last executing test programs: 4m39.810785863s ago: executing program 2 (id=52): r0 = socket$nl_rdma(0x10, 0x3, 0x14) shutdown(r0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f00000000c0)="6880a642beaf34317f0dd3122a90ad0d2b", 0x11}], 0x1}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r1, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="97eb000014006bcd9e", 0xeb97}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 4m39.613468325s ago: executing program 2 (id=53): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_NEW(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000280)={0x98, 0x0, 0x2, 0x401, 0x0, 0x0, {0xa}, [@CTA_EXPECT_MASTER={0x4}, @CTA_EXPECT_MASK={0x44, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @empty}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @CTA_EXPECT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private2}, {0x14, 0x4, @local}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x48080}, 0x20000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xe, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaaa19e02"], 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x98}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000740), 0xffffffffffffffff) r3 = socket$igmp(0x2, 0x3, 0x2) r4 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000180), 0x4) r5 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000000002000000000000000000018190000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000002400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=ANY=[@ANYBLOB="1e0000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x3, 0x0, &(0x7f0000000340)=ANY=[@ANYRESHEX=0x0, @ANYRES32=r4, @ANYRES16=r5, @ANYRES8, @ANYRESOCT=r0], 0x0, 0x4, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x12}, 0x94) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x61, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000580)='kmem_cache_free\x00', r6}, 0x18) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r7, &(0x7f00000004c0)="a5", 0x1, 0x40, &(0x7f0000000000)={0xa, 0x4e20, 0x8000, @private0, 0x2}, 0x1c) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000000d00)=[{{0x0, 0x0, &(0x7f0000000c40)=[{0x0}, {&(0x7f0000001400)=""/4085, 0xff5}], 0x2, &(0x7f0000005500)=""/4114, 0x1012}, 0x7}, {{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000003400)=""/4096, 0x1000}, {0x0}], 0x2}, 0xd5}], 0x2, 0x832b, 0x0) setsockopt$inet6_int(r5, 0x29, 0x4d, &(0x7f0000000180)=0x8, 0x4) r8 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x2409c8c1, &(0x7f0000000240)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) sendto$inet6(r8, &(0x7f0000000e80)="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", 0x5c6, 0x6d91fb6102d8910c, 0x0, 0xfffffffffffffe38) socket$inet_tcp(0x2, 0x1, 0x0) sendto$inet6(r8, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$MRT_FLUSH(r3, 0x0, 0xd4, 0x0, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYRES8=r2, @ANYRES8=r1, @ANYRESDEC=r2, @ANYRES16=r3], 0x28}}, 0xc408) 4m39.280138136s ago: executing program 2 (id=58): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000040)={0x8, &(0x7f0000000000)=[{0x8, 0x81, 0x39, 0xec}, {0x80, 0x8, 0x3, 0x8000}, {0xf3fa, 0x7f, 0x0, 0x9}, {0x4, 0xda, 0x3, 0x9}, {0x7, 0x5, 0x8, 0x7}, {0x3, 0x7, 0x4, 0x8000}, {0x4, 0x4, 0x5, 0x1}, {0x9, 0x3, 0xfb, 0x2}]}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(r1, &(0x7f0000001580)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f0000001540)={&(0x7f0000000140)={0x1400, r2, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@fils_params=[@NL80211_ATTR_FILS_ERP_RRK={0x1004, 0xfc, "f3a67993822066fe24c6ba56a8aa83e95df4e73dcce5ca99121765759983be213feb44be493741614ddc17db69cd20147520aea1d17e6d2e80b3fdf5a09ca3d9068bda64a300f6e3e8d426f9ad4fe3b30dd3b089ccd73e09a4f4311570caf4e4dc13f78b822d6d6e0d640515cd725ce02fe37799d3ea4ee28b508fb763a5b0905dc407fe76b9e9910cfb6749e60bb6f5f7aa16ed8420b83c4a8290e1ea03dbabdef59d103210d3ee9d9720c8858bc55f07d931a6c94410788abb082b18be2f01c9b6ccd946ef6afb212c9c23b56ebf6626c53ac36d689e2fb42e20e4534bafdf82f47f9c0b7bcf8ea3a8b400e37bd98f7b46cbb2f7cc00f5c2ed679169b0db1460aabb08b5c39ed7f7847225ebcaad013eba66b03975f3cad1385add863b4f940cdec82f25e8bdc9fd283ffc98dcce3c3b8157f3ec3b3d384a597055a14be6e89a519393726ab0bc5bc2ecad4eb63c2d49a209251b442519781d290f7361127ddd1a69f10d4be4f317b95e592535a01932db970548aa2c9136b9faa09ef5b8cac656c658f0fa07b6a3ffd605fad41034f7e2b395a95d66d36bfc7137b2466187dc5f831931e60d2c8cfbc6dc2e8892cc7152af424f15f1dadab6935da4f06e79ca65d72f5625b26c71d65b58f9e12c036760ab05843bd6323778d138bd0204976e47d992377d993e63ed64bbf81572a80007a9fc1efeee1b7ee5a6b2a6291a0ff88d5c034798e462d4682e83e214252ea22812084d56aa53d6c2d99034578bd85e58c9fce583d913b3357569abe7c520efb7706f2f51d1a1fe02f38524dbb3ae4617c10a80347e8bce78ed862b490b1b84bb5ddd67375c55f96077423db93d30d4c3368b46814249df3374d1b9f64a6f72c55836d7d7e4f70a7c2ff8dce357e005769ae13d890c7a6e4e94636ebe0a2eeb75f898d75e298869a0f577a29dae17bfd24757969f414fa892f61e8796f96f5a8ce94ff16fefb120bd1036a7226d6edf69de316fbc83ff3ee0cc60d000d09d5c42feaa19a4083dbd008dbefdaa718ac76e5e22bf6dcce22d9ec1b84474f7fc4285345db3efbae3c0f4ce4fbed3c1509e9d17db0df1ed8bb29ead2b3e6c8922e82a33254857106e1edc9346411115eee46f0158f7b852cb7f73e68efff4beb29d991c376584b38e41d319c8b55bc648146f547cebffdf7449b203d700fe6b2ff412cab9d68029407935095736075e6cc540c312a1050e53da6b85620ceabb7cea3a736f01394c14823910fa0c088b564e3af57e1e94a1e21f4a78c7d4ab1f92625c69861c7ac256d3dea435ae54a7a4807e086a03881a844a564e442edecbf7bac9f8629bbbb9b96cd1a169809913d78ac47df69bd562076b7f17356b473ca04a776f26db9c4ebab838816a5689cb97f4239aefa5215aac3d940687930ede696c7a04087f254138df9fd674fea6fbd35bc59e6543c01c46de87d1fdd7519f33a34de066f0feccc84245fc511cace55387bf59894bfac4814579348c276e147c4f90748694cdea894451aba491038b2cf9772b53b5fec2177ba68e11de2703c64fbd6b737bda1a5e59f065aa011b0d64bc50161151bae3fea8a7b9eb6b5c350094d84811684b58e415b3fbbaba98c31ad4b43759f3da4c0049f7a3bce2d2287b0ebfaa25cff0369fe413cf9ca2885966aa2466eaba9a0590cec164cf7fba702b5fdd5c70a25fdd13e5c1988bfd6b0e9fbbf0543ee4de0598ede1a35b60ca08859ce2fa55ce80cc6d839b77f319c2284116e458acb0e817bc084c9cef2960b8b60cecbc724dcea9c34c330ca82541259e3cb3d19aa8c174eacad5be5d0af8155660451490d433723d04efbd781f45bf7f9c817e502373fd0aa80ea5cd52ed4a42968669722e54378282d337323799f8dbebaeb233f460b018280609f01888ffcdb22dd4de436fe1830b4af64de59f77a164679978656966ccfd071ca3168a3ef68eef765e68612901da3ceefafd814b196f963140c9bb17d858fb42faae784a60b3f1eb9cdda7688ed362c05817a81a3dea633b9524af658052e8ead09b0eb74e7874dd3d6be4db7fc5d8189ad6de27366c23f0fd75b0b2b77e6b24a476b8e7f8d92e60557731f387d2fddcaf64ec2156c0916019e96f62ecb7fb624c9f39558b9e806a7526723fea9aac824b44d10538351557bffa6753f4199a773a86f039df6734156d55617be1bb6c3f3ef71ecf9f1ade3bb065373adebd1b2529c05ce509f60ba85aed712eb5432a79fc561e853e6631750e9389007416885bca4015026456f0b73259359890b7fe7a0896135c5b935193189f5fb5c00adc47ce9f84d21aef45cd8a773131a812fa593950fbdec6b5e779c2582de36e7a0fc9166811fe9baae41dc50eb3445b29049fd3fe3aa543d8df44a09aa0bee43562739e801b6f69fb56d6b76f3e0dbf70b892eceba873739f8f852ff74ee284267ec384f70bdebc0eb4345948ce95c86b7925df3d39d2bcac10875430c4313c7f76b9be828d6730156ab6300a200f4700879805d4f99fffaf056b25102c020eacfe7b0106b4fc65169185f91fd87a39b6b22674a6948ff4d0bb73fa4c5bfa68c35fc8a00900a36c8215330a3032a5be79340f3eece99efcee4eb75843042d3602e019a25c0ed5912b22a3c2dd3c4d4da72231800c66b33f18288a5ff3ce1f6366755c8401ac69bda1a8e1684c129cb9b0c85567135f046f9c6e96f1fe743cdab7b8c7ac269a3e744c1f5aa8178faf6542b24100af60edea495c181125becc6c6133f4b85bfe085771adbd870f7c23ca2e2bb0593ef7bdd4d194cf3b20d50b0bc78c5ba8762a9e016316edee90204fbdc11579c00542254e533ff4fe145fa6eec4ad74d457879a86ad98ac65fb9853049e40cfd1679cca52935100dbdf6fa0622fea5733138b4718738d42d609ebabc8e6c49952e02dea6889078efbaad28ff8a4db569c2d8d8d68233111eb2b3fe2cc669f0f2c8c2b5664fee32e1d7a921f5cbadc81ae7741743c7d58c4ddcb82efc8e3842b5d7362470aa682e29e2a313167e71f5db87145461b742d96e0c16fb0dbcfa5b453a2d14b849bdd58479f87f159d5d6f215c4f869fa7a44c883632c2a7f0531b41dcaabd9a5a5c22eed311804c5ee9d7d8216b2c544da008e7247be4f836bdc3b8acbb85a9ba905c55de6c53d2ea776f94fde1012ac199f1e466d527e1e0520c5aca455f054e9dcd9451b748fcacc8a2be2d204ddcf33700402b158bbd0f26480730efdcb7265f2384705ba7c896712de4fecd606c5a86a087019ec2f101ac1d743dc87ffe7a7f9bc3a24ec70d247aa49905ebfeaf81dbd60d7c9409afb72caba93d6004a3a79aa8541b05d7c6243205d91b9f45c6cceb513383d89da1fe453e156a717412442e87dd40ace909bc65f86321270c85e9c2c7b0176a46be7190d93034d013917d7e728e23cbcd8733a9745be53463dce99cfe7887944466b8ee415defe62f45749329d0c8791622d601ed3112ca03d04c749850c2a7e65ace8201e89e8caf1dd6c656082416721b5f9c7613d363575fb438a6d1270837fedf7fcdd0daee27faf1aaf901cbba92d36d6ccccec47e2c93c744384f0d4cad9d17d0d8bdb43c0ee272c4b812ac17dc51c03e61ddc7116543c1f237948c42885aab4176c1c47a9aad75a78a5294525f7f69d756a4d6d7b8862fd94e74d5a74a931e7c06b4fd3840d3d3812bb7536702e5fa8e69e121b7086f8d3260f80da03611ba212f1c52e8346efbecf90f2a8ddeb090a3c87f5e2ef30b5b284be87bfb59676605fb1675ffcd951652b2726d4069d0fc270aac191da6a5c48e8d253221f893e134ac4d2e9aaaa3cb2c8ec611b98a1004710928d20739f72b00d10688e765946b28c7b477373abe386aae7af3e5be54dcb46d88fce2fe5650b024622f2f142f15aae1b040e82ba11d89bd10d9a62dd54c4e912a10518dcfaf3e332f349e62932678bea979820876ffea331b608d990c86efa8fa18e0804c927bbbec8e9110130f93f71e894cbb1fd41e580600d01572c20ae674a2d5956c47679be137cc443fc1663220ea35ed0723fd6d903c1ea3e75bb13a33e53b15441ad3d146dcef14120c4285aad0fe6e2ebea0b6d143b568dc82e8161de9c3449ef5ac73faadfd7ee05cbe17f637ce1d7d8ae6ebee3743087de21a9f00f2649f5f60fc502f1666f010fda7d0480c1dc15e307cd2a83b09f81cc5e71db7dc7451779f1c5002aebf5b8865329663aa46297e15a2ee11a361e1120a539be8eb83bd1471002ac5d54a943ff5b5f4925910846bc4d33e582deca657d89a06c6f4a4b5153e1bf244b52e0cd6c38d9c81004fa6f252c91efba85ab1389513b9c1637d5254fb883b05c356d8579e88d84786b80e5702f883eff2f0bc6fbf85a7ca71e0ac7f588aff8f1e48def4e29febc152cad09707307967abcaafa1ac9e35069f16c9a44b5c4c7aecd9bbcbc8347eee6fe42d8808d2e67d6eb930e4406e104cbc46323020e6453313dc00142e09a9da888470ca467fff085d0d7cd8c7b362feddf0544d56c96bc19571d616f9f8cf8c39434872e09cb3b396294cea9f6798f1ff148d4e809174e048712ba24de503609010d35d54882b8a908d6ffc2c2da1e482ad517496619b5a1cfcd95728056a01e8a918d377237288063f1b9066f0520db00fb648fa5208708a1670878c74d735619f587031cce213fe4f3e1157ccb66e984a36c1f333cfa7d30def1c615cd82108ae2b9acfa9f33eeb81aba50bfc11c52a851e6f17376aa30f172fc21a9135e8a2ad91c9f905abc9253c1e1b3383ba0c22e08a7fc54a6fbdf60e5dc62a6b37be88a79db99e8e77acf875e642bb613e87cee020c003c4bf751e7edc4078377ca9997766165e78fc5613395ed22f147e4cb02de0b831d26136d4914d4e4ef9e44d24caf7784ac46997e0496931d8242cb4c74e875346b1d38092aa3b593d150269e06d334bff4772c895b14dbe8a5402ed23e4bfd8f9d872c9880f7dccba3423e9a2901adc5b825fd29d156abb71b7066c66880889cfd74298fef640094837386e2b716df6c5cd0a338a7233367e9a3cb3a9c316f79c91cf80c359c7a343ee2050b4b1c84c74d1456319c42fe97ffd35b3b4c5c2ac9aea6fc8798fb1a15b008e6ad5bef0e332459f888fb56f086c11582a9d67b2dfd5fb4a50e73202d1a8d014ca4bd9d2ed38e4360808b746f2d9d42cab3bdafc9931d9843af3d0cd74db83a8b54fcd4723b887a4a275caee8bd61ff1fe9a45e6bea14e080a9ee23e31721ad5d10780b4f7f8bb3a0cf17442e9dc83f07363fe7f42d4873f56719c05216647128c98e4c680263d3f4249d39e7bb74d61ceb0229d6422448a9694a5c56bb8243e9b6194bef648f8d0dfc704e835801d3301d9f6ed71a5b753e554733c64a441433fafaefae916738ae8b24be0df70d1293772b8cfee883aad52a4a624712b81faccc48d107b7fb81c600e3355e3c0f5c2a30e06366ebe103b625fe32b47feda0f2e5cdd9939c01d72660785201891bd1e4e7a9c07eb454ac629aef04ceb8d4346c9c9e5e7f49cb80f489025435aae5f3ead0482abd610f88c1915f7d3b85fb20535595775bc3335187fbcaf85d960ed48d34a6e2c6e6b132ab3b9958cf92d0c08a4ac2c0fefc44d173d46bd0d61c52c16f8b181f08a325869201b5f4a7d551432891af1a80dc14c3437cc57deb09294cee17cb9a4ca54d5b24dc1262416b333e70b361648fbed2e9a9dcfe387f4703660eeb9525cf0d8ba2fb5610443373f646a67ccc17f283"}], @NL80211_ATTR_IE={0x3de, 0x2a, [@prep={0x83, 0x25, {{0x0, 0x1}, 0x81, 0x4, @device_a, 0x6, @value, 0xf1a0, 0x5, @device_b, 0x2}}, @mic={0x8c, 0x10, {0xd0, "f754318d291e", @short="7caae9d0ef53665a"}}, @preq={0x82, 0x6d, {{0x0, 0x1, 0x1, 0x0, 0x1}, 0x69, 0x4, 0x400, @device_b, 0x7fffffff, @value=@broadcast, 0xfffffff2, 0x4, 0x7, [{{}, @broadcast, 0x7fff}, {{0x1, 0x0, 0x1}, @device_b, 0x9}, {{0x0, 0x0, 0x1}, @device_a, 0x2}, {{0x0, 0x0, 0x1}, @device_a, 0x1}, {{0x1}, @device_b, 0x1}, {{0x1, 0x0, 0x1}, @broadcast, 0x2}, {{0x1}, @broadcast, 0x2}]}}, @measure_req={0x26, 0xe5, {0x2, 0xb0, 0x0, "fbb2fd7ce563c0443af6565c0c033ef1b5bab5d8eef54b7187eca4c4df121695c5b6631eb3c321a26f3b09197f8d95e2cd313b9d0c3607aaf1324c248a957b1702d6ae6b96c209a784934f3375bc42f42de4234e614914e7dcc9c0b68bd4d270f3979118df27fc71af8559222f6b063624d8086bb7d9d5c5d2c92cc5706084b899d0b81bde9952b8d20e2d8cb89089dd01db4b3c2879455d42e291905172f96f29de83dd2ca8a1686a97a245abab6042b3c614f008be45388adea572e23b2a43cf570770ae56e6a8031fa917669bb1aa1d656b708c5d9c3ce2effb533e78e733d978"}}, @link_id={0x65, 0x12, {@initial, @device_b, @broadcast}}, @tim={0x5, 0xf5, {0xe0, 0xe3, 0xa, "6264eb90a70089c9e1532c28064214343fda8f2c00e49d59fe3ad2218aee481b02a8cca38941f0bfe21181d7415382c8042617801752e07459e4e518b70ddce5343f273331051435942da335cec9ee0e487c2b38aeb58c087a87921f500d8b813c44cb31d06d2e977c0b99e56525b1b727482b633f73efd15fba8a6256b6f3880acaf483fd3b7905fae473bd2f618737e7c70c4d6cc271c8b03bb508627959cc5541a5a27eeed66f6c49a754ca587e6ccb931edab4d57ced627cab04ce17199d52351cbe16958d9e4f6bd0985fc59ed0ba563e5d7c48f11e69d907ecc5afec0373c00b224d9ea6a612c71b4b2387f5d2cffb"}}, @preq={0x82, 0x41, {{0x0, 0x1, 0x0, 0x0, 0x1}, 0x8, 0xff, 0xfffffb77, @device_b, 0x8, @value=@device_b, 0x602d, 0xb, 0x3, [{{0x0, 0x0, 0x1}, @broadcast, 0x1}, {{0x1}, @device_a, 0x295}, {{0x0, 0x0, 0x1}, @broadcast, 0x2}]}}, @supported_rates, @random_vendor={0xdd, 0xf9, "835fd693955d41c245361533c07c42f41a3c41ebabfbfaeb681b46fbee85e1e32bda793a18f7388324c4a8d62a8aa72cab521f6e093847635de6535ecf5614470517e3b0714b57a73eefa4a2eeb666cba02f22d57c273a4c16fee47246d72584024785ac170a053bf1a6beedf593dc6857ca14db301c185e6f88d535d7b0341aff4cf5929775a2b0c74fafe98468aae08837a2198d4492b0d455ac2763af644f3406796e1dc6e86cb24933d413a8121e4e20ef373346db229123b278e7fb7f9db71a674f0c53f745ec98c0c31d6ce291710d05af3343f12f0a5fbbeb616a06e81fdb2a806b675e515ae2b9160f3b16f96b90efeae5bcf9a910"}]}]}, 0x1400}, 0x1, 0x0, 0x0, 0x4800}, 0x8040011) sendmsg$NL80211_CMD_RADAR_DETECT(r1, &(0x7f00000016c0)={&(0x7f00000015c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001680)={&(0x7f0000001600)={0x4c, r2, 0x2, 0x70bd2a, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x2}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1702}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x2}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0x211}, @NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x29}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x9}, @NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x48000}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004800}, 0x40000) socket$kcm(0x29, 0x2, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000001840)={&(0x7f0000001700)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001800)={&(0x7f0000001740)={0xc0, 0x14, 0x300, 0x70bd26, 0x25dfdbfb, {0x1a}, [@nested={0x8, 0xab, 0x0, 0x1, [@nested={0x4, 0x116}]}, @nested={0x8d, 0xad, 0x0, 0x1, [@typed={0x8, 0x1b, 0x0, 0x0, @ipv4=@rand_addr=0x64010100}, @generic="b7353b3c6b9610f4a8", @generic="8eb67416332e6881ba9b1d197d593cbecaea8ef66bdf1cc95d147938e41e288da58df8d2a564632b0bf3dd91743ec71835cbee97c861713b9f84ff74667c98203f6042411c0ff9b57b51b650ff3a8a977404348d410eba5a18cd939ef2d05df7e9de3a522352ee92c5cd915eb83483a9470a52f600359996"]}, @generic="afeb73494cb80d5faaabe208ce3fdf4870a75b1e"]}, 0xc0}, 0x1, 0x0, 0x0, 0x830}, 0x20000000) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000001880)=[@in={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x11}}, @in={0x2, 0x4e24, @rand_addr=0x64010101}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x40}}], 0x30) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r1, &(0x7f0000001f80)={&(0x7f00000018c0), 0xc, &(0x7f0000001f40)={&(0x7f0000001900)={0x634, r2, 0x10, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TX_RATES={0x154, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x60, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x56c6, 0xfff, 0x0, 0x5, 0x8000, 0x7, 0x8, 0xb]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x37, 0x2, [{0x5, 0x7}, {}, {0x7, 0x9}, {0x3, 0x8}, {0x3, 0x3}, {0x6, 0x6}, {0x4, 0x8}, {0x1, 0x6}, {0x4, 0x6}, {0x2, 0x1}, {0x5, 0x8}, {0x5, 0x6}, {0x1, 0x1}, {0x0, 0x8}, {0x5, 0x7}, {0x6, 0x4}, {0x5, 0x1}, {0x0, 0x7}, {0x3, 0x5}, {0x4, 0x4}, {0x5, 0x8}, {0x7, 0x4}, {0x7, 0x9}, {0x4, 0x7}, {0x2}, {0x2, 0x4}, {0x3, 0x5}, {0x7, 0x4}, {0x3, 0x4}, {0x3, 0x6}, {0x1, 0x9}, {0x1, 0x3}, {0x3, 0x4}, {0x3, 0x9}, {0x4, 0xa}, {0x1, 0x6}, {0x6, 0x8}, {0x3, 0x5}, {0x0, 0x1}, {0x1, 0x7}, {0x7, 0x5}, {0x7, 0x1}, {0x7}, {0x7, 0x3}, {0x2, 0x3}, {0x2, 0x5}, {0x2, 0x4}, {0x0, 0x5}, {0x6}, {0x2, 0x5}, {0x3, 0x3}]}]}, @NL80211_BAND_6GHZ={0x34, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x4, 0x200, 0x4, 0x400, 0x5, 0xc3, 0x1]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x3, 0x1, 0x3, 0x4, 0x3, 0x1, 0x39]}}]}, @NL80211_BAND_6GHZ={0x94, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x7, 0x2, [{0x0, 0x7}, {0x3, 0x2}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x11b8, 0xfff8, 0x4, 0x6, 0x0, 0x7f, 0xfff7, 0x9]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x766, 0x1, 0x1, 0xf, 0x2, 0xfff3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6, 0x2, 0x66, 0x3ff, 0x1, 0x3, 0x7, 0xfffe]}}, @NL80211_TXRATE_HT={0x1c, 0x2, [{0x1, 0x3}, {0x0, 0x1}, {0x3, 0x3}, {0x1}, {0x5, 0x1}, {0x1, 0x5}, {0x2, 0x2}, {0x2, 0xa}, {0x1, 0x7}, {0x2, 0x2}, {0x3, 0x3}, {0x1, 0x7}, {0x0, 0x7}, {0x5, 0x9}, {0x0, 0x7}, {0x3, 0xa}, {}, {0x4, 0x3}, {0x3, 0x3}, {0x2, 0x2}, {0x1, 0x3}, {0x7, 0x4}, {0x1, 0x6}, {0x1, 0xa}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x20, 0x2, [{0x3, 0x8}, {0x7, 0x4}, {0x1, 0x7}, {0x5, 0x3}, {0x7, 0x9}, {0x1}, {0x6, 0xa}, {0x1, 0x9}, {0x1, 0x1}, {0x5, 0x9}, {0x6, 0xa}, {0x1, 0x1}, {0x0, 0x2}, {0x3, 0x1}, {0x1, 0x9}, {0x6, 0x1}, {0x5, 0x1}, {0x3, 0x1}, {}, {0x6, 0xa}, {0x5, 0x8}, {0x3, 0x8}, {0x5, 0x1}, {0x6, 0xa}, {0x0, 0x8}, {0x2, 0x8}, {0x4, 0x2}, {0x7, 0x8}]}]}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x24, 0x1, [0x0, 0x6c, 0x6c, 0x6c, 0x4, 0xb, 0x0, 0x1, 0x18, 0x36, 0x1, 0x2, 0x24, 0x5, 0x2, 0x36, 0x6c, 0x1b, 0x6, 0x3, 0x6, 0x2, 0xc, 0x1, 0xb, 0x4, 0x16, 0x36, 0x12, 0xb, 0x12, 0x48]}]}]}, @NL80211_ATTR_TX_RATES={0x33c, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x70, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7, 0xf2e3, 0x0, 0xe2b, 0x34, 0x9, 0x7, 0x8000]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x5, 0x9, 0x2, 0x42, 0x800, 0xfffd, 0xfffb, 0x3]}}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x3e1, 0x5, 0x4000, 0x3, 0x80, 0x1, 0xffff, 0x88a]}}]}, @NL80211_BAND_5GHZ={0xa8, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x9, 0x360c, 0x9, 0x7, 0x9, 0x6, 0x2]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x7fff, 0x4, 0x7, 0x4, 0x0, 0x8, 0xb, 0x7]}}, @NL80211_TXRATE_HT={0x3c, 0x2, [{0x0, 0x3}, {0x7, 0x4}, {0x5, 0x5}, {0x1, 0x9}, {0x1, 0x3}, {0x5, 0x7}, {0x7, 0x8}, {0x1, 0x6}, {0x4, 0x9}, {0x4, 0x2}, {0x3}, {0x2, 0x1}, {0x4, 0x3}, {0x1, 0x2}, {0x1, 0x1}, {0x4, 0x2}, {0x4, 0x3}, {0x4, 0x1}, {0x0, 0x6}, {0x1, 0x4}, {0x0, 0x2}, {0x3}, {0x4, 0x3}, {0x3, 0x4}, {0x4}, {0x7, 0x5}, {0x6, 0x2}, {0x0, 0x5}, {0x6, 0x9}, {0x2, 0x6}, {0x3, 0x4}, {0x6, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x4}, {0x0, 0x6}, {0x0, 0x5}, {0x7, 0x8}, {0x4, 0x9}, {0x5, 0xa}, {0x3, 0x9}, {0x0, 0x3}, {0x5, 0x7}, {0x7}, {0x6, 0x1}, {0x2, 0x9}, {0x3, 0x2}, {0x2, 0x6}, {0x2, 0x7}, {0x3, 0x1}, {0x5, 0xa}, {0x0, 0x5}, {0x4}, {0x5, 0x2}, {0x7, 0x8}, {0x5, 0x1}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x8a5, 0xff80, 0x8, 0x3, 0x5, 0xfffb, 0x101, 0xfff]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x0, 0x6, 0x6, 0xb, 0x5, 0xf, 0xb]}}]}, @NL80211_BAND_6GHZ={0x2c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0xec, 0x2, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_LEGACY={0x1e, 0x1, [0x18, 0x6, 0x1, 0xe90210a0e94cfce7, 0x6c, 0x30, 0x9, 0x16, 0x16, 0x24, 0x6c, 0x6c, 0x1, 0x36, 0x3, 0xb, 0x16, 0x6c, 0x18, 0x0, 0x1b, 0xf, 0x30, 0x6, 0x2, 0x12]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x18, 0x12, 0x9, 0x9, 0x48, 0xc, 0x6c, 0x60, 0x4, 0x6, 0x18, 0x0, 0x5, 0x6c, 0x18, 0x12, 0xc, 0x16, 0x66, 0x0, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x7, 0x7, 0xa93, 0xab5, 0x1, 0x3]}}, @NL80211_TXRATE_HT={0x4b, 0x2, [{0x3, 0x9}, {0x1, 0x1}, {0x2, 0x5}, {0x6, 0x6}, {0x4, 0x2}, {0x4, 0x1}, {0x6, 0x9}, {0x0, 0xa}, {0x1, 0xa}, {0x1, 0x8}, {0x5, 0x8}, {0x7, 0x1}, {0x1, 0x5}, {0x7}, {0x1, 0x6}, {0x0, 0x3}, {0x2, 0x4}, {0x6, 0x2}, {0x0, 0x4}, {0x1, 0x8}, {0x4, 0xa}, {0x5, 0x9}, {0x5, 0x7}, {0x0, 0x5}, {0x6, 0x4}, {0x1, 0xa}, {0x1}, {0x3, 0x4}, {0x5, 0x1}, {0x2, 0x9}, {0x5, 0x7}, {0x1, 0x8}, {0x1, 0x4}, {0x3, 0x9}, {0x6, 0xa}, {0x5, 0x5}, {0x0, 0x1}, {0x6, 0x7}, {0x1}, {0x4, 0x4}, {0x0, 0x7}, {0x4, 0x6}, {0x1, 0x9}, {0x5, 0x2}, {0x4, 0xa}, {0x3, 0x4}, {0x7, 0x5}, {0x4, 0x4}, {0x5, 0x2}, {0x0, 0x8}, {0x1, 0xa}, {0x5, 0x7}, {0x0, 0x9}, {0x1, 0x5}, {0x0, 0xa}, {0x5, 0x5}, {0x4, 0x2}, {0x3, 0x5}, {0x0, 0x1}, {0x3, 0x7}, {0x1}, {0x1, 0xa}, {0x4, 0x1}, {0x0, 0x7}, {0x7, 0x6}, {0x3, 0x8}, {0x3, 0x8}, {0x1, 0x4}, {0x1, 0x8}, {0x3, 0xa}, {0x0, 0xa}]}, @NL80211_TXRATE_LEGACY={0x1f, 0x1, [0x1, 0x5, 0x2, 0xc, 0x36, 0x3, 0x12, 0x1, 0xc9, 0x1b, 0xb, 0x5a, 0x12, 0xc, 0x16, 0x60, 0x1b, 0x30, 0x24, 0x60, 0x6c, 0xcfed8404ec1b8d5a, 0x1b, 0x16, 0x30, 0xb, 0x18]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x5, 0x4, 0xf, 0x7, 0x6, 0x0, 0xe9]}}]}, @NL80211_BAND_5GHZ={0x4}, @NL80211_BAND_6GHZ={0x68, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x1d, 0x2, [{0x2, 0x1}, {0x6, 0x9}, {0x4, 0xa}, {0x4, 0x6}, {0x4, 0x5}, {0x6, 0x8}, {0x4, 0x7}, {0x5, 0x2}, {0x6, 0x1}, {0x0, 0x9}, {0x7, 0x1}, {0x7, 0x6}, {0x0, 0x8}, {0x6}, {0x4}, {0x1, 0x7}, {0x7, 0x8}, {0x2, 0x9}, {0x6, 0xa}, {0x0, 0x8}, {0x5, 0x1}, {0x3, 0x3}, {0x3, 0x5}, {0x0, 0x4}, {0x3}]}, @NL80211_TXRATE_HT={0x3b, 0x2, [{0x4, 0x1}, {0x2, 0x4}, {0x7, 0x9}, {0x4}, {0x6, 0x9}, {0x5, 0x7}, {0x6, 0x8}, {0x4, 0x6}, {0x4, 0xa}, {0x7, 0x2}, {0x1}, {0x1, 0x8}, {0x1, 0xa}, {0x2, 0x1}, {0x1, 0x7}, {0x7}, {0x3, 0x6}, {0x5, 0x5}, {0x1, 0xa}, {0x6}, {0x5, 0x6}, {0x0, 0x5}, {0x6, 0x7}, {0x1, 0x1}, {0x7, 0x6}, {0x6, 0x1}, {0x2, 0x3}, {0x0, 0x4}, {0x7, 0x6}, {0x7, 0x5}, {0x3, 0x4}, {0x1, 0x7}, {0x4, 0x7}, {0x0, 0x8}, {0x4, 0x2}, {0x0, 0x3}, {0x0, 0x1}, {0x2, 0x2}, {0x2, 0xa}, {0x2, 0x2}, {0x5, 0x3}, {0x3, 0xa}, {0x4, 0xa}, {0x2, 0x5}, {}, {0x3, 0x1}, {0x0, 0x8}, {0x6, 0x5}, {0x2, 0x9}, {0x1, 0x3}, {0x3, 0x1}, {0x0, 0x2}, {0x5}, {0x4, 0xa}, {0x6}]}, @NL80211_TXRATE_GI={0x5}]}, @NL80211_BAND_60GHZ={0x9c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x3, 0x6, 0x9, 0x7, 0x5, 0x81, 0x73cd, 0x1]}}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3ff, 0x4, 0x6, 0x9, 0xfffa, 0x800, 0x800, 0xffff]}}, @NL80211_TXRATE_HT={0x23, 0x2, [{0x7, 0x5}, {0x2, 0x3}, {0x1, 0x7}, {}, {0x2, 0x2}, {0x2, 0x4}, {0x1, 0xa}, {0x1, 0x2}, {0x6, 0x1}, {0x0, 0x5}, {0x7, 0x8}, {0x5, 0x5}, {0x2, 0x1}, {0x4, 0x4}, {0x0, 0x5}, {0x2, 0x5}, {0x0, 0x4}, {0x1, 0xa}, {0x7, 0xa}, {0x7, 0x5}, {0x2, 0x4}, {0x6, 0x3}, {0x1}, {0x3, 0x9}, {0x4, 0x2}, {0x6, 0x4}, {0x4, 0xa}, {0x1, 0x3}, {0x0, 0x7}, {0x1, 0x3}, {0x1, 0x6}]}, @NL80211_TXRATE_HT={0x26, 0x2, [{0x1}, {0x1, 0x4}, {0x6, 0x8}, {0x7, 0x1}, {0x0, 0x6}, {0x0, 0x9}, {0x7, 0x2}, {0x2}, {0x4, 0x5}, {0x3, 0x6}, {0x3, 0x3}, {0x0, 0x6}, {0x4, 0x5}, {0x5, 0x1}, {0x0, 0x2}, {0x3, 0x4}, {0x5, 0x7}, {0x5, 0x5}, {0x7, 0x4}, {0x7, 0x3}, {0x6}, {0x1, 0x3}, {0x3, 0xa}, {0x0, 0x7}, {0x3}, {0x1, 0x6}, {0x5, 0x4}, {0x2, 0x6}, {0x6, 0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x0, 0x6}, {0x1, 0x5}, {0x7, 0x6}]}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x36, 0xc, 0x2, 0x60, 0x16, 0x16, 0xc, 0x69, 0x4, 0x1b, 0x48, 0x6c, 0x1b, 0xb, 0x1b, 0x6c]}]}]}, @NL80211_ATTR_TX_RATES={0x188, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x94, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x6be, 0x8, 0x8d, 0x6, 0x1, 0x3596, 0x4]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4a, 0x2, [{0x1, 0x6}, {0x4, 0x5}, {0x0, 0x1}, {0x7}, {0x3, 0x2}, {0x5, 0xa}, {0x4, 0x7}, {0x5, 0xa}, {0x1}, {0x2, 0x3}, {0x1, 0x7}, {0x7, 0x3}, {0x1}, {0x1, 0x7}, {0x0, 0x3}, {0x5, 0x5}, {0x5, 0x8}, {0x5, 0x1}, {0x7, 0x7}, {0x4}, {0x5, 0x4}, {0x2, 0x6}, {0x1, 0x7}, {0x7, 0x4}, {0x3, 0x3}, {0x6, 0x6}, {0x2, 0x9}, {0x1, 0x2}, {0x0, 0x2}, {0x4, 0x4}, {0x6}, {0x0, 0x5}, {0x0, 0x7}, {0x3, 0x8}, {0x1, 0x5}, {0x2, 0x6}, {0x5, 0x6}, {0x2, 0x2}, {0x6, 0x4}, {0x2, 0x6}, {0x6, 0x7}, {0x4, 0x7}, {0x1, 0x8}, {0x0, 0x7}, {0x4, 0x8}, {0x3, 0x6}, {0x7, 0x4}, {0x1, 0x4}, {0x5, 0x5}, {0x2, 0x6}, {0x1, 0x8}, {0x0, 0x7}, {0x5}, {0x5, 0x4}, {0x7, 0xa}, {0x7, 0x8}, {0x1, 0x2}, {0x3, 0x4}, {0x0, 0x2}, {0x3, 0x4}, {0x7, 0x3}, {0x0, 0x9}, {0x6, 0x3}, {0x6, 0x8}, {0x7, 0x3}, {0x5, 0x5}, {0x0, 0x4}, {0x4, 0x2}, {0x3, 0x2}, {0x0, 0x7}]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x3, 0x1, 0x8001, 0x4, 0xfff8, 0x8000]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x9, 0x0, 0xb, 0x3, 0x9, 0x1000, 0x9]}}]}, @NL80211_BAND_2GHZ={0x28, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1a, 0x1, [0x6, 0xc, 0x60, 0x6c, 0x3, 0x5, 0x1, 0x1b, 0x24, 0x48, 0x36, 0x4, 0x3, 0x18, 0x1, 0x2, 0x3, 0xc, 0x1b, 0x36, 0x13, 0xc]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x9e69, 0x131b, 0x9, 0xd, 0xb7f, 0x4, 0x1, 0x3ff]}}, @NL80211_TXRATE_HE_GI={0x5}]}, @NL80211_BAND_2GHZ={0x68, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x3, 0x2, 0x8, 0x3, 0x800, 0xfffd, 0x9]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_LEGACY={0x24, 0x1, [0x0, 0x60, 0x36, 0x9, 0xc, 0x6c, 0x0, 0x5, 0x3, 0x6, 0x9, 0x5, 0x12, 0x4, 0x3, 0x5, 0x30, 0x36166c72981f77a1, 0x30, 0x5, 0x5, 0x30, 0x1, 0x9, 0x36, 0x1b, 0x18, 0x6, 0x9, 0x2, 0x18, 0x5]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1000, 0x9, 0x18a7, 0x9471, 0x5, 0x1, 0x7, 0xfc00]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x38, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HT={0x8, 0x2, [{0x1, 0x8}, {0x6, 0x1}, {0x6, 0x2}, {0x5, 0x5}]}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x9, 0x6a7731dcfe0fe59e, 0xb, 0x6, 0x30, 0x9, 0x9, 0xb, 0x60, 0x5, 0x1b, 0x48, 0x30, 0x18, 0x30, 0x60]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE_GI={0x5}]}]}]}, 0x634}, 0x1, 0x0, 0x0, 0x4004000}, 0x0) setsockopt$sock_int(r4, 0x1, 0x29, &(0x7f0000001fc0)=0x6, 0x4) socket$unix(0x1, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_int(r5, 0x0, 0x8, &(0x7f0000002000)=0xfffffffc, 0x4) r6 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000002040)={0x1f, 0x0, @fixed}, &(0x7f0000002080)=0xe, 0x80800) getsockopt$bt_l2cap_L2CAP_CONNINFO(r6, 0x6, 0x2, &(0x7f00000020c0), &(0x7f0000002100)=0x6) socketpair(0x6, 0x6, 0xab90, &(0x7f0000002140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NFT_MSG_GETOBJ_RESET(r8, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)={0x28, 0x15, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x8}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x9}, @NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000000) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(r7, &(0x7f0000002340)={&(0x7f0000002280)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002300)={&(0x7f00000022c0)=@getqdisc={0x40, 0x26, 0x2, 0x70bd29, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x4, 0x5}, {0xe, 0x3}, {0xc, 0x10}}, [{0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}, {0x4}]}, 0x40}, 0x1, 0x0, 0x0, 0x22044810}, 0x8810) setsockopt(r4, 0xffffff81, 0x42, &(0x7f0000002380)="4e2f66e2be95670ced218c5078ab7226f8e82aef726ec797e25857c6", 0x1c) r10 = openat$tun(0xffffffffffffff9c, &(0x7f00000023c0), 0x101a40, 0x0) write$tun(r10, &(0x7f0000002400)={@void, @val={0x3, 0x80, 0x0, 0x4, 0xfff, 0x1}, @ipv4=@icmp={{0x8, 0x4, 0x1, 0x1e, 0x9c, 0x67, 0x0, 0x6, 0x1, 0x0, @private=0xa010101, @empty, {[@cipso={0x86, 0x8, 0x3, [{0x0, 0x2}]}, @ra={0x94, 0x4, 0x1}]}}, @dest_unreach={0x3, 0x4, 0x0, 0x0, 0x4, 0x1, {0x1c, 0x4, 0x0, 0x1, 0x5, 0x68, 0x5, 0x2, 0x1d, 0x20, @multicast1, @loopback, {[@end, @ra={0x94, 0x4}, @timestamp={0x44, 0x14, 0x27, 0x0, 0xf, [0x62f88639, 0x401, 0x5, 0x96d]}, @generic={0x82, 0x5, "4abf50"}, @noop, @timestamp_addr={0x44, 0x34, 0x2c, 0x1, 0x5, [{@dev={0xac, 0x14, 0x14, 0x13}, 0x3fb5c000}, {@remote, 0x5}, {@broadcast, 0x8}, {@empty, 0x10000}, {@remote, 0xfffffffb}, {@remote, 0x7489}]}, @noop, @noop, @end, @ra={0x94, 0x4}]}}, "1d5862b9"}}}, 0xa6) setsockopt$inet_MCAST_MSFILTER(r8, 0x0, 0x30, &(0x7f00000024c0)={0x200, {{0x2, 0x4e20, @multicast1}}, 0x1, 0x3, [{{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x1, 0x0}}}, {{0x2, 0x4e23, @local}}, {{0x2, 0x4e24, @remote}}]}, 0x210) sendmsg$NL80211_CMD_SET_MESH_CONFIG(r1, &(0x7f0000002800)={&(0x7f0000002700)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000027c0)={&(0x7f0000002740)={0x58, r2, 0x10, 0x70bd27, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0xa37, 0x52}}}}, [@NL80211_ATTR_WDEV={0xc, 0x99, {0x80, 0x21}}, @NL80211_ATTR_IFINDEX={0x8, 