth: hci0: command tx timeout [ 325.699184][ T5851] Bluetooth: hci3: command tx timeout [ 326.456145][ T6837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.464577][ T6837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.569252][ T5851] Bluetooth: hci6: command tx timeout [ 327.010314][T11334] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 327.018208][ T6831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 327.040314][T11334] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 327.046078][T11430] xt_hashlimit: max too large, truncated to 1048576 [ 327.050373][ T6831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.093733][T11433] xt_hashlimit: max too large, truncated to 1048576 [ 327.125257][T11334] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 327.244539][T11386] chnl_net:caif_netlink_parms(): no params data found [ 327.383037][T11334] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 327.675418][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.775140][ T5851] Bluetooth: hci0: command tx timeout [ 328.001625][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.083824][T11395] chnl_net:caif_netlink_parms(): no params data found [ 328.234356][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.391440][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.407526][T11386] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.415445][T11386] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.424019][T11386] bridge_slave_0: entered allmulticast mode [ 328.432542][T11386] bridge_slave_0: entered promiscuous mode [ 328.441566][T11386] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.448787][T11386] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.458789][T11386] bridge_slave_1: entered allmulticast mode [ 328.467545][T11386] bridge_slave_1: entered promiscuous mode [ 328.531281][T11395] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.538498][T11395] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.549511][T11395] bridge_slave_0: entered allmulticast mode [ 328.556934][T11395] bridge_slave_0: entered promiscuous mode [ 328.616371][T11386] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.632984][T11395] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.640273][T11395] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.647546][T11395] bridge_slave_1: entered allmulticast mode [ 328.655660][T11395] bridge_slave_1: entered promiscuous mode [ 328.662718][ T5851] Bluetooth: hci6: command tx timeout [ 328.705805][T11386] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.772297][T11395] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.821730][T11386] team0: Port device team_slave_0 added [ 328.830823][T11395] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.868023][T11386] team0: Port device team_slave_1 added [ 328.938874][T11395] team0: Port device team_slave_0 added [ 328.955566][T11386] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.963123][T11386] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.992796][T11386] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.006162][T11386] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.013502][T11386] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.040211][T11386] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.057541][T11395] team0: Port device team_slave_1 added [ 329.124335][T11395] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 329.133113][T11395] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.159886][T11395] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 329.172230][ T13] bridge_slave_1: left allmulticast mode [ 329.177937][ T13] bridge_slave_1: left promiscuous mode [ 329.183970][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.196140][ T13] bridge_slave_0: left allmulticast mode [ 329.202299][ T13] bridge_slave_0: left promiscuous mode [ 329.208064][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.704934][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.737121][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.741660][T11472] netlink: 'syz.7.1338': attribute type 9 has an invalid length. [ 329.761033][ T13] bond0 (unregistering): Released all slaves [ 329.855696][ T5851] Bluetooth: hci0: command tx timeout [ 329.883085][T11334] 8021q: adding VLAN 0 to HW filter on device bond0 [ 329.895840][T11395] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 329.938568][T11395] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 329.976357][T11395] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 330.083275][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 330.094006][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 330.102992][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 330.115214][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 330.128738][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 330.181783][T11386] hsr_slave_0: entered promiscuous mode [ 330.188723][T11386] hsr_slave_1: entered promiscuous mode [ 330.195468][T11386] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.203716][T11386] Cannot create hsr debugfs directory [ 330.266787][T11477] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1339'. [ 330.295924][T11334] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.503744][T11395] hsr_slave_0: entered promiscuous mode [ 330.523933][T11395] hsr_slave_1: entered promiscuous mode [ 330.544022][T11395] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 330.552520][T11395] Cannot create hsr debugfs directory [ 330.573490][ T6836] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.580775][ T6836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.590697][ T6836] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.597862][ T6836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.644409][T11484] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1341'. [ 330.725788][ T13] hsr_slave_0: left promiscuous mode [ 330.729782][ T5851] Bluetooth: hci6: command tx timeout [ 330.750257][ T13] hsr_slave_1: left promiscuous mode [ 330.757034][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 330.768457][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 330.778275][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 330.793110][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 330.829989][ T13] veth1_macvtap: left promiscuous mode [ 330.840178][ T13] veth0_macvtap: left promiscuous mode [ 330.845828][ T13] veth1_vlan: left promiscuous mode [ 330.854613][ T13] veth0_vlan: left promiscuous mode [ 331.456657][ T13] team0 (unregistering): Port device team_slave_1 removed [ 331.517329][ T13] team0 (unregistering): Port device team_slave_0 removed [ 331.932380][ T5851] Bluetooth: hci0: command tx timeout [ 332.169382][ T5851] Bluetooth: hci1: command tx timeout [ 332.815625][ T5851] Bluetooth: hci6: command tx timeout [ 332.879194][T11514] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 333.173356][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.272148][T11474] chnl_net:caif_netlink_parms(): no params data found [ 333.345224][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.446497][T11334] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 333.500725][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.663786][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 333.751267][T11474] bridge0: port 1(bridge_slave_0) entered blocking state [ 333.760299][T11474] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.767722][T11474] bridge_slave_0: entered allmulticast mode [ 333.783470][T11474] bridge_slave_0: entered promiscuous mode [ 333.816886][T11474] bridge0: port 2(bridge_slave_1) entered blocking state [ 333.839283][T11474] bridge0: port 2(bridge_slave_1) entered disabled state [ 333.846609][T11474] bridge_slave_1: entered allmulticast mode [ 333.858826][T11474] bridge_slave_1: entered promiscuous mode [ 333.977593][T11474] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.061995][T11474] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.167956][T11474] team0: Port device team_slave_0 added [ 334.201847][T11474] team0: Port device team_slave_1 added [ 334.244896][T11535] 8021q: adding VLAN 0 to HW filter on device bond1 [ 334.257400][T11535] bridge0: port 3(bond1) entered blocking state [ 334.264440][T11535] bridge0: port 3(bond1) entered disabled state [ 334.271743][T11535] bond1: entered allmulticast mode [ 334.277492][ T5851] Bluetooth: hci1: command tx timeout [ 334.280529][T11535] bond1: entered promiscuous mode [ 334.290996][T11535] bridge0: port 3(bond1) entered blocking state [ 334.297601][T11535] bridge0: port 3(bond1) entered forwarding state [ 334.347530][ T6836] bridge0: port 3(bond1) entered disabled state [ 334.355397][ T13] bridge_slave_1: left allmulticast mode [ 334.361311][ T13] bridge_slave_1: left promiscuous mode [ 334.367132][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.391271][ T13] bridge_slave_0: left allmulticast mode [ 334.396976][ T13] bridge_slave_0: left promiscuous mode [ 334.410196][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.853972][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 334.866566][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 334.877091][ T13] bond0 (unregistering): Released all slaves [ 334.898475][T11474] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 334.908178][T11474] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.954315][T11474] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 334.967472][T11474] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 334.975154][T11474] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.012041][T11474] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.144308][T11542] netlink: 52 bytes leftover after parsing attributes in process `syz.7.1351'. [ 335.167468][ T30] audit: type=1107 audit(1750026916.886:4): pid=11541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Ù‹5ž÷Œ•%èÍUýAÊÃËÙ ë0ä™l…t¿Ý•/Öÿ Ž6òŠ¨Šç›' [ 335.251833][T11474] hsr_slave_0: entered promiscuous mode [ 335.258734][T11474] hsr_slave_1: entered promiscuous mode [ 335.270706][T11474] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.278606][T11474] Cannot create hsr debugfs directory [ 335.352689][T11334] veth0_vlan: entered promiscuous mode [ 335.442863][ T13] hsr_slave_0: left promiscuous mode [ 335.461525][ T13] hsr_slave_1: left promiscuous mode [ 335.467881][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 335.476730][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 335.485444][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 335.493117][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 335.520610][ T13] veth1_macvtap: left promiscuous mode [ 335.526280][ T13] veth0_macvtap: left promiscuous mode [ 335.532891][ T13] veth1_vlan: left promiscuous mode [ 335.538413][ T13] veth0_vlan: left promiscuous mode [ 336.154208][ T13] team0 (unregistering): Port device team_slave_1 removed [ 336.206808][ T13] team0 (unregistering): Port device team_slave_0 removed [ 336.336001][ T5851] Bluetooth: hci1: command tx timeout [ 336.787664][T11386] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 336.807913][T11386] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 336.860375][T11386] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 336.890386][T11386] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 336.923231][T11334] veth1_vlan: entered promiscuous mode [ 336.955858][T11549] netlink: 1036 bytes leftover after parsing attributes in process `syz.7.1353'. [ 336.968984][T11549] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 337.214098][T11395] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 337.243758][T11334] veth0_macvtap: entered promiscuous mode [ 337.252705][T11395] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 