last executing test programs: 2m6.444275563s ago: executing program 3 (id=194): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00010000000041d7575449c4191df60000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00010000000041d7575449c4191df60000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r4, 0x5, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x3, 0x0, 0xfffe, 0x7, 0x6, 0x4]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r4, 0x5, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x3, 0x0, 0xfffe, 0x7, 0x6, 0x4]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x44, r7, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x85, 0x73}}}}, [@NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x9}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0), 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r10, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e14010025bd7000ffdbdf25080001000000000008003c"], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc4) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r10, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e14010025bd7000ffdbdf25080001000000000008003c"], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000640)) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) socket(0x25, 0x2, 0x4) (async) socket(0x25, 0x2, 0x4) 1m57.203047019s ago: executing program 3 (id=194): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00010000000041d7575449c4191df60000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00010000000041d7575449c4191df60000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r4, 0x5, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x3, 0x0, 0xfffe, 0x7, 0x6, 0x4]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r4, 0x5, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x3, 0x0, 0xfffe, 0x7, 0x6, 0x4]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x44, r7, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x85, 0x73}}}}, [@NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x9}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0), 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r10, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e14010025bd7000ffdbdf25080001000000000008003c"], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc4) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r10, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e14010025bd7000ffdbdf25080001000000000008003c"], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000640)) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) socket(0x25, 0x2, 0x4) (async) socket(0x25, 0x2, 0x4) 1m52.194219002s ago: executing program 0 (id=1251): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000640), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000280)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010028bd7000fbdbdf251a00000004002e8008000300", @ANYRES32=r4], 0x6c}, 0x1, 0x0, 0x0, 0x20040040}, 0x20040) r5 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="e33dfb70", @ANYRES16=r5, @ANYBLOB="01000000000000000000040000001400050003030000000a0000005dc000000000010800020005000000140006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x4040000) 1m51.994157905s ago: executing program 0 (id=1252): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0xe, 0x80000) ioctl(r2, 0x1, &(0x7f0000000480)="5d463c8e19198728bd6c362e505453084b33bab423a25602ab00735e560e7e3cebab5364b0e2e5ef0f162ffb885cd93b67ffca237dfbc77b10e13fbf2e6cc8474f0fa1bc2cb667fa893970f0b65a3e5fe28542ef8168bc600ecde699b9d8b30d867273112a71e7411263a3e8c1a2a5c55444a5c638d23a5047d293c9df48db104449964c2f55433a639d4112a0ca755b35ac112045c1f5dc1a86d0226374a6e9bb24082dd04ee9a1c5eb439b6167f7988a9af6d3f847e8f7db2024fa7db435b32cbb3cca35f74f7a3147a933d9111d46") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0xfffffffffffffffe) listen(r5, 0x4) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x28}}, 0x0) bind$alg(r1, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)=ANY=[], 0x12f4}}, 0x0) read$alg(r6, &(0x7f0000000a00)=""/4096, 0x1000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r7) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) syz_genetlink_get_family_id$tipc(&(0x7f0000001780), r7) recvmmsg(r7, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x102}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000005c80)=""/4098, 0x1002}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000001840)=""/100, 0x64}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/238, 0xee}], 0x9}, 0x80000000}], 0x4, 0x40008062, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 1m49.314397827s ago: executing program 3 (id=194): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00010000000041d7575449c4191df60000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00010000000041d7575449c4191df60000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r4, 0x5, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x3, 0x0, 0xfffe, 0x7, 0x6, 0x4]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r4, 0x5, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x3, 0x0, 0xfffe, 0x7, 0x6, 0x4]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x44, r7, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x85, 0x73}}}}, [@NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x9}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0), 