0x3, r3}, @NL80211_ATTR_MESH_CONFIG={0x24, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_ROOTMODE={0x5}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5}, @NL80211_MESHCONF_CONNECTED_TO_GATE={0x5, 0x1d, 0x1}, @NL80211_MESHCONF_HWMP_PREQ_MIN_INTERVAL={0x6, 0xc, 0x3ff}]}]}, 0x58}}, 0x20000800) ioctl$ifreq_SIOCGIFINDEX_team(r8, 0x8933, &(0x7f0000002840)) setsockopt$SO_TIMESTAMPING(r5, 0x1, 0x41, &(0x7f0000002880)=0x407, 0x4) sendmsg$IPCTNL_MSG_CT_GET_STATS(r9, &(0x7f0000002980)={&(0x7f00000028c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000002940)={&(0x7f0000002900)={0x14, 0x5, 0x1, 0x3, 0x0, 0x0, {0xa}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4040000}, 0x4000000) 4m38.301134629s ago: executing program 2 (id=60): r0 = socket(0x2b, 0x80801, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000200)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0xab, 0xfffffffffffffffc, 0x0, 0x0, '\x00', 0x0, 0x38}, 0x80) ioctl$sock_inet_udp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000180)) r1 = socket$netlink(0x10, 0x3, 0x4) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000440)="580000001400192340834b80043f679a10ff3d425f0600ffa600000000becc4b381eaadc1af23457e792945f918be4f04247e374b97164009400050028925aaa160000c600ff5f442059e12817c009fb2366e6cfe1dae7d9", 0x58}], 0x1) 4m37.985012877s ago: executing program 2 (id=63): unshare(0x22020600) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = socket$kcm(0xa, 0x2, 0x73) setsockopt$sock_attach_bpf(r1, 0x29, 0x19, 0x0, 0xfcd8) (async) setsockopt$sock_attach_bpf(r1, 0x29, 0x19, 0x0, 0xfcd8) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000006c0)={0x2, 'pimreg1\x00', 0x4}, 0x18) (async) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000006c0)={0x2, 'pimreg1\x00', 0x4}, 0x18) syz_emit_ethernet(0x4e, &(0x7f0000000780)={@local, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00 \x00', 0x18, 0x3a, 0xff, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @local, {[], @mld={0x187, 0x0, 0x0, 0x0, 0x0, @local}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="9000000002060102000034e40000000000000008050005000a000000050001000600000005000400000000003c00078008001740000000061800028014000240000000000000000000000000000000000000c90441145ccf1a5c230b400000000208000840000001070800124004003a1f11000300686173683a69702c706f7274000000001400078008000640000000"], 0x90}, 0x1, 0x0, 0x0, 0x81}, 0x4000000) 4m37.332466982s ago: executing program 2 (id=64): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/44, 0x2c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 4m36.262885517s ago: executing program 32 (id=64): r0 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth0_to_batadv\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x3, 0x0, {0x60, 0x0, 0x0, r1, {0x0, 0x2}, {0xffff, 0xffff}, {0x4, 0x3}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x40001d4}, 0x8840) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(aes))\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r4, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmsg$unix(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000001c0)=""/44, 0x2c}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x7, 0x3, 0x0, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 3m35.752527722s ago: executing program 3 (id=561): unshare(0x22020600) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000640)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) bind$alg(0xffffffffffffffff, 0x0, 0x0) accept4(0xffffffffffffffff, 0x0, 0x0, 0x800) r3 = socket$key(0xf, 0x3, 0x2) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r1, @ANYRES8=r3], 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180000000000000000000000090000008500000011000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r4, 0x0, 0xe, 0x0, &(0x7f0000000300)="0000f1bcd399b81e1011f5aa5e5c", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3m35.537945456s ago: executing program 3 (id=563): socket$inet6(0xa, 0x2, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000080)={@fallback, 0xffffffffffffffff, 0xc, 0x28}, 0x20) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 3m35.285859672s ago: executing program 3 (id=566): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000020000000000000000008500000017000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x4, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x4}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x1}}], 0xfd68) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}]}, {[{}, {}, {}, {}, {}, {0x1ff}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711033000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711033000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 3m25.375333857s ago: executing program 3 (id=566): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000020000000000000000008500000017000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x4, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x4}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x1}}], 0xfd68) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}]}, {[{}, {}, {}, {}, {}, {0x1ff}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711033000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711033000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 3m10.581205975s ago: executing program 4 (id=726): unshare(0x8040480) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)={0x64, r1, 0x1, 0xffffffff, 0x0, {}, [@TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x4c, 0x4, {'gcm(aes)\x00', 0x24, "eade3d7b4cd07ec3ee777de774fc7987cca41989251bb817a02d64aed696ea022191ec1d"}}]}]}, 0x64}}, 0x4000000) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$BPF_MAP_LOOKUP_AND_DELETE_ELEM(0x15, &(0x7f00000003c0)={r2, 0x0, 0x0, 0x4}, 0x20) (async) r3 = socket$nl_rdma(0x10, 0x3, 0x14) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x34000811) (async) sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) sendto$inet6(r4, 0x0, 0x0, 0x20000814, &(0x7f0000000380)={0xa, 0x4e20, 0x6, @remote}, 0x1c) (async) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0xb, 0xc3072, 0xffffffffffffffff, 0x0) (async) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r6, 0x6, 0x21, &(0x7f0000000040)="5766b1b827f600333b09d3748ee7d700", 0x10) ioctl$BTRFS_IOC_START_SYNC(r5, 0x80089418, &(0x7f00000000c0)) listen(r6, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r5, 0x8983, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_SCRUB(0xffffffffffffffff, 0xc400941b, &(0x7f0000000700)={0x0, 0x1, 0x4c34}) r7 = socket$rds(0x15, 0x5, 0x0) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'wlan0\x00', &(0x7f0000000000)=@ethtool_sset_info={0x4a}}) (async) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x0, 0x42073, 0xffffffffffffffff, 0x0) (async) ioctl$sock_SIOCGPGRP(r3, 0x8904, 0x0) 3m10.285682942s ago: executing program 4 (id=727): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) (async) r1 = socket$inet(0x2, 0x4000000805, 0x0) sendmsg$inet_sctp(r1, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900)=ANY=[@ANYBLOB="200000000000000084000000020000000a000400030000000b2fa2560d"], 0x20, 0x2400e044}, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) (async) writev(r0, &(0x7f0000000380)=[{&(0x7f0000000a40)="2e9b3d0007e03dd65193dfb6c575963f8864f0", 0x13}, {&(0x7f0000000140)="999aa269", 0x4}, {&(0x7f0000000880)='v', 0x1}, {&(0x7f0000000180)="1aff", 0x2}], 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040)}, 0x48) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_init_net_socket$ax25(0x3, 0x3, 0x7) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x275a, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x40, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x5}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8}, @NL80211_ATTR_SCHED_SCAN_RSSI_ADJUST={0x6, 0xf7, {0x8, 0x81}}, @NL80211_ATTR_SCHED_SCAN_RELATIVE_RSSI={0x5, 0xf6, 0x6}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_SCHED_SCAN_DELAY={0x8, 0xdc, 0xb3}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000800}, 0x4024085) (async) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r3, 0x0) (async) unshare(0x24020400) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="180500000000000000000000000000001836000005000000000000000600000095"], &(0x7f0000000540)='GPL\x00', 0x8, 0xdb, &(0x7f0000003e40)=""/219, 0x41100, 0x54, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x94) 3m9.973765538s ago: executing program 5 (id=730): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x4000, 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, 0x0, &(0x7f00000000c0)=0x14) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) write$cgroup_subtree(r0, &(0x7f0000000100)=ANY=[], 0x32600) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) (async) socket$inet6_mptcp(0xa, 0x1, 0x106) (async) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000000)=0x4000, 0x4) (async) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000047c0)={0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="180000007a00010600000000fbdbdf2507"], 0x18}], 0x1, 0x0, 0x0, 0x4000050}, 0x80) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[], 0xa0}}, 0x0) (async) socket(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f0000000000), 0x4000000000001f2, 0x0) (async) getsockopt$inet6_mptcp_buf(r1, 0x11c, 0x1, 0x0, &(0x7f00000000c0)=0x14) (async) 3m9.897793562s ago: executing program 3 (id=566): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000020000000000000000008500000017000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x4, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x4}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x1}}], 0xfd68) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}]}, {[{}, {}, {}, {}, {}, {0x1ff}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711033000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711033000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 3m9.872200515s ago: executing program 4 (id=731): r0 = socket$packet(0x11, 0x2, 0x300) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0x7fe2, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000004c0), &(0x7f00000006c0), 0x5, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000740)=ANY=[@ANYRES16=r0], &(0x7f00000005c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10003}, 0x94) r3 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0xcc, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x9c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1], 0x0, [0x5, 0x40, 0x2, 0x0, 0x8, 0x0, 0x9, 0xffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc, 0x0, 0x3], [0x0, 0x8, 0xfffd, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffc]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x38, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0x1c, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0x7f}, @TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}, @TCA_TAPRIO_SCHED_ENTRY_CMD={0x5, 0x2, 0xe}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x400}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x7}]}}]}, 0xcc}, 0x1, 0x0, 0x0, 0x44}, 0x20044044) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='kmem_cache_free\x00', r2}, 0x10) syz_emit_ethernet(0x3a, &(0x7f0000000340)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@ssrr={0x89, 0x3, 0xe2}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x8000}, 0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) r6 = socket$inet_udp(0x2, 0x2, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYBLOB="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"], 0x30}, 0x1, 0x0, 0x0, 0x8481}, 0x0) bind$inet(r6, &(0x7f0000000240)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) sendmmsg$inet(r6, &(0x7f00000039c0)=[{{&(0x7f0000000800)={0x2, 0x6e20, @multicast1}, 0x10, 0x0}}], 0x1, 0x2000c044) sendmsg$ETHTOOL_MSG_FEATURES_SET(r6, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)={0x2c, 0x0, 0x40c, 0x70bd2b, 0x25dfdbfd, {}, [@ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r8 = socket(0x2a, 0x2, 0x0) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x16c, 0x0, 0x300, 0x70bd26, 0x25dfdbff, {{}, {@void, @void}}, [@NL80211_ATTR_TX_RATES={0x158, 0x5a, 0x0, 0x1, [@NL80211_BAND_2GHZ={0x20, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x2, 0x5, 0x96d0, 0x2, 0x1, 0x1ff, 0x3, 0x6]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x18, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x200, 0x7fff, 0x0, 0x3, 0x9, 0xcd8, 0x4]}}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x9, 0x81, 0xc, 0x5, 0x3ff, 0x3, 0x5, 0x9]}}, @NL80211_TXRATE_HT={0x39, 0x2, [{0x2, 0x5}, {0x4, 0x6}, {0x3, 0x2}, {0x4, 0x3}, {0x6, 0x8}, {0x3, 0x1}, {0x1, 0x8}, {0x4, 0x9}, {0x5, 0x4}, {0x2, 0x2}, {0x5, 0x6}, {0x1, 0x8}, {0x0, 0x3}, {0x3, 0x8}, {0x3, 0x9}, {0x4}, {0x4, 0x9}, {0x2, 0x4}, {0x6, 0x1}, {0x1, 0x3}, {0x5}, {0x3}, {0x7, 0x9}, {0x2, 0x7}, {0x1, 0x9}, {0x4, 0x6}, {0x1, 0x2}, {0x0, 0x5}, {0x0, 0xa}, {0x2, 0x6}, {0x6, 0x2}, {0x6, 0x7}, {0x4, 0xa}, {}, {0x0, 0xa}, {0x7, 0x3}, {0x6, 0x3}, {0x5, 0x9}, {0x6, 0x7}, {0x7, 0x5}, {0x0, 0x4}, {0x7, 0xa}, {0x1, 0x4}, {0x5, 0x9}, {0x1, 0x9}, {0x1, 0xa}, {0x4, 0x8}, {0x0, 0x4}, {0x6, 0x9}, {0x7}, {0x7, 0x8}, {0x6, 0x6}, {0x7}]}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x3, 0x3, 0x6c, 0xc, 0x3, 0x1b, 0x24, 0x36, 0x12, 0x55, 0x7d, 0x12, 0x16, 0x6, 0x36, 0x5, 0x18, 0x48, 0x18, 0x3, 0x1b]}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x78, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x5, 0x40, 0x5, 0x8000, 0x5, 0x2, 0x0, 0x7]}}, @NL80211_TXRATE_LEGACY={0x19, 0x1, [0x4, 0x6c, 0x1b, 0x30, 0xb, 0x60, 0xb, 0x24, 0x9, 0x6c, 0x3, 0x6c, 0x1b, 0x3, 0x3, 0x1, 0xc, 0x36, 0x60, 0x1, 0x30]}, @NL80211_TXRATE_HT={0x25, 0x2, [{0x1, 0x7}, {0x0, 0xa}, {0x4}, {0x4, 0x7}, {0x7}, {0x0, 0x6}, {0x2, 0x6}, {0x2}, {0x5, 0x9}, {0x6, 0x5}, {0x5, 0x1}, {0x6, 0x3}, {0x4, 0x1}, {0x0, 0x7}, {0x1, 0x9}, {0x4, 0x6}, {0x5, 0x3}, {0x0, 0x1}, {0x5, 0x9}, {0x4, 0x6}, {0x4, 0xa}, {0x6, 0x7}, {0x5, 0x1}, {0x6, 0x5}, {0x7, 0x5}, {0x2, 0x5}, {0x5, 0x8}, {0x2, 0x4}, {0x4, 0x7}, {0x0, 0x2}, {0x0, 0x4}, {0x0, 0x2}, {0x0, 0x8}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x96c, 0x7, 0x5, 0x1ff, 0x400, 0x7, 0x59]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}]}]}, 0x16c}, 0x1, 0x0, 0x0, 0xc0}, 0x81) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000840), r10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a733000080002000000e6ff07000700263a3a0914000600626f6e64300000000000000000000000080003"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000001a80)=@newqdisc={0x13c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x9, 0xfff1}}, [@qdisc_kind_options=@q_red={{0x8}, {0x110, 0x2, [@TCA_RED_STAB={0x104, 0x2, "a69073b25b2c8c5f8cb74f8f385cd6a0f726408d8dc11417f6fec831746c3959b93955ab7de908c9cb18ddf484b54c6ab096ec629d6adaa4d0347150ce53d7ff5752579879dc5bd736b8baebb19b152653ecb46eb30238bed859e6a0eb1478b82692ffa364a58646e5ac8d5a5464148edf1aaa60bef9fc670ba97d30dfce698a39af8b87e1bd422855a87bc6d7b3ffb5edabaa366f8a42c56a50749e8b59ede0cf892291ee03c7775cceb22fc4e64731cebd72b42b13aa4d14ad83b07e3e056d5ea141a2b211acedcda29fd894adc5ddd63bd101afc5f7a467399ecbb55077ea25fe0feb7e88ba78b7ece5e1941f32d744936350891fb85dc1f098b1b6084f1b"}, @TCA_RED_EARLY_DROP_BLOCK={0x3d, 0x5, 0x69b}]}}]}, 0x13c}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r13, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f000000850000000500000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) 3m9.436217989s ago: executing program 5 (id=732): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000200), 0x12) mmap(&(0x7f000018f000/0x3000)=nil, 0x3000, 0xa, 0x22051, r0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000010000000000000000000851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000000116608000000000000180000000000000000000000000000009500000000000000360a020000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0xa, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x8}, 0x78) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) 3m9.1498199s ago: executing program 5 (id=733): r0 = socket$netlink(0x10, 0x3, 0xa) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x2, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x5, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r4, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfb, {0x0, 0x0, 0x0, r4, {}, {0xffe2, 0xb}, {0xd, 0xb}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000c061}, 0x400c000) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) sendmsg$AUDIT_USER_AVC(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000005c0)={0x24, 0x453, 0x100, 0x70bd2d, 0x25dfdbff, "003791f889c48d7abd06bd74f100fb4f44"}, 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x4000040) 3m9.013044875s ago: executing program 4 (id=734): r0 = accept(0xffffffffffffffff, &(0x7f0000000140)=@qipcrtr, &(0x7f00000001c0)=0x80) r1 = syz_genetlink_get_family_id$tipc(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NODE_ADDR(r0, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f00000003c0)={&(0x7f00000002c0)={0x24, r1, 0x800, 0x70bd2c, 0x25dfdbfb, {{}, {}, {0x8, 0x11, 0x80}}, [""]}, 0x24}, 0x1, 0x0, 0x0, 0x4040004}, 0xdba605b6e5f1e6bb) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r3, 0x10e, 0xb, &(0x7f0000000040)=0x1c, 0x4) sendmsg$netlink(r3, &(0x7f0000002b40)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000026002307"], 0x14}], 0x1, 0x0, 0x0, 0x24008015}, 0x8000) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000000)='inet_sock_set_state\x00', r4, 0x0, 0x3}, 0x18) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r5, &(0x7f00000007c0)=[{{&(0x7f0000000380)=@in={0x2, 0x4e24, @local}, 0x80, 0x0}}], 0x1, 0x2c000011) sendmsg$IPSET_CMD_HEADER(r0, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000580)={&(0x7f0000000500)={0x5c, 0xc, 0x6, 0x201, 0x0, 0x0, {0x3, 0x0, 0x7}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}]}, 0x5c}, 0x1, 0x0, 0x0, 0x801}, 0x4001) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x58) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a84000000060a0904000000000000000002000000580004803c0001800e000100696d6d656469617465000000280002801c000280180002800900020073797a320000000008000180fffffffc0800014000000000180001800d00010073796e70726f787900000000040002800900010073797a30000000000900020073797a32"], 0xac}}, 0x0) unshare(0x6a040000) r8 = socket(0x8, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r8, 0x61e5, 0x0) sendmsg$nl_xfrm(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000040)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in=@remote, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x800}, [@tmpl={0x44, 0x8, [{{@in6=@loopback, 0x4d2, 0x2b}, 0x0, @in6=@mcast2}]}]}, 0xfc}}, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r9 = accept4(r2, 0x0, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f0000009d00)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f0000004300)="dc53410c028336dd2edc80341a8ed1eddb7a666f426f671c2334281380dd7b98", 0x20}, {&(0x7f0000001e40)="4cdd3b8b18257694ae8b637b5c4147d1a6dd59775e694104a33f3f06f1136766", 0x20}], 0x2}}, {{0x0, 0x0, &(0x7f0000006d40)=[{&(0x7f0000006c40)="324d86ee95cf0d0d5585e3279efe4fd0b6dafb93eee8b0afc609e87ce7a60ead47b8048d24b39011f56d7a3e1e368152a5125e29020a8fa7d4910a423ba628d2adf685f7851c5ac3c9d7997b095928fdec5153e90eaf25", 0x57}, {&(0x7f0000006cc0)="9adaf615e5f5caf2dbb930eb4bcf83a7d5ab7d2880e4d75510dc058f0589b593507d47a2ca9b9e99e17e94105b4e27d6d5d400a38307094ba788d8e215f310fdddb0ca1e2c967def94c13173db119bbdeac74519", 0x54}], 0x2}}, {{0x0, 0x0, &(0x7f0000007500)=[{&(0x7f0000007300)="f572878c7aefc200e078de78443fc4311bb2a13cf61d1e996f971ab8d5877415908a51a4b6bdbdb894e6249076291816fd2802903228a988ffcb56631062bc03b6746ec5c74348c7676ee2286ffc8da5b067d95680006add570c0ff956bfc76ad826ddbfac9d21f02a27f380600eb887e680b3b16351cfa1d0bac3d2ae824799bd33026c015f12fbf26d015ae8f7a3d4e390c3228ffa49dbf546035f34a324ee5f6508f20e799d6fac80b3e283eb1e5e6bde74c36a16a94ecf30e49205a02c96502764a2d1f073f9a8fc52d14344c3660adf23b8b5ced27702066b465619", 0xde}, {&(0x7f0000007400)="2007958f55c3d9b287d30db0fb5ae3315c802a94fd6b45d491c96f01932d498bf38d4f4a939c2dda011380827e0027e5b1550379df10d44eae40bc853e152b6d0b639e15585c6a1a02f872741c1f19c86ca55a3f912a7dadf2922bfbf003af2c5a417734db649c805cd509", 0x6b}], 0x2}}], 0x3, 0x0) r10 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=@newlink={0x48, 0x10, 0x1, 0x70bd27, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4730d}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x1}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0xc880) 3m8.460672852s ago: executing program 5 (id=735): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r0, &(0x7f000057eff8)=@abs={0x0, 0x0, 0x1004e22}, 0x6e) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0x0, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0x6}, {}, {0x7}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_gact={0x48, 0x1, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0xcff5, 0x8001, 0xffffffffffffffff, 0x5, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) ppoll(&(0x7f0000000000)=[{r1, 0x8104}], 0x1, 0x0, 0x0, 0x0) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001180)={0x0, 0x0, &(0x7f0000000180), 0x1, 0x0, 0xf}, 0x0) r7 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r7, &(0x7f0000001ff0)={0x1d, r8}, 0x10) sendmsg$can_raw(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000ff0)={&(0x7f0000000580)=@canfd={{0x1}, 0xf6, 0x0, 0x0, 0x0, "0327e1b22b5fcef7739c699f5ff986ca08990039576a7d5cb2bdac3fa80acf584ecb5fee496e6866856b76b5ee00000000000000004e2f9663a918fa1efd9b0b"}, 0x48}, 0xee, 0x0, 0x0, 0x40041}, 0x0) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r0, r4, 0x2, 0x4d, &(0x7f0000000280)="1bf16e8fc2c5b4172b226d6b4fc7abb41101a2c943a934a80d8b7c60681e2cd1cf5df1935dee4a369efa2b54946988740644d68a283cf755c1a3afb7eeec9574e63c9b83eb9dfaf920ad26b804", 0x8, 0x5, 0x5, 0x8, 0x3, 0x3, 0x19, 'syz1\x00'}) close(0x3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb0, 0xb0, 0x5, [@enum={0x1, 0x2, 0x0, 0x6, 0x4, [{0x1, 0x2}, {0x0, 0x4}]}, @float={0xf, 0x0, 0x0, 0x10, 0x4}, @enum64={0x7, 0x2, 0x0, 0x13, 0x0, 0x0, [{0x1, 0x6, 0x97}, {0x10, 0x7, 0x3}]}, @volatile={0x6, 0x0, 0x0, 0x9, 0x4}, @typedef, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x4, 0x4, 0x3}}, @restrict={0xd, 0x0, 0x0, 0xb, 0x3}, @decl_tag={0x8, 0x0, 0x0, 0x11, 0x3, 0x4}, @volatile={0x5}, @volatile={0xd, 0x0, 0x0, 0x9, 0x3}]}, {0x0, [0x2e, 0x30, 0x61]}}, &(0x7f00000001c0)=""/111, 0xcd, 0x6f, 0x1, 0x4}, 0x28) 3m8.049360145s ago: executing program 5 (id=737): socket$netlink(0x10, 0x3, 0x0) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0, 0x0, 0x4}, 0x18) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27, 0x40}, 0x6) (async, rerun: 64) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (rerun: 64) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) unshare(0x24020400) r3 = socket$tipc(0x1e, 0x0, 0x0) bind$tipc(r3, &(0x7f0000000340)=@name={0x1e, 0x2, 0x1, {{0x0, 0x1}}}, 0x10) r4 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) (async) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_FLUSH(r6, 0x0, 0x485, 0x0, 0x0) (async) openat$ppp(0xffffffffffffff9c, 0x0, 0x2, 0x0) connect$llc(0xffffffffffffffff, 0x0, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002b40), 0x0, 0x24044002) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r5, 0x1, 0x0, 0x6, @link_local}, 0x14) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, 0x0, 0xc000) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) accept$alg(r6, 0x0, 0x0) (async) r8 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r8, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r4, 0x80000001) (async) socket$vsock_stream(0x28, 0x1, 0x0) (async, rerun: 64) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) (async, rerun: 64) socket$nl_route(0x10, 0x3, 0x0) 3m7.441524121s ago: executing program 3 (id=566): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000020000000000000000008500000017000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x4, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x4}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x1}}], 0xfd68) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}]}, {[{}, {}, {}, {}, {}, {0x1ff}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711033000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711033000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 3m7.441289681s ago: executing program 33 (id=566): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000020000000000000000008500000017000000850000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, &(0x7f0000000140)=[{{}, {0x4, 0x0, 0x1, 0x1}}, {{0x3, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x3, 0x1, 0x1, 0x1}, {0x3, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x4}}, {{0x4, 0x1, 0x1}, {0x1, 0x0, 0x1}}, {{0x0, 0x0, 0x0, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x2, 0x0, 0x0, 0x1}}, {{0x1, 0x1, 0x0, 0x1}, {0x1}}], 0xfd68) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0xa08, 0x100, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x970, 0xffffffff, 0xffffffff, 0x970, 0xffffffff, 0x3, 0x0, {[{{@ip={@broadcast, @private, 0x0, 0x0, 'batadv0\x00', 'batadv_slave_0\x00', {}, {}, 0x21}, 0x6, 0xa0, 0x100, 0x0, {}, [@common=@inet=@dccp={{0x30}}]}, @common=@SET={0x60}}, {{@ip={@loopback, @dev, 0x0, 0x0, 'veth0_virt_wifi\x00', 'bond_slave_0\x00'}, 0x0, 0x850, 0x870, 0x0, {}, [@common=@unspec=@u32={{0x7e0}, {[{}, {[{0x0, 0x2}]}, {[{}, {}, {}, {}, {}, {0x1ff}], [{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x7fff}]}]}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0xa68) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711033000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x10, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="620ac4ff00000000711033000000000095"], &(0x7f0000000480)='GPL\x00'}, 0x94) 3m7.424856975s ago: executing program 4 (id=740): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000380)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-cast5-avx\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d4", 0x5) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmsg$TIPC_NL_MON_GET(r1, &(0x7f0000000240)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, 0x0}, 0x0) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000040), 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="100000002d000b02d25a806f8c6394f9101a04000a", 0x15}], 0x1}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081044e81f782db44b9040a1d08030e000000e8fea4a1180015000600142603600e1208000f1000810401a80016000a0001", 0x37}], 0x1, 0x0, 0x0, 0x7400}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={&(0x7f0000000000)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0, 0x0, 0x0, 0x5c8}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce620300fe"], 0xfe1b) r2 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r2, &(0x7f0000000000)=ANY=[@ANYBLOB="563f00001800599c6d0eab070004000523"], 0xfe33) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, 0x0, 0x0) getsockopt$inet_mptcp_buf(r3, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10", 0x48}], 0x2, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x1021) 3m6.795548628s ago: executing program 5 (id=742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000044000000010000001410"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000002880)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0xf772, @local, 0x64}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000400000000140000000000000029"], 0x48}}], 0x1, 0x8000) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1}, 0xc) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x20, 0x2d, 0x1, 0x8000, 0x25dfdbfd, "", [@nested={0x4, 0x800}, @nested={0x5, 0x11, 0x0, 0x1, [@generic='/']}, @typed={0x4, 0x1d}]}, 0x20}], 0x28}, 0x300) 3m6.46854241s ago: executing program 34 (id=742): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="020000000400000044000000010000001410"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000010000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$l2tp6(0xa, 0x2, 0x73) sendmmsg$inet6(r2, &(0x7f0000002880)=[{{&(0x7f00000000c0)={0xa, 0x4e21, 0xf772, @local, 0x64}, 0x1c, 0x0, 0x0, &(0x7f0000000b00)=ANY=[@ANYBLOB="1400000000000000290000000b0000000000000400000000140000000000000029"], 0x48}}], 0x1, 0x8000) bpf$PROG_BIND_MAP(0xa, &(0x7f00000001c0)={r1}, 0xc) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)={0x20, 0x2d, 0x1, 0x8000, 0x25dfdbfd, "", [@nested={0x4, 0x800}, @nested={0x5, 0x11, 0x0, 0x1, [@generic='/']}, @typed={0x4, 0x1d}]}, 0x20}], 0x28}, 0x300) 3m6.369083686s ago: executing program 4 (id=746): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.swap.max\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) sendfile(r1, r1, 0x0, 0x100000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 3m5.992866347s ago: executing program 35 (id=746): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000100)='memory.swap.max\x00', 0x2, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x3, 0x10004, 0x5}, 