337.271461][T11395] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 337.298401][T11395] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 337.334124][T11334] veth1_macvtap: entered promiscuous mode [ 337.406080][T11334] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 337.444921][T11334] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 337.510118][T11334] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.518898][T11334] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.528250][T11334] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.545403][T11334] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 337.602621][T11386] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.698308][T11386] 8021q: adding VLAN 0 to HW filter on device team0 [ 337.770864][ T6843] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.778073][ T6843] bridge0: port 1(bridge_slave_0) entered forwarding state [ 337.835616][ T6837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 337.863178][T11395] 8021q: adding VLAN 0 to HW filter on device bond0 [ 337.863242][ T6837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 337.902400][ T6843] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.909666][ T6843] bridge0: port 2(bridge_slave_1) entered forwarding state [ 337.990652][ T6843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 338.000099][ T6843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 338.005447][T11474] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 338.074495][T11474] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 338.094757][T11474] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 338.143392][T11474] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 338.233444][T11395] 8021q: adding VLAN 0 to HW filter on device team0 [ 338.304232][ T6836] bridge0: port 1(bridge_slave_0) entered blocking state [ 338.311496][ T6836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 338.355981][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 338.363234][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 338.405504][T11386] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 338.417597][ T5851] Bluetooth: hci1: command tx timeout [ 338.433507][T11581] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1357'. [ 338.651925][ T13] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.783217][ T13] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 338.963261][ T13] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.161475][ T13] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 339.246941][T11386] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.343928][T11474] 8021q: adding VLAN 0 to HW filter on device bond0 [ 339.441736][T11597] netlink: 'syz.7.1360': attribute type 10 has an invalid length. [ 339.461399][T11474] 8021q: adding VLAN 0 to HW filter on device team0 [ 339.483875][T11597] veth1_vlan: entered allmulticast mode [ 339.515192][T11597] team0: Device veth1_vlan failed to register rx_handler [ 339.691045][ T6836] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.698277][ T6836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 339.734101][T11386] veth0_vlan: entered promiscuous mode [ 339.755678][T11395] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 339.813260][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 339.824082][T11603] netlink: 212408 bytes leftover after parsing attributes in process `syz.7.1361'. [ 339.835630][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 339.847637][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 339.857066][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 339.865727][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 339.911138][ T1321] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.918373][ T1321] bridge0: port 2(bridge_slave_1) entered forwarding state [ 340.002298][T11604] syzkaller1: entered promiscuous mode [ 340.007842][T11604] syzkaller1: entered allmulticast mode [ 340.053733][T11386] veth1_vlan: entered promiscuous mode [ 340.073749][ T13] bridge_slave_1: left allmulticast mode [ 340.081655][ T13] bridge_slave_1: left promiscuous mode [ 340.087497][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 340.098148][ T13] bridge_slave_0: left allmulticast mode [ 340.104439][ T13] bridge_slave_0: left promiscuous mode [ 340.115764][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 340.555535][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 340.569527][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 340.585777][ T13] bond0 (unregistering): Released all slaves [ 340.815680][T11617] netlink: 'syz.7.1362': attribute type 2 has an invalid length. [ 340.898131][T11617] netlink: 'syz.7.1362': attribute type 2 has an invalid length. [ 340.986100][T11386] veth0_macvtap: entered promiscuous mode [ 341.003682][T11386] veth1_macvtap: entered promiscuous mode [ 341.115462][ T13] hsr_slave_0: left promiscuous mode [ 341.123567][ T13] hsr_slave_1: left promiscuous mode [ 341.130292][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 341.137803][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 341.150299][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 341.157802][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 341.185691][ T13] veth1_macvtap: left promiscuous mode [ 341.191749][ T13] veth0_macvtap: left promiscuous mode [ 341.197397][ T13] veth1_vlan: left promiscuous mode [ 341.204264][ T13] veth0_vlan: left promiscuous mode [ 341.785023][ T13] team0 (unregistering): Port device team_slave_1 removed [ 341.845968][ T13] team0 (unregistering): Port device team_slave_0 removed [ 341.931969][ T5851] Bluetooth: hci3: command tx timeout [ 342.453967][T11386] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.525126][T11386] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.586728][T11395] veth0_vlan: entered promiscuous mode [ 342.603523][T11386] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.629091][T11386] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.637868][T11386] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.651440][T11386] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.773813][T11395] veth1_vlan: entered promiscuous mode [ 342.828493][T11607] chnl_net:caif_netlink_parms(): no params data found [ 343.072610][T11474] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.183422][T11607] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.190891][T11607] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.198220][T11607] bridge_slave_0: entered allmulticast mode [ 343.207441][T11607] bridge_slave_0: entered promiscuous mode [ 343.249959][T11607] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.257216][T11607] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.266180][T11645] netlink: 40 bytes leftover after parsing attributes in process `syz.7.1366'. [ 343.275933][T11607] bridge_slave_1: entered allmulticast mode [ 343.284476][T11607] bridge_slave_1: entered promiscuous mode [ 343.298318][T11395] veth0_macvtap: entered promiscuous mode [ 343.335363][T11395] veth1_macvtap: entered promiscuous mode [ 343.367648][ T6843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.388571][T11607] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.397843][ T6843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.415941][T11607] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.502502][T11395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.526913][T11395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.556358][T11607] team0: Port device team_slave_0 added [ 343.572935][T11607] team0: Port device team_slave_1 added [ 343.623161][ T6844] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.630936][T11395] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.641773][ T6844] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.652817][T11395] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.664408][T11395] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.674457][T11395] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.707730][T11607] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.715111][T11607] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.746884][T11607] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.773556][T11607] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.781024][T11607] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.808934][T11607] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.879996][T11474] veth0_vlan: entered promiscuous mode [ 344.011626][ T5851] Bluetooth: hci3: command tx timeout [ 344.056070][T11607] hsr_slave_0: entered promiscuous mode [ 344.073880][T11607] hsr_slave_1: entered promiscuous mode [ 344.094728][T11607] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 344.111983][T11607] Cannot create hsr debugfs directory [ 344.174541][T11474] veth1_vlan: entered promiscuous mode [ 344.493555][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.602681][ T6837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.649703][ T6837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.672117][T11474] veth0_macvtap: entered promiscuous mode [ 344.726129][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.799288][T11474] veth1_macvtap: entered promiscuous mode [ 344.855924][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.896338][ T6837] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.906122][ T6837] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.958741][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 345.082184][T11474] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.120529][T11474] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.163116][T11474] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.176381][T11474] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.185248][T11474] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.194531][T11474] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.492617][ T13] bridge_slave_1: left allmulticast mode [ 345.498341][ T13] bridge_slave_1: left promiscuous mode [ 345.505583][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 345.517557][ T13] bridge_slave_0: left allmulticast mode [ 345.523743][ T13] bridge_slave_0: left promiscuous mode [ 345.536407][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 346.091983][ T5851] Bluetooth: hci3: command tx timeout [ 346.131939][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 346.142821][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 346.150982][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 346.158977][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 346.166795][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 346.303376][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 346.316350][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 346.330117][ T13] bond0 (unregistering): Released all slaves [ 346.384523][ T6837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.407069][ T6837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.537844][ T6836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 346.557739][ T6836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 346.679858][T11673] veth0: entered promiscuous mode [ 346.716419][T11674] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1371'. [ 346.783350][T11673] veth0: left promiscuous mode [ 346.997636][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 347.015507][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 347.024740][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 347.034619][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 347.042626][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 347.521164][T11679] bridge0: port 2(bridge_slave_1) entered disabled state [ 