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r10, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e14010025bd7000ffdbdf25080001000000000008003c"], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc4) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r10, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e14010025bd7000ffdbdf25080001000000000008003c"], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000640)) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) socket(0x25, 0x2, 0x4) (async) socket(0x25, 0x2, 0x4) 1m46.041139394s ago: executing program 0 (id=1252): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0xe, 0x80000) ioctl(r2, 0x1, &(0x7f0000000480)="5d463c8e19198728bd6c362e505453084b33bab423a25602ab00735e560e7e3cebab5364b0e2e5ef0f162ffb885cd93b67ffca237dfbc77b10e13fbf2e6cc8474f0fa1bc2cb667fa893970f0b65a3e5fe28542ef8168bc600ecde699b9d8b30d867273112a71e7411263a3e8c1a2a5c55444a5c638d23a5047d293c9df48db104449964c2f55433a639d4112a0ca755b35ac112045c1f5dc1a86d0226374a6e9bb24082dd04ee9a1c5eb439b6167f7988a9af6d3f847e8f7db2024fa7db435b32cbb3cca35f74f7a3147a933d9111d46") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0xfffffffffffffffe) listen(r5, 0x4) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x28}}, 0x0) bind$alg(r1, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)=ANY=[], 0x12f4}}, 0x0) read$alg(r6, &(0x7f0000000a00)=""/4096, 0x1000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r7) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) syz_genetlink_get_family_id$tipc(&(0x7f0000001780), r7) recvmmsg(r7, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x102}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000005c80)=""/4098, 0x1002}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000001840)=""/100, 0x64}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/238, 0xee}], 0x9}, 0x80000000}], 0x4, 0x40008062, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 1m36.246410058s ago: executing program 3 (id=194): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00010000000041d7575449c4191df60000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00010000000041d7575449c4191df60000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r4, 0x5, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x3, 0x0, 0xfffe, 0x7, 0x6, 0x4]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r4, 0x5, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x3, 0x0, 0xfffe, 0x7, 0x6, 0x4]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x44, r7, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x85, 0x73}}}}, [@NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x9}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0), 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r10, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e14010025bd7000ffdbdf25080001000000000008003c"], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc4) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r10, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e14010025bd7000ffdbdf25080001000000000008003c"], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000640)) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) socket(0x25, 0x2, 0x4) (async) socket(0x25, 0x2, 0x4) 1m34.749704426s ago: executing program 0 (id=1252): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0xe, 0x80000) ioctl(r2, 0x1, &(0x7f0000000480)="5d463c8e19198728bd6c362e505453084b33bab423a25602ab00735e560e7e3cebab5364b0e2e5ef0f162ffb885cd93b67ffca237dfbc77b10e13fbf2e6cc8474f0fa1bc2cb667fa893970f0b65a3e5fe28542ef8168bc600ecde699b9d8b30d867273112a71e7411263a3e8c1a2a5c55444a5c638d23a5047d293c9df48db104449964c2f55433a639d4112a0ca755b35ac112045c1f5dc1a86d0226374a6e9bb24082dd04ee9a1c5eb439b6167f7988a9af6d3f847e8f7db2024fa7db435b32cbb3cca35f74f7a3147a933d9111d46") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0xfffffffffffffffe) listen(r5, 0x4) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x28}}, 0x0) bind$alg(r1, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)=ANY=[], 0x12f4}}, 0x0) read$alg(r6, &(0x7f0000000a00)=""/4096, 0x1000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r7) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) syz_genetlink_get_family_id$tipc(&(0x7f0000001780), r7) recvmmsg(r7, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x102}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000005c80)=""/4098, 0x1002}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000001840)=""/100, 0x64}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/238, 0xee}], 0x9}, 0x80000000}], 0x4, 0x40008062, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 1m23.65027437s ago: executing program 3 (id=194): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00010000000041d7575449c4191df60000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00010000000041d7575449c4191df60000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r4, 0x5, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x3, 0x0, 0xfffe, 0x7, 0x6, 0x4]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r4, 0x5, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x3, 0x0, 0xfffe, 0x7, 0x6, 0x4]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x44, r7, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x85, 0x73}}}}, [@NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x9}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0), 