0x50) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000008000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000002d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r3}, 0x10) sendfile(r1, r1, 0x0, 0x100000000) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(0x3) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) pselect6(0x0, 0x0, 0x0, &(0x7f00000002c0)={0x3ff, 0x4, 0x0, 0xa, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd, 0x9323, 0xfffffffffffffffe, 0x0, 0x6}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff, 0x2}, 0x0, 0x0) 2m2.788677239s ago: executing program 1 (id=1098): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000140)='memory.numa_stat\x00', 0x275a, 0x0) read$alg(r1, &(0x7f0000000040)=""/136, 0x88) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_int(r2, &(0x7f0000000080)='pids.max\x00', 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000580)=ANY=[@ANYBLOB='-', @ANYRESOCT=r3], 0x9) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000840)=0xffffffffffffffff, 0x4) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@map=r1, r1, 0xc, 0x2000, 0x0, @value=r6}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000300)={0x40, r8, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x6, 0x37}}}}, [@chandef_params=[@NL80211_ATTR_CENTER_FREQ1={0x8, 0xa0, 0x69}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x40}}, 0x4000000) sendmsg$nl_route(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@setlink={0x48, 0x13, 0x1, 0x0, 0x80, {0x0, 0x0, 0x0, 0x0, 0x200}, [@IFLA_AF_SPEC={0xc, 0x1a, 0x0, 0x1, [@AF_INET={0x8, 0x2, 0x0, 0x1, {0x4}}]}, @IFLA_ALT_IFNAME={0x14, 0x35, 'wlan1\x00'}, @IFLA_PROTO_DOWN={0x5, 0x27, 0x3}]}, 0x48}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r2}, 0x8) r10 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_RTOINFO(0xffffffffffffffff, 0x84, 0x0, &(0x7f0000000680)={0x0, 0x60000, 0x80000001, 0xfff}, &(0x7f00000006c0)=0x10) sendmsg$inet_sctp(r10, &(0x7f00000007c0)={&(0x7f0000000140)=@in6={0xa, 0x4e20, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}, 0xd3}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000380)="06a15e9fe568fe9c8c7eef8cff7e7f31de1d6e1256fa86461307260ad24fa62ada19d276828ef02d9d81367fba8706005fe97dbeff4e36f63883ef9dd3a334c92cc4d2cddbf5f89c7e10fd8088202b4243685ba43983b54afd8c9380a74401c87f527c8179ee9de88cf4087677c4409a51783523d229a02eceb2a0bfa10bb4f351bcdff54f87e15b44851bac3cfb86bba100e57d4a1db7668d4dd2a80e2befc7d64fda6603cc6806863db4c28ec21f16b4c7afad8195b3a10189279df3fb1729511f756ae0e32870", 0xc8}, {&(0x7f0000000280)="614571cda8f113f1b9cb15212968acbe32802de7321f2cd584c54866887aadef", 0x20}, {&(0x7f0000000480)="f49b538d127a80f7572bc648062f949acfe3070cd15b9e72ef8da398c5946896a4b2c4f85e774d1c065999551f466816268862d2080fc07fa4af338a916913dcea453de67372caaf8b16a686a63078be8a91b5ec8dcf15eed654744c5a1c4bf8f8e0", 0x62}, {&(0x7f00000002c0)="46dca7484ec3ed35", 0x8}, {&(0x7f0000000500)="8db3e4ccb9acfa4ecba7fce3e55def167e56884493c51dbf4c451155fc97550d8e80f632f6d7eb962e8cc6114aa946d9d1b935cf726099453794f563ab0dae00ad6d43220934ef1cac889def107f4686d9d3eb48ba22e2f3611aef44a49735", 0x5f}], 0x5, &(0x7f0000000700)=[@prinfo={0x18, 0x84, 0x5, {0x0, 0x10000}}, @authinfo={0x18, 0x84, 0x6, {0x7}}, @prinfo={0x18, 0x84, 0x5, {0x30, 0x7f}}, @init={0x18, 0x84, 0x0, {0x1, 0x6, 0x3, 0x8001}}, @sndinfo={0x20, 0x84, 0x2, {0x9, 0x209, 0x4, 0x1, r11}}, @prinfo={0x18, 0x84, 0x5, {0x10, 0x3ff}}], 0x98, 0x4800}, 0x200040c0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@newlink={0x4c, 0x10, 0x2, 0x0, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81, 0x34000}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_ALT_IFNAME={0x14, 0x35, 'macvlan1\x00'}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2m2.45453489s ago: executing program 1 (id=1099): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0xe0, &(0x7f0000000540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x8, &(0x7f0000001380)}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$packet(0x11, 0xa, 0x300) syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) connect$netrom(0xffffffffffffffff, 0x0, 0x0) sendmsg$TIPC_NL_MON_PEER_GET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="14"], 0x14}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2a, 0x2, 0x0) sendmsg$TIPC_NL_LINK_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x24, 0x24, 0xf0b, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xe}}}, 0x24}}, 0x40000) sendmsg$nl_route_sched(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x24, 0x2c, 0xd27, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r2, {0xfffa, 0xfff3}, {0x0, 0xffe0}, {0x10, 0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x4) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000200)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-serpent-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, 0x0, 0x0) r4 = accept(r3, 0x0, 0x0) sendmmsg$alg(r4, &(0x7f0000000740)=[{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000}], 0x1, 0x0) recvmsg(r4, &(0x7f000000b680)={0x0, 0x0, &(0x7f000000b600)=[{&(0x7f000000b4c0)=""/5, 0x5}], 0x1}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) unshare(0x480) socket(0x2000000015, 0x80005, 0x0) socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) 2m1.985647252s ago: executing program 1 (id=1104): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x4, {0x0, 0x0, 0x0, r3, {0x0, 0xffef}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x28, 0x7d1cdc3e828018e9, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2}, {0x6, 0xffff}, {0xffea}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) unshare(0x6a040000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r6, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="4167c4fd9ea8b423c01e798bbd631e888a04e31e6865a2d55b31833b82989759c0f3241bb5ebe979636a5f22244112d95d11a07cb172724ec37ef9faaf227d64f5190c9d82dfe194b2cf6d77e917e513170fa1e8e4c82dd9898b4ad23e677261595ec62844104d7ca15aa7eec90685ad92f2cd5b745910e47d703315a0d1d3a6d143575da2604e54bb1ddb295e590a1392770befa52aaf1651d375682bcf94e5da4ea37e1cde1d2a80890d896cfe4d08801bc50d9bc08480de2b2710b694ff7fb5bda12cd8a8cb8dc18bf0c265b71aef50ec0ee22e1968a4f3487d8487026bc2b721692064dcfdd1b6b6aec3e8da3d0ab7d3cc51e2db33c169e6354ea425fbfc1bc39057e64d3aff3749d60edcf0a50fe0e973b5ee3a7cd45ad967564fdbc9832869346037dabe420448b5089ab553c2c87e94befac8d3a0c2a56ca2ab778c2f34f571217c837580e8a524db35baea8024482bb32306182faaf39bb1c4e992c4440889e274952ed3d17d5e87224fec8048e6b7344270e046ab2fdda270ad4e5f651fd6eede5d42d9599265520d45d6f500fd733372a62ab4f496b56839b0d6418961a3b6016c26409daba4f2beeceeb38cc6ba75f57e8ee45d8a6c2ecc031c9469d937b9d7db91ded158ebd7f7d512d445f4104130a429ce7fce52d3fec37df953fc6e6adaa781b820b4bb6d4ffd2c10a16f9583890118793bae09157d3ac5625ad8e66a367488e2722bb82161661711d91a5540a92e3de7506861875575d40465cda28989cbc46fb3d80c2bc7e96afbde1cbd2e89103c55bde669c77b774ea570b26e93a1be5e50269ea5f3355869ac5a9701ac0e7d8f69b0a3186e118c6e2ce8e946c95bd729d94d237e5915e2711cc82826f147176a8a0555b9e11fb9a8ad736d016d202cea43b10a5102e48387ab70069b876051ac0557528c14748aa9cc0e0d9bf512533bdc83610d9f801ec4ed512a4a877e2f45b0cbe87ee25a314d481153eefe8643fb2f3e0478353552b0ae863635ab12e7bf0e4f046e8ba9cb7ce3189d52b2a27ff9e4eb5bf8b12d09d610705eec149589bdd38c951de63de4e3065e45eeb261a72c980349387514cb42467e1fe5812abaf4670e993c6fb561e5cccf7a472ee874bbfe73412bc63f706424f174afd1a3f16fb8b8305d932d33ab211d473d210b87e2f20b6ba951a2b98206793c04516fd57fc7365cec4a1831548470ebefe7f9487cc7b287b2f45eb69b4e165b9f3404d8ac84b2b57ace34de669a85fd885ecb055a6fd2ba5d5396737c702c082bfb35f3ccace91eacfc7a71b2bca1e228170ad6d194aa7c2dc2cf5f0bce153ac1befb2b82e6cf1f12d28812e309f5da0dbe1cad03172d296fa13247b1952ec988316f668aa65e1ca7e9e383b115ce5c25130955c118a0b4567bd180c07ce18bd0c459cc33ed7ba1c43262034a60711315ed81bbc95b7e3088dbd22b976fcd18bae330f08c89236f770478305fac20b5d9bd5cbc98c5c0f9713345c7362bc0e0bc78d212433bcdc6142989bc6ab82160df897825aa906d739dac905a434c90b2cbc72223011ea11480278b681cdcdf5fa63ac5f8b8f1f3ef7d4eb02f422e9fc52b98163630cd2f130f076a33bb011bb8e42800c9475f5cbee042b79fda44b6432b126f085a17553b82d9cae519ec239a9cccb99444f24b8f11e255e31e0d53a28e36949a3f8238c2ea3f4e3d8cf3b85b031c962504d00a4e7928b5fa2fab311bcc54d68738086ce70a8e5bdaf425033036a85e59aa3bb1b01f8b6c6a2e221c69e48565b55a196b2dc9cb067b4ccf8a7c81e31795a8b74e8940455126f19c8bbb9b941cc66c9443fd13e20c2074a9c3bc1740262c1fcb8e9ca5ac5729dfe6e25561eba41ccae8ca2e851affc1ab4ec912925ef7ccf72e97c577413260ccda170d75741336f837258a59da907460a2917f652c6e4ebc0467da8a95f2ceae9afcc4e0d1f4b95fc68b2f5e32af96fb12a8e7f3140dd235a30e5ad94e78cf58ad75ca8a871a70820090ba510e7563c0f78cf364369a51fa6683ff8d24924ceb922927eb0ba1395b7a4f37d92913a9688ef8428a887f1161f10aeab749f5ea8ca24e579008f542a9b785841dae071b94b5a8ba79985930f60ac2c93aa002d84b212e2e2b6c9c2a0694595dad99fd1f27d0044481ef5b364a059599ef982a114a61094b3b7d0f9a7b78d7615cc8573430e676987ab7421fde9abeb29e4529beb6a2724bed86a7b1d27ee73585892f083fad4307696a4166356b9c20a9579bbf3e8cda9ad7ec2b2bb973d05cf8d9457dc03eee2cfbf630dd917768ae652c0627e32ebb4c62951dfbd8e074dfdf02c5517ace50d5813c8d8d7f1fc0fc63a4fae5c2bcf26560c627500e03692384630be287790d545403adc500ef732d66e269b8b051aa57bb865a9b709c7a0426188daf29caf1d062b104592b4f6acc86895956d8085424dba0bfafdf900419f2227db1eca75b338091d23da2067566c6d54de1604bf8d4cce8a0b4484c4645a305861bc46ebccafbe500e01d51236b40027d1b2c7a72937b15899bb982c880d83ed6b70502bd0d68d2a2146a85c6518a11c386df610243ec513e7a284a81c841f9201ee3b9d3a8f44cdf52ec842e07c1f2f35e2a5b17278dce1f9b7fa09866ecb0d2e78fc8095b7dee81d3e308fd10a1490036194bfa89c118bd9c72d4747b90724d7bd0a7ead28c89c23cc6667c1a8b362ca5385d24b2c1265957764a4e46176365a5348bcf85c457921e7fa6c9e165b6c4d8bd9e8782c96839a5fd2679cd08f656ca5b41d00f8429d517a0d776049918e73b4a258fd2a1576b6420b67fc9ff3520556881ef4838e973f552edebde686af1d55e6172e5bb9b01543d32c0c7753b380dd9ed3f5c0b663a9b1bcb4bd36a365172aeee96a8d69c1e5c5b6c88fc9453ace6aa24bdfc1cfa27ea8cc36c80cace296259545a4e155d154ccbf00ae4ff912c583c871b7cdb46813584ea14bb6943d16b3f12e8fe149076e5e646e1dca0bf121a2e2fa09816e9056aa1143988ff17c21c49981445d98d88fd4bba6a59d9f97d301d90e3754103389b36308713c1ba31031e42f2d759343a95bbae9c01a3bb3e6b537b658d1c028c8ec3126bf79db223a3320e25a671ef834c924f02c1bbab338517accb8378f945cb1d65d4dff90f1e3af8168e33a5a124aef715b656075f6a62099afa110f2fe5eb83e0b3e36df91be2125be6500e5f3a81f8bc116f42734c784f6bb6c7e968610243b06026a9def4e85f8344fae36602aa3795cf71ecf7e57a3da0bef859daf649abc6390e86edaa84eefe48999ddba9067b90dd5ea2477f150ab588dadfe79ab7524157d1b94c738ca3345ce8657bfac981cb30b7c0f05f96dafcdce3e41471943609b121de1eda3e95a1c31bada084beec699512c7d5cec71e06a57c177ca1f383120bf46a9c805c9220d3d0c6807d60e6b7f9c80de1d815bdf1ebe62338862719eab55ef4971a69c76aa2f25c3c9d0c2e5c7857a86f9ab26c3c6aa395f2c366548f60a40abbe14dd011358d9b3695b8a091e16552478aeee1e2e91abd67deeb15732f428c3304a2bf2e4cbb3768875b35d126ca46d29e506ee1e0aba7a17eba27c19d7626064c0a17d7ee7f2f220e5e28bd7d691dffa84f2a2f92c924b87da382ae9a688ad4322fa0cc72604fc43e17002b8f3844a7431205de46818310d0fcf4676f45c9941dde767c9a4376e13cd7e91308cc0df25a4c79e390674fa0161695cc9e9bee12620d8571a4b3800370cd01bf0546758a048563539edf15d58b108159ea5fe0f038281c7855bbd92cc86de38df60b8597f4bce4ae9cae1647b5024bfb73630cdf4d1827a5f0ff779a1e6c6efbc6561d06b249986703b9dc61a63e2068e4786e6a8be34a808143301ef00f21bee8399d88ecffddb4867790d4d1cbe827a5a220834ba831d3ba424ff8fc9a99b175d2feca9f581e24bb69bdc4f64a6ea0c9c37d6976d15e9388519a2bed100a2a8358215a8b63b6e25a677875ee2bc3fd9c77783b39a166b863376b496775b83804a2c7f5363cca9ade819034afc2f7b40ffc316089556dec2e55e1bd92c9b905d6b1b9160d6c492d4384acd7e380874939b1ab02dbbacfbedd74cd524b4eab643e8b92d38d9fae446afd8d774d1c933bce8c341f0ff283acec3bbbbfdb06a15eb88ca6600542dda45334a374e31bae", 0xba7}], 0x5}}], 0x300, 0x0) connect$tipc(r6, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x3}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) 1m50.035887335s ago: executing program 1 (id=1104): socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0xf1d, 0x0, 0x4, {0x0, 0x0, 0x0, r3, {0x0, 0xffef}, {0xfff1, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@delchain={0x24, 0x28, 0x7d1cdc3e828018e9, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x2}, {0x6, 0xffff}, {0xffea}}}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x0) unshare(0x6a040000) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) r6 = socket$tipc(0x1e, 0x2, 0x0) connect$tipc(r6, &(0x7f0000003100)=@nameseq={0x1e, 0x1, 0x0, {0x1, 0x0, 0x2}}, 0x10) sendmmsg$inet(r6, &(0x7f0000002f40)=[{{0x0, 0x0, &(0x7f00000016c0)=[{&(0x7f00000002c0)="91199893b794f675ec88239fef317c764ee3a8ecbdc2a8c32d46f77944d1de9f924d05d3566b8eb8f5750393c669559d05543efa2927ef0d2b10e3d4f8541f34e1c7c8ca2d1e811f67f3dc50fdd469af72a49e684e28a364f5da124dff2b55a5536aa670b82da70bf0f19cd420371848ddc41d65649fde307c1971599f2fec84845e32bb2b6ebda099de12e8b64842024389524a1c5a97608000d1030d99e2a6e23a0bc8", 0xa4}, {&(0x7f0000000380)="11a68683394e1541cc444dff7adf30f079408cb066a6f8f4d33c4f11850de78c586d1a2ccff92e8e83fb82e447d9b88de42182e9e8c97415f41ef8a504215a2b2fdb1404c9659fdb988d0f527c3675cf2b", 0x51}, {&(0x7f0000000400)="875ad17d55c11f1ea6ec6cd17661afc73209e32142961e4660591bf3ca40d05a507ac0b0e71f7ed4c63f52a003cc8102f20dc6e33b5dc6de64ac815cf87867507cc072f0cb762aa5deb8731a699d3c7c69f85266ba51eb244f20129de491adaeb0c2d2eb13c1f215ddff92b05148f0ad513018b14798e45e55ecb916d4dd89f2df7e33c470998f325bf453f929d86196", 0x90}, {&(0x7f00000004c0)="1273dd9951adeaefffe3c4957c86dbff8693adf2202b620b3aec000cf330bb7249", 0x21}, {&(0x7f0000000500)="4167c4fd9ea8b423c01e798bbd631e888a04e31e6865a2d55b31833b82989759c0f3241bb5ebe979636a5f22244112d95d11a07cb172724ec37ef9faaf227d64f5190c9d82dfe194b2cf6d77e917e513170fa1e8e4c82dd9898b4ad23e677261595ec62844104d7ca15aa7eec90685ad92f2cd5b745910e47d703315a0d1d3a6d143575da2604e54bb1ddb295e590a1392770befa52aaf1651d375682bcf94e5da4ea37e1cde1d2a80890d896cfe4d08801bc50d9bc08480de2b2710b694ff7fb5bda12cd8a8cb8dc18bf0c265b71aef50ec0ee22e1968a4f3487d8487026bc2b721692064dcfdd1b6b6aec3e8da3d0ab7d3cc51e2db33c169e6354ea425fbfc1bc39057e64d3aff3749d60edcf0a50fe0e973b5ee3a7cd45ad967564fdbc9832869346037dabe420448b5089ab553c2c87e94befac8d3a0c2a56ca2ab778c2f34f571217c837580e8a524db35baea8024482bb32306182faaf39bb1c4e992c4440889e274952ed3d17d5e87224fec8048e6b7344270e046ab2fdda270ad4e5f651fd6eede5d42d9599265520d45d6f500fd733372a62ab4f496b56839b0d6418961a3b6016c26409daba4f2beeceeb38cc6ba75f57e8ee45d8a6c2ecc031c9469d937b9d7db91ded158ebd7f7d512d445f4104130a429ce7fce52d3fec37df953fc6e6adaa781b820b4bb6d4ffd2c10a16f9583890118793bae09157d3ac5625ad8e66a367488e2722bb82161661711d91a5540a92e3de7506861875575d40465cda28989cbc46fb3d80c2bc7e96afbde1cbd2e89103c55bde669c77b774ea570b26e93a1be5e50269ea5f3355869ac5a9701ac0e7d8f69b0a3186e118c6e2ce8e946c95bd729d94d237e5915e2711cc82826f147176a8a0555b9e11fb9a8ad736d016d202cea43b10a5102e48387ab70069b876051ac0557528c14748aa9cc0e0d9bf512533bdc83610d9f801ec4ed512a4a877e2f45b0cbe87ee25a314d481153eefe8643fb2f3e0478353552b0ae863635ab12e7bf0e4f046e8ba9cb7ce3189d52b2a27ff9e4eb5bf8b12d09d610705eec149589bdd38c951de63de4e3065e45eeb261a72c980349387514cb42467e1fe5812abaf4670e993c6fb561e5cccf7a472ee874bbfe73412bc63f706424f174afd1a3f16fb8b8305d932d33ab211d473d210b87e2f20b6ba951a2b98206793c04516fd57fc7365cec4a1831548470ebefe7f9487cc7b287b2f45eb69b4e165b9f3404d8ac84b2b57ace34de669a85fd885ecb055a6fd2ba5d5396737c702c082bfb35f3ccace91eacfc7a71b2bca1e228170ad6d194aa7c2dc2cf5f0bce153ac1befb2b82e6cf1f12d28812e309f5da0dbe1cad03172d296fa13247b1952ec988316f668aa65e1ca7e9e383b115ce5c25130955c118a0b4567bd180c07ce18bd0c459cc33ed7ba1c43262034a60711315ed81bbc95b7e3088dbd22b976fcd18bae330f08c89236f770478305fac20b5d9bd5cbc98c5c0f9713345c7362bc0e0bc78d212433bcdc6142989bc6ab82160df897825aa906d739dac905a434c90b2cbc72223011ea11480278b681cdcdf5fa63ac5f8b8f1f3ef7d4eb02f422e9fc52b98163630cd2f130f076a33bb011bb8e42800c9475f5cbee042b79fda44b6432b126f085a17553b82d9cae519ec239a9cccb99444f24b8f11e255e31e0d53a28e36949a3f8238c2ea3f4e3d8cf3b85b031c962504d00a4e7928b5fa2fab311bcc54d68738086ce70a8e5bdaf425033036a85e59aa3bb1b01f8b6c6a2e221c69e48565b55a196b2dc9cb067b4ccf8a7c81e31795a8b74e8940455126f19c8bbb9b941cc66c9443fd13e20c2074a9c3bc1740262c1fcb8e9ca5ac5729dfe6e25561eba41ccae8ca2e851affc1ab4ec912925ef7ccf72e97c577413260ccda170d75741336f837258a59da907460a2917f652c6e4ebc0467da8a95f2ceae9afcc4e0d1f4b95fc68b2f5e32af96fb12a8e7f3140dd235a30e5ad94e78cf58ad75ca8a871a70820090ba510e7563c0f78cf364369a51fa6683ff8d24924ceb922927eb0ba1395b7a4f37d92913a9688ef8428a887f1161f10aeab749f5ea8ca24e579008f542a9b785841dae071b94b5a8ba79985930f60ac2c93aa002d84b212e2e2b6c9c2a0694595dad99fd1f27d0044481ef5b364a059599ef982a114a61094b3b7d0f9a7b78d7615cc8573430e676987ab7421fde9abeb29e4529beb6a2724bed86a7b1d27ee73585892f083fad4307696a4166356b9c20a9579bbf3e8cda9ad7ec2b2bb973d05cf8d9457dc03eee2cfbf630dd917768ae652c0627e32ebb4c62951dfbd8e074dfdf02c5517ace50d5813c8d8d7f1fc0fc63a4fae5c2bcf26560c627500e03692384630be287790d545403adc500ef732d66e269b8b051aa57bb865a9b709c7a0426188daf29caf1d062b104592b4f6acc86895956d8085424dba0bfafdf900419f2227db1eca75b338091d23da2067566c6d54de1604bf8d4cce8a0b4484c4645a305861bc46ebccafbe500e01d51236b40027d1b2c7a72937b15899bb982c880d83ed6b70502bd0d68d2a2146a85c6518a11c386df610243ec513e7a284a81c841f9201ee3b9d3a8f44cdf52ec842e07c1f2f35e2a5b17278dce1f9b7fa09866ecb0d2e78fc8095b7dee81d3e308fd10a1490036194bfa89c118bd9c72d4747b90724d7bd0a7ead28c89c23cc6667c1a8b362ca5385d24b2c1265957764a4e46176365a5348bcf85c457921e7fa6c9e165b6c4d8bd9e8782c96839a5fd2679cd08f656ca5b41d00f8429d517a0d776049918e73b4a258fd2a1576b6420b67fc9ff3520556881ef4838e973f552edebde686af1d55e6172e5bb9b01543d32c0c7753b380dd9ed3f5c0b663a9b1bcb4bd36a365172aeee96a8d69c1e5c5b6c88fc9453ace6aa24bdfc1cfa27ea8cc36c80cace296259545a4e155d154ccbf00ae4ff912c583c871b7cdb46813584ea14bb6943d16b3f12e8fe149076e5e646e1dca0bf121a2e2fa09816e9056aa1143988ff17c21c49981445d98d88fd4bba6a59d9f97d301d90e3754103389b36308713c1ba31031e42f2d759343a95bbae9c01a3bb3e6b537b658d1c028c8ec3126bf79db223a3320e25a671ef834c924f02c1bbab338517accb8378f945cb1d65d4dff90f1e3af8168e33a5a124aef715b656075f6a62099afa110f2fe5eb83e0b3e36df91be2125be6500e5f3a81f8bc116f42734c784f6bb6c7e968610243b06026a9def4e85f8344fae36602aa3795cf71ecf7e57a3da0bef859daf649abc6390e86edaa84eefe48999ddba9067b90dd5ea2477f150ab588dadfe79ab7524157d1b94c738ca3345ce8657bfac981cb30b7c0f05f96dafcdce3e41471943609b121de1eda3e95a1c31bada084beec699512c7d5cec71e06a57c177ca1f383120bf46a9c805c9220d3d0c6807d60e6b7f9c80de1d815bdf1ebe62338862719eab55ef4971a69c76aa2f25c3c9d0c2e5c7857a86f9ab26c3c6aa395f2c366548f60a40abbe14dd011358d9b3695b8a091e16552478aeee1e2e91abd67deeb15732f428c3304a2bf2e4cbb3768875b35d126ca46d29e506ee1e0aba7a17eba27c19d7626064c0a17d7ee7f2f220e5e28bd7d691dffa84f2a2f92c924b87da382ae9a688ad4322fa0cc72604fc43e17002b8f3844a7431205de46818310d0fcf4676f45c9941dde767c9a4376e13cd7e91308cc0df25a4c79e390674fa0161695cc9e9bee12620d8571a4b3800370cd01bf0546758a048563539edf15d58b108159ea5fe0f038281c7855bbd92cc86de38df60b8597f4bce4ae9cae1647b5024bfb73630cdf4d1827a5f0ff779a1e6c6efbc6561d06b249986703b9dc61a63e2068e4786e6a8be34a808143301ef00f21bee8399d88ecffddb4867790d4d1cbe827a5a220834ba831d3ba424ff8fc9a99b175d2feca9f581e24bb69bdc4f64a6ea0c9c37d6976d15e9388519a2bed100a2a8358215a8b63b6e25a677875ee2bc3fd9c77783b39a166b863376b496775b83804a2c7f5363cca9ade819034afc2f7b40ffc316089556dec2e55e1bd92c9b905d6b1b9160d6c492d4384acd7e380874939b1ab02dbbacfbedd74cd524b4eab643e8b92d38d9fae446afd8d774d1c933bce8c341f0ff283acec3bbbbfdb06a15eb88ca6600542dda45334a374e31bae", 0xba7}], 0x5}}], 0x300, 0x0) connect$tipc(r6, &(0x7f0000000200)=@name={0x1e, 0x2, 0x3, {{0x42, 0x4}, 0x3}}, 0x10) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010300000100fddbdf2526"], 0x14}}, 0x0) 1m49.749706102s ago: executing program 1 (id=1177): r0 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r1 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r1, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @broadcast}, 0x10) (async) sendmmsg(r1, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) sendmmsg(r1, &(0x7f0000000740)=[{{&(0x7f0000000100)=@in6={0xa, 0x4e23, 0x9, @mcast2, 0x6}, 0x80}}], 0x1, 0x6004010) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) (async) socketpair(0x1, 0x1, 0x0, &(0x7f0000000200)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) close(r2) (async) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) (async) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00'}) (async) close(r0) 1m48.356426704s ago: executing program 1 (id=1181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000540)="81b651f1f3e7200923", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x2, 0x0, {0x0, 0xff}, {0x2, 0x0, 0x2}, 0xff, 0xfe}], 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xe, &(0x7f0000000100)=@raw=[@generic={0x1, 0x5, 0x7, 0xc04c, 0xb0}, @generic={0x86, 0x0, 0x0, 0x32, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @exit], &(0x7f0000000180)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0x11, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0x5, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000200)=[{0x4, 0x1, 0xd, 0x1}, {0x3, 0x5, 0x6, 0xc}, {0x200005, 0x1, 0xd, 0xa}, {0x3, 0x2, 0xa, 0x6}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='btrfs_flush_space\x00', r3, 0x0, 0x7}, 0x18) unshare(0x66000080) r4 = socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x2000000000000000}, 0x18) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) unshare(0x20000600) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x25dfdbfd, {{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x20, 0xfffd, 0x0, 0xa, 0x20, 0xa0, 0x32}, {@in=@loopback, 0x0, 0x2b}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x3503, 0xa, 0x4, 0xfd, 0x91}}, 0xf0}, 0x1, 0x0, 0x0, 0x50}, 0x4000) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1m39.489162924s ago: executing program 0 (id=275): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000100)=0x9450, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x0, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000feffff3f00000000000000008510000005000000c40800000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000965bddbe4d55f626f3ed0ab703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000414000980100002800c00"], 0xa0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80002, 0x0) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f00000002c0)) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/61, 0x3d}, {0x0}], 0x2}, 0x4}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000074000000160a05000000000000000000010000000900020073797a30000000000900010073797a3000000000080007400000000340000380080002400000000008000140f1c3"], 0xbc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) 1m33.301560936s ago: executing program 36 (id=1181): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000540)="81b651f1f3e7200923", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000480)=[{0x2, 0x0, {0x0, 0xff}, {0x2, 0x0, 0x2}, 0xff, 0xfe}], 0x20) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0xe, &(0x7f0000000100)=@raw=[@generic={0x1, 0x5, 0x7, 0xc04c, 0xb0}, @generic={0x86, 0x0, 0x0, 0x32, 0x4}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x4, 0x4, 0x0, 0x7}, @exit], &(0x7f0000000180)='syzkaller\x00', 0xa, 0x0, 0x0, 0x41100, 0x11, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000001c0)={0x2, 0x5, 0x7, 0x7}, 0x10, 0x0, 0x0, 0x4, 0x0, &(0x7f0000000200)=[{0x4, 0x1, 0xd, 0x1}, {0x3, 0x5, 0x6, 0xc}, {0x200005, 0x1, 0xd, 0xa}, {0x3, 0x2, 0xa, 0x6}]}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000000)='btrfs_flush_space\x00', r3, 0x0, 0x7}, 0x18) unshare(0x66000080) r4 = socket(0x400000000010, 0x3, 0x0) syz_genetlink_get_family_id$wireguard(&(0x7f00000000c0), r4) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f00000009c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000093850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000000)='kfree\x00', r5, 0x0, 0x2000000000000000}, 0x18) preadv(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) unshare(0x20000600) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nbd(&(0x7f0000000300), 0xffffffffffffffff) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000040)=@updsa={0xf0, 0x1a, 0x1, 0x0, 0x25dfdbfd, {{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x4e24, 0x20, 0xfffd, 0x0, 0xa, 0x20, 0xa0, 0x32}, {@in=@loopback, 0x0, 0x2b}, @in6=@empty, {0x0, 0x0, 0xfffffffffffffffe, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x0, 0x3503, 0xa, 0x4, 0xfd, 0x91}}, 0xf0}, 0x1, 0x0, 0x0, 0x50}, 0x4000) sendmsg$NBD_CMD_STATUS(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000080)={0x14, r7, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8000}, 0x48040) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) 1m22.603325655s ago: executing program 0 (id=275): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000100)=0x9450, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x0, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000feffff3f00000000000000008510000005000000c40800000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000965bddbe4d55f626f3ed0ab703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000414000980100002800c00"], 0xa0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80002, 0x0) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f00000002c0)) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/61, 0x3d}, {0x0}], 0x2}, 0x4}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000074000000160a05000000000000000000010000000900020073797a30000000000900010073797a3000000000080007400000000340000380080002400000000008000140f1c3"], 0xbc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) 1m7.191804321s ago: executing program 0 (id=275): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000100)=0x9450, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x0, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000feffff3f00000000000000008510000005000000c40800000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000965bddbe4d55f626f3ed0ab703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000414000980100002800c00"], 0xa0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80002, 0x0) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f00000002c0)) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/61, 0x3d}, {0x0}], 0x2}, 0x4}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000074000000160a05000000000000000000010000000900020073797a30000000000900010073797a3000000000080007400000000340000380080002400000000008000140f1c3"], 0xbc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) 54.604955228s ago: executing program 0 (id=275): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000100)=0x9450, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x0, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000feffff3f00000000000000008510000005000000c40800000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000965bddbe4d55f626f3ed0ab703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000414000980100002800c00"], 0xa0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80002, 0x0) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f00000002c0)) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/61, 0x3d}, {0x0}], 0x2}, 0x4}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000074000000160a05000000000000000000010000000900020073797a30000000000900010073797a3000000000080007400000000340000380080002400000000008000140f1c3"], 0xbc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) 48.036972495s ago: executing program 9 (id=1558): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x9, &(0x7f00000003c0)=@raw=[@ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], &(0x7f0000000280)='syzkaller\x00', 0x8, 0xde, &(0x7f0000003e40)=""/222, 0x680f0936988f8ccd, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="b800000019000100ffffffff00000000e000000200000000000000000000000000000000000000010000000000000000001a0000000400000a"], 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x15, 0x1, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x2b}, {0x0, 0x0, 0x1, 0x0, 0x0, 0xffffffffb05776a7}}}, 0xb8}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x3, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) 47.80173111s ago: executing program 9 (id=1561): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@bridge_setlink={0x34, 0x13, 0xa2f, 0x703d25, 0x0, {0x7, 0x0, 0x68, r2, 0x900, 0x62010}, [@IFLA_LINKINFO={0x14, 0x1a, 0x0, 0x1, @vlan={{0x9}, {0x4, 0x4}}}]}, 0x34}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100)=0xa, 0x4) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'geneve0\x00', 0x0}) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r6, r7, 0x2, 0x2}, 0x10) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r8, r9, 0x2, 0x2}, 0x10) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000003c0)={@cgroup=r8, 0x2, 0x0, 0x3, &(0x7f0000000180)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000280), 0x0, 0x0}, 0x40) sendto$packet(0xffffffffffffffff, &(0x7f0000000180)="0b036800e0ff64000200475400f6a13bb10000000800894f4820", 0x1fffe, 0x0, &(0x7f0000000140)={0x11, 0x0, r5}, 0x14) r10 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_IP_XFRM_POLICY(r10, 0x0, 