347.529261][T11679] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.131732][T11679] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.179902][ T5851] Bluetooth: hci3: command tx timeout [ 348.199493][T11679] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.249339][ T5851] Bluetooth: hci0: command tx timeout [ 348.371952][T11679] hsr0: left promiscuous mode [ 348.458321][T11679] veth1_vlan: left allmulticast mode [ 348.575792][T11679] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.585291][T11679] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.594479][T11679] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.603832][T11679] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.626557][T11679] netdevsim netdevsim7 netdevsim0: left promiscuous mode [ 348.700697][T11679] veth3: left allmulticast mode [ 348.895924][ T13] hsr_slave_0: left promiscuous mode [ 348.903160][ T13] hsr_slave_1: left promiscuous mode [ 348.909384][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 348.916871][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 348.928004][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 348.935526][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 348.957138][ T13] veth1_macvtap: left promiscuous mode [ 348.965325][ T13] veth0_macvtap: left promiscuous mode [ 348.971511][ T13] veth1_vlan: left promiscuous mode [ 348.976825][ T13] veth0_vlan: left promiscuous mode [ 349.139785][ T5851] Bluetooth: hci1: command tx timeout [ 349.723615][ T13] team0 (unregistering): Port device team_slave_1 removed [ 349.861266][ T13] team0 (unregistering): Port device team_slave_0 removed [ 349.900353][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 349.910832][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 349.933379][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 349.942122][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 349.959222][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 350.334814][ T5851] Bluetooth: hci0: command tx timeout [ 350.710678][T11607] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 350.722082][T11607] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 350.783528][T11715] netlink: 'syz.7.1377': attribute type 4 has an invalid length. [ 350.838486][T11719] netlink: 'syz.7.1377': attribute type 4 has an invalid length. [ 350.846643][T11607] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 350.875247][T11607] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 350.980349][T11669] chnl_net:caif_netlink_parms(): no params data found [ 351.035805][T11727] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1378'. [ 351.209517][ T5851] Bluetooth: hci1: command tx timeout [ 351.327233][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.348596][T11669] bridge0: port 1(bridge_slave_0) entered blocking state [ 351.362139][T11669] bridge0: port 1(bridge_slave_0) entered disabled state [ 351.371320][T11669] bridge_slave_0: entered allmulticast mode [ 351.378889][T11669] bridge_slave_0: entered promiscuous mode [ 351.469444][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.484596][T11669] bridge0: port 2(bridge_slave_1) entered blocking state [ 351.493356][T11669] bridge0: port 2(bridge_slave_1) entered disabled state [ 351.500984][T11669] bridge_slave_1: entered allmulticast mode [ 351.508505][T11669] bridge_slave_1: entered promiscuous mode [ 351.640090][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.658721][T11669] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 351.705057][T11669] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.760631][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.786701][T11677] chnl_net:caif_netlink_parms(): no params data found [ 351.850420][T11669] team0: Port device team_slave_0 added [ 351.871757][T11705] chnl_net:caif_netlink_parms(): no params data found [ 351.890423][T11669] team0: Port device team_slave_1 added [ 351.997501][T11669] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 352.006896][T11669] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.009810][ T5851] Bluetooth: hci6: command tx timeout [ 352.035418][T11669] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 352.148457][T11745] ipt_ECN: cannot use operation on non-tcp rule [ 352.167569][T11669] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 352.187394][T11669] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 352.218002][T11669] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.374927][T11669] hsr_slave_0: entered promiscuous mode [ 352.382555][T11669] hsr_slave_1: entered promiscuous mode [ 352.389313][T11669] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.397146][T11669] Cannot create hsr debugfs directory [ 352.410188][ T5851] Bluetooth: hci0: command tx timeout [ 352.454908][T11677] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.473762][T11677] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.487844][T11677] bridge_slave_0: entered allmulticast mode [ 352.507722][T11677] bridge_slave_0: entered promiscuous mode [ 352.601858][T11677] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.610924][T11677] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.618250][T11677] bridge_slave_1: entered allmulticast mode [ 352.636167][T11677] bridge_slave_1: entered promiscuous mode [ 352.845790][T11705] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.855867][T11705] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.863629][T11705] bridge_slave_0: entered allmulticast mode [ 352.874236][T11705] bridge_slave_0: entered promiscuous mode [ 352.968448][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.017657][T11677] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.028742][T11705] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.052906][T11705] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.068942][T11705] bridge_slave_1: entered allmulticast mode [ 353.079384][T11705] bridge_slave_1: entered promiscuous mode [ 353.130838][T11677] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.176972][T11607] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.248561][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.296719][T11705] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.306177][ T5851] Bluetooth: hci1: command tx timeout [ 353.315796][T11705] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.457421][T11770] netlink: 'syz.7.1388': attribute type 1 has an invalid length. [ 353.480359][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.526870][T11677] team0: Port device team_slave_0 added [ 353.535060][T11771] netlink: 248 bytes leftover after parsing attributes in process `syz.7.1388'. [ 353.547162][T11677] team0: Port device team_slave_1 added [ 353.594027][T11770] sit1: entered promiscuous mode [ 353.600461][T11770] sit1: entered allmulticast mode [ 353.638810][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.683953][T11705] team0: Port device team_slave_0 added [ 353.696110][T11705] team0: Port device team_slave_1 added [ 353.797522][T11677] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.822700][T11677] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.850461][T11677] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 353.875060][T11677] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 353.884233][T11677] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.910826][T11677] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 353.928350][T11607] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.942644][T11775] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1389'. [ 353.954128][T11705] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 353.967274][T11705] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 353.998639][T11776] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1389'. [ 354.005029][T11705] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.066606][T11775] xfrm1: entered promiscuous mode [ 354.077560][T11775] xfrm1: entered allmulticast mode [ 354.089531][ T5851] Bluetooth: hci6: command tx timeout [ 354.102030][T11705] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.109747][T11705] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.136681][T11705] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.198975][ T6831] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.206292][ T6831] bridge0: port 1(bridge_slave_0) entered forwarding state [ 354.296142][ T6831] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.303387][ T6831] bridge0: port 2(bridge_slave_1) entered forwarding state [ 354.357328][T11677] hsr_slave_0: entered promiscuous mode [ 354.366848][T11677] hsr_slave_1: entered promiscuous mode [ 354.374197][T11677] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.382015][T11677] Cannot create hsr debugfs directory [ 354.424078][T11705] hsr_slave_0: entered promiscuous mode [ 354.437353][T11705] hsr_slave_1: entered promiscuous mode [ 354.444190][T11705] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.452244][T11705] Cannot create hsr debugfs directory [ 354.483151][ T13] bridge_slave_1: left allmulticast mode [ 354.491696][ T5851] Bluetooth: hci0: command tx timeout [ 354.497856][ T13] bridge_slave_1: left promiscuous mode [ 354.503836][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.517667][ T13] bridge_slave_0: left allmulticast mode [ 354.523838][ T13] bridge_slave_0: left promiscuous mode [ 354.529784][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.542432][ T13] bridge_slave_1: left allmulticast mode [ 354.548133][ T13] bridge_slave_1: left promiscuous mode [ 354.555197][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.566113][ T13] bridge_slave_0: left allmulticast mode [ 354.572924][ T13] bridge_slave_0: left promiscuous mode [ 354.578747][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.107312][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.119549][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.140308][ T13] bond0 (unregistering): Released all slaves [ 355.370056][ T5851] Bluetooth: hci1: command tx timeout [ 355.489545][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.506326][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.519723][ T13] bond0 (unregistering): Released all slaves [ 356.035579][T11785] netlink: 64 bytes leftover after parsing attributes in process `syz.7.1392'. [ 356.049769][T11785] tipc: Invalid UDP bearer configuration [ 356.049833][T11785] tipc: Enabling of bearer rejected, failed to enable media [ 356.169721][ T5851] Bluetooth: hci6: command tx timeout [ 356.446363][T11669] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 356.463256][T11669] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 356.525486][T11790] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1394'. [ 356.546924][T11669] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 356.597129][ T13] hsr_slave_0: left promiscuous mode [ 356.604845][ T13] hsr_slave_1: left promiscuous mode [ 356.614406][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.622083][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.645794][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.656800][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.686593][ T13] hsr_slave_0: left promiscuous mode [ 356.698512][ T13] hsr_slave_1: left promiscuous mode [ 356.721074][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 356.728628][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 356.764655][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 356.778036][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 356.838637][ T13] veth1_macvtap: left promiscuous mode [ 356.844930][ T13] veth0_macvtap: left promiscuous mode [ 356.856976][ T13] veth1_vlan: left promiscuous mode [ 356.862916][ T13] veth0_vlan: left promiscuous mode [ 356.872427][ T13] veth1_macvtap: left promiscuous mode [ 356.878047][ T13] veth0_macvtap: left