0x11, &(0x7f0000000780)={{{@in6=@dev, @in=@dev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}}, &(0x7f0000000680)=0xe8) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000600)=@ipv6_newroute={0x0, 0x18, 0x100, 0x70bd28, 0x25dfdbfd, {0xa, 0x14, 0x14, 0x6f, 0x0, 0x4, 0xc8, 0x6}, [@RTA_OIF={0x0, 0x4, r2}, @RTA_MULTIPATH={0x0, 0x9, {0x8000, 0x0, 0x40, r5}}, @RTA_ENCAP_TYPE={0x0, 0x15, 0x1}, @RTA_ENCAP={0x0, 0x16, 0x0, 0x1, @LWTUNNEL_IP6_TC={0x0, 0x5, 0x2}}, @RTA_UID={0x0, 0x19, r11}, @RTA_ENCAP_TYPE={0x0, 0x15, 0x3}]}, 0x34}}, 0x20) r12 = socket$kcm(0x10, 0x2, 0x0) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x50}}, 0x4008840) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r13, 0x0, 0xba, 0x9c, &(0x7f00000002c0)="118e1ce0dc8e4e1a255c41815dba6ee566d0cb14fc310293f07dcc3bdb4d0931faa131ef90fb8945eb66569234b0f9eb736bffd5bd9d24d1a90ca7942b301d0e1d4c6668110f9465e74f04cd79546bb36736a0edb6072627f7c39ca91c12f2d0ee0b1af76a42b49e7ca1632efe31ebec3e4796c5cd79df5bb7e6abbf023a2d7812f46b1f173539cb079919177de46776181e05043245d106876286c29ac051443a941911f689d722e2f749777fde8fe80bcc30a71f86284ed10a", &(0x7f0000000380)=""/156, 0x4, 0x0, 0x1000, 0x62, &(0x7f0000001a40)="75287b3b035fb059fdad5be4ceb0c8277be67a3e022d2441f02e05820c1cfc44e45d143fc899812fb21173527f87b21347d5494bdefcbd59881c91aac82e0fbd58981a71afa90346a158c5d914b875573c6cf30857ea53f266fdc67e799b0caa8f897cce0fdd716c2b83cf331e415c3b1cf81e9d573efe61e96bef0477df89499ef2b156f789c4a54a0d9198e3b291fca6862a2b962d78f8c3fd2cb9045ce274960a1bc27e1aa067880eae1a585add025b440cee7b453f2a8c675288c81c42d08a6d4181cf1acafa0446aa10edd4d9f9b04b6278c831b2ff05f57c638ebad363549a485bc7fb5a4823828e4bd78bc7c297b6ed4ccf33f9c0b14632360b13d136ba59e952574eae4b14387e1b5babf911629bb9f7918abdb812a8140bd6c9e8fea8dbdbf941da5badcb9a394ca5a5f1438e7b6fd53291160f46f61aa8cb9edfab660dbd4d35af260aba10e0bbf272a46fe2236f3cab9ed9dd648ad5fe446c39fd3d9159d7228a1fa871c71cb016ae891eb54cbd39470ce8ab7253c0b5c19ca28833829a419e010d71a12732a90f90377715492e2f8d5e1df1605c9bad79c040df16cce36badf4e8e7de29cef8ce018de4078788e7fe5968a99982afe009e855664846ab6281aff63915ffd2525d86ba67a13379e815fa4be70922921078fee46e5f979a674642861eb36c2b1c5044c1fa8a4b5ee405e30d4d18118ea84342ce7b601358507bcd65e5acf08dc8fcd98db192724094115989dcc3262dea3b72e033dc6a35d30f0e6f242e2bc61910080eb9052f3e62bbdc9aacf2052e535e9c2fc8667173b84cb26fa6f752c34b50eb2408fa381840c8d1fc22bbfde69c7b08dd1a975d5e739c5cf8d68abf6ea4ae0c93b4e4b8cf5b0446cc0fd6774a29cd12f36e7bc98c86d2c93c9bbce5a5403d74b0ea5d7dce783d5b5b968e32d2fbd81e4d8f0f2fbbded990a4bf4a2536af66ee187c4c0ad43b5600e64ee4a4a84893dbab1c6e845698c570c6932c68b6ce216524725e67e403a18010dfa505044a31e6cf5859528a7172daa096f59aba76c209fa8bf48ac23194bf3b4a1cdf252f7833b85805a50eddffa54b955cc62ce603204529c06d02d396baf8f14dff7956e43faa171ed3f40faedc548e226d361abf146c907e3fe3fd05c20e741aab8e54d3e46c63544d8b055d1624be2f805105de255ec67f53bd42ec467221ec2a88cf5f2221df61e38a6f8e761c105b39194247751940b65155f0fe5a140a7e9ecb456e970b3c8fbfb1113660f497a910c3efcebe5681e9ea9fbe17e9d88291d78e71de1d1f16f71aca0327636615a66eeec46d7c8d30b27f6c667cb26e094a1f237a1c9fec550ea6e2f7c575a957160155bef71df961692cbe9da4ae1c38e7ed1e776ac4ed58f4f9a88204aef1b107d7af13db695ee5a2888217cf90cb00f29048333603e91157d8f670257ca61973ebd7f4300518c0e08d8d0d37674ee4180ca735cf59878d706cd084828cf40ef11f51d7dc9fa64b4b98bb0a09fac35db0b57eae18a383cb2819a729408ce1c1e045c7de9995def6afb33290e86a643cd0bd289448ada1bfdad7a43810512c1e1279f285a8ecd4b351a1779cc91852e036882354b427a8f6abeb2465fe6e7f433545b8db4d7d51106cce216dedd10ce69dd763218cfd86bcf25da3eb708790d0d45422df5c03251a4e105a92d4248622138d0a69cc4b96258e11f209c27489f8c9b8c4d287b054d00edd02e73e918580ce602a22d1ea8b742bf5b29166e149d81e8d2d5beb1aae4bd5c372e5de5f457fe4d9d2873229f86e155d665ba8744f16262840af224e7f351b2c134c700cca8bbe1c336bcfdc2286453626537dfdfb7b4dcedac89bf4cbe6f5546f7204926b9913f56a83beabf8009ed50a2ee4aa90b8f86b2b41b7132f7855eb4a3be87bd6fda10675401152ede39cbd9032353400c003fca42bb58dd7612dddaa3af30843791e8bd0d7c45203f28746b126781ea6754e6ca3e26920b827368ee92a280de399eec3998bbfbae0a55df8d37f84118f3c67eedd4247eac4050fb09f8f31e3a97cfa5d2381017ee286fdd97fe909f134e25b2dd052dfe68b4d76e401f163d77f079795fe326992ece390bfef394732292e909250f8e0276c745ecab4ca7b3f63dbb0acfe0b780b31a666a0c69a494575eceed29e3f03bf59abed81c4e30e167e99354aa35d4e0fa48ddcfd24d8c21964e18c13da2a88c83d8cb303d3cb029935e2686b46448c884cc0df9dd77321f5447271c20845ec1c909a8920edd9beb0ab8349409e6244a02486504b5b70b88f944ae879faa5462912cd712acbc79a841818ccaa3173843c1b47cdfe612dc6e81634997062ac766a9e4e8b4350bb203b7c572acc1bbc86edece040ddb729b609cfc3deb6a232209eb18f599088bce9e84e60f9908226efe8aa9fddb3e9b0e15d01bbf6ece2cc6dd5313428757549025bd16a6b7f82847a87dd36389b4a005fe21ab54c4f704cafbba258b2b22ddc0a5419c606f4b4dcf667e35fd202b525520b0f372fd28c5b0f9e2580b6c1329abed067887af93c6b8b9ae4e8bce08b8758970f4752f91d2a0da2dfb26bdee4626a47993341b635ac15143c688266953aac4b72536f95c7325f3bd421835283b5d36675284c43493a6ee48aa5f8f07b954e0dc6d1ac8aefc1b0c4d640b36398cc7d831a53661ce5c98268b05803977d48c495ff65e6a673cd685023109b3d7065c03281292903f320576e6b3c2495713465b1f474c2560ed2cfb56541cc8b19a0a58d0770ca53f7b3850e814d4de9c2bef0e9a8525c9ebb38b3c64ad77c87eeddb824d72047c6c4a61e71c8b97bda9bed67a8d01fd60e61eca532ae13c422c5720d427b0979e6db30068f6100508531b2ee9a9080b4e436fbc7ba6cf2107291e708fb88099453548dd9f224235936ab3b8cf2b2c2b64a4b1b5116e75bcdbdd1ef5ed79ea6dd502b87bcf9866f725b172b9593762ac591af16d382889b323631107a0f2622006ea1403d91e13ac149ecccfa485364fbea834dfac8907827bcd389accca7fc1c4fe73ed05552b33dd73c5ae6e164a66641466d91bff4635bd7627fe2fa7768d12deb0056b41003ad73b1915b04a4f2ec3248e03de809f45c116f2fe510343eb561b85373f43cb58d27fcd12f3ad7efeac5f93ddd98dcf27718b15c43090275fd8e124074ce0e17d5deb4b5c5ce587090aa723b11bcc054fccb95bc29e300fbecf1cae8d99113eff07c4c7c7bdd065ac01b19fbceb71fba91d9411a9b3dfa8a10370a26e371594aa6fa2272450ab77ff6771fc2630b274d98ce7fad975d5c1d4138cfc5a32e4d20f617be31d1798debf64d9ddb425f523822a038227fae5a7c1e7a6da57db6e15b9de85c831b894756f58cc9b1de631197fcf4e4aa9c62d1cd5e37550ee8dfb04c58b3442b20bc14faf53979f4e1b007be91223aa6a27f14a55d9bed5c81ce2776caf0120ecb554ee7fe985f4a3b2ad59455302884f7d12df136366cb6c5c88e01e4d8a7bd3dace2e0c8a42369184a34f01825f379544a8d3d0ccf8e7ba68df0df8af56176f2436fe81b705c7a9198deaa55464474e747f8817384cacaa97cf8e4ea6d00fa6d1d57c251fac49a9d3ed3df7b091df109834ed1aeb7cf9e0a50056ca454983204438f5728cc6fbded2d49d6d195d8da961c2afe46ba1e3d332cc4a22733bce756687c332ca32474f852411242bc8acb734d8306d2d17ea36aa35fa3be535226bc0f2f0f6155753460eaa9f2cd2fd0647fa493dba9491aa2a303866bcda730709c4e258818a953a725d03b7e0a2aa2a303bf63f14b21c035ee67207919a94ecf3a18aada360db1c0de0a6a5aadfb018c1df2774f559fd89ddc1d6597de41fd23cd4b3628dcba83677f5540b6beb762548ae5a8fe2fafe3f3be6afd72c75580d95ab8f1f37e533d203b9bf14cb7ec75447069ab40160671b22ea29b8c1d06d7a0798c3ae4b3bb6408b3b37155f65a9de50aa15b0d24094e388edaf3600677db4c2be0723896a8f4ac36e6427c8555b1db3b06b88ce63a0de48cfc451fb4864a9da9ee8cbba9b9f52ffaf480c06ebdefe5ca56636925f68bfe060c41328f8e3906a97aa84321ebcd4d5b8a5df07d006eed64b79a3f476b7c59a6ba3450ecefa1156f36238a53c80b7eaeca501e3a4d54c8cef96c66c0e76ff6d673f13195c85c741d90ab593fe8fd029540a0421a51cccd7e9495c954a4b22f77c0660743097e1d1664486ddb1e50b600eeb4618cc2ec99859f18946031c96c4730a1996903e383109edf9e37a9a3c4a4c5298f9402fb22596f5d4e8f6bafbfef6211bc3dc9fb4099bf51aad87551acdc0436f1bd468acf71a77d711a207229d041b5552e9d18db91ed8224b147726682c3ca0c86faf02f97b81e7f0725239a3a27c6cd72e6cca31faaefd4fd42b49e7d6ba69a65f9fb31e5a270ff3f73839facf3d96b2e6eb75d032219b464ea90293cdaebbc3cac804289f74b57faf08ad79d60f6014415327331f40ec20cb6296a86ef9005e5c4ca38329935694571063faa726d7852f634aa304b2c980ae55c6848188634ee1f94cfc1a0967e2abd8b68a5f4e45e966c7888ddada3f71fc9d9131920b23336136efdc1aa40f2b7f6c1f4ba86598209bc3388e8aa27313eb3d9ef3c82aeabc30ba6e74373902ac0f8df912cc43f4239e3d1353b0349945b412c8dc959bdbfb73e561832110ea649b1122dca429c1433ba69581aa8cf592b9e88f17e10f7740d91f1a2c03aebb1d3943b30d08035926106d34be788ac9dd244465e352c737db9e72a3d0dcaeb06da6ef4e34119f7c3a03c9974bd1f8624bba47c36531e49cfc5cc54c2ff5f2f3dbeb2221f04303bf23417f8ab23fc2fe1ffef9dc1bde0dd7b57f5f16e7aea81f4fc199bb666cc0f458c2f627427bf55de223ba100342a33db3542dcff0193b4518f96e363748a4a15c227253d4a6ae4b76af70ae6f203e5615e045adc3f78edea639b2280cd4d709f23d829dd34e43494bac37470bf0ba594cf5d8402815411e818ada9af622db34473207fc377efcccf12bdfb74d2cc06599305b150c9d0cd9d390e70a34d2f6100c9365b6c7d7b7eeac59a68131b7ea328d71f53eff7333c308bf40acf2120a96177f1140241a0d8235b7659dff6f90fca945c282cbb45d63b09810335c147e8b047b427c4fc5e75c47b2c1bd1e7770ab5092b0c0b1b3b90a1442ece4c780874776ddda8e6af8183e1843018a5e2cf3cc1ec24469064427b36072289d7e884ad4f622498101969be7e37b1b819210c66743e8761481697bf9552a6db4ef30e966249ed9fe0211a48183b20c0203d5f4786c14369af3495c1dea8f4cea847e8052a7691788cd14e3af9a18c06a96f5e535663ee105b77694e7905c1031ee22c84f78b0408b54daeed1cce7515f2c7e861a16307ef41640e6df78d9e25a068b62b9cc60c8e8ffd6dc7ec67122189c40063981337341c16be6d36e0878f229a7501ace50ba73c9a1f647ae365e34752d0cc6d6c1dd85875d1ca981b3a0885a3363c48ad6692633004da327c350fcd8f7f07a0ef9ecd5ad50a04be758e5ae513838c3d6f738326b3eb95bc40cd1f4d5d707c81095f7f69209b335776c061e92518619ec7bf702e1810df4d7b4d81bf045c0266368c61a6db046f99ed2b94f93219d007b1d7fc1e689dbb7a3acedd2e6c3ddd5b2f9eb09e40515706ca5e3fc45078527b9ebaee8dab6377c0ce45b68c8824645d1f67fff276524337133d436c757fa3df", &(0x7f0000000440)="371acc4870b5a6c237491608b9396703094902ff7cb3b2d8897c12fe24c9894539ac48c6d7ee988517a44e1789a121e9ce07ea582a878a92efd7349f87703d1468014b5228f954f74e2d3f09d10a690e2990ac077d288d14467405143f8dece14f47", 0x5, 0x0, 0x5b2a}, 0x50) setsockopt$sock_attach_bpf(r12, 0x1, 0x32, &(0x7f00000000c0)=r13, 0x4) r14 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000000)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r14}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791000000000000063000000000000009500050000000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0x26, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x23) write$cgroup_subtree(r12, &(0x7f0000000000)=ANY=[@ANYBLOB="043900002000ef"], 0x33fe0) 47.600875287s ago: executing program 9 (id=1563): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000100)={'gre0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x40, 0x700, 0x7, 0x7ff, {{0xa, 0x4, 0x1, 0x1d, 0x28, 0x65, 0x0, 0x2, 0x2f, 0x0, @remote, @multicast2, {[@timestamp={0x44, 0x14, 0xbe, 0x0, 0x6, [0x67, 0x4, 0x5, 0x8]}]}}}}}) r2 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000380)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0xad, '\x00', r1, r2, 0x5, 0x3}, 0x50) r3 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000040)=@assoc_value, &(0x7f0000000000)=0x8) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r5, 0x80, 0xb2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}}]}, 0x28}, 0x1, 0x0, 0x0, 0x40}, 0x40800) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r5}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_STP_STATE={0x8, 0x15}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6}]}}}]}, 0x44}}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000040)={0x2, &(0x7f00000000c0)=[{0x20, 0x0, 0x0, 0xfffff034}, {0x6, 0xfe}]}, 0x10) r8 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000180)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x50) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4102a}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20048050}, 0x4000) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r11, &(0x7f0000000080)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x1000006, 0x4132, 0xffffffffffffffff, 0x0) r12 = socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x0, 0x12, r12, 0x0) pipe(&(0x7f0000002740)) epoll_ctl$EPOLL_CTL_ADD(r11, 0x1, r7, &(0x7f00000002c0)={0x10}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r8}, &(0x7f00000000c0), &(0x7f0000000100)=r9}, 0x20) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x13, r8, 0x1000) 47.113740425s ago: executing program 9 (id=1569): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x894}, 0x38) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x5}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x43}, @TCA_U32_HASH={0x8, 0x2, 0x1}]}}]}, 0x40}}, 0x4000) (rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc77, 0x7fffffff}}]}}]}, 0x48}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaaaa08004500002c00000000002f9078ac1e8001e00000010000655800189078040000000000000086ddffff00000000"], 0x3e) (rerun: 64) 37.184084454s ago: executing program 0 (id=275): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000100)=0x9450, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x0, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000feffff3f00000000000000008510000005000000c40800000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000965bddbe4d55f626f3ed0ab703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000414000980100002800c00"], 0xa0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80002, 0x0) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f00000002c0)) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/61, 0x3d}, {0x0}], 0x2}, 0x4}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000074000000160a05000000000000000000010000000900020073797a30000000000900010073797a3000000000080007400000000340000380080002400000000008000140f1c3"], 0xbc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) 32.412047325s ago: executing program 9 (id=1569): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x894}, 0x38) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x5}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x43}, @TCA_U32_HASH={0x8, 0x2, 0x1}]}}]}, 0x40}}, 0x4000) (rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc77, 0x7fffffff}}]}}]}, 0x48}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaaaa08004500002c00000000002f9078ac1e8001e00000010000655800189078040000000000000086ddffff00000000"], 0x3e) (rerun: 64) 19.808551291s ago: executing program 0 (id=275): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, 0x0, 0x0) getsockopt$inet_mptcp_buf(r0, 0x11c, 0x3, &(0x7f0000000040)=""/185, &(0x7f0000000100)=0xb9) setsockopt$sock_int(r0, 0x1, 0x2a, &(0x7f0000000100)=0x9450, 0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x0, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff}, 0x48) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000feffff3f00000000000000008510000005000000c40800000000000018120000", @ANYRES32, @ANYBLOB="0000000000000000965bddbe4d55f626f3ed0ab703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48}, 0x94) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000070000000900010073797a300000000058000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000414000980100002800c00"], 0xa0}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x80002, 0x0) ioctl$TUNGETVNETHDRSZ(r5, 0x800454d7, &(0x7f00000002c0)) bind$can_raw(r3, &(0x7f00000001c0)={0x1d, r4}, 0x10) recvmmsg(r3, &(0x7f0000000c00)=[{{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000400)=""/61, 0x3d}, {0x0}], 0x2}, 0x4}], 0x1, 0x40000002, 0x0) setsockopt$CAN_RAW_RECV_OWN_MSGS(r3, 0x65, 0x4, &(0x7f00000003c0)=0x1, 0x4) sendmsg$can_raw(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=@can={{}, 0x0, 0x0, 0x0, 0x0, "0000000000000003"}, 0x10}}, 0x20000000) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000074000000160a05000000000000000000010000000900020073797a30000000000900010073797a3000000000080007400000000340000380080002400000000008000140f1c3"], 0xbc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'team_slave_1\x00'}) 17.58814557s ago: executing program 9 (id=1569): socket$nl_route(0x10, 0x3, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x58, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x1a3, 0x655c, 0x4, 0x40, 0x7fffffff, 0x7fffffff, 0x80, 0xffffffff, 0x1}}}}]}, 0x58}}, 0x0) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0, 0x894}, 0x38) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async, rerun: 64) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=@newtfilter={0x40, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8, 0x9}}, [@filter_kind_options=@f_u32={{0x5}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0x43}, @TCA_U32_HASH={0x8, 0x2, 0x1}]}}]}, 0x40}}, 0x4000) (rerun: 64) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async, rerun: 64) r5 = socket(0x10, 0x3, 0x0) (async, rerun: 64) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000004c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xc77, 0x7fffffff}}]}}]}, 0x48}}, 0x0) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async, rerun: 64) write$tun(r0, &(0x7f0000000440)=ANY=[@ANYBLOB="70000000ffffffffffffaaaaaaaaaaaa08004500002c00000000002f9078ac1e8001e00000010000655800189078040000000000000086ddffff00000000"], 0x3e) (rerun: 64) 8.997557656s ago: executing program 7 (id=1778): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x38, r1, 0x5, 0x0, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_USE_MFP={0x8, 0x42, 0x1}]}, 0x38}}, 0x0) 8.908822881s ago: executing program 7 (id=1780): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1d, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x10}, [@call={0x85, 0x0, 0x0, 0x39}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x14, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) 8.769320408s ago: executing program 7 (id=1782): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x30, r1, 0x1, 0x10100, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_LOCAL_MESH_POWER_MODE={0x8, 0xa4, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4008814}, 0x0) 8.593587407s ago: executing program 7 (id=1785): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000280)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="02"], 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 8.479578945s ago: executing program 7 (id=1787): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="240000001900010000000800000000001c140000fe0000010000000008000100001001"], 0x24}}, 0x0) 8.29705973s ago: executing program 7 (id=1790): r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x38}}, 0x4) 1.485754052s ago: executing program 8 (id=1844): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}, 0xf}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000140)={0x2, 0x4e22, @loopback}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r3, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000000280001801400040000000000000000020000ffffac1414aa060001000a0080000800060003"], 0x3c}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000000) 829.833672ms ago: executing program 6 (id=1850): r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000600)=ANY=[@ANYBLOB="7800000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="00000000600000005800128008000100677470004c00028008000100", @ANYRES32=r0], 0x78}}, 0x20000800) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000180)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x6, 0x1c, 0x1, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x1, 0x4e20, 0x8}}}}}, 0x0) 743.29044ms ago: executing program 6 (id=1851): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={0x0, 0xcc}}, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000002c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x3c, 0x0, 0x0, 0x0, 0x6, 0x0, @private=0xa010100, @local}, {{0x0, 0x4e29, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x4, 0x1, 0x0, 0x0, {[@md5sig={0x13, 0x12, "8e03afa6bc6e567c599a90dd3a509f21"}]}}}}}}}, 0x0) 640.900973ms ago: executing program 6 (id=1852): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000180)={0x0, 0xffc2, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001300)=ANY=[@ANYBLOB="38010000000101040000000000000000020000002c0001801400018008000100ac14143208000200ac1414000c00028005000100000000000600034000020000240002801400018008000100e000000108000200e00000010c00028005000100000000000800074000000000cc0006"], 0x138}}, 0x4) 513.789669ms ago: executing program 8 (id=1853): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="180200002f72ffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x9, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xe, 0x0, &(0x7f0000000640)="ed7e17526b2d6f70ac1ae867fd2a", 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x2}, 0x4c) 473.047218ms ago: executing program 8 (id=1854): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=ANY=[@ANYBLOB="1b00000000000000000000000020"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1802000000080000000000000300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000850000002a00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x62, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0x2107, 0x0, &(0x7f0000000100), 0x0, 0x1008, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) 442.581451ms ago: executing program 6 (id=1855): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000007440), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={&(0x7f00000003c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010029bd7000fddbdf25090000003000038006000400e9000000080001"], 0x44}}, 0x48040) 301.963711ms ago: executing program 8 (id=1856): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f00000003c0)={0xa, 0xfffe, 0x3000000, @mcast2, 0x6}, 0x1c) write(r0, &(0x7f0000000040)="8f40000008", 0x5) 208.577893ms ago: executing program 6 (id=1857): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r2, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001000)={0x28, r3, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_ELEMENT_TTL={0x5, 0xf, 0xff}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4008000) 200.982613ms ago: executing program 8 (id=1858): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r0, &(0x7f0000006780)=[{{&(0x7f0000000040)={0xa, 0x4e20, 0x0, @mcast2}, 0x1c, 0x0, 0x0, &(0x7f0000000600)=[@pktinfo={{0x24, 0x29, 0x32, {@remote}}}], 0x28}}], 0x1, 0x4000001) 283.225µs ago: executing program 8 (id=1859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000003c0)={'bridge_slave_1\x00'}) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, r1, 0x1d563be06be42943, 0x70bd2a, 0x25dfdbff, {}, [@ETHTOOL_A_PAUSE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_1\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x800) 0s ago: executing program 6 (id=1860): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}}, 0x0, 0x0, 0x35, 0x0, "317f83735b4bb1eadc74dde27798c831eec04c24eeec7ff3d3137a508003d2d5c89ab0220cefebd4687636457b9822766c1bfea4e01ff23c6a4caeaf049a572a9774d3b882eb3b4a66c5ec48c29f065d"}, 0xd8) kernel console output (not intermixed with test programs): be set when creating new route [ 248.036143][T10756] IPv6: NLM_F_CREATE should be set when creating new route [ 248.045761][T10740] lo speed is unknown, defaulting to 1000 [ 248.091304][T10756] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 248.165567][T10758] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551615) [ 248.188662][T10758] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 248.977266][ T13] bond1 (unregistering): (slave bridge2): Releasing active interface [ 249.238254][ T13] bond0 (unregistering): Released all slaves [ 249.341381][ T13] bond1 (unregistering): Released all slaves [ 249.360520][T10768] platform regulatory.0: loading /lib/firmware/regulatory.db failed with error -12 [ 249.370440][T10768] platform regulatory.0: Direct firmware load for regulatory.db failed with error -12 [ 249.380201][T10768] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 249.619009][ T13] tipc: Left network mode [ 249.647164][T10781] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1121'. [ 249.738141][T10464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.796185][T10787] netlink: 'syz.7.1122': attribute type 1 has an invalid length. [ 249.842549][ T50] Bluetooth: hci0: command tx timeout [ 249.883388][T10787] 8021q: adding VLAN 0 to HW filter on device bond1 [ 249.910870][T10787] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1122'. [ 249.930985][ T50] Bluetooth: hci1: command tx timeout [ 249.945048][T10796] netlink: 'syz.8.1123': attribute type 58 has an invalid length. [ 249.961062][T10796] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1123'. [ 249.981235][T10786] veth1_to_batadv: entered promiscuous mode [ 250.107284][T10740] chnl_net:caif_netlink_parms(): no params data found [ 250.200919][T10798] mac80211_hwsim hwsim35 wlan0: entered promiscuous mode [ 250.223321][T10798] macsec2: entered promiscuous mode [ 250.238323][T10801] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1125'. [ 250.243473][T10798] macsec2: entered allmulticast mode [ 250.269027][T10798] mac80211_hwsim hwsim35 wlan0: entered allmulticast mode [ 250.364181][T10806] netlink: 'syz.8.1126': attribute type 39 has an invalid length. [ 250.546957][T10464] 8021q: adding VLAN 0 to HW filter on device team0 [ 250.865991][ T13] hsr_slave_0: left promiscuous mode [ 250.887111][ T13] hsr_slave_1: left promiscuous mode [ 250.927188][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1129'. [ 250.958711][ T13] veth1_macvtap: left promiscuous mode [ 251.000947][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1129'. [ 251.022292][ T13] veth0_macvtap: left promiscuous mode [ 251.028161][ T13] veth0_vlan: left promiscuous mode [ 251.042600][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1129'. [ 251.062446][T10825] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1129'. [ 251.271849][T10831] netlink: 'syz.6.1129': attribute type 2 has an invalid length. [ 251.294976][T10831] netlink: 132 bytes leftover after parsing attributes in process `syz.6.1129'. [ 251.306484][T10833] x_tables: duplicate underflow at hook 1 [ 251.320318][T10833] x_tables: duplicate underflow at hook 1 [ 251.441969][T10835] xt_hashlimit: size too large, truncated to 1048576 [ 251.459073][T10835] xt_hashlimit: max too large, truncated to 1048576 [ 251.932383][ T50] Bluetooth: hci0: command tx timeout [ 252.484650][T10838] bridge1: left allmulticast mode [ 252.489836][T10838] batadv1: left promiscuous mode [ 252.496979][T10838] batadv1: left allmulticast mode [ 252.502221][T10838] batadv2: left promiscuous mode [ 252.507168][T10838] batadv2: left allmulticast mode [ 252.514932][T10838] bridge0: left promiscuous mode [ 252.523199][ T1100] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.530413][ T1100] bridge0: port 1(bridge_slave_0) entered forwarding state [ 252.592790][T10821] lo speed is unknown, defaulting to 1000 [ 252.608709][ T7638] netdevsim netdevsim7 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.620511][ T7638] netdevsim netdevsim7 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.631797][ T7638] netdevsim netdevsim7 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.640902][ T7638] netdevsim netdevsim7 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.780051][T10740] bridge0: port 1(bridge_slave_0) entered blocking state [ 252.793492][T10740] bridge0: port 1(bridge_slave_0) entered disabled state [ 252.800817][T10740] bridge_slave_0: entered allmulticast mode [ 252.812469][T10740] bridge_slave_0: entered promiscuous mode [ 252.831446][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.838630][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 252.866787][T10740] bridge0: port 2(bridge_slave_1) entered blocking state [ 252.876657][T10740] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.892431][T10740] bridge_slave_1: entered allmulticast mode [ 252.900585][T10740] bridge_slave_1: entered promiscuous mode [ 253.009876][T10740] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 253.048305][T10740] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 253.096155][T10740] team0: Port device team_slave_0 added [ 253.109232][T10740] team0: Port device team_slave_1 added [ 253.154493][ T13] IPVS: stop unused estimator thread 0... [ 253.187270][T10740] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 253.196767][T10740] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.226176][T10740] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 253.238750][T10740] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 253.249902][T10740] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 253.276564][T10740] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 253.359524][T10740] hsr_slave_0: entered promiscuous mode [ 253.367769][T10740] hsr_slave_1: entered promiscuous mode [ 253.376629][T10740] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 253.384290][T10740] Cannot create hsr debugfs directory [ 254.002913][ T50] Bluetooth: hci0: command tx timeout [ 254.057131][T10893] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1147'. [ 254.165728][T10464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 254.356825][T10897] lo speed is unknown, defaulting to 1000 [ 254.438079][T10464] veth0_vlan: entered promiscuous mode [ 254.458911][T10464] veth1_vlan: entered promiscuous mode [ 254.621951][T10464] veth0_macvtap: entered promiscuous mode [ 254.690024][T10910] lo speed is unknown, defaulting to 1000 [ 254.748400][T10464] veth1_macvtap: entered promiscuous mode [ 255.031899][T10740] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 255.087716][T10740] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 255.118409][T10740] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 255.137425][T10740] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 255.186873][T10464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 255.263670][T10927] SET target dimension over the limit! [ 255.270176][T10927] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1155'. [ 255.303146][T10929] netlink: 'syz.8.1156': attribute type 1 has an invalid length. [ 255.314149][T10464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 255.411386][ T7638] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.440321][ T7638] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.458727][ T7638] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.469005][ T7638] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 255.729006][T10944] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 255.913330][T10948] sctp: [Deprecated]: syz.6.1162 (pid 10948) Use of int in max_burst socket option. [ 255.913330][T10948] Use struct sctp_assoc_value instead [ 255.935711][T10948] netlink: 'syz.6.1162': attribute type 10 has an invalid length. [ 256.017133][T10952] netlink: 'syz.7.1161': attribute type 6 has an invalid length. [ 256.087732][ T50] Bluetooth: hci0: command tx timeout [ 256.198294][ T7638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.216444][T10954] bond0: option mode: unable to set because the bond device has slaves [ 256.226619][ T7638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.371613][T10740] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.407460][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 256.464616][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 256.510966][T10740] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.559171][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.566401][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.622007][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.629239][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.991950][T10986] netlink: 'syz.6.1172': attribute type 1 has an invalid length. [ 257.029325][T10986] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1172'. [ 257.389587][ T1100] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.627142][ T1100] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.718799][ T1100] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.760076][T10740] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.823128][ T1100] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.846417][T10740] veth0_vlan: entered promiscuous mode [ 257.858906][T10740] veth1_vlan: entered promiscuous mode [ 257.891933][T10740] veth0_macvtap: entered promiscuous mode [ 257.903684][T10740] veth1_macvtap: entered promiscuous mode [ 257.956028][T10740] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 257.999082][T10740] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.014999][ T1100] bridge_slave_1: left allmulticast mode [ 258.020663][ T1100] bridge_slave_1: left promiscuous mode [ 258.027760][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.038317][ T1100] bridge_slave_0: left allmulticast mode [ 258.044363][ T1100] bridge_slave_0: left promiscuous mode [ 258.050054][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.396125][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.410083][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.420494][ T1100] bond0 (unregistering): Released all slaves [ 258.440734][ T75] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.450333][ T75] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.468787][ T75] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.478482][ T75] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.613880][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.623846][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.684044][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.693403][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.744124][ T1100] hsr_slave_0: left promiscuous mode [ 258.750808][ T1100] hsr_slave_1: left promiscuous mode [ 258.756806][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 258.767641][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 258.775960][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 258.783414][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 258.805527][ T1100] veth1_macvtap: left promiscuous mode [ 258.811080][ T1100] veth0_macvtap: left promiscuous mode [ 258.817227][ T1100] veth1_vlan: left promiscuous mode [ 258.822668][ T1100] veth0_vlan: left promiscuous mode [ 258.944613][T11014] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1176'. [ 259.698855][ T5149] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 259.710017][ T5149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 259.727200][ T5149] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 259.735886][ T5149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 259.745453][ T5149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 259.967759][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 260.017600][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 260.480019][T11014] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 260.515629][T11027] vlan2: entered allmulticast mode [ 260.656404][T11045] lo speed is unknown, defaulting to 1000 [ 260.774248][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1181'. [ 260.838638][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1181'. [ 260.951762][ C0] vcan0: j1939_tp_rxtimer: 0xffff888030cd5400: rx timeout, send abort [ 260.959188][T11059] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1185'. [ 261.044025][T11051] lo speed is unknown, defaulting to 1000 [ 261.059864][T11064] netlink: 'syz.7.1186': attribute type 11 has an invalid length. [ 261.109661][T11062] netlink: 830 bytes leftover after parsing attributes in process `syz.7.1186'. [ 261.500777][T11045] chnl_net:caif_netlink_parms(): no params data found [ 261.567636][T11077] netlink: 'syz.7.1188': attribute type 1 has an invalid length. [ 261.596918][T11077] netlink: 'syz.7.1188': attribute type 2 has an invalid length. [ 261.815171][T11088] netlink: 'syz.7.1193': attribute type 32 has an invalid length. [ 261.823819][T11088] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1193'. [ 261.856250][ T50] Bluetooth: hci1: command tx timeout [ 261.928421][T11088] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 261.991010][T11089] netlink: 'syz.6.1190': attribute type 13 has an invalid length. [ 262.045600][T11089] netlink: 'syz.6.1190': attribute type 17 has an invalid length. [ 262.208175][T11089] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 262.248148][T11045] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.269766][T11045] bridge0: port 1(bridge_slave_0) entered disabled state [ 262.270979][T11089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.279157][T11045] bridge_slave_0: entered allmulticast mode [ 262.301680][T11045] bridge_slave_0: entered promiscuous mode [ 262.331469][T11080] lo speed is unknown, defaulting to 1000 [ 262.338418][T11045] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.349164][T11045] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.354220][T11089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.357210][T11045] bridge_slave_1: entered allmulticast mode [ 262.382878][T11045] bridge_slave_1: entered promiscuous mode [ 262.438737][T11089] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 262.521563][T11045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.541279][T11045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.551154][T11109] netlink: 'syz.7.1196': attribute type 3 has an invalid length. [ 262.562922][T11109] netlink: 666 bytes leftover after parsing attributes in process `syz.7.1196'. [ 262.681760][T11045] team0: Port device team_slave_0 added [ 262.700780][T11045] team0: Port device team_slave_1 added [ 262.715290][T11112] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1197'. [ 262.738625][T11114] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 262.759309][T11045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 262.766516][T11045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.793854][T11045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 262.807769][T11045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 262.822163][T11045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 262.848443][T11045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 262.936717][T11045] hsr_slave_0: entered promiscuous mode [ 262.936807][T11116] xt_CT: You must specify a L4 protocol and not use inversions on it [ 262.943640][T11045] hsr_slave_1: entered promiscuous mode [ 263.330171][T11124] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1201'. [ 263.932576][ T50] Bluetooth: hci1: command tx timeout [ 265.085778][T11138] bridge_slave_0: left promiscuous mode [ 265.092466][T11138] bridge0: port 1(bridge_slave_0) entered disabled state [ 265.104864][T11138] bridge_slave_1: left promiscuous mode [ 265.110798][T11138] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.124899][T11138] bond0: (slave bond_slave_0): Releasing backup interface [ 265.146486][T11138] bond0: (slave bond_slave_1): Releasing backup interface [ 265.182905][T11138] team0: Port device team_slave_0 removed [ 265.201695][T11138] team0: Port device team_slave_1 removed [ 265.216687][T11138] geneve0: left allmulticast mode [ 265.229916][T11138] team0: Port device geneve0 removed [ 265.247463][ T4554] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.270405][ T4554] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.297832][ T4554] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.362536][ T4554] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.503572][T11147] pim6reg1: entered promiscuous mode [ 265.525823][T11147] pim6reg1: entered allmulticast mode [ 265.651457][T11045] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 265.682006][T11045] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 265.715893][T11045] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 265.782849][T11155] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1210'. [ 265.795290][T11045] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 265.898360][T11169] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1213'. [ 266.002311][ T50] Bluetooth: hci1: command tx timeout [ 266.119560][T11045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 266.156647][T11045] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.183631][ T4554] bridge0: port 1(bridge_slave_0) entered blocking state [ 266.194447][ T4554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 266.241639][T11178] netlink: 428 bytes leftover after parsing attributes in process `syz.8.1215'. [ 266.274753][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 266.284151][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 266.322948][T11178] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1215'. [ 266.785907][T11045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.898933][T11045] veth0_vlan: entered promiscuous mode [ 266.994265][T11045] veth1_vlan: entered promiscuous mode [ 267.148161][T11045] veth0_macvtap: entered promiscuous mode [ 267.179863][T11195] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 267.180927][T11045] veth1_macvtap: entered promiscuous mode [ 267.203166][T11194] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1221'. [ 267.226708][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1220'. [ 267.236475][T11196] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1220'. [ 267.310481][T11045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 267.349586][T11199] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1222'. [ 267.350419][T11045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 267.400792][ T1100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.437447][ T1100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.462614][T11201] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1222'. [ 267.497820][T11201] vlan2: entered allmulticast mode [ 267.542606][ T1100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.565537][ T1100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.731119][ T1100] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.748037][ T1100] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.846738][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.864255][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 269.025235][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.823540][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.034816][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.103462][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.228872][ T36] bridge_slave_1: left allmulticast mode [ 270.236281][ T36] bridge_slave_1: left promiscuous mode [ 270.244274][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.256666][ T36] bridge_slave_0: left allmulticast mode [ 270.263337][ T36] bridge_slave_0: left promiscuous mode [ 270.269869][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.783220][T11246] SET target dimension over the limit! [ 270.841507][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 270.862420][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 270.877272][ T36] bond0 (unregistering): Released all slaves [ 270.915839][ T12] netdevsim netdevsim7 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.929455][ T12] netdevsim netdevsim7 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.940685][ T12] netdevsim netdevsim7 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 270.992370][ T12] netdevsim netdevsim7 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 271.109023][ T5149] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 271.123869][T11256] xt_l2tp: missing protocol rule (udp|l2tpip) [ 271.139384][ T5149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 271.149230][ T5149] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 271.160044][ T5149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 271.168920][ T5149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 271.269974][T11256] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1237'. [ 271.299937][T11259] lo speed is unknown, defaulting to 1000 [ 271.456419][T11254] lo speed is unknown, defaulting to 1000 [ 271.620967][ T36] hsr_slave_0: left promiscuous mode [ 271.637983][ T36] hsr_slave_1: left promiscuous mode [ 271.645946][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 271.658495][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 271.673387][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 271.681569][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 271.726609][ T36] veth1_macvtap: left promiscuous mode [ 271.741239][ T36] veth0_macvtap: left promiscuous mode [ 271.748665][ T36] veth1_vlan: left promiscuous mode [ 271.748666][T11271] FAULT_INJECTION: forcing a failure. [ 271.748666][T11271] name failslab, interval 1, probability 0, space 0, times 0 [ 271.748694][T11271] CPU: 1 UID: 0 PID: 11271 Comm: syz.7.1241 Not tainted 6.16.0-rc3-syzkaller-00903-g20a0c20f82ac #0 PREEMPT(full) [ 271.748714][T11271] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 271.748723][T11271] Call Trace: [ 271.748730][T11271] [ 271.748738][T11271] dump_stack_lvl+0x189/0x250 [ 271.748770][T11271] ? __pfx____ratelimit+0x10/0x10 [ 271.748791][T11271] ? __pfx_dump_stack_lvl+0x10/0x10 [ 271.748817][T11271] ? __pfx__printk+0x10/0x10 [ 271.748840][T11271] ? __pfx___might_resched+0x10/0x10 [ 271.749013][T11271] ? fs_reclaim_acquire+0x7d/0x100 [ 271.749056][T11271] should_fail_ex+0x414/0x560 [ 271.749084][T11271] ? __pfx_sock_alloc_inode+0x10/0x10 [ 271.749104][T11271] should_failslab+0xa8/0x100 [ 271.749124][T11271] ? __pfx_sock_alloc_inode+0x10/0x10 [ 271.749140][T11271] kmem_cache_alloc_lru_noprof+0x78/0x3d0 [ 271.749166][T11271] ? sock_alloc_inode+0x28/0xc0 [ 271.749188][T11271] ? __pfx_sock_alloc_inode+0x10/0x10 [ 271.749205][T11271] sock_alloc_inode+0x28/0xc0 [ 271.749223][T11271] alloc_inode+0x67/0x1b0 [ 271.749243][T11271] __sock_create+0x12d/0x9f0 [ 271.749273][T11271] __sys_socket+0xd7/0x1b0 [ 271.749297][T11271] __x64_sys_socket+0x7a/0x90 [ 271.749319][T11271] do_syscall_64+0xfa/0x3b0 [ 271.749339][T11271] ? lockdep_hardirqs_on+0x9c/0x150 [ 271.749358][T11271] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.749376][T11271] ? clear_bhb_loop+0x60/0xb0 [ 271.749398][T11271] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 271.749415][T11271] RIP: 0033:0x7fe20538e929 [ 271.749433][T11271] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 271.749449][T11271] RSP: 002b:00007fe20620a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000029 [ 271.749469][T11271] RAX: ffffffffffffffda RBX: 00007fe2055b5fa0 RCX: 00007fe20538e929 [ 271.749482][T11271] RDX: 0000000000000000 RSI: 0000000000000002 RDI: 0000000000000028 [ 271.749492][T11271] RBP: 00007fe20620a090 R08: 0000000000000000 R09: 0000000000000000 [ 271.749504][T11271] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 271.749514][T11271] R13: 0000000000000001 R14: 00007fe2055b5fa0 R15: 00007ffc03261808 [ 271.749545][T11271] [ 271.749727][T11271] socket: no more sockets [ 271.758918][ T36] veth0_vlan: left promiscuous mode [ 272.009592][T11274] netlink: 'syz.7.1242': attribute type 4 has an invalid length. [ 272.061475][T11275] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1242'. [ 272.200531][T11278] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1243'. [ 272.636801][ T36] team0 (unregistering): Port device team_slave_1 removed [ 272.692049][ T36] team0 (unregistering): Port device team_slave_0 removed [ 273.202432][ T50] Bluetooth: hci1: command tx timeout [ 273.861167][T11254] chnl_net:caif_netlink_parms(): no params data found [ 274.256354][T11254] bridge0: port 1(bridge_slave_0) entered blocking state [ 274.276323][T11254] bridge0: port 1(bridge_slave_0) entered disabled state [ 274.291334][T11254] bridge_slave_0: entered allmulticast mode [ 274.305202][T11254] bridge_slave_0: entered promiscuous mode [ 274.322014][T11254] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.341608][T11254] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.372644][T11254] bridge_slave_1: entered allmulticast mode [ 274.380195][T11254] bridge_slave_1: entered promiscuous mode [ 274.389549][T11330] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 274.477465][T11254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 274.507013][T11330] macsec1: entered promiscuous mode [ 274.512955][T11330] macsec1: entered allmulticast mode [ 274.524123][T11254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 274.671946][T11254] team0: Port device team_slave_0 added [ 274.728733][T11254] team0: Port device team_slave_1 added [ 274.864558][T11254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 274.883313][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 274.919910][T11254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 274.994201][T11254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.008878][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.044728][T11254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.208726][T11254] hsr_slave_0: entered promiscuous mode [ 275.216800][T11366] netlink: 'syz.7.1263': attribute type 11 has an invalid length. [ 275.227827][T11254] hsr_slave_1: entered promiscuous mode [ 275.282316][ T50] Bluetooth: hci1: command tx timeout [ 275.348093][T11371] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1264'. [ 275.942971][T11378] syzkaller0: entered promiscuous mode [ 275.957703][T11378] syzkaller0: entered allmulticast mode [ 275.980813][T11383] syzkaller0: refused to change device tx_queue_len [ 276.471498][ T5149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 276.510540][ T5149] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 276.531466][T11392] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1270'. [ 276.547936][ T5149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 276.575686][ T5149] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 276.600216][ T5149] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 277.310997][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1272'. [ 277.372376][ T50] Bluetooth: hci1: command tx timeout [ 277.387604][T11402] xt_CT: You must specify a L4 protocol and not use inversions on it [ 278.646217][ T50] Bluetooth: hci5: command tx timeout [ 278.926705][T11389] lo speed is unknown, defaulting to 1000 [ 279.106470][T11410] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1276'. [ 279.135083][T11254] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 279.163538][T11410] netlink: 12 bytes leftover after parsing attributes in process `syz.7.1276'. [ 279.187617][T11410] block nbd0: not configured, cannot reconfigure [ 279.201299][T11254] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 279.218849][T11414] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1276'. [ 279.220152][T11254] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 279.266021][T11254] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 279.347042][T11408] lo speed is unknown, defaulting to 1000 [ 279.444310][ T50] Bluetooth: hci1: command tx timeout [ 279.623330][T11389] chnl_net:caif_netlink_parms(): no params data found [ 279.840189][T11389] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.863055][T11389] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.871561][T11389] bridge_slave_0: entered allmulticast mode [ 279.881284][T11389] bridge_slave_0: entered promiscuous mode [ 279.901283][T11389] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.917616][T11389] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.950780][T11389] bridge_slave_1: entered allmulticast mode [ 279.968370][T11389] bridge_slave_1: entered promiscuous mode [ 279.980993][T11436] sctp: [Deprecated]: syz.6.1279 (pid 11436) Use of int in max_burst socket option. [ 279.980993][T11436] Use struct sctp_assoc_value instead [ 280.149830][T11389] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 280.184790][T11389] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 280.250546][T11254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 280.266673][T11389] team0: Port device team_slave_0 added [ 280.295065][T11389] team0: Port device team_slave_1 added [ 280.542002][T11389] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 280.551470][T11389] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.610767][T11389] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 280.640102][T11389] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 280.660108][T11389] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 280.729600][ T50] Bluetooth: hci5: command tx timeout [ 280.753523][T11389] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 281.023016][T11389] hsr_slave_0: entered promiscuous mode [ 281.031213][T11389] hsr_slave_1: entered promiscuous mode [ 281.045630][T11389] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 281.056477][T11389] Cannot create hsr debugfs directory [ 281.140758][T11254] 8021q: adding VLAN 0 to HW filter on device team0 [ 281.361108][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.368626][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 281.533118][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.540898][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 282.186943][T11485] netlink: 504 bytes leftover after parsing attributes in process `syz.7.1293'. [ 282.295100][T11389] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 282.346551][T11389] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 282.395699][T11389] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 282.450590][T11389] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 282.634410][T11498] netlink: 'syz.6.1295': attribute type 10 has an invalid length. [ 282.645364][T11498] netlink: 40 bytes leftover after parsing attributes in process `syz.6.1295'. [ 282.659546][T11254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 282.699450][T11498] team0: Port device geneve0 added [ 282.740762][T11498] netlink: 'syz.6.1295': attribute type 1 has an invalid length. [ 282.802417][ T50] Bluetooth: hci5: command tx timeout [ 282.846169][T11498] 8021q: adding VLAN 0 to HW filter on device bond2 [ 283.118967][T11254] veth0_vlan: entered promiscuous mode [ 283.192064][T11389] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.227651][T11508] vlan0: entered promiscuous mode [ 283.246095][T11508] vlan0: left allmulticast mode [ 283.267986][T11510] netlink: 'syz.6.1297': attribute type 13 has an invalid length. [ 283.271147][T11389] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.329770][T11514] netlink: 'syz.6.1297': attribute type 2 has an invalid length. [ 283.338090][T11514] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1297'. [ 283.395125][T11517] netlink: 96 bytes leftover after parsing attributes in process `syz.8.1300'. [ 283.486260][T11510] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.515358][T11510] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.607499][T11519] Bluetooth: MGMT ver 1.23 [ 283.704996][T11510] mac80211_hwsim hwsim35 wlan0: left allmulticast mode [ 283.713515][T11515] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1299'. [ 283.738841][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.746843][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.761989][T11254] veth1_vlan: entered promiscuous mode [ 283.784040][ T6338] netdevsim netdevsim6 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.808364][ T6338] netdevsim netdevsim6 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.856945][ T6338] netdevsim netdevsim6 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.920593][ T6338] netdevsim netdevsim6 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.934865][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.942499][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.991611][T11513] lo speed is unknown, defaulting to 1000 [ 284.134570][T11254] veth0_macvtap: entered promiscuous mode [ 284.215932][T11254] veth1_macvtap: entered promiscuous mode [ 284.502612][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1305'. [ 284.511875][T11539] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 284.526807][T11254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 284.540789][T11539] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.591946][T11543] netlink: 72 bytes leftover after parsing attributes in process `syz.6.1306'. [ 284.614564][T11540] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1305'. [ 284.750487][T11254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 284.776838][T11537] lo speed is unknown, defaulting to 1000 [ 284.888454][T11540] macvtap0: entered promiscuous mode [ 284.895358][ T50] Bluetooth: hci5: command tx timeout [ 284.907408][T11540] ip6gretap0: entered promiscuous mode [ 284.918442][T11551] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1308'. [ 284.937308][T11540] macvtap0: entered allmulticast mode [ 284.957038][ T1100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.201842][ T1100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.260267][ T1100] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.324162][ T1100] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.424689][T11389] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.543467][ T4554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.567012][ T4554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.658912][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.670824][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.979612][ T5918] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 286.081112][ T5918] hid-generic 0005:16BF:5505.0001: unknown main item tag 0x0 [ 286.137924][ T5918] hid-generic 0005:16BF:5505.0001: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 286.473593][T11591] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1315'. [ 286.509263][T11389] veth0_vlan: entered promiscuous mode [ 286.656144][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.728163][T11389] veth1_vlan: entered promiscuous mode [ 286.920425][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.969502][T11389] veth0_macvtap: entered promiscuous mode [ 287.012043][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.032939][T11389] veth1_macvtap: entered promiscuous mode [ 287.055572][T11389] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 287.101871][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.125659][T11389] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 287.143657][ T48] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.155089][ T1100] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.168242][ T1100] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.182049][ T1100] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 287.320490][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.342036][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.387134][ T1100] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 