promiscuous mode [ 356.883835][ T13] veth1_vlan: left promiscuous mode [ 356.895220][ T13] veth0_vlan: left promiscuous mode [ 357.663006][ T13] team0 (unregistering): Port device team_slave_1 removed [ 357.721517][ T13] team0 (unregistering): Port device team_slave_0 removed [ 358.259371][ T5851] Bluetooth: hci6: command tx timeout [ 358.728422][ T13] team0 (unregistering): Port device team_slave_1 removed [ 358.785523][ T13] team0 (unregistering): Port device team_slave_0 removed [ 359.336317][T11669] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 359.356995][T11803] netlink: 'syz.7.1397': attribute type 1 has an invalid length. [ 359.380015][T11803] netlink: 224 bytes leftover after parsing attributes in process `syz.7.1397'. [ 359.406844][T11803] workqueue: Failed to create a rescuer kthread for wq "phy3": -EINTR [ 359.778285][T11607] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 360.058979][T11669] 8021q: adding VLAN 0 to HW filter on device bond0 [ 360.168811][T11831] netlink: 'syz.7.1399': attribute type 21 has an invalid length. [ 360.185314][T11831] netlink: 156 bytes leftover after parsing attributes in process `syz.7.1399'. [ 360.200933][T11669] 8021q: adding VLAN 0 to HW filter on device team0 [ 360.220415][T11831] netlink: 44 bytes leftover after parsing attributes in process `syz.7.1399'. [ 360.248750][ T6837] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.256083][ T6837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 360.281690][ T6836] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.288943][ T6836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 360.578865][T11838] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1401'. [ 360.588460][T11677] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 360.602889][T11677] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 360.614862][T11677] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 360.639761][T11837] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1401'. [ 360.659299][T11677] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 360.667950][T11837] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1401'. [ 360.801796][T11607] veth0_vlan: entered promiscuous mode [ 360.902591][T11607] veth1_vlan: entered promiscuous mode [ 360.929791][T11705] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 360.990497][T11705] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 361.083310][T11705] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 361.117686][T11705] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 361.134508][T11856] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1403'. [ 361.137823][T11607] veth0_macvtap: entered promiscuous mode [ 361.166877][T11677] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.217937][T11607] veth1_macvtap: entered promiscuous mode [ 361.280479][T11677] 8021q: adding VLAN 0 to HW filter on device team0 [ 361.315946][T11607] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.332402][T11669] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 361.353851][ T6837] bridge0: port 1(bridge_slave_0) entered blocking state [ 361.361093][ T6837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 361.383244][T11607] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.398253][ T6836] bridge0: port 2(bridge_slave_1) entered blocking state [ 361.405529][ T6836] bridge0: port 2(bridge_slave_1) entered forwarding state [ 361.420770][T11607] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.430272][T11607] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.439817][T11607] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.448575][T11607] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.752033][ T1321] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.761077][ T1321] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.796998][T11669] veth0_vlan: entered promiscuous mode [ 361.875566][ T6843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.888835][ T6843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.922411][T11669] veth1_vlan: entered promiscuous mode [ 361.967268][T11705] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.125000][T11705] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.185608][ T6836] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.192950][ T6836] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.278229][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 362.285472][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 362.337780][T11669] veth0_macvtap: entered promiscuous mode [ 362.384338][T11677] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 362.413477][T11669] veth1_macvtap: entered promiscuous mode [ 362.525268][ T6843] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.642373][ T6843] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.832920][ T6843] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.911504][T11669] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 362.994842][ T6843] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 363.034863][T11669] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 363.070532][T11669] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.088748][T11669] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.101255][T11669] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.110226][T11669] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 363.397809][ T6831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.423942][ T6831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.592937][ T6836] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 363.624198][T11705] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 363.632192][ T6836] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 363.659954][ T6843] bridge_slave_1: left allmulticast mode [ 363.672623][ T6843] bridge_slave_1: left promiscuous mode [ 363.689699][ T6843] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.715236][ T6843] bridge_slave_0: left allmulticast mode [ 363.728057][ T6843] bridge_slave_0: left promiscuous mode [ 363.738162][ T6843] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.781010][ T51] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 363.790686][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 363.800312][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 363.813619][ T51] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 363.825882][ T51] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 364.305394][ T6843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.317454][ T6843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.335356][ T6843] bond0 (unregistering): Released all slaves [ 364.467960][T11677] veth0_vlan: entered promiscuous mode [ 364.824450][T11677] veth1_vlan: entered promiscuous mode [ 364.927422][ T6843] hsr_slave_0: left promiscuous mode [ 364.944172][ T6843] hsr_slave_1: left promiscuous mode [ 364.956629][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.968962][ T6843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.988564][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.997692][ T6843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 365.053154][ T6843] veth1_macvtap: left promiscuous mode [ 365.058785][ T6843] veth0_macvtap: left promiscuous mode [ 365.075660][ T6843] veth1_vlan: left promiscuous mode [ 365.081445][ T6843] veth0_vlan: left promiscuous mode [ 365.678069][ T6843] team0 (unregistering): Port device team_slave_1 removed [ 365.731967][ T6843] team0 (unregistering): Port device team_slave_0 removed [ 365.929596][ T5851] Bluetooth: hci3: command tx timeout [ 366.293239][T11912] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1413'. [ 366.378146][T11705] veth0_vlan: entered promiscuous mode [ 366.447380][T11705] veth1_vlan: entered promiscuous mode [ 366.503781][T11914] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1414'. [ 366.594681][T11677] veth0_macvtap: entered promiscuous mode [ 366.656302][T11705] veth0_macvtap: entered promiscuous mode [ 366.676745][T11705] veth1_macvtap: entered promiscuous mode [ 366.717211][T11677] veth1_macvtap: entered promiscuous mode [ 366.897394][T11898] chnl_net:caif_netlink_parms(): no params data found [ 366.922933][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 366.932462][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 366.941734][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 366.951232][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 366.959914][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 366.982036][T11705] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.008370][T11677] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.037026][T11705] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.053677][T11677] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.115970][T11677] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.125673][T11677] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.138462][T11677] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.148216][T11677] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.171871][T11705] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.181475][T11705] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.192049][T11705] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.201639][T11705] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.395760][T11898] bridge0: port 1(bridge_slave_0) entered blocking state [ 367.413229][T11898] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.421387][T11898] bridge_slave_0: entered allmulticast mode [ 367.428844][T11898] bridge_slave_0: entered promiscuous mode [ 367.438356][T11898] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.458342][T11898] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.466350][T11898] bridge_slave_1: entered allmulticast mode [ 367.483911][T11898] bridge_slave_1: entered promiscuous mode [ 367.568063][ T6843] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.696747][ T6843] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.744416][T11898] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.787600][T11898] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.923048][ T6843] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.956972][ T6837] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.978150][T11898] team0: Port device team_slave_0 added [ 367.980572][ T6837] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.011133][ T51] Bluetooth: hci3: command tx timeout [ 368.041324][T11898] team0: Port device team_slave_1 added [ 368.117114][ T6843] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.219653][ T967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.238588][T11898] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 368.248362][ T967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.259459][T11898] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.285808][T11898] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 368.303619][T11898] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 368.310809][T11898] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 368.344661][T11898] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 368.384561][ T6831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.405240][T11947] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 368.409200][ T6831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.562365][ T1335] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.617926][ T1335] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.765352][T11919] chnl_net:caif_netlink_parms(): no params data found [ 368.865733][T11898] hsr_slave_0: entered promiscuous mode [ 368.877593][T11898] hsr_slave_1: entered promiscuous mode [ 368.884589][T11898] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 