287.387813][ T36] bridge_slave_1: left allmulticast mode [ 287.395839][ T1100] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 287.403806][ T36] bridge_slave_1: left promiscuous mode [ 287.420333][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.430995][ T36] bridge_slave_0: left allmulticast mode [ 287.437472][ T36] bridge_slave_0: left promiscuous mode [ 287.445739][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.682848][ T5149] Bluetooth: hci5: command 0x0405 tx timeout [ 287.860777][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 287.873558][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 287.884836][ T36] bond0 (unregistering): Released all slaves [ 288.164872][ T36] hsr_slave_0: left promiscuous mode [ 288.174464][ T36] hsr_slave_1: left promiscuous mode [ 288.181868][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 288.190709][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 288.201455][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 288.210452][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 288.235014][ T36] veth1_macvtap: left promiscuous mode [ 288.240787][ T36] veth0_macvtap: left promiscuous mode [ 288.252999][ T36] veth1_vlan: left promiscuous mode [ 288.259017][ T36] veth0_vlan: left promiscuous mode [ 288.808206][T11632] IPVS: set_ctl: invalid protocol: 33 172.20.20.65:20003 [ 289.010408][ T5149] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 289.043739][ T5149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 289.057414][ T5149] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 289.086404][ T5149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 289.107482][ T5149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 289.334204][ T36] team0 (unregistering): Port device team_slave_1 removed [ 289.396165][ T36] team0 (unregistering): Port device team_slave_0 removed [ 290.029362][T11633] lo speed is unknown, defaulting to 1000 [ 290.119376][T11637] TCP: TCP_TX_DELAY enabled [ 290.309329][T11646] netlink: 71 bytes leftover after parsing attributes in process `syz.8.1329'. [ 290.333572][T11645] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1328'. [ 290.343052][T11639] lo speed is unknown, defaulting to 1000 [ 290.344329][T11646] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1329'. [ 290.389821][T11645] pim6reg: entered allmulticast mode [ 290.425471][T11645] pim6reg: left allmulticast mode [ 291.202588][ T5149] Bluetooth: hci1: command tx timeout [ 291.340214][T11676] netlink: 'syz.8.1338': attribute type 2 has an invalid length. [ 291.353208][T11682] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1341'. [ 291.366318][T11633] chnl_net:caif_netlink_parms(): no params data found [ 291.380252][T11676] netlink: 32 bytes leftover after parsing attributes in process `syz.8.1338'. [ 291.878451][T11708] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1347'. [ 291.965436][T11711] netlink: 68 bytes leftover after parsing attributes in process `syz.9.1350'. [ 291.978229][T11703] syzkaller1: entered promiscuous mode [ 291.991619][T11703] syzkaller1: entered allmulticast mode [ 292.007695][T11715] netlink: 'syz.8.1349': attribute type 30 has an invalid length. [ 292.108757][T11633] bridge0: port 1(bridge_slave_0) entered blocking state [ 292.125192][T11633] bridge0: port 1(bridge_slave_0) entered disabled state [ 292.136324][T11633] bridge_slave_0: entered allmulticast mode [ 292.164685][T11633] bridge_slave_0: entered promiscuous mode [ 292.288982][T11633] bridge0: port 2(bridge_slave_1) entered blocking state [ 292.323876][T11633] bridge0: port 2(bridge_slave_1) entered disabled state [ 292.373231][T11633] bridge_slave_1: entered allmulticast mode [ 292.415078][T11633] bridge_slave_1: entered promiscuous mode [ 292.751862][T11633] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.782726][T11747] macsec0: entered promiscuous mode [ 292.789070][T11747] team0: entered promiscuous mode [ 292.795312][T11747] team_slave_0: entered promiscuous mode [ 292.803944][T11747] team_slave_1: entered promiscuous mode [ 292.826290][T11747] geneve0: entered promiscuous mode [ 292.867209][T11747] team0: left promiscuous mode [ 292.873891][T11747] team_slave_0: left promiscuous mode [ 292.880330][T11747] team_slave_1: left promiscuous mode [ 292.889648][T11747] geneve0: left promiscuous mode [ 292.935361][T11633] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 293.098961][T11750] 8021q: adding VLAN 0 to HW filter on device bond3 [ 293.292093][T11633] team0: Port device team_slave_0 added [ 293.292428][ T5149] Bluetooth: hci1: command tx timeout [ 293.353836][T11633] team0: Port device team_slave_1 added [ 293.398611][T11754] lo speed is unknown, defaulting to 1000 [ 293.565418][T11633] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 293.605545][T11633] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.714762][T11633] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 293.764860][T11772] syzkaller1: entered promiscuous mode [ 293.779939][T11772] syzkaller1: entered allmulticast mode [ 293.998034][T11784] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 294.010575][T11633] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 294.026889][T11633] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 294.141221][T11633] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 294.708665][T11633] hsr_slave_0: entered promiscuous mode [ 294.750813][T11633] hsr_slave_1: entered promiscuous mode [ 294.763073][T11813] netlink: 56 bytes leftover after parsing attributes in process `syz.6.1371'. [ 294.831583][T11812] pimreg: entered allmulticast mode [ 295.218133][T11816] pimreg: left allmulticast mode [ 295.362499][ T5149] Bluetooth: hci1: command tx timeout [ 295.600823][T11800] lo speed is unknown, defaulting to 1000 [ 295.625379][T11833] netlink: 56 bytes leftover after parsing attributes in process `syz.8.1378'. [ 295.655506][T11833] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1378'. [ 295.660837][T11831] syzkaller1: entered promiscuous mode [ 295.681649][T11834] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1378'. [ 295.698117][T11831] syzkaller1: entered allmulticast mode [ 296.095728][T11848] netlink: 168 bytes leftover after parsing attributes in process `syz.6.1384'. [ 296.128112][T11845] mac80211_hwsim hwsim34 syzkaller0: Caught tx_queue_len zero misconfig [ 296.216336][T11841] syzkaller0: entered allmulticast mode [ 296.557727][T11864] netlink: 'syz.8.1388': attribute type 1 has an invalid length. [ 296.598698][T11866] xt_CT: You must specify a L4 protocol and not use inversions on it [ 296.966586][T11877] netdevsim netdevsim7 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.220905][T11877] netdevsim netdevsim7 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.268596][T11884] syzkaller1: entered promiscuous mode [ 297.281173][T11884] syzkaller1: entered allmulticast mode [ 297.344352][T11877] netdevsim netdevsim7 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.457767][ T5149] Bluetooth: hci1: command tx timeout [ 297.470055][T11877] netdevsim netdevsim7 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 297.566071][T11633] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 297.668902][T11904] vlan2: entered allmulticast mode [ 297.685471][T11904] veth1: entered allmulticast mode [ 297.711659][T11633] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 297.737583][T11633] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 297.760055][T11908] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1401'. [ 297.798612][T11633] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 297.839656][T11908] sch_tbf: burst 5 is lower than device bridge1 mtu (1514) ! [ 297.921943][T11916] netlink: 'syz.9.1402': attribute type 1 has an invalid length. [ 298.002037][T11916] bond1: entered promiscuous mode [ 298.010934][T11916] 8021q: adding VLAN 0 to HW filter on device bond1 [ 298.020603][ T6338] netdevsim netdevsim7 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.118562][T11920] 8021q: adding VLAN 0 to HW filter on device bond2 [ 298.138065][T11920] bond1: (slave bond2): making interface the new active one [ 298.146195][T11920] bond2: entered promiscuous mode [ 298.152563][T11920] bond1: (slave bond2): Enslaving as an active interface with an up link [ 298.177483][ T7638] netdevsim netdevsim7 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.231025][T11924] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1403'. [ 298.259493][ T12] netdevsim netdevsim7 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.303969][T11924] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 298.340484][T11929] netlink: 'syz.8.1406': attribute type 2 has an invalid length. [ 298.352458][ T12] netdevsim netdevsim7 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 298.479765][T11932] tap0: tun_chr_ioctl cmd 1074025676 [ 298.488072][T11932] tap0: owner set to 0 [ 298.508497][T11932] netlink: 4 bytes leftover after parsing attributes in process `syz.8.1406'. [ 298.550986][T11932] ipvlan2: entered promiscuous mode [ 298.640866][T11941] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 3950. macoff=82 [ 298.675737][T11633] 8021q: adding VLAN 0 to HW filter on device bond0 [ 298.779177][T11937] lo speed is unknown, defaulting to 1000 [ 298.781969][T11948] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1410'. [ 298.806819][T11633] 8021q: adding VLAN 0 to HW filter on device team0 [ 298.839892][T11948] gre0: Master is either lo or non-ether device [ 298.856719][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 298.864987][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 298.931721][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 298.940002][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 299.833018][T11974] bridge3: entered promiscuous mode [ 300.047484][T11633] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 300.210176][T11633] veth0_vlan: entered promiscuous mode [ 300.236631][T11633] veth1_vlan: entered promiscuous mode [ 300.373967][T11633] veth0_macvtap: entered promiscuous mode [ 300.399558][T11633] veth1_macvtap: entered promiscuous mode [ 300.428702][T11633] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 300.517245][T11633] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 300.600245][ T1100] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.621296][T11999] syzkaller1: entered promiscuous mode [ 300.629110][T11999] syzkaller1: entered allmulticast mode [ 300.640453][ T1100] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.674760][ T75] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.713169][ T75] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 300.933305][ T75] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.937066][T12008] netlink: 176 bytes leftover after parsing attributes in process `syz.7.1427'. [ 300.971948][ T75] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.023137][T12008] netlink: 84 bytes leftover after parsing attributes in process `syz.7.1427'. [ 301.082348][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 301.105219][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 301.115464][T12014] netlink: 'syz.8.1429': attribute type 1 has an invalid length. [ 301.391548][T12023] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1431'. [ 301.403637][T12016] bond2: (slave geneve2): making interface the new active one [ 301.421243][T12016] bond2: (slave geneve2): Enslaving as an active interface with an up link [ 301.503964][T12021] netlink: 32 bytes leftover after parsing attributes in process `syz.7.1431'. [ 301.514092][T12021] netlink: 24 bytes leftover after parsing attributes in process `syz.7.1431'. [ 301.559303][ T12] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 301.582668][T12023] vlan0: entered allmulticast mode [ 301.588648][T12023] gretap0: entered allmulticast mode [ 301.611673][ T12] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 301.626140][ T12] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 301.640259][T12028] syzkaller0: entered promiscuous mode [ 301.650444][T12028] syzkaller0: entered allmulticast mode [ 301.663230][ T12] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 20000 - 0 [ 301.871712][ T1100] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 301.911806][T12036] veth1_to_bond: entered allmulticast mode [ 301.921955][T12036] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1436'. [ 301.941138][T12033] unknown channel width for channel at 909000KHz? [ 301.951091][T12033] unknown channel width for channel at 909000KHz? [ 302.059469][T12036] bond0: (slave bond_slave_1): Releasing backup interface [ 302.095055][T12036] veth1_to_bond (unregistering): left allmulticast mode [ 302.155569][ T1100] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.242478][ T1100] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.349706][ T1100] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 302.477286][ T1100] bridge_slave_1: left allmulticast mode [ 302.484477][ T1100] bridge_slave_1: left promiscuous mode [ 302.491958][ T1100] bridge0: port 2(bridge_slave_1) entered disabled state [ 302.503984][ T1100] bridge_slave_0: left allmulticast mode [ 302.510465][ T1100] bridge_slave_0: left promiscuous mode [ 302.517823][ T1100] bridge0: port 1(bridge_slave_0) entered disabled state [ 302.939355][ T1100] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 302.954208][ T1100] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 302.970231][ T1100] bond0 (unregistering): Released all slaves [ 303.237647][ T1100] hsr_slave_0: left promiscuous mode [ 303.248760][ T1100] hsr_slave_1: left promiscuous mode [ 303.259733][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.271458][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.281075][ T1100] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.290738][ T1100] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.311735][ T1100] veth1_macvtap: left promiscuous mode [ 303.318472][ T1100] veth0_macvtap: left promiscuous mode [ 303.326305][ T1100] veth1_vlan: left promiscuous mode [ 303.334076][ T1100] veth0_vlan: left promiscuous mode [ 303.516406][T12041] netlink: 32 bytes leftover after parsing attributes in process `syz.9.1437'. [ 303.580196][T12045] netlink: 12 bytes leftover after parsing attributes in process `syz.8.1440'. [ 303.590929][T12046] netlink: 44 bytes leftover after parsing attributes in process `syz.6.1439'. [ 303.631368][T12045] netlink: 'syz.8.1440': attribute type 16 has an invalid length. [ 303.658748][T12045] netlink: 'syz.8.1440': attribute type 17 has an invalid length. [ 303.789106][T12052] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1438'. [ 304.277371][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 304.293916][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 304.330260][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 304.374519][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 304.393087][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 304.620812][ T1100] team0 (unregistering): Port device team_slave_1 removed [ 304.675712][ T1100] team0 (unregistering): Port device team_slave_0 removed [ 305.305843][T12045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 305.333968][T12045] 8021q: adding VLAN 0 to HW filter on device team0 [ 305.346287][T12045] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 305.374582][T12051] tap0: tun_chr_ioctl cmd 1074025677 [ 305.386612][T12051] tap0: linktype set to 805 [ 305.403424][ T8767] lo speed is unknown, defaulting to 1000 [ 305.410025][T12041] lo speed is unknown, defaulting to 1000 [ 305.421376][ T8767] syz1: Port: 1 Link ACTIVE [ 305.506422][T12060] lo speed is unknown, defaulting to 1000 [ 305.967092][T12076] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1444'. [ 306.011007][T12076] vlan0: entered promiscuous mode [ 306.058967][T12076] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1444'. [ 306.320800][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1446'. [ 306.352216][T12084] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1446'. [ 306.373378][T12088] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1447'. [ 306.417910][T12088] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1447'. [ 306.468105][T12086] lo speed is unknown, defaulting to 1000 [ 306.486783][ T50] Bluetooth: hci1: command tx timeout [ 306.544805][T12060] chnl_net:caif_netlink_parms(): no params data found [ 306.575663][T12088] geneve3: entered allmulticast mode [ 306.584082][ T75] netdevsim netdevsim8 netdevsim0: set [1, 1] type 2 family 0 port 6081 - 0 [ 306.592003][T12096] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1450'. [ 306.655059][T12095] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1449'. [ 306.670444][ T75] netdevsim netdevsim8 netdevsim1: set [1, 1] type 2 family 0 port 6081 - 0 [ 306.693161][ T6338] netdevsim netdevsim8 netdevsim2: set [1, 1] type 2 family 0 port 6081 - 0 [ 306.729911][T12103] netlink: 60 bytes leftover after parsing attributes in process `syz.6.1451'. [ 306.757838][ T6338] netdevsim netdevsim8 netdevsim3: set [1, 1] type 2 family 0 port 6081 - 0 [ 306.949284][T12111] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1454'. [ 307.186715][T12060] bridge0: port 1(bridge_slave_0) entered blocking state [ 307.200378][T12060] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.212581][T12060] bridge_slave_0: entered allmulticast mode [ 307.224384][T12060] bridge_slave_0: entered promiscuous mode [ 307.342973][T12119] hsr_slave_0: left promiscuous mode [ 307.349901][T12119] hsr_slave_1: left promiscuous mode [ 307.450715][T12060] bridge0: port 2(bridge_slave_1) entered blocking state [ 307.472570][T12060] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.485915][T12060] bridge_slave_1: entered allmulticast mode [ 307.497121][T12060] bridge_slave_1: entered promiscuous mode [ 307.676688][T12123] lo speed is unknown, defaulting to 1000 [ 307.689239][T12060] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 307.714394][T12112] lo speed is unknown, defaulting to 1000 [ 307.727159][T12060] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 307.927790][T12142] sit0: entered promiscuous mode [ 307.934007][T12142] sit0: left allmulticast mode [ 307.947476][T12142] netlink: 'syz.8.1460': attribute type 1 has an invalid length. [ 307.960552][T12060] team0: Port device team_slave_0 added [ 307.976793][T12147] sch_fq: defrate 1 ignored. [ 308.024661][T12060] team0: Port device team_slave_1 added [ 308.335108][T12060] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 308.345184][T12060] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.374686][T12060] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 308.428879][T12060] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 308.439117][T12060] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 308.474804][T12060] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 308.562987][ T5829] Bluetooth: hci1: command tx timeout [ 308.731824][T12060] hsr_slave_0: entered promiscuous mode [ 308.746917][T12060] hsr_slave_1: entered promiscuous mode [ 308.886515][ T5829] Bluetooth: hci3: command 0x0406 tx timeout [ 308.892434][ T5842] Bluetooth: hci2: command 0x0406 tx timeout [ 309.790219][T12060] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 309.811429][T12060] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 309.844530][T12060] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.897256][T12060] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 309.951256][T12218] bpq0: entered promiscuous mode [ 309.958956][T12218] bpq0: entered allmulticast mode [ 309.971008][T12218] netlink: 'syz.6.1483': attribute type 1 has an invalid length. [ 310.314406][T12060] 8021q: adding VLAN 0 to HW filter on device bond0 [ 310.401517][T12060] 8021q: adding VLAN 0 to HW filter on device team0 [ 310.471434][ T6338] bridge0: port 1(bridge_slave_0) entered blocking state [ 310.479821][ T6338] bridge0: port 1(bridge_slave_0) entered forwarding state [ 310.555327][ T6338] bridge0: port 2(bridge_slave_1) entered blocking state [ 310.563170][ T6338] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.644763][ T50] Bluetooth: hci1: command tx timeout [ 310.770079][T12252] pim6reg1: entered promiscuous mode [ 310.776236][T12252] pim6reg1: entered allmulticast mode [ 311.319636][T12271] No such timeout policy "syz1" [ 311.435363][T12273] netlink: 'syz.9.1496': attribute type 13 has an invalid length. [ 311.758749][T12273] bridge0: port 2(bridge_slave_1) entered disabled state [ 311.768348][T12273] bridge0: port 1(bridge_slave_0) entered disabled state [ 311.841415][T12297] netlink: 'syz.6.1500': attribute type 1 has an invalid length. [ 311.977946][T12273] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.996237][T12273] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 312.143716][T12292] bpq0: left promiscuous mode [ 312.159428][T12292] bpq0: left allmulticast mode [ 312.234978][T12297] bond3: entered promiscuous mode [ 312.248521][T12297] 8021q: adding VLAN 0 to HW filter on device bond3 [ 312.274457][T12302] bond3: (slave bridge2): making interface the new active one [ 312.285414][T12302] bridge2: entered promiscuous mode [ 312.293699][T12302] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 312.309439][ T7638] netdevsim netdevsim9 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.342707][ T6338] netdevsim netdevsim9 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.421391][ T6338] netdevsim netdevsim9 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.448712][ T6338] netdevsim netdevsim9 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.478254][T12060] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 312.656513][T12321] __nla_validate_parse: 11 callbacks suppressed [ 312.656532][T12321] netlink: 4 bytes leftover after parsing attributes in process `syz.9.1507'. [ 312.658678][T12060] veth0_vlan: entered promiscuous mode [ 312.737916][ T50] Bluetooth: hci1: command tx timeout [ 312.784633][T12326] netlink: 'syz.9.1507': attribute type 2 has an invalid length. [ 312.793083][T12326] netlink: 'syz.9.1507': attribute type 1 has an invalid length. [ 312.801471][T12326] netlink: 8 bytes leftover after parsing attributes in process `syz.9.1507'. [ 312.824668][T12327] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1508'. [ 312.947536][T12330] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1509'. [ 313.035831][T12060] veth1_vlan: entered promiscuous mode [ 313.141827][T12060] veth0_macvtap: entered promiscuous mode [ 313.165537][T12333] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: invalid value (192) [ 313.189010][T12060] veth1_macvtap: entered promiscuous mode [ 313.258863][T12060] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 313.284149][T12060] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 313.324481][ T75] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.343671][ T75] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.364330][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.387843][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 313.640704][T12354] delete_channel: no stack [ 313.711339][ T4554] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.738582][ T4554] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.775322][T12363] netlink: 5 bytes leftover after parsing attributes in process `syz.6.1518'. [ 313.824196][T12362] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1519'. [ 313.846584][ T4554] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 313.866830][ T4554] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 313.875416][T12368] netlink: 16 bytes leftover after parsing attributes in process `syz.9.1520'. [ 313.984093][T12374] No such timeout policy "syz1" [ 314.050020][T12373] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1521'. [ 314.097215][T12377] !: renamed from dummy0 [ 314.599052][ T6338] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.828748][T12382] lo speed is unknown, defaulting to 1000 [ 315.063612][ T6338] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.241667][ T6338] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.365557][ T6338] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.575034][ T6338] bridge_slave_1: left allmulticast mode [ 315.581386][ T6338] bridge_slave_1: left promiscuous mode [ 315.587854][ T6338] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.598341][ T6338] bridge_slave_0: left allmulticast mode [ 315.605658][ T6338] bridge_slave_0: left promiscuous mode [ 315.612714][ T6338] bridge0: port 1(bridge_slave_0) entered disabled state [ 316.035078][ T6338] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 316.054191][ T6338] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 316.065375][ T6338] bond0 (unregistering): Released all slaves [ 316.315690][ T6338] hsr_slave_0: left promiscuous mode [ 316.325752][ T6338] hsr_slave_1: left promiscuous mode [ 316.332029][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 316.340072][ T6338] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 316.348452][ T6338] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 316.357172][ T6338] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.414286][ T6338] veth1_macvtap: left promiscuous mode [ 316.419881][ T6338] veth0_macvtap: left promiscuous mode [ 316.443444][ T6338] veth1_vlan: left promiscuous mode [ 316.459784][ T6338] veth0_vlan: left promiscuous mode [ 316.488514][T12414] netlink: 'syz.8.1530': attribute type 3 has an invalid length. [ 316.979353][ T5149] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 316.991233][ T5149] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 317.004340][ T5149] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 317.013889][ T5149] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 317.023106][ T5149] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 317.406001][ T6338] team0 (unregistering): Port device team_slave_1 removed [ 317.457324][ T6338] team0 (unregistering): Port device team_slave_0 removed [ 318.072691][T12430] netlink: 'syz.9.1533': attribute type 11 has an invalid length. [ 318.092810][T12430] netlink: 201916 bytes leftover after parsing attributes in process `syz.9.1533'. [ 318.179679][T12424] lo speed is unknown, defaulting to 1000 [ 318.223905][T12427] lo speed is unknown, defaulting to 1000 [ 318.411481][T12439] netlink: 'syz.7.1536': attribute type 1 has an invalid length. [ 318.499777][T12439] 8021q: adding VLAN 0 to HW filter on device bond4 [ 318.531688][T12443] gretap1: entered promiscuous mode [ 318.547536][T12443] bond4: (slave gretap1): making interface the new active one [ 318.558111][T12443] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 318.590158][T12439] bond4: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 319.124227][ T5149] Bluetooth: hci1: command tx timeout [ 319.127602][T12427] chnl_net:caif_netlink_parms(): no params data found [ 319.445005][T12467] x_tables: duplicate underflow at hook 2 [ 319.482573][T12470] netlink: 44 bytes leftover after parsing attributes in process `syz.8.1541'. [ 319.529031][T12473] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1541'. [ 319.541284][T12470] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1541'. [ 319.620793][T12476] netlink: 96 bytes leftover after parsing attributes in process `syz.7.1544'. [ 319.656133][T12479] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 319.673164][T12427] bridge0: port 1(bridge_slave_0) entered blocking state [ 319.688417][T12427] bridge0: port 1(bridge_slave_0) entered disabled state [ 319.697296][T12427] bridge_slave_0: entered allmulticast mode [ 319.707204][T12427] bridge_slave_0: entered promiscuous mode [ 319.745038][T12476] vlan0: entered allmulticast mode [ 319.747103][T12486] netlink: 16 bytes leftover after parsing attributes in process `syz.8.1546'. [ 319.751444][T12476] erspan0: entered allmulticast mode [ 319.820329][T12427] bridge0: port 2(bridge_slave_1) entered blocking state [ 319.853840][T12427] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.902518][T12427] bridge_slave_1: entered allmulticast mode [ 319.911576][T12427] bridge_slave_1: entered promiscuous mode [ 319.940688][T12488] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1547'. [ 320.016744][T12427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 320.059077][T12427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 320.145789][T12490] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1547'. [ 320.315801][T12427] team0: Port device team_slave_0 added [ 320.374059][T12427] team0: Port device team_slave_1 added [ 320.600666][T12427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 320.636726][T12427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.684197][T12427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 320.712316][T12427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 320.732093][T12427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 320.769410][T12427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 320.810511][T12526] tap0: tun_chr_ioctl cmd 1074025677 [ 320.827909][T12526] tap0: linktype set to 0 [ 320.982850][T12531] netlink: 104 bytes leftover after parsing attributes in process `syz.9.1558'. [ 321.164283][T12427] hsr_slave_0: entered promiscuous mode [ 321.173466][T12427] hsr_slave_1: entered promiscuous mode [ 321.205336][ T50] Bluetooth: hci1: command tx timeout [ 321.216861][T12541] netlink: 14568 bytes leftover after parsing attributes in process `syz.9.1561'. [ 321.243547][T12535] pimreg: entered allmulticast mode [ 321.384602][T12539] bond2: (slave geneve2): Releasing active interface [ 321.519745][ T6338] netdevsim netdevsim8 netdevsim0: unset [1, 0] type 2 family 0 port 20000 - 0 [ 321.547648][ T6338] netdevsim netdevsim8 netdevsim1: unset [1, 0] type 2 family 0 port 20000 - 0 [ 321.701007][ T6338] netdevsim netdevsim8 netdevsim2: unset [1, 0] type 2 family 0 port 20000 - 0 [ 321.747927][T12557] ip6gre1: entered promiscuous mode [ 321.903718][ T6338] netdevsim netdevsim8 netdevsim3: unset [1, 0] type 2 family 0 port 20000 - 0 [ 321.972354][T12565] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.008134][T12559] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.041946][T12554] lo speed is unknown, defaulting to 1000 [ 322.111862][T12562] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 322.748027][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 322.759471][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 322.772700][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 322.783721][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 322.801123][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 322.875870][T12584] lo speed is unknown, defaulting to 1000 [ 322.881310][ T75] bridge_slave_1: left allmulticast mode [ 322.898394][ T75] bridge_slave_1: left promiscuous mode [ 322.913549][ T75] bridge0: port 2(bridge_slave_1) entered disabled state [ 322.934090][ T75] bridge_slave_0: left allmulticast mode [ 322.940840][ T75] bridge_slave_0: left promiscuous mode [ 322.960135][ T75] bridge0: port 1(bridge_slave_0) entered disabled state [ 323.156799][T12598] __nla_validate_parse: 1 callbacks suppressed [ 323.156816][T12598] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1578'. [ 323.198857][T12599] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1578'. [ 323.286624][ T5829] Bluetooth: hci1: command 0x040f tx timeout [ 323.517671][ T75] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 323.532042][ T75] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 323.541707][ T75] bond0 (unregistering): Released all slaves [ 323.687486][ T75] bond1 (unregistering): (slave bond2): Releasing backup interface [ 323.695809][ T75] bond2 (unregistering): left promiscuous mode [ 323.703734][ T75] bond1 (unregistering): Released all slaves [ 323.855972][ T75] bond2 (unregistering): Released all slaves [ 324.104259][T12608] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1582'. [ 324.128389][T12610] netlink: 20 bytes leftover after parsing attributes in process `syz.7.1583'. [ 324.351569][T12427] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 324.399568][T12427] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 324.446956][T12427] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 324.547059][T12427] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 324.560688][T12630] netlink: 28 bytes leftover after parsing attributes in process `syz.7.1589'. [ 324.631204][T12625] syzkaller1: entered promiscuous mode [ 324.646357][T12625] syzkaller1: entered allmulticast mode [ 324.718869][ T75] hsr_slave_0: left promiscuous mode [ 324.729105][ T75] hsr_slave_1: left promiscuous mode [ 324.736015][ T75] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 324.748015][ T75] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 324.891547][ T5149] Bluetooth: hci5: command tx timeout [ 325.126551][ T75] team0 (unregistering): Port device team_slave_1 removed [ 325.181197][ T75] team0 (unregistering): Port device team_slave_0 removed [ 325.364156][ T5829] Bluetooth: hci1: command 0x040f tx timeout [ 325.849525][T12643] tipc: Enabled bearer , priority 1 [ 325.956892][T12643] tipc: Enabling of bearer rejected, already enabled [ 326.769705][T12584] chnl_net:caif_netlink_parms(): no params data found [ 326.979919][ T5149] Bluetooth: hci5: command tx timeout [ 327.442421][ T5149] Bluetooth: hci1: command 0x040f tx timeout [ 327.471340][T12427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.891845][T12676] (unnamed net_device) (uninitialized): option ad_select: invalid value (34) [ 327.903206][T12661] lo speed is unknown, defaulting to 1000 [ 327.941765][T12427] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.964790][T12584] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.976491][T12584] bridge0: port 1(bridge_slave_0) entered disabled state [ 328.012566][T12584] bridge_slave_0: entered allmulticast mode [ 328.020771][T12584] bridge_slave_0: entered promiscuous mode [ 328.101045][T12584] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.121826][T12584] bridge0: port 2(bridge_slave_1) entered disabled state [ 328.143102][T12584] bridge_slave_1: entered allmulticast mode [ 328.151623][T12584] bridge_slave_1: entered promiscuous mode [ 328.197003][ T4554] bridge0: port 1(bridge_slave_0) entered blocking state [ 328.211908][ T4554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 328.331180][ T4554] bridge0: port 2(bridge_slave_1) entered blocking state [ 328.339151][ T4554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.358753][T12584] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 328.401326][T12584] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 328.441647][T12687] lo speed is unknown, defaulting to 1000 [ 328.517859][T12584] team0: Port device team_slave_0 added [ 328.560991][T12584] team0: Port device team_slave_1 added [ 328.668321][T12688] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1605'. [ 328.711349][T12688] SET target dimension over the limit! [ 328.734929][T12584] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 328.752813][T12584] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.786384][T12584] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 328.821599][T12584] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 328.830744][T12584] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 328.860914][T12584] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 329.030756][T12584] hsr_slave_0: entered promiscuous mode [ 329.044759][ T5149] Bluetooth: hci5: command tx timeout [ 329.053497][T12584] hsr_slave_1: entered promiscuous mode [ 329.061052][T12584] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 329.129873][T12584] Cannot create hsr debugfs directory [ 329.539449][T12708] lo speed is unknown, defaulting to 1000 [ 329.553486][T12427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.018201][T12730] netlink: 28 bytes leftover after parsing attributes in process `syz.8.1616'. [ 330.055385][T12427] veth0_vlan: entered promiscuous mode [ 330.101224][T12427] veth1_vlan: entered promiscuous mode [ 330.179837][T12427] veth0_macvtap: entered promiscuous mode [ 330.217482][T12427] veth1_macvtap: entered promiscuous mode [ 330.266850][T12427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 330.366176][T12427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 330.410416][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.436502][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.476234][T12746] netlink: 4388 bytes leftover after parsing attributes in process `syz.7.1621'. [ 330.479504][T12742] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1620'. [ 330.570578][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.593035][ T75] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 330.741118][T12584] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 330.787574][T12584] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 330.839256][T12584] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 330.856874][T12584] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 330.948611][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 330.959485][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.025343][T12772] Cannot find add_set index 2 as target [ 331.048836][T12773] Cannot find add_set index 2 as target [ 331.113977][ T48] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.124908][ T5149] Bluetooth: hci5: command tx timeout [ 331.139961][ T48] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.318441][T12584] 8021q: adding VLAN 0 to HW filter on device bond0 [ 331.347085][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1630'. [ 331.356942][T12781] openvswitch: netlink: Missing key (keys=40, expected=100) [ 331.388224][T12781] netlink: 'syz.8.1630': attribute type 11 has an invalid length. [ 331.423386][T12781] netlink: 224 bytes leftover after parsing attributes in process `syz.8.1630'. [ 331.509343][T12584] 8021q: adding VLAN 0 to HW filter on device team0 [ 331.654478][ T4554] bridge0: port 1(bridge_slave_0) entered blocking state [ 331.663667][ T4554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 331.676219][ T4554] bridge0: port 2(bridge_slave_1) entered blocking state [ 331.684030][ T4554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 331.863738][ T48] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 331.921212][T12791] lo speed is unknown, defaulting to 1000 [ 332.001839][ T48] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.204167][ T48] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.419139][T12584] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 332.481081][ T48] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 332.690513][ T48] bridge_slave_1: left allmulticast mode [ 332.699013][ T48] bridge_slave_1: left promiscuous mode [ 332.705053][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 332.715520][ T48] bridge_slave_0: left allmulticast mode [ 332.721793][ T48] bridge_slave_0: left promiscuous mode [ 332.729726][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 333.154103][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 333.165862][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 333.178375][ T48] bond0 (unregistering): Released all slaves [ 333.245704][T12584] veth0_vlan: entered promiscuous mode [ 333.282025][T12584] veth1_vlan: entered promiscuous mode [ 333.323191][T12584] veth0_macvtap: entered promiscuous mode [ 333.361817][T12584] veth1_macvtap: entered promiscuous mode [ 333.391169][T12584] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.411452][T12584] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.447376][ T75] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.459708][ T75] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.497158][ T75] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.506492][ T75] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.561489][ T48] hsr_slave_0: left promiscuous mode [ 333.568024][ T48] hsr_slave_1: left promiscuous mode [ 333.576540][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 333.584890][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 333.597172][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 333.605661][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 333.627568][ T48] veth1_macvtap: left promiscuous mode [ 333.633566][ T48] veth0_macvtap: left promiscuous mode [ 333.639604][ T48] veth1_vlan: left promiscuous mode [ 333.646506][ T48] veth0_vlan: left promiscuous mode [ 334.176225][T12821] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1637'. [ 334.369951][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 334.391807][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 334.401293][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 334.422331][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 334.438729][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 334.653518][ T48] team0 (unregistering): Port device team_slave_1 removed [ 334.728276][ T48] team0 (unregistering): Port device team_slave_0 removed [ 335.579734][T12825] lo speed is unknown, defaulting to 1000 [ 335.594611][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.611606][T12828] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 335.668383][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 335.835168][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 335.907970][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 336.047473][T12847] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1643'. [ 336.410279][T12825] chnl_net:caif_netlink_parms(): no params data found [ 336.450334][T12858] netlink: 48 bytes leftover after parsing attributes in process `syz.7.1646'. [ 336.482496][ T5829] Bluetooth: hci1: command tx timeout [ 336.578777][T12860] netlink: 16 bytes leftover after parsing attributes in process `syz.7.1646'. [ 336.641350][ T48] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 336.804163][ T48] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.015472][ T48] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.056919][T12825] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.086799][T12825] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.102766][T12825] bridge_slave_0: entered allmulticast mode [ 337.120766][T12825] bridge_slave_0: entered promiscuous mode [ 337.179197][ T48] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 337.243842][T12825] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.251910][T12825] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.282668][T12825] bridge_slave_1: entered allmulticast mode [ 337.291022][T12825] bridge_slave_1: entered promiscuous mode [ 337.465389][T12867] can: request_module (can-proto-0) failed. [ 337.500394][T12825] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 337.529418][ T5149] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 337.545121][ T5149] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 337.557251][ T5149] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 337.561093][T12825] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 337.580374][ T5149] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 337.593938][ T5149] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 337.759509][T12825] team0: Port device team_slave_0 added [ 337.827304][T12825] team0: Port device team_slave_1 added [ 337.898314][T12872] lo speed is unknown, defaulting to 1000 [ 337.902086][T12825] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 337.937525][T12825] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.012315][T12825] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 338.050213][T12825] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 338.072480][T12825] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 338.117706][T12825] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 338.205180][T12877] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 338.526175][T12825] hsr_slave_0: entered promiscuous mode [ 338.543468][T12825] hsr_slave_1: entered promiscuous mode [ 338.562289][ T5149] Bluetooth: hci1: command tx timeout [ 338.591942][ T48] bridge_slave_1: left allmulticast mode [ 338.612407][ T48] bridge_slave_1: left promiscuous mode [ 338.618835][ T48] bridge0: port 2(bridge_slave_1) entered disabled state [ 338.668398][ T48] bridge_slave_0: left allmulticast mode [ 338.692194][ T48] bridge_slave_0: left promiscuous mode [ 338.698552][ T48] bridge0: port 1(bridge_slave_0) entered disabled state [ 338.819368][T12887] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1652'. [ 338.852649][T12888] netlink: 20 bytes leftover after parsing attributes in process `syz.8.1651'. [ 339.564439][ T48] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 339.577116][ T48] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 339.596650][ T48] bond0 (unregistering): Released all slaves [ 339.645723][T12881] syzkaller1: entered promiscuous mode [ 339.652695][T12881] syzkaller1: entered allmulticast mode [ 339.683156][ T5149] Bluetooth: hci5: command tx timeout [ 340.115877][T12912] IPv6: Can't replace route, no match found [ 340.126829][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1657'. [ 340.342570][T12914] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1657'. [ 340.440709][ T48] hsr_slave_0: left promiscuous mode [ 340.449622][ T48] hsr_slave_1: left promiscuous mode [ 340.457859][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 340.470916][ T48] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 340.471357][T12910] netlink: 4 bytes leftover after parsing attributes in process `syz.7.1657'. [ 340.490026][ T48] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 340.499625][ T48] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 340.528446][ T48] veth1_macvtap: left promiscuous mode [ 340.534514][ T48] veth0_macvtap: left promiscuous mode [ 340.540674][ T48] veth1_vlan: left promiscuous mode [ 340.547506][ T48] veth0_vlan: left promiscuous mode [ 340.652655][ T5149] Bluetooth: hci1: command tx timeout [ 341.206024][ T48] team0 (unregistering): Port device team_slave_1 removed [ 341.256048][ T48] team0 (unregistering): Port device team_slave_0 removed [ 341.774211][ T5149] Bluetooth: hci5: command tx timeout [ 341.868636][T12926] 8021q: VLANs not supported on ipvlan1 [ 341.980451][T12872] chnl_net:caif_netlink_parms(): no params data found [ 342.033804][T12934] xt_hashlimit: size too large, truncated to 1048576 [ 342.062490][T12934] xt_hashlimit: max too large, truncated to 1048576 [ 342.348489][T12943] netdevsim netdevsim8 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 342.401515][T12952] netlink: 'syz.6.1665': attribute type 1 has an invalid length. [ 342.569438][T12943] netdevsim netdevsim8 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 342.704362][T12943] netdevsim netdevsim8 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 342.735538][ T5149] Bluetooth: hci1: command tx timeout [ 342.739765][T12962] FAULT_INJECTION: forcing a failure. [ 342.739765][T12962] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 342.767919][T12962] CPU: 0 UID: 0 PID: 12962 Comm: syz.6.1666 Not tainted 6.16.0-rc3-syzkaller-00903-g20a0c20f82ac #0 PREEMPT(full) [ 342.767948][T12962] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 342.767967][T12962] Call Trace: [ 342.767972][T12962] [ 342.767978][T12962] dump_stack_lvl+0x189/0x250 [ 342.768000][T12962] ? __pfx____ratelimit+0x10/0x10 [ 342.768013][T12962] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.768036][T12962] ? __pfx__printk+0x10/0x10 [ 342.768054][T12962] should_fail_ex+0x414/0x560 [ 342.768070][T12962] _copy_to_user+0x31/0xb0 [ 342.768081][T12962] simple_read_from_buffer+0xe1/0x170 [ 342.768095][T12962] proc_fail_nth_read+0x1df/0x250 [ 342.768113][T12962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 342.768134][T12962] ? rw_verify_area+0x258/0x650 [ 342.768156][T12962] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 342.768176][T12962] vfs_read+0x1fd/0x980 [ 342.768205][T12962] ? __pfx___mutex_lock+0x10/0x10 [ 342.768224][T12962] ? __pfx_vfs_read+0x10/0x10 [ 342.768239][T12962] ? __fget_files+0x2a/0x420 [ 342.768253][T12962] ? __fget_files+0x3a0/0x420 [ 342.768262][T12962] ? __fget_files+0x2a/0x420 [ 342.768277][T12962] ksys_read+0x145/0x250 [ 342.768292][T12962] ? __pfx_ksys_read+0x10/0x10 [ 342.768309][T12962] ? do_syscall_64+0xbe/0x3b0 [ 342.768323][T12962] do_syscall_64+0xfa/0x3b0 [ 342.768333][T12962] ? lockdep_hardirqs_on+0x9c/0x150 [ 342.768344][T12962] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.768354][T12962] ? clear_bhb_loop+0x60/0xb0 [ 342.768367][T12962] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.768376][T12962] RIP: 0033:0x7f7776f8d33c [ 342.768387][T12962] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 342.768396][T12962] RSP: 002b:00007f7777d5b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 342.768408][T12962] RAX: ffffffffffffffda RBX: 00007f77771b6160 RCX: 00007f7776f8d33c [ 342.768415][T12962] RDX: 000000000000000f RSI: 00007f7777d5b0a0 RDI: 0000000000000006 [ 342.768421][T12962] RBP: 00007f7777d5b090 R08: 0000000000000000 R09: 0000000000000000 [ 342.768427][T12962] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 342.768433][T12962] R13: 0000000000000001 R14: 00007f77771b6160 R15: 00007ffee890d7e8 [ 342.768449][T12962] [ 343.036564][T12948] lo speed is unknown, defaulting to 1000 [ 343.038942][T12872] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.060413][T12872] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.070722][T12872] bridge_slave_0: entered allmulticast mode [ 343.087764][T12872] bridge_slave_0: entered promiscuous mode [ 343.099085][T12872] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.107809][T12872] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.117141][T12872] bridge_slave_1: entered allmulticast mode [ 343.128821][T12872] bridge_slave_1: entered promiscuous mode [ 343.150181][T12959] syzkaller1: entered promiscuous mode [ 343.157733][T12959] syzkaller1: entered allmulticast mode [ 343.240017][T12943] netdevsim netdevsim8 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 343.300184][T12872] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.322796][T12872] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.480230][T12872] team0: Port device team_slave_0 added [ 343.549149][T12872] team0: Port device team_slave_1 added [ 343.569729][ T36] netdevsim netdevsim8 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.681118][T12872] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 343.692615][T12872] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.725391][T12872] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 343.750196][ T12] netdevsim netdevsim8 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.770030][T12872] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 343.781574][T12872] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 343.814961][T12872] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 343.841607][T12825] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 343.849344][ T5149] Bluetooth: hci5: command tx timeout [ 343.868069][ T48] netdevsim netdevsim8 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.909061][T12825] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 343.935691][T12872] hsr_slave_0: entered promiscuous mode [ 343.944595][T12872] hsr_slave_1: entered promiscuous mode [ 343.951478][T12872] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 343.961910][T12872] Cannot create hsr debugfs directory [ 343.969656][T12825] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 344.009540][ T48] netdevsim netdevsim8 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.049617][T12825] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 344.247844][T12980] netlink: 'syz.6.1670': attribute type 3 has an invalid length. [ 344.268908][T12980] netlink: 199836 bytes leftover after parsing attributes in process `syz.6.1670'. [ 344.287664][T12987] netlink: 'syz.8.1671': attribute type 1 has an invalid length. [ 344.442061][T12988] bridge6: entered promiscuous mode [ 344.717341][T13003] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 344.797919][T13006] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1676'. [ 345.084816][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1678'. [ 345.120039][T13016] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1678'. [ 345.165504][T13016] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1678'. [ 345.210638][T12825] 8021q: adding VLAN 0 to HW filter on device bond0 [ 345.284207][T12825] 8021q: adding VLAN 0 to HW filter on device team0 [ 345.309130][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 345.316630][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 345.388418][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 345.397043][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 345.914440][T12872] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 345.916330][T13041] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1684'. [ 345.935353][ T5149] Bluetooth: hci5: command tx timeout [ 345.941812][T13041] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1684'. [ 345.951955][T12872] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 345.977340][T12872] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 346.028707][T13043] team0: Mode changed to "broadcast" [ 346.060442][T12872] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 346.102560][T13045] vlan0: entered allmulticast mode [ 346.133456][T13045] team0: Port device vlan0 added [ 346.163903][T12825] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 346.239029][T13051] lo speed is unknown, defaulting to 1000 [ 346.454917][T12825] veth0_vlan: entered promiscuous mode [ 346.601218][T13066] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1688'. [ 346.608664][T12825] veth1_vlan: entered promiscuous mode [ 346.990691][T12872] 8021q: adding VLAN 0 to HW filter on device bond0 [ 347.080705][T12825] veth0_macvtap: entered promiscuous mode [ 347.118799][T12872] 8021q: adding VLAN 0 to HW filter on device team0 [ 347.159820][T13077] bond0: entered promiscuous mode [ 347.168438][T13077] bond_slave_0: entered promiscuous mode [ 347.174447][T13078] Set syz1 is full, maxelem 65536 reached [ 347.179916][T13077] batadv_slave_0: entered promiscuous mode [ 347.181520][T13082] Set syz1 is full, maxelem 65536 reached [ 347.193486][T13077] hsr1: Slave A (bond0) is not up; please bring it up to get a fully working HSR network [ 347.208078][T13077] hsr1: Slave B (batadv_slave_0) is not up; please bring it up to get a fully working HSR network [ 347.221313][T13077] hsr1: entered promiscuous mode [ 347.245273][T13084] --map-set only usable from mangle table [ 347.248492][T12825] veth1_macvtap: entered promiscuous mode [ 347.281341][T13075] xt_CT: No such helper "pptp" [ 347.312940][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1692'. [ 347.319173][ T4554] bridge0: port 1(bridge_slave_0) entered blocking state [ 347.331007][ T4554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 347.332251][T13075] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1692'. [ 347.343402][ T4554] bridge0: port 2(bridge_slave_1) entered blocking state [ 347.357936][ T4554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 347.479135][T12872] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 347.504315][T13080] lo speed is unknown, defaulting to 1000 [ 347.546936][T12825] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 347.575309][T12825] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 347.722473][T13090] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1695'. [ 347.757092][ T12] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.784232][ T12] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.850558][ T12] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 347.980924][ T12] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 348.009819][T13098] syzkaller1: entered promiscuous mode [ 348.020334][T13098] syzkaller1: entered allmulticast mode [ 348.285318][T12872] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 348.387985][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.402863][T13113] netlink: 'syz.7.1699': attribute type 8 has an invalid length. [ 348.432233][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 348.542998][ T6338] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 348.583944][ T6338] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 349.280174][ T7638] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.431482][ T7638] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.670985][ T7638] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.764100][ T7638] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 349.784054][T12872] veth0_vlan: entered promiscuous mode [ 349.809560][T12872] veth1_vlan: entered promiscuous mode [ 349.860511][T12872] veth0_macvtap: entered promiscuous mode [ 349.872022][T12872] veth1_macvtap: entered promiscuous mode [ 349.890678][T12872] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 349.906593][T12872] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 349.925714][ T13] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.937824][ T13] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.948971][ T13] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 349.960254][ T13] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 350.163438][ T7638] bridge_slave_1: left allmulticast mode [ 350.170583][ T7638] bridge_slave_1: left promiscuous mode [ 350.177347][ T7638] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.188388][ T7638] bridge_slave_0: left allmulticast mode [ 350.197040][ T7638] bridge_slave_0: left promiscuous mode [ 350.204428][ T7638] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.627459][ T7638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.645789][ T7638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.659063][ T7638] bond0 (unregistering): Released all slaves [ 350.676826][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.693589][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.728541][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 350.741458][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 350.995361][ T7638] hsr_slave_0: left promiscuous mode [ 351.002412][ T7638] hsr_slave_1: left promiscuous mode [ 351.009443][ T7638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 351.018462][ T7638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 351.028493][ T7638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 351.040227][ T7638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 351.090674][ T7638] veth1_macvtap: left promiscuous mode [ 351.101426][ T7638] veth0_macvtap: left promiscuous mode [ 351.107662][ T7638] veth1_vlan: left promiscuous mode [ 351.118324][ T7638] veth0_vlan: left promiscuous mode [ 351.845721][ T5829] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 351.860485][ T5829] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 351.871408][ T5829] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 351.880706][ T5829] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 351.891947][ T5829] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 351.953658][ T5829] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 351.975548][ T5829] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 351.988141][ T5829] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 351.998942][ T5829] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 352.007271][ T5829] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 352.303806][ T7638] team0 (unregistering): Port device team_slave_1 removed [ 352.357130][ T7638] team0 (unregistering): Port device team_slave_0 removed [ 353.050617][T13155] lo speed is unknown, defaulting to 1000 [ 353.072095][T13157] lo speed is unknown, defaulting to 1000 [ 353.110994][T13164] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1711'. [ 353.206948][T13164] hsr_slave_0 (unregistering): left promiscuous mode [ 353.688785][T13155] chnl_net:caif_netlink_parms(): no params data found [ 353.900827][T13157] chnl_net:caif_netlink_parms(): no params data found [ 353.932294][ T5149] Bluetooth: hci1: command tx timeout [ 354.082338][ T5149] Bluetooth: hci5: command tx timeout [ 354.153406][T13155] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.172361][T13155] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.185619][T13155] bridge_slave_0: entered allmulticast mode [ 354.201178][T13155] bridge_slave_0: entered promiscuous mode [ 354.290948][ T7638] netdevsim netdevsim9 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.459741][T13155] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.479456][T13155] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.488337][T13155] bridge_slave_1: entered allmulticast mode [ 354.504927][T13155] bridge_slave_1: entered promiscuous mode [ 354.563572][T13157] bridge0: port 1(bridge_slave_0) entered blocking state [ 354.580822][T13157] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.596368][T13157] bridge_slave_0: entered allmulticast mode [ 354.608188][T13157] bridge_slave_0: entered promiscuous mode [ 354.660002][T13155] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 354.755395][ T7638] netdevsim netdevsim9 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.781013][T13215] netlink: 24 bytes leftover after parsing attributes in process `syz.8.1730'. [ 354.795697][T13157] bridge0: port 2(bridge_slave_1) entered blocking state [ 354.804701][T13157] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.818552][T13157] bridge_slave_1: entered allmulticast mode [ 354.827347][T13157] bridge_slave_1: entered promiscuous mode [ 354.858707][T13155] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 354.893643][T13225] netlink: 8 bytes leftover after parsing attributes in process `syz.7.1734'. [ 354.956684][ T7638] netdevsim netdevsim9 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.012703][T13157] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.088592][T13155] team0: Port device team_slave_0 added [ 355.175999][ T7638] netdevsim netdevsim9 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.252011][T13157] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.262920][T13231] sch_tbf: peakrate 2 is lower than or equals to rate 2 ! [ 355.278985][T13155] team0: Port device team_slave_1 added [ 355.413797][T13157] team0: Port device team_slave_0 added [ 355.451739][T13157] team0: Port device team_slave_1 added [ 355.534186][T13155] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.551888][T13155] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.595491][T13155] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.647438][T13157] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 355.664925][T13157] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.695813][T13157] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 355.716666][T13155] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.728707][T13155] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.761947][T13155] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.775228][T13157] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 355.785139][T13157] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 355.815490][T13157] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 355.966160][ T48] netdevsim netdevsim7 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 355.981320][ T48] netdevsim netdevsim7 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.005617][ T5149] Bluetooth: hci1: command tx timeout [ 356.123314][ T48] netdevsim netdevsim7 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.173028][ T5149] Bluetooth: hci5: command tx timeout [ 356.200650][T13155] hsr_slave_0: entered promiscuous mode [ 356.228401][T13155] hsr_slave_1: entered promiscuous mode [ 356.366263][ T12] netdevsim netdevsim7 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 356.476077][T13157] hsr_slave_0: entered promiscuous mode [ 356.494625][T13157] hsr_slave_1: entered promiscuous mode [ 356.510866][T13157] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 356.522867][T13157] Cannot create hsr debugfs directory [ 356.744031][ T7638] bridge_slave_1: left allmulticast mode [ 356.749892][ T7638] bridge_slave_1: left promiscuous mode [ 356.785054][ T7638] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.853896][ T7638] bridge_slave_0: left allmulticast mode [ 356.869683][ T7638] bridge_slave_0: left promiscuous mode [ 356.897316][ T7638] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.540350][ T7638] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 357.551591][ T7638] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 357.562347][ T7638] bond0 (unregistering): Released all slaves [ 357.926308][T13298] lo speed is unknown, defaulting to 1000 [ 358.093691][ T5149] Bluetooth: hci1: command tx timeout [ 358.151782][ T7638] hsr_slave_0: left promiscuous mode [ 358.159299][ T7638] hsr_slave_1: left promiscuous mode [ 358.165962][ T7638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 358.176179][ T7638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 358.189047][ T7638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 358.198489][ T7638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.221992][ T7638] veth1_macvtap: left promiscuous mode [ 358.229169][ T7638] veth0_macvtap: left promiscuous mode [ 358.235569][ T7638] veth1_vlan: left promiscuous mode [ 358.241255][ T7638] veth0_vlan: left promiscuous mode [ 358.246795][ T5149] Bluetooth: hci5: command tx timeout [ 358.886009][ T7638] team0 (unregistering): Port device team_slave_1 removed [ 358.958925][ T7638] team0 (unregistering): Port device team_slave_0 removed [ 360.162720][ T5149] Bluetooth: hci1: command tx timeout [ 360.303183][T13339] netlink: 'syz.8.1784': attribute type 1 has an invalid length. [ 360.330979][ T5149] Bluetooth: hci5: command tx timeout [ 360.333517][T13339] netlink: 144 bytes leftover after parsing attributes in process `syz.8.1784'. [ 360.386070][T13339] netlink: 8 bytes leftover after parsing attributes in process `syz.8.1784'. [ 360.421803][T13155] netdevsim netdevsim9 netdevsim0: renamed from eth0 [ 360.446788][T13155] netdevsim netdevsim9 netdevsim1: renamed from eth1 [ 360.548753][T13155] netdevsim netdevsim9 netdevsim2: renamed from eth2 [ 360.641895][T13155] netdevsim netdevsim9 netdevsim3: renamed from eth3 [ 360.778599][T13157] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 360.834391][T13157] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 360.864533][T13157] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 360.879511][T13157] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 361.304850][T13371] netlink: 'syz.8.1796': attribute type 1 has an invalid length. [ 361.311048][T13155] 8021q: adding VLAN 0 to HW filter on device bond0 [ 361.377195][T13371] 8021q: adding VLAN 0 to HW filter on device bond4 [ 361.508948][ T5829] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 361.528617][ T5829] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 361.539434][ T5829] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 361.549584][ T5829] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 361.550890][T13375] 8021q: adding VLAN 0 to HW filter on device bond4 [ 361.568103][ T5829] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 361.568600][T13375] bond4: (slave vxcan3): The slave device specified does not support setting the MAC address [ 361.594702][T13375] bond4: (slave vxcan3): Error -95 calling set_mac_address [ 361.660703][T13371] gretap1: entered promiscuous mode [ 361.674909][T13371] bond4: (slave gretap1): making interface the new active one [ 361.694664][T13371] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 361.749773][T13378] bond4: (slave vlan4): the slave hw address is in use by the bond; giving it the hw address of gretap1 [ 361.890380][T13155] 8021q: adding VLAN 0 to HW filter on device team0 [ 362.008104][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 362.015464][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 362.045756][T13376] lo speed is unknown, defaulting to 1000 [ 362.450930][ T7638] bond4 (unregistering): (slave gretap1): Releasing active interface [ 362.508503][ T7638] tipc: Disabling bearer [ 362.858396][ T7638] team0: Port device bond0 removed [ 362.865933][ T7638] bond0 (unregistering): Released all slaves [ 363.029466][ T7638] bond1 (unregistering): Released all slaves [ 363.044014][ T7638] bond2 (unregistering): Released all slaves [ 363.185404][ T7638] bond3 (unregistering): Released all slaves [ 363.318034][ T7638] bond4 (unregistering): Released all slaves [ 363.331318][ T4554] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.338673][ T4554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.381502][T13157] 8021q: adding VLAN 0 to HW filter on device bond0 [ 363.515685][T13403] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1808'. [ 363.534383][ T7638] tipc: Left network mode [ 363.538378][T13157] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.562007][ T7638] IPVS: stopping backup sync thread 11114 ... [ 363.683457][ T5149] Bluetooth: hci3: command tx timeout [ 363.804836][T13413] syz_tun: entered allmulticast mode [ 363.817632][ T4554] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.825382][ T4554] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.881857][T13411] syz_tun: left allmulticast mode [ 363.916947][ T4554] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.924723][ T4554] bridge0: port 2(bridge_slave_1) entered forwarding state [ 364.116606][T13376] chnl_net:caif_netlink_parms(): no params data found [ 364.202072][T13426] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1816'. [ 364.267597][ T7638] hsr_slave_0: left promiscuous mode [ 364.284965][ T7638] hsr_slave_1: left promiscuous mode [ 364.337579][ T7638] pimreg (unregistering): left allmulticast mode [ 365.498600][T13376] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.506364][T13376] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.517686][T13376] bridge_slave_0: entered allmulticast mode [ 365.547845][T13376] bridge_slave_0: entered promiscuous mode [ 365.577536][T13376] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.626557][T13376] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.647788][T13376] bridge_slave_1: entered allmulticast mode [ 365.665053][T13376] bridge_slave_1: entered promiscuous mode [ 365.763172][ T5149] Bluetooth: hci3: command tx timeout [ 365.855344][T13376] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.908365][T13376] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.050065][T13155] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.068275][T13376] team0: Port device team_slave_0 added [ 366.099136][T13376] team0: Port device team_slave_1 added [ 366.110549][ T7638] IPVS: stop unused estimator thread 0... [ 366.240191][T13376] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 366.249703][T13466] rdma_rxe: rxe_newlink: failed to add vcan0 [ 366.259523][T13376] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.300062][T13376] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 366.373939][T13376] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 366.381615][T13376] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 366.453769][T13376] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.504427][T13157] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.608393][T13478] gtp1: entered promiscuous mode [ 366.625635][T13376] hsr_slave_0: entered promiscuous mode [ 366.646088][T13376] hsr_slave_1: entered promiscuous mode [ 366.652726][T13376] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.660399][T13376] Cannot create hsr debugfs directory [ 366.799752][T13484] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1834'. [ 366.939392][T13157] veth0_vlan: entered promiscuous mode [ 366.989756][T13157] veth1_vlan: entered promiscuous mode [ 367.052810][T13492] netlink: 64 bytes leftover after parsing attributes in process `syz.8.1838'. [ 367.178541][T13155] veth0_vlan: entered promiscuous mode [ 367.288906][T13155] veth1_vlan: entered promiscuous mode [ 367.307338][T13157] veth0_macvtap: entered promiscuous mode [ 367.421650][T13157] veth1_macvtap: entered promiscuous mode [ 367.470286][T13155] veth0_macvtap: entered promiscuous mode [ 367.529476][T13155] veth1_macvtap: entered promiscuous mode [ 367.548025][T13157] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.590973][T13157] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.620962][T13155] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.674436][T13155] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.689115][ T7638] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.710145][ T7638] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.728798][ T7638] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.779766][ T7638] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.837431][ T7638] netdevsim netdevsim9 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.848341][ T7638] netdevsim netdevsim9 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.852277][ T5149] Bluetooth: hci3: command tx timeout [ 367.887251][ T7638] netdevsim netdevsim9 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.899237][ T7638] netdevsim netdevsim9 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 368.049427][T13376] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 368.064491][T13517] netlink: 64 bytes leftover after parsing attributes in process `syz.6.1850'. [ 368.097861][T13376] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 368.128729][T13376] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 368.151640][T13376] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 368.177599][ T6338] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.201180][ T6338] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.319016][ T7638] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.329019][T13521] netlink: 200 bytes leftover after parsing attributes in process `syz.6.1852'. [ 368.347327][ T7638] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.401059][ T7638] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.432886][ T7638] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.528751][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.541302][T13533] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1855'. [ 368.552809][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.721901][T13376] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.771099][T13376] 8021q: adding VLAN 0 to HW filter on device team0 [ 368.906926][ T48] bridge0: port 1(bridge_slave_0) entered blocking state [ 368.914537][ T48] bridge0: port 1(bridge_slave_0) entered forwarding state [ 368.947416][T13541] ================================================================== [ 368.957019][T13541] BUG: KASAN: slab-out-of-bounds in pause_parse_request+0x40/0x160 [ 368.965285][T13541] Read of size 8 at addr ffff888074618fb0 by task syz.8.1859/13541 [ 368.973273][T13541] [ 368.975788][T13541] CPU: 0 UID: 0 PID: 13541 Comm: syz.8.1859 Not tainted 6.16.0-rc3-syzkaller-00903-g20a0c20f82ac #0 PREEMPT(full) [ 368.975813][T13541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 368.975823][T13541] Call Trace: [ 368.975833][T13541] [ 368.975841][T13541] dump_stack_lvl+0x189/0x250 [ 368.975869][T13541] ? __virt_addr_valid+0x1c8/0x5c0 [ 368.975883][T13541] ? rcu_is_watching+0x15/0xb0 [ 368.975904][T13541] ? __kasan_check_byte+0x12/0x40 [ 368.975920][T13541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.975941][T13541] ? rcu_is_watching+0x15/0xb0 [ 368.975961][T13541] ? lock_release+0x4b/0x3e0 [ 368.975982][T13541] ? __virt_addr_valid+0x1c8/0x5c0 [ 368.975996][T13541] ? __virt_addr_valid+0x4a5/0x5c0 [ 368.976011][T13541] print_report+0xd2/0x2b0 [ 368.976029][T13541] ? pause_parse_request+0x40/0x160 [ 368.976045][T13541] kasan_report+0x118/0x150 [ 368.976060][T13541] ? pause_parse_request+0x40/0x160 [ 368.976078][T13541] ? __pfx_pause_parse_request+0x10/0x10 [ 368.976093][T13541] pause_parse_request+0x40/0x160 [ 368.976110][T13541] ? __pfx_pause_parse_request+0x10/0x10 [ 368.976125][T13541] ethnl_default_set_doit+0x2be/0xa40 [ 368.976147][T13541] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 368.976172][T13541] genl_family_rcv_msg_doit+0x212/0x300 [ 368.976196][T13541] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 368.976222][T13541] ? bpf_lsm_capable+0x9/0x20 [ 368.976235][T13541] ? security_capable+0x7e/0x2e0 [ 368.976255][T13541] genl_rcv_msg+0x60e/0x790 [ 368.976277][T13541] ? __pfx_genl_rcv_msg+0x10/0x10 [ 368.976296][T13541] ? ref_tracker_free+0x63a/0x7d0 [ 368.976315][T13541] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 368.976335][T13541] ? __pfx_ref_tracker_free+0x10/0x10 [ 368.976357][T13541] netlink_rcv_skb+0x208/0x470 [ 368.976381][T13541] ? __pfx_genl_rcv_msg+0x10/0x10 [ 368.976403][T13541] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 368.976426][T13541] ? down_read+0x1ad/0x2e0 [ 368.976447][T13541] genl_rcv+0x28/0x40 [ 368.976465][T13541] netlink_unicast+0x75b/0x8d0 [ 368.976485][T13541] netlink_sendmsg+0x805/0xb30 [ 368.976507][T13541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.976525][T13541] ? aa_sock_msg_perm+0x94/0x160 [ 368.976544][T13541] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 368.976562][T13541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.976579][T13541] __sock_sendmsg+0x219/0x270 [ 368.976596][T13541] ____sys_sendmsg+0x505/0x830 [ 368.976622][T13541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.976645][T13541] ? import_iovec+0x74/0xa0 [ 368.976660][T13541] ___sys_sendmsg+0x21f/0x2a0 [ 368.976680][T13541] ? __pfx____sys_sendmsg+0x10/0x10 [ 368.976713][T13541] ? __fget_files+0x2a/0x420 [ 368.976728][T13541] ? __fget_files+0x3a0/0x420 [ 368.976747][T13541] __x64_sys_sendmsg+0x19b/0x260 [ 368.976768][T13541] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 368.976792][T13541] ? rcu_is_watching+0x15/0xb0 [ 368.976814][T13541] ? do_syscall_64+0xbe/0x3b0 [ 368.976832][T13541] do_syscall_64+0xfa/0x3b0 [ 368.976848][T13541] ? lockdep_hardirqs_on+0x9c/0x150 [ 368.976863][T13541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.976877][T13541] ? clear_bhb_loop+0x60/0xb0 [ 368.976894][T13541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.976909][T13541] RIP: 0033:0x7f04df58e929 [ 368.976924][T13541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 368.976937][T13541] RSP: 002b:00007f04e0323038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.976954][T13541] RAX: ffffffffffffffda RBX: 00007f04df7b5fa0 RCX: 00007f04df58e929 [ 368.976966][T13541] RDX: 0000000000000800 RSI: 0000200000000500 RDI: 0000000000000003 [ 368.976977][T13541] RBP: 00007f04df610b39 R08: 0000000000000000 R09: 0000000000000000 [ 368.976987][T13541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.976996][T13541] R13: 0000000000000000 R14: 00007f04df7b5fa0 R15: 00007fff9d23b788 [ 368.977014][T13541] [ 368.977020][T13541] [ 369.389723][T13541] Allocated by task 13541: [ 369.394230][T13541] kasan_save_track+0x3e/0x80 [ 369.399015][T13541] __kasan_kmalloc+0x93/0xb0 [ 369.403970][T13541] __kmalloc_noprof+0x27a/0x4f0 [ 369.409697][T13541] genl_family_rcv_msg_attrs_parse+0xa3/0x2a0 [ 369.415864][T13541] genl_family_rcv_msg_doit+0xb8/0x300 [ 369.422118][T13541] genl_rcv_msg+0x60e/0x790 [ 369.428512][T13541] netlink_rcv_skb+0x208/0x470 [ 369.433612][T13541] genl_rcv+0x28/0x40 [ 369.437984][T13541] netlink_unicast+0x75b/0x8d0 [ 369.443358][T13541] netlink_sendmsg+0x805/0xb30 [ 369.448385][T13541] __sock_sendmsg+0x219/0x270 [ 369.453153][T13541] ____sys_sendmsg+0x505/0x830 [ 369.458105][T13541] ___sys_sendmsg+0x21f/0x2a0 [ 369.463831][T13541] __x64_sys_sendmsg+0x19b/0x260 [ 369.468878][T13541] do_syscall_64+0xfa/0x3b0 [ 369.473948][T13541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.480078][T13541] [ 369.483094][T13541] The buggy address belongs to the object at ffff888074618f80 [ 369.483094][T13541] which belongs to the cache kmalloc-64 of size 64 [ 369.498133][T13541] The buggy address is located 8 bytes to the right of [ 369.498133][T13541] allocated 40-byte region [ffff888074618f80, ffff888074618fa8) [ 369.514560][T13541] [ 369.517365][T13541] The buggy address belongs to the physical page: [ 369.524080][T13541] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x74618 [ 369.533726][T13541] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 369.542077][T13541] page_type: f5(slab) [ 369.546524][T13541] raw: 00fff00000000000 ffff88801a4418c0 ffffea000082c040 dead000000000004 [ 369.556688][T13541] raw: 0000000000000000 0000000080200020 00000000f5000000 0000000000000000 [ 369.566668][T13541] page dumped because: kasan: bad access detected [ 369.573875][T13541] page_owner tracks the page as allocated [ 369.579686][T13541] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52c40(GFP_NOFS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5853, tgid 5853 (modprobe), ts 74397239292, free_ts 74392152997 [ 369.599163][T13541] post_alloc_hook+0x240/0x2a0 [ 369.604414][T13541] get_page_from_freelist+0x21e4/0x22c0 [ 369.610550][T13541] __alloc_frozen_pages_noprof+0x181/0x370 [ 369.616979][T13541] alloc_pages_mpol+0x232/0x4a0 [ 369.622445][T13541] allocate_slab+0x8a/0x3b0 [ 369.627293][T13541] ___slab_alloc+0xbfc/0x1480 [ 369.632056][T13541] __kmalloc_noprof+0x305/0x4f0 [ 369.638094][T13541] tomoyo_encode+0x28b/0x550 [ 369.643167][T13541] tomoyo_realpath_from_path+0x58d/0x5d0 [ 369.649074][T13541] tomoyo_path_perm+0x213/0x4b0 [ 369.654029][T13541] security_inode_getattr+0x12f/0x330 [ 369.660778][T13541] __x64_sys_newfstat+0xfc/0x200 [ 369.666253][T13541] do_syscall_64+0xfa/0x3b0 [ 369.671374][T13541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 369.677585][T13541] page last free pid 5853 tgid 5853 stack trace: [ 369.684176][T13541] __free_frozen_pages+0xc71/0xe70 [ 369.689754][T13541] rcu_core+0xca8/0x1710 [ 369.694178][T13541] handle_softirqs+0x286/0x870 [ 369.699231][T13541] __irq_exit_rcu+0xca/0x1f0 [ 369.704574][T13541] irq_exit_rcu+0x9/0x30 [ 369.709112][T13541] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 369.715281][T13541] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 369.722536][T13541] [ 369.724871][T13541] Memory state around the buggy address: [ 369.731306][T13541] ffff888074618e80: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 369.739640][T13541] ffff888074618f00: fa fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 369.747887][T13541] >ffff888074618f80: 00 00 00 00 00 fc fc fc fc fc fc fc fc fc fc fc [ 369.756470][T13541] ^ [ 369.762483][T13541] ffff888074619000: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 369.770710][T13541] ffff888074619080: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 369.778780][T13541] ================================================================== [ 369.798850][ T48] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.806110][ T48] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.813473][T13541] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 369.821031][T13541] CPU: 1 UID: 0 PID: 13541 Comm: syz.8.1859 Not tainted 6.16.0-rc3-syzkaller-00903-g20a0c20f82ac #0 PREEMPT(full) [ 369.833175][T13541] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 369.843285][T13541] Call Trace: [ 369.846556][T13541] [ 369.849484][T13541] dump_stack_lvl+0x99/0x250 [ 369.854073][T13541] ? __asan_memcpy+0x40/0x70 [ 369.858655][T13541] ? __pfx_dump_stack_lvl+0x10/0x10 [ 369.863933][T13541] ? __pfx__printk+0x10/0x10 [ 369.868528][T13541] panic+0x2db/0x790 [ 369.872431][T13541] ? __pfx_panic+0x10/0x10 [ 369.877038][T13541] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 369.883111][T13541] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 369.889796][T13541] ? print_memory_metadata+0x314/0x400 [ 369.895475][T13541] ? pause_parse_request+0x40/0x160 [ 369.900976][T13541] check_panic_on_warn+0x89/0xb0 [ 369.906018][T13541] ? pause_parse_request+0x40/0x160 [ 369.911631][T13541] end_report+0x78/0x160 [ 369.915988][T13541] kasan_report+0x129/0x150 [ 369.920663][T13541] ? pause_parse_request+0x40/0x160 [ 369.925894][T13541] ? __pfx_pause_parse_request+0x10/0x10 [ 369.931567][T13541] pause_parse_request+0x40/0x160 [ 369.936593][T13541] ? __pfx_pause_parse_request+0x10/0x10 [ 369.942529][T13541] ethnl_default_set_doit+0x2be/0xa40 [ 369.947897][T13541] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 369.954934][T13541] genl_family_rcv_msg_doit+0x212/0x300 [ 369.960674][T13541] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 369.966941][T13541] ? bpf_lsm_capable+0x9/0x20 [ 369.971872][T13541] ? security_capable+0x7e/0x2e0 [ 369.976825][T13541] genl_rcv_msg+0x60e/0x790 [ 369.981464][T13541] ? __pfx_genl_rcv_msg+0x10/0x10 [ 369.986749][T13541] ? ref_tracker_free+0x63a/0x7d0 [ 369.991958][T13541] ? __pfx_ethnl_default_set_doit+0x10/0x10 [ 369.997864][T13541] ? __pfx_ref_tracker_free+0x10/0x10 [ 370.003242][T13541] netlink_rcv_skb+0x208/0x470 [ 370.008107][T13541] ? __pfx_genl_rcv_msg+0x10/0x10 [ 370.013139][T13541] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 370.018434][T13541] ? down_read+0x1ad/0x2e0 [ 370.022960][T13541] genl_rcv+0x28/0x40 [ 370.026935][T13541] netlink_unicast+0x75b/0x8d0 [ 370.031699][T13541] netlink_sendmsg+0x805/0xb30 [ 370.036459][T13541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.041830][T13541] ? aa_sock_msg_perm+0x94/0x160 [ 370.046758][T13541] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 370.052035][T13541] ? __pfx_netlink_sendmsg+0x10/0x10 [ 370.057558][T13541] __sock_sendmsg+0x219/0x270 [ 370.062510][T13541] ____sys_sendmsg+0x505/0x830 [ 370.067343][T13541] ? __pfx_____sys_sendmsg+0x10/0x10 [ 370.072642][T13541] ? import_iovec+0x74/0xa0 [ 370.077321][T13541] ___sys_sendmsg+0x21f/0x2a0 [ 370.082015][T13541] ? __pfx____sys_sendmsg+0x10/0x10 [ 370.087325][T13541] ? __fget_files+0x2a/0x420 [ 370.092000][T13541] ? __fget_files+0x3a0/0x420 [ 370.097073][T13541] __x64_sys_sendmsg+0x19b/0x260 [ 370.102602][T13541] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 370.108791][T13541] ? rcu_is_watching+0x15/0xb0 [ 370.113786][T13541] ? do_syscall_64+0xbe/0x3b0 [ 370.119185][T13541] do_syscall_64+0xfa/0x3b0 [ 370.123704][T13541] ? lockdep_hardirqs_on+0x9c/0x150 [ 370.128898][T13541] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.135252][T13541] ? clear_bhb_loop+0x60/0xb0 [ 370.140647][T13541] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 370.146656][T13541] RIP: 0033:0x7f04df58e929 [ 370.151068][T13541] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 370.172264][T13541] RSP: 002b:00007f04e0323038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 370.182118][T13541] RAX: ffffffffffffffda RBX: 00007f04df7b5fa0 RCX: 00007f04df58e929 [ 370.190901][T13541] RDX: 0000000000000800 RSI: 0000200000000500 RDI: 0000000000000003 [ 370.200571][T13541] RBP: 00007f04df610b39 R08: 0000000000000000 R09: 0000000000000000 [ 370.209393][T13541] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 370.218079][T13541] R13: 0000000000000000 R14: 00007f04df7b5fa0 R15: 00007fff9d23b788 [ 370.227115][T13541] [ 370.230644][T13541] Kernel Offset: disabled [ 370.235476][T13541] Rebooting in 86400 seconds..