368.892862][T11898] Cannot create hsr debugfs directory [ 368.961883][T11956] 8021q: adding VLAN 0 to HW filter on device bond2 [ 368.970418][T11956] bridge0: port 4(bond2) entered blocking state [ 368.977068][T11956] bridge0: port 4(bond2) entered disabled state [ 368.984089][T11956] bond2: entered allmulticast mode [ 368.992475][T11956] bond2: entered promiscuous mode [ 369.060312][ T51] Bluetooth: hci0: command tx timeout [ 369.253972][ T6843] bridge_slave_1: left allmulticast mode [ 369.283361][ T6843] bridge_slave_1: left promiscuous mode [ 369.289475][ T6843] bridge0: port 2(bridge_slave_1) entered disabled state [ 369.311074][ T6843] bridge_slave_0: left allmulticast mode [ 369.316803][ T6843] bridge_slave_0: left promiscuous mode [ 369.349514][ T6843] bridge0: port 1(bridge_slave_0) entered disabled state [ 369.890611][ T6843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 369.903498][ T6843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 369.914353][ T6843] bond0 (unregistering): Released all slaves [ 370.093705][ T51] Bluetooth: hci3: command tx timeout [ 370.094904][T11919] bridge0: port 1(bridge_slave_0) entered blocking state [ 370.106596][T11919] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.114063][T11919] bridge_slave_0: entered allmulticast mode [ 370.121928][T11919] bridge_slave_0: entered promiscuous mode [ 370.167035][T11919] bridge0: port 2(bridge_slave_1) entered blocking state [ 370.174886][T11919] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.182782][T11919] bridge_slave_1: entered allmulticast mode [ 370.191302][T11919] bridge_slave_1: entered promiscuous mode [ 370.287742][T11919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 370.301405][T11919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 370.466293][ T6843] hsr_slave_0: left promiscuous mode [ 370.481826][ T6843] hsr_slave_1: left promiscuous mode [ 370.488125][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.516230][ T6843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.527445][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.540607][ T6843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.580333][ T6843] veth1_macvtap: left promiscuous mode [ 370.585972][ T6843] veth0_macvtap: left promiscuous mode [ 370.592057][ T6843] veth1_vlan: left promiscuous mode [ 370.597445][ T6843] veth0_vlan: left promiscuous mode [ 370.754264][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 370.765905][ T5851] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 370.778989][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 370.804466][ T5851] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 370.818146][ T5851] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 371.142695][ T5851] Bluetooth: hci0: command tx timeout [ 371.272566][ T6843] team0 (unregistering): Port device team_slave_1 removed [ 371.327064][ T6843] team0 (unregistering): Port device team_slave_0 removed [ 371.923661][T11919] team0: Port device team_slave_0 added [ 371.933383][T11919] team0: Port device team_slave_1 added [ 372.041241][T11919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 372.048355][T11919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.076254][T11919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 372.091523][T11919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 372.098549][T11919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.126742][T11919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 372.169550][ T5851] Bluetooth: hci3: command tx timeout [ 372.417421][T11919] hsr_slave_0: entered promiscuous mode [ 372.435415][T11919] hsr_slave_1: entered promiscuous mode [ 372.448451][T11919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 372.465258][T11919] Cannot create hsr debugfs directory [ 372.551513][T11970] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1423'. [ 372.889742][ T5851] Bluetooth: hci1: command tx timeout [ 372.944167][ T51] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 372.953944][ T51] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 372.962708][ T51] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 372.971268][ T51] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 372.992062][ T51] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 373.048313][T11962] chnl_net:caif_netlink_parms(): no params data found [ 373.105979][T11981] tipc: Started in network mode [ 373.111730][T11981] tipc: Node identity 4ae161e1ee37, cluster identity 4711 [ 373.119324][T11981] tipc: Enabled bearer , priority 0 [ 373.209223][ T51] Bluetooth: hci0: command tx timeout [ 373.318852][ T6843] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.368016][T11898] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 373.402325][T11898] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 373.499721][ T6843] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.521778][T11898] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 373.686186][T11898] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 373.721826][T11994] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1429'. [ 373.760412][ T6843] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.785969][T11962] bridge0: port 1(bridge_slave_0) entered blocking state [ 373.796502][T11962] bridge0: port 1(bridge_slave_0) entered disabled state [ 373.805637][T11962] bridge_slave_0: entered allmulticast mode [ 373.814542][T11962] bridge_slave_0: entered promiscuous mode [ 373.826003][T11962] bridge0: port 2(bridge_slave_1) entered blocking state [ 373.833259][T11962] bridge0: port 2(bridge_slave_1) entered disabled state [ 373.840767][T11962] bridge_slave_1: entered allmulticast mode [ 373.851820][T11962] bridge_slave_1: entered promiscuous mode [ 373.891380][ T6843] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.014443][T11962] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 374.100189][T11962] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 374.229875][T11682] tipc: Node number set to 2765513185 [ 374.257143][T11962] team0: Port device team_slave_0 added [ 374.305815][T11962] team0: Port device team_slave_1 added [ 374.434999][T11898] 8021q: adding VLAN 0 to HW filter on device bond0 [ 374.512145][ T6843] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.615078][ T6843] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.635593][T11962] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 374.646503][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.677692][T11962] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 374.720258][T11977] chnl_net:caif_netlink_parms(): no params data found [ 374.767717][ T6843] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.797400][T11962] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 374.811117][T11962] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 374.842093][T11962] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 374.912917][ T6843] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.970110][ T5851] Bluetooth: hci1: command tx timeout [ 375.046684][T11919] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 375.053992][ T5851] Bluetooth: hci6: command tx timeout [ 375.091796][T11898] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.154291][T11962] hsr_slave_0: entered promiscuous mode [ 375.154813][T12023] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1434'. [ 375.170571][T11962] hsr_slave_1: entered promiscuous mode [ 375.178188][T11962] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 375.186400][T11962] Cannot create hsr debugfs directory [ 375.204370][T11919] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 375.218072][T11919] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 375.290856][ T5851] Bluetooth: hci0: command tx timeout [ 375.321746][T11919] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 375.337945][T12029] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1435'. [ 375.385207][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.392398][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.404070][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.411278][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.422003][T11977] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.429331][T11977] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.436617][T11977] bridge_slave_0: entered allmulticast mode [ 375.444455][T11977] bridge_slave_0: entered promiscuous mode [ 375.541706][T11977] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.549334][T11977] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.556674][T11977] bridge_slave_1: entered allmulticast mode [ 375.573961][T11977] bridge_slave_1: entered promiscuous mode [ 375.686354][T11977] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.767239][T11977] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.778220][ T5851] Bluetooth: hci7: command 0x0406 tx timeout [ 375.859953][ T6843] bridge_slave_1: left allmulticast mode [ 375.865675][ T6843] bridge_slave_1: left promiscuous mode [ 375.888444][ T6843] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.902246][ T6843] bridge_slave_0: left allmulticast mode [ 375.907973][ T6843] bridge_slave_0: left promiscuous mode [ 375.914084][ T6843] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.914301][T12043] netlink: 'syz.7.1438': attribute type 1 has an invalid length. [ 375.938402][ T6843] bridge_slave_1: left allmulticast mode [ 375.944341][ T6843] bridge_slave_1: left promiscuous mode [ 375.950363][ T6843] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.963196][ T6843] bridge_slave_0: left allmulticast mode [ 375.968901][ T6843] bridge_slave_0: left promiscuous mode [ 375.978795][ T6843] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.477690][ T6843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.492456][ T6843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.512724][ T6843] bond0 (unregistering): Released all slaves [ 376.906101][ T6843] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 376.925996][ T6843] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 376.938442][ T6843] bond0 (unregistering): Released all slaves [ 376.971849][T11977] team0: Port device team_slave_0 added [ 376.999765][T12043] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 377.049866][ T51] Bluetooth: hci1: command tx timeout [ 377.098214][T12045] veth9: entered promiscuous mode [ 377.135193][T12046] gretap0: entered allmulticast mode [ 377.135362][ T51] Bluetooth: hci6: command tx timeout [ 377.182756][T11977] team0: Port device team_slave_1 added [ 377.309448][T11977] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 377.316463][T11977] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.346339][T11977] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 377.443890][T11977] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 377.452878][T11977] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 377.482918][T11977] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 377.747169][T11977] hsr_slave_0: entered promiscuous mode [ 377.767726][T11977] hsr_slave_1: entered promiscuous mode [ 377.778093][T11977] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 377.795271][T11977] Cannot create hsr debugfs directory [ 378.172246][ T6843] hsr_slave_0: left promiscuous mode [ 378.180707][ T6843] hsr_slave_1: left promiscuous mode [ 378.188863][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.198483][ T6843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.216703][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.224829][ T6843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.257843][ T6843] hsr_slave_0: left promiscuous mode [ 378.265525][ T6843] hsr_slave_1: left promiscuous mode [ 378.272222][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 378.280283][ T6843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 378.289214][ T6843] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 378.298099][ T6843] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 378.344243][ T6843] veth1_macvtap: left promiscuous mode [ 378.351574][ T6843] veth0_macvtap: left promiscuous mode [ 378.357322][ T6843] veth1_vlan: left promiscuous mode [ 378.363151][ T6843] veth0_vlan: left promiscuous mode [ 378.369746][ T6843] veth1_macvtap: left promiscuous mode [ 378.375306][ T6843] veth0_macvtap: left promiscuous mode [ 378.383857][ T6843] veth1_vlan: left promiscuous mode [ 378.389400][ T6843] veth0_vlan: left promiscuous mode [ 379.130835][ T51] Bluetooth: hci1: command tx timeout [ 379.137615][ T6843] team0 (unregistering): Port device team_slave_1 removed [ 379.188837][ T6843] team0 (unregistering): Port device team_slave_0 removed [ 379.213028][ T51] Bluetooth: hci6: command tx timeout [ 380.248854][ T6843] team0 (unregistering): Port device team_slave_1 removed [ 380.305271][ T6843] team0 (unregistering): Port device team_slave_0 removed [ 381.165894][T11919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 381.228909][T11898] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 381.291172][ T51] Bluetooth: hci6: command tx timeout [ 381.356041][T11962] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 381.402824][T11962] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 381.427811][T11962] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 381.459213][T11962] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 381.566551][T11919] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.706026][ T1335] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.713318][ T1335] bridge0: port 1(bridge_slave_0) entered forwarding state [ 381.745083][T12087] netlink: 'syz.7.1447': attribute type 1 has an invalid length. [ 381.766906][ T1335] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.768417][T12087] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 381.774131][ T1335] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.238821][T11977] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 382.275291][T11898] veth0_vlan: entered promiscuous mode [ 382.290511][T11977] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 382.325931][T11977] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 382.371488][T12098] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1449'. [ 382.384285][T11977] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 382.444295][T11898] veth1_vlan: entered promiscuous mode [ 382.493702][T11962] 8021q: adding VLAN 0 to HW filter on device bond0 [ 382.606742][T11919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 382.628666][T11962] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.648914][T11898] veth0_macvtap: entered promiscuous mode [ 382.685310][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.692539][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 382.732415][T11898] veth1_macvtap: entered promiscuous mode [ 382.768660][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.775893][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 382.842328][T11898] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 382.856129][T11898] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 382.884929][T11898] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.903110][T11898] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.912167][T11898] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 382.921352][T11898] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 383.106571][T11962] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 383.117583][T11962] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 383.236271][T11977] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.273407][T11919] veth0_vlan: entered promiscuous mode [ 383.310633][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.318644][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.424762][T11977] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.453026][T11919] veth1_vlan: entered promiscuous mode [ 383.483600][ T6837] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.490886][ T6837] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.519471][ T1321] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 383.527373][ T1321] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 383.573963][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.581295][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 383.666876][T12134] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1455'. [ 383.801991][T11919] veth0_macvtap: entered promiscuous mode [ 383.853822][T11919] veth1_macvtap: entered promiscuous mode [ 383.875505][T11962] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.060657][T12139] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1456'. [ 384.101185][T12139] netlink: 'syz.7.1456': attribute type 7 has an invalid length. [ 384.124761][ T1335] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.137378][T12139] netlink: 'syz.7.1456': attribute type 8 has an invalid length. [ 384.148749][T12139] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1456'. [ 384.192554][T11919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 384.228541][T12139] erspan0: entered promiscuous mode [ 384.235625][T12139] batadv_slave_1: entered promiscuous mode [ 384.244103][T12139] erspan0: left promiscuous mode [ 384.253044][T12139] batadv_slave_1: left promiscuous mode [ 384.392303][ T1335] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.450335][T11919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 384.523066][ T1335] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.582899][T11919] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.598100][T11919] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.607181][T11919] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.616627][T11919] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 384.693777][ T1335] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.787487][T11977] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.975827][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.018271][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.159680][ T1335] bridge_slave_1: left allmulticast mode [ 385.165434][ T1335] bridge_slave_1: left promiscuous mode [ 385.182079][ T1335] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.202804][ T1335] bridge_slave_0: left allmulticast mode [ 385.219263][ T1335] bridge_slave_0: left promiscuous mode [ 385.225152][ T1335] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.381093][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.390912][ T5851] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.416496][ T5851] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.437946][ T5851] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.461302][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.771031][ T1335] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.783845][ T1335] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.794285][ T1335] bond0 (unregistering): Released all slaves [ 385.907933][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 385.910726][T11962] veth0_vlan: entered promiscuous mode [ 385.921624][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 385.937094][T11977] veth0_vlan: entered promiscuous mode [ 385.953446][T11977] veth1_vlan: entered promiscuous mode [ 386.088739][T12158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.126364][T12158] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 386.165417][T11962] veth1_vlan: entered promiscuous mode [ 386.376961][ T1335] hsr_slave_0: left promiscuous mode [ 386.384192][ T1335] hsr_slave_1: left promiscuous mode [ 386.390981][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.398510][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.406924][ T1335] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.426205][ T1335] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.478030][ T1335] veth1_macvtap: left promiscuous mode [ 386.484181][ T1335] veth0_macvtap: left promiscuous mode [ 386.491218][ T1335] veth1_vlan: left promiscuous mode [ 386.496642][ T1335] veth0_vlan: left promiscuous mode [ 387.159975][ T1335] team0 (unregistering): Port device team_slave_1 removed [ 387.231319][ T1335] team0 (unregistering): Port device team_slave_0 removed [ 387.530833][ T51] Bluetooth: hci3: command tx timeout [ 387.834903][T11977] veth0_macvtap: entered promiscuous mode [ 387.893077][T11962] veth0_macvtap: entered promiscuous mode [ 387.924328][T11977] veth1_macvtap: entered promiscuous mode [ 387.970033][T12166] vlan2: entered promiscuous mode [ 387.976880][T12166] vlan2: entered allmulticast mode [ 388.000209][T12166] hsr_slave_1: entered allmulticast mode [ 388.041878][T11962] veth1_macvtap: entered promiscuous mode [ 388.084137][T12166] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 388.191239][T11962] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.200879][T11977] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.294005][T11962] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.335335][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 388.345561][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 388.352996][T11977] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.364566][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 388.385888][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 388.396961][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 388.415812][T11962] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.439721][T11962] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.448498][T11962] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.457526][T11962] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.522619][T11977] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.541067][T11977] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.555312][T11977] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.564341][T11977] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.696293][T12155] chnl_net:caif_netlink_parms(): no params data found [ 388.863832][ T1335] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.000027][ T1335] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.077975][T12155] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.087732][T12155] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.095840][T12155] bridge_slave_0: entered allmulticast mode [ 389.106860][T12155] bridge_slave_0: entered promiscuous mode [ 389.117134][T12155] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.126547][T12155] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.139682][T12155] bridge_slave_1: entered allmulticast mode [ 389.148384][T12155] bridge_slave_1: entered promiscuous mode [ 389.173955][ T1335] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.262594][T12155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.286478][ T6843] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.295886][ T6843] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.316695][ T1335] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 389.335708][T12155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.379272][ T6831] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.390817][ T6831] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.504042][T12155] team0: Port device team_slave_0 added [ 389.588443][T12155] team0: Port device team_slave_1 added [ 389.597023][ T6831] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.605619][ T6831] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.614688][ T5851] Bluetooth: hci3: command tx timeout [ 389.657993][ T6843] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.732864][ T6843] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.914705][T12155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 389.942580][T12155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 389.976918][T12155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.088273][T12168] chnl_net:caif_netlink_parms(): no params data found [ 390.128760][T12155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.159606][T12155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.203538][T12155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.490649][ T5851] Bluetooth: hci0: command tx timeout [ 390.544434][ T1335] bridge_slave_1: left allmulticast mode [ 390.559313][ T1335] bridge_slave_1: left promiscuous mode [ 390.565293][ T1335] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.595231][ T1335] bridge_slave_0: left allmulticast mode [ 390.601211][ T1335] bridge_slave_0: left promiscuous mode [ 390.607068][ T1335] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.969641][ T31] INFO: task syz.5.1109:10305 blocked for more than 143 seconds. [ 390.977464][ T31] Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 [ 390.985409][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 390.994590][ T31] task:syz.5.1109 state:D stack:27528 pid:10305 tgid:10304 ppid:8044 task_flags:0x400040 flags:0x00004004 [ 391.006739][ T31] Call Trace: [ 391.010150][ T31] [ 391.013128][ T31] __schedule+0x16f5/0x4d00 [ 391.017705][ T31] ? __lock_acquire+0xab9/0xd20 [ 391.022893][ T31] ? schedule+0x165/0x360 [ 391.027289][ T31] ? __pfx___schedule+0x10/0x10 [ 391.032444][ T31] ? schedule+0x91/0x360 [ 391.036746][ T31] schedule+0x165/0x360 [ 391.041106][ T31] schedule_preempt_disabled+0x13/0x30 [ 391.048098][ T31] __mutex_lock+0x724/0xe80 [ 391.053040][ T31] ? __mutex_lock+0x51b/0xe80 [ 391.057794][ T31] ? nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 391.063821][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 391.068911][ T31] ? __kmalloc_node_track_caller_noprof+0x28e/0x4e0 [ 391.075646][ T31] ? __nlmsg_put+0xef/0x1b0 [ 391.080363][ T31] ? genlmsg_put+0x137/0x2e0 [ 391.085019][ T31] nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 391.090845][ T31] ? __dev_queue_xmit+0x27e/0x3a70 [ 391.096013][ T31] ? genl_family_rcv_msg_attrs_parse+0x13b/0x2a0 [ 391.102545][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 391.108173][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 391.114493][ T31] genl_rcv_msg+0x60e/0x790 [ 391.119192][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.124277][ T31] ? ref_tracker_free+0x63a/0x7d0 [ 391.130550][ T31] ? __pfx_nfsd_nl_listener_get_doit+0x10/0x10 [ 391.136861][ T31] ? __pfx_ref_tracker_free+0x10/0x10 [ 391.142505][ T31] netlink_rcv_skb+0x208/0x470 [ 391.159177][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.164313][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.177649][ T31] ? down_read+0x1ad/0x2e0 [ 391.182535][ T31] genl_rcv+0x28/0x40 [ 391.186582][ T31] netlink_unicast+0x75b/0x8d0 [ 391.200211][ T31] netlink_sendmsg+0x805/0xb30 [ 391.205098][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.225025][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 391.232482][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.237841][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.244514][ T31] __sock_sendmsg+0x219/0x270 [ 391.252537][ T31] ____sys_sendmsg+0x505/0x830 [ 391.257397][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.263937][ T31] ? import_iovec+0x74/0xa0 [ 391.268532][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 391.275122][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.280604][ T31] ? __fget_files+0x2a/0x420 [ 391.285245][ T31] ? __fget_files+0x3a0/0x420 [ 391.290247][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 391.295456][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.301101][ T31] ? rcu_is_watching+0x15/0xb0 [ 391.305935][ T31] ? do_syscall_64+0xbe/0x3b0 [ 391.310817][ T31] do_syscall_64+0xfa/0x3b0 [ 391.315378][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.322976][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 391.326669][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.332766][ T51] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 391.343277][ T31] ? clear_bhb_loop+0x60/0xb0 [ 391.345100][ T51] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 391.348020][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.358729][ T51] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 391.372365][ T51] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 391.378177][ T31] RIP: 0033:0x7f3e3d78e929 [ 391.384353][ T31] RSP: 002b:00007f3e3e539038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.393142][ T31] RAX: ffffffffffffffda RBX: 00007f3e3d9b5fa0 RCX: 00007f3e3d78e929 [ 391.401340][ T31] RDX: 0000000024000100 RSI: 0000200000001740 RDI: 0000000000000004 [ 391.409419][ T31] RBP: 00007f3e3d810b39 R08: 0000000000000000 R09: 0000000000000000 [ 391.418653][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.426886][ T31] R13: 0000000000000000 R14: 00007f3e3d9b5fa0 R15: 00007ffd7ee88be8 [ 391.435084][ T31] [ 391.453090][ T31] INFO: task syz.2.1119:10366 blocked for more than 143 seconds. [ 391.463272][ T31] Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 [ 391.471028][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 391.479859][ T31] task:syz.2.1119 state:D stack:25352 pid:10366 tgid:10365 ppid:5846 task_flags:0x400140 flags:0x00004004 [ 391.492063][ T31] Call Trace: [ 391.495383][ T31] [ 391.498347][ T31] __schedule+0x16f5/0x4d00 [ 391.503048][ T31] ? __lock_acquire+0xab9/0xd20 [ 391.507947][ T31] ? schedule+0x165/0x360 [ 391.512451][ T31] ? __pfx___schedule+0x10/0x10 [ 391.517343][ T31] ? schedule+0x91/0x360 [ 391.521662][ T31] schedule+0x165/0x360 [ 391.525880][ T31] schedule_preempt_disabled+0x13/0x30 [ 391.531525][ T31] __mutex_lock+0x724/0xe80 [ 391.536079][ T31] ? __mutex_lock+0x51b/0xe80 [ 391.541005][ T31] ? nfsd_nl_listener_set_doit+0x12a/0x1650 [ 391.546950][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 391.552050][ T31] ? __asan_memset+0x22/0x50 [ 391.558773][ T31] ? ____sys_sendmsg+0x505/0x830 [ 391.563833][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 391.568723][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 391.573925][ T31] nfsd_nl_listener_set_doit+0x12a/0x1650 [ 391.579844][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 391.585651][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 391.592039][ T31] ? __nla_parse+0x40/0x60 [ 391.596507][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 391.603010][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 391.608641][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 391.615485][ T31] ? bpf_lsm_capable+0x9/0x20 [ 391.620570][ T31] ? security_capable+0x7e/0x2e0 [ 391.625566][ T31] genl_rcv_msg+0x60e/0x790 [ 391.630161][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.635225][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 391.641518][ T31] netlink_rcv_skb+0x208/0x470 [ 391.646339][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 391.651493][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 391.656831][ T31] ? down_read+0x1ad/0x2e0 [ 391.663344][ T31] genl_rcv+0x28/0x40 [ 391.667402][ T31] netlink_unicast+0x75b/0x8d0 [ 391.672284][ T31] netlink_sendmsg+0x805/0xb30 [ 391.677111][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.682531][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 391.687523][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 391.693994][ T51] Bluetooth: hci3: command tx timeout [ 391.694554][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 391.705087][ T31] __sock_sendmsg+0x219/0x270 [ 391.711626][ T31] ____sys_sendmsg+0x505/0x830 [ 391.716549][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 391.722241][ T31] ? import_iovec+0x74/0xa0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 391.726814][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 391.732249][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 391.737600][ T31] ? __fget_files+0x2a/0x420 [ 391.742890][ T31] ? __fget_files+0x3a0/0x420 [ 391.748045][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 391.753154][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 391.758715][ T31] ? rcu_is_watching+0x15/0xb0 [ 391.766216][ T31] ? do_syscall_64+0xbe/0x3b0 [ 391.771735][ T31] do_syscall_64+0xfa/0x3b0 [ 391.776324][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 391.781766][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.787899][ T31] ? clear_bhb_loop+0x60/0xb0 [ 391.792736][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 391.798699][ T31] RIP: 0033:0x7f3d8398e929 [ 391.803335][ T31] RSP: 002b:00007f3d84759038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 391.859226][ T31] RAX: ffffffffffffffda RBX: 00007f3d83bb5fa0 RCX: 00007f3d8398e929 [ 391.873811][T12207] IPVS: ip_vs_add_dest(): lower threshold is higher than upper threshold [ 391.897738][T11694] IPVS: starting estimator thread 0... [ 391.909066][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 391.917131][ T31] RBP: 00007f3d83a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 391.957147][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 391.973838][ T31] R13: 0000000000000000 R14: 00007f3d83bb5fa0 R15: 00007ffc05ce3bd8 [ 391.990407][ T31] [ 392.001105][ T31] [ 392.001105][ T31] Showing all locks held in the system: [ 392.009558][ T31] 1 lock held by khungtaskd/31: [ 392.014474][ T31] #0: ffffffff8e13eda0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 392.024508][ T31] 3 locks held by kworker/u8:5/967: [ 392.029706][T12208] IPVS: using max 30 ests per chain, 72000 per kthread [ 392.052499][ T31] #0: ffff88802fcd1948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 392.064448][ T31] #1: ffffc9000395fbc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 392.081066][ T31] #2: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 392.091025][ T31] 3 locks held by kworker/u8:6/1321: [ 392.096349][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 392.108952][ T31] #1: ffffc900042efbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 392.130287][ T31] #2: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 392.148654][ T31] 5 locks held by kworker/u8:7/1335: [ 392.154271][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 392.166620][ T31] #1: ffffc9000446fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 392.180144][ T31] #2: ffffffff8f502d90 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 392.189645][ T31] #3: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: ops_undo_list+0x2a4/0x990 [ 392.198786][ T31] #4: ffffffff8e1448b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f6/0x730 [ 392.210654][ T31] 2 locks held by getty/5596: [ 392.215385][ T31] #0: ffff88814c8870a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 392.225298][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 392.235547][ T31] 3 locks held by kworker/0:5/5899: [ 392.240878][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 392.263746][ T31] #1: ffffc90004be7bc0 (deferred_process_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 392.277132][ T31] #2: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: switchdev_deferred_process_work+0xe/0x20 [ 392.288019][ T31] 5 locks held by kworker/u8:25/6843: [ 392.293468][ T31] 2 locks held by syz.3.395/7539: [ 392.298532][ T31] #0: ffffffff8f575b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.306881][ T31] #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 392.317391][ T31] 2 locks held by syz.5.1109/10305: [ 392.322719][ T31] #0: ffffffff8f575b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.331165][ T31] #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_get_doit+0x10a/0x5e0 [ 392.341438][ T31] 2 locks held by syz.2.1119/10366: [ 392.346666][ T31] #0: ffffffff8f575b30 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 392.354982][ T31] #1: ffffffff8e41cd68 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 392.365531][ T31] 2 locks held by syz-executor/12155: [ 392.371119][ T31] #0: ffffffff8fa31fb0 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 392.383933][ T31] #1: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 392.393330][ T31] 2 locks held by syz-executor/12168: [ 392.398743][ T31] #0: ffffffff8fa13e98 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 392.408418][ T31] #1: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 392.418441][ T31] 1 lock held by syz-executor/12202: [ 392.423839][ T31] #0: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 392.433474][ T31] 1 lock held by syz-executor/12204: [ 392.438797][ T31] 1 lock held by syz.7.1466/12206: [ 392.444081][ T31] #0: ffffffff8f50f988 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 392.453752][ T31] [ 392.456118][ T31] ============================================= [ 392.456118][ T31] [ 392.464715][ T31] NMI backtrace for cpu 1 [ 392.464737][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) [ 392.464763][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.464775][ T31] Call Trace: [ 392.464784][ T31] [ 392.464794][ T31] dump_stack_lvl+0x189/0x250 [ 392.464830][ T31] ? __wake_up_klogd+0xd9/0x110 [ 392.464859][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.464894][ T31] ? __pfx__printk+0x10/0x10 [ 392.464932][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 392.464963][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 392.464987][ T31] ? _printk+0xcf/0x120 [ 392.465015][ T31] ? __pfx__printk+0x10/0x10 [ 392.465041][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 392.465072][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 392.465103][ T31] watchdog+0xfee/0x1030 [ 392.465134][ T31] ? watchdog+0x1de/0x1030 [ 392.465172][ T31] kthread+0x70e/0x8a0 [ 392.465200][ T31] ? __pfx_watchdog+0x10/0x10 [ 392.465227][ T31] ? __pfx_kthread+0x10/0x10 [ 392.465260][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.465289][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.465318][ T31] ? __pfx_kthread+0x10/0x10 [ 392.465344][ T31] ret_from_fork+0x3fc/0x770 [ 392.465377][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 392.465415][ T31] ? __switch_to_asm+0x39/0x70 [ 392.465436][ T31] ? __switch_to_asm+0x33/0x70 [ 392.465456][ T31] ? __pfx_kthread+0x10/0x10 [ 392.465481][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.465521][ T31] [ 392.465530][ T31] Sending NMI from CPU 1 to CPUs 0: [ 392.567920][ T5851] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 392.569584][ C0] NMI backtrace for cpu 0 [ 392.569600][ C0] CPU: 0 UID: 0 PID: 5851 Comm: kworker/u9:4 Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) [ 392.569621][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.569632][ C0] Workqueue: hci6 hci_rx_work [ 392.569664][ C0] RIP: 0010:__lock_acquire+0x6a8/0xd20 [ 392.569692][ C0] Code: 00 00 48 8b 3c 24 85 c0 0f 84 19 06 00 00 41 8b 46 20 a9 00 00 18 00 0f 84 b3 00 00 00 4c 89 f6 ba 08 00 00 00 e8 88 25 00 00 <45> 31 ff 85 c0 0f 84 f5 05 00 00 83 3d f6 f3 09 18 00 75 13 48 63 [ 392.569708][ C0] RSP: 0018:ffffc90000007528 EFLAGS: 00000006 [ 392.569722][ C0] RAX: 0000000000000001 RBX: 0000000000000005 RCX: ffffffff9345a8a8 [ 392.569734][ C0] RDX: 0000000000000008 RSI: ffff88802f930bb8 RDI: ffff88802f930000 [ 392.569746][ C0] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff81729de5 [ 392.569756][ C0] R10: ffffc90000007778 R11: ffffffff81acf990 R12: 0000000000000002 [ 392.569767][ C0] R13: 0000000000000001 R14: ffff88802f930bb8 R15: ffff88802f930bd8 [ 392.569779][ C0] FS: 0000000000000000(0000) GS:ffff888125c52000(0000) knlGS:0000000000000000 [ 392.569793][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 392.569805][ C0] CR2: 00007f6aa75f6d00 CR3: 000000005899a000 CR4: 00000000003526f0 [ 392.569821][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 392.569831][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 392.569842][ C0] Call Trace: [ 392.569848][ C0] [ 392.569860][ C0] ? unwind_next_frame+0xa5/0x2390 [ 392.569887][ C0] lock_acquire+0x120/0x360 [ 392.569910][ C0] ? unwind_next_frame+0xa5/0x2390 [ 392.569941][ C0] ? unwind_next_frame+0xa5/0x2390 [ 392.569966][ C0] ? ret_from_fork+0x3fc/0x770 [ 392.569998][ C0] ? unwind_next_frame+0xa5/0x2390 [ 392.570024][ C0] unwind_next_frame+0xc2/0x2390 [ 392.570049][ C0] ? unwind_next_frame+0xa5/0x2390 [ 392.570078][ C0] ? unwind_next_frame+0xa5/0x2390 [ 392.570104][ C0] ? kthread+0x70e/0x8a0 [ 392.570124][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 392.570146][ C0] arch_stack_walk+0x11c/0x150 [ 392.570165][ C0] ? ret_from_fork+0x3fc/0x770 [ 392.570191][ C0] stack_trace_save+0x9c/0xe0 [ 392.570209][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 392.570231][ C0] ? psi_task_change+0xe5/0x250 [ 392.570249][ C0] kasan_save_stack+0x3e/0x60 [ 392.570274][ C0] ? kasan_save_stack+0x3e/0x60 [ 392.570298][ C0] ? kasan_record_aux_stack+0xbd/0xd0 [ 392.570319][ C0] ? insert_work+0x3d/0x330 [ 392.570342][ C0] ? __queue_work+0xbd9/0xfe0 [ 392.570356][ C0] ? call_timer_fn+0x17e/0x5f0 [ 392.570378][ C0] ? __run_timer_base+0x646/0x860 [ 392.570398][ C0] ? run_timer_softirq+0xb7/0x180 [ 392.570418][ C0] ? handle_softirqs+0x286/0x870 [ 392.570443][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 392.570468][ C0] ? irq_exit_rcu+0x9/0x30 [ 392.570492][ C0] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 392.570517][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 392.570536][ C0] ? vprintk_emit+0x58f/0x7a0 [ 392.570551][ C0] ? _printk+0xcf/0x120 [ 392.570567][ C0] ? bt_warn+0x10b/0x160 [ 392.570589][ C0] ? hci_cmd_complete_evt+0x46a/0x950 [ 392.570615][ C0] ? hci_event_packet+0x78c/0x1200 [ 392.570638][ C0] ? hci_rx_work+0x46a/0xe80 [ 392.570663][ C0] ? process_scheduled_works+0xae1/0x17b0 [ 392.570688][ C0] ? worker_thread+0x8a0/0xda0 [ 392.570713][ C0] ? kthread+0x70e/0x8a0 [ 392.570731][ C0] ? ret_from_fork+0x3fc/0x770 [ 392.570770][ C0] ? __phys_addr+0xd3/0x180 [ 392.570789][ C0] kasan_record_aux_stack+0xbd/0xd0 [ 392.570811][ C0] insert_work+0x3d/0x330 [ 392.570837][ C0] __queue_work+0xbd9/0xfe0 [ 392.570854][ C0] ? __queue_work+0x103/0xfe0 [ 392.570873][ C0] call_timer_fn+0x17e/0x5f0 [ 392.570896][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 392.570912][ C0] ? call_timer_fn+0xbe/0x5f0 [ 392.570936][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 392.570964][ C0] ? do_raw_spin_unlock+0x122/0x240 [ 392.570993][ C0] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 392.571011][ C0] __run_timer_base+0x646/0x860 [ 392.571032][ C0] ? ktime_get+0x3e/0x1f0 [ 392.571055][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 392.571075][ C0] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 392.571102][ C0] run_timer_softirq+0xb7/0x180 [ 392.571124][ C0] handle_softirqs+0x286/0x870 [ 392.571151][ C0] ? __irq_exit_rcu+0xca/0x1f0 [ 392.571180][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 392.571208][ C0] ? irqtime_account_irq+0xb6/0x1c0 [ 392.571231][ C0] __irq_exit_rcu+0xca/0x1f0 [ 392.571257][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 392.571288][ C0] irq_exit_rcu+0x9/0x30 [ 392.571312][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 392.571337][ C0] [ 392.571342][ C0] [ 392.571349][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 392.571367][ C0] RIP: 0010:vprintk_emit+0x58f/0x7a0 [ 392.571384][ C0] Code: 85 32 01 00 00 e8 71 61 1f 00 41 89 df 4d 85 f6 48 8b 1c 24 75 07 e8 60 61 1f 00 eb 06 e8 59 61 1f 00 fb 48 c7 c7 20 30 13 8e <31> f6 ba 01 00 00 00 31 c9 41 b8 01 00 00 00 45 31 c9 53 e8 b9 36 [ 392.571398][ C0] RSP: 0018:ffffc9000495f4e0 EFLAGS: 00000287 [ 392.571412][ C0] RAX: ffffffff81a0fd97 RBX: ffffffff81a0fc54 RCX: 0000000000100000 [ 392.571425][ C0] RDX: ffffc900192c3000 RSI: 00000000000044d1 RDI: ffffffff8e133020 [ 392.571438][ C0] RBP: ffffc9000495f5f0 R08: ffffffff8fa103f7 R09: 1ffffffff1f4207e [ 392.571450][ C0] R10: dffffc0000000000 R11: fffffbfff1f4207f R12: dffffc0000000000 [ 392.571463][ C0] R13: 1ffff9200092bea0 R14: 0000000000000200 R15: 0000000000000035 [ 392.571477][ C0] ? vprintk_emit+0x444/0x7a0 [ 392.571494][ C0] ? vprintk_emit+0x587/0x7a0 [ 392.571513][ C0] ? vprintk_emit+0x444/0x7a0 [ 392.571530][ C0] ? __pfx_vprintk_emit+0x10/0x10 [ 392.571546][ C0] ? stack_depot_save_flags+0x40/0x900 [ 392.571578][ C0] _printk+0xcf/0x120 [ 392.571598][ C0] ? __pfx__printk+0x10/0x10 [ 392.571622][ C0] bt_warn+0x10b/0x160 [ 392.571648][ C0] ? __pfx_bt_warn+0x10/0x10 [ 392.571672][ C0] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 392.571701][ C0] ? __pfx___mutex_lock+0x10/0x10 [ 392.571728][ C0] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 392.571769][ C0] hci_cmd_complete_evt+0x46a/0x950 [ 392.571800][ C0] hci_event_packet+0x78c/0x1200 [ 392.571826][ C0] ? __pfx_hci_cmd_complete_evt+0x10/0x10 [ 392.571854][ C0] ? __pfx_hci_event_packet+0x10/0x10 [ 392.571880][ C0] ? kcov_remote_start+0x4d3/0x7f0 [ 392.571902][ C0] ? local_clock_noinstr+0xe0/0xe0 [ 392.571927][ C0] ? hci_send_to_monitor+0xe2/0x570 [ 392.571949][ C0] hci_rx_work+0x46a/0xe80 [ 392.571983][ C0] ? process_scheduled_works+0x9ef/0x17b0 [ 392.572010][ C0] process_scheduled_works+0xae1/0x17b0 [ 392.572049][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 392.572083][ C0] worker_thread+0x8a0/0xda0 [ 392.572110][ C0] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 392.572137][ C0] ? __kthread_parkme+0x7b/0x200 [ 392.572157][ C0] kthread+0x70e/0x8a0 [ 392.572176][ C0] ? __pfx_worker_thread+0x10/0x10 [ 392.572202][ C0] ? __pfx_kthread+0x10/0x10 [ 392.572240][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.572264][ C0] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.572287][ C0] ? __pfx_kthread+0x10/0x10 [ 392.572306][ C0] ret_from_fork+0x3fc/0x770 [ 392.572332][ C0] ? __pfx_ret_from_fork+0x10/0x10 [ 392.572360][ C0] ? __switch_to_asm+0x39/0x70 [ 392.572377][ C0] ? __switch_to_asm+0x33/0x70 [ 392.572394][ C0] ? __pfx_kthread+0x10/0x10 [ 392.572414][ C0] ret_from_fork_asm+0x1a/0x30 [ 392.572440][ C0] [ 392.572712][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 392.572728][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc1-syzkaller-00102-g5466491c9e33 #0 PREEMPT(full) [ 392.572751][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 392.572763][ T31] Call Trace: [ 392.572771][ T31] [ 392.572779][ T31] dump_stack_lvl+0x99/0x250 [ 392.572812][ T31] ? __asan_memcpy+0x40/0x70 [ 392.572843][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 392.572884][ T31] ? __pfx__printk+0x10/0x10 [ 392.572928][ T31] panic+0x2db/0x790 [ 392.572973][ T31] ? __pfx_panic+0x10/0x10 [ 392.573010][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 392.573054][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 392.573088][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 392.573130][ T31] watchdog+0x102d/0x1030 [ 392.573167][ T31] ? watchdog+0x1de/0x1030 [ 392.573211][ T31] kthread+0x70e/0x8a0 [ 392.573250][ T31] ? __pfx_watchdog+0x10/0x10 [ 392.573283][ T31] ? __pfx_kthread+0x10/0x10 [ 392.573313][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 392.573347][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 392.573382][ T31] ? __pfx_kthread+0x10/0x10 [ 392.573411][ T31] ret_from_fork+0x3fc/0x770 [ 392.573451][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 392.573494][ T31] ? __switch_to_asm+0x39/0x70 [ 392.573518][ T31] ? __switch_to_asm+0x33/0x70 [ 392.573544][ T31] ? __pfx_kthread+0x10/0x10 [ 392.573572][ T31] ret_from_fork_asm+0x1a/0x30 [ 392.573618][ T31] [ 392.577668][ T31] Kernel Offset: disabled