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r10, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e14010025bd7000ffdbdf25080001000000000008003c"], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc4) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r10, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e14010025bd7000ffdbdf25080001000000000008003c"], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000640)) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) socket(0x25, 0x2, 0x4) (async) socket(0x25, 0x2, 0x4) 1m23.201888749s ago: executing program 0 (id=1252): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0xe, 0x80000) ioctl(r2, 0x1, &(0x7f0000000480)="5d463c8e19198728bd6c362e505453084b33bab423a25602ab00735e560e7e3cebab5364b0e2e5ef0f162ffb885cd93b67ffca237dfbc77b10e13fbf2e6cc8474f0fa1bc2cb667fa893970f0b65a3e5fe28542ef8168bc600ecde699b9d8b30d867273112a71e7411263a3e8c1a2a5c55444a5c638d23a5047d293c9df48db104449964c2f55433a639d4112a0ca755b35ac112045c1f5dc1a86d0226374a6e9bb24082dd04ee9a1c5eb439b6167f7988a9af6d3f847e8f7db2024fa7db435b32cbb3cca35f74f7a3147a933d9111d46") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0xfffffffffffffffe) listen(r5, 0x4) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x28}}, 0x0) bind$alg(r1, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)=ANY=[], 0x12f4}}, 0x0) read$alg(r6, &(0x7f0000000a00)=""/4096, 0x1000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r7) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) syz_genetlink_get_family_id$tipc(&(0x7f0000001780), r7) recvmmsg(r7, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x102}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000005c80)=""/4098, 0x1002}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000001840)=""/100, 0x64}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/238, 0xee}], 0x9}, 0x80000000}], 0x4, 0x40008062, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 1m11.968412693s ago: executing program 3 (id=194): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00010000000041d7575449c4191df60000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f00000004000000080000000b00000000000000", @ANYRES32, @ANYBLOB="00010000000041d7575449c4191df60000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r1 = socket$inet(0x2, 0x2, 0x1) r2 = socket$inet(0x2, 0x2, 0x1) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) accept4$inet(r1, &(0x7f0000000080)={0x2, 0x0, @loopback}, &(0x7f0000000100)=0x10, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r4, 0x5, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x3, 0x0, 0xfffe, 0x7, 0x6, 0x4]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x44, r4, 0x5, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TX_RATES={0x1c, 0x5a, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x18, 0x1, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x8, 0x2, 0x3, 0x0, 0xfffe, 0x7, 0x6, 0x4]}}]}]}, @NL80211_ATTR_MESH_ID={0xa}]}, 0x44}, 0x1, 0x0, 0x0, 0x80}, 0x0) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r3) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000480)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)={0x44, r7, 0x10, 0x70bd29, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x85, 0x73}}}}, [@NL80211_ATTR_MESH_SETUP={0x1c, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x9}, @NL80211_MESH_SETUP_ENABLE_VENDOR_PATH_SEL={0x5}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}, @NL80211_MESH_SETUP_USERSPACE_AUTH={0x4}]}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x10000}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) setsockopt$sock_int(r1, 0x1, 0x2, &(0x7f00000000c0), 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r10 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r10, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e14010025bd7000ffdbdf25080001000000000008003c"], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc4) (async) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r10, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e14010025bd7000ffdbdf25080001000000000008003c"], 0x28}, 0x1, 0x0, 0x0, 0x40000c0}, 0xc4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r10, 0x81f8943c, &(0x7f0000000640)) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) (async) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000600)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r11, @ANYBLOB="0c00990000000000000000000800a000ea15000008009f0003000000080026000816"], 0x40}}, 0x0) socket(0x25, 0x2, 0x4) (async) socket(0x25, 0x2, 0x4) 1m10.344200474s ago: executing program 0 (id=1252): socket$l2tp6(0xa, 0x2, 0x73) r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f0000000080), &(0x7f0000000180)=0xe, 0x80000) ioctl(r2, 0x1, &(0x7f0000000480)="5d463c8e19198728bd6c362e505453084b33bab423a25602ab00735e560e7e3cebab5364b0e2e5ef0f162ffb885cd93b67ffca237dfbc77b10e13fbf2e6cc8474f0fa1bc2cb667fa893970f0b65a3e5fe28542ef8168bc600ecde699b9d8b30d867273112a71e7411263a3e8c1a2a5c55444a5c638d23a5047d293c9df48db104449964c2f55433a639d4112a0ca755b35ac112045c1f5dc1a86d0226374a6e9bb24082dd04ee9a1c5eb439b6167f7988a9af6d3f847e8f7db2024fa7db435b32cbb3cca35f74f7a3147a933d9111d46") r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000200), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r5, &(0x7f0000000000)={0x1f, 0x8001, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x12}, 0x4, 0x2}, 0xe) ioctl$int_in(r5, 0x5421, &(0x7f0000000140)=0xfffffffffffffffe) listen(r5, 0x4) accept4$bt_l2cap(r5, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MON_SET(r3, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001540)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8}]}]}, 0x28}}, 0x0) bind$alg(r1, &(0x7f0000001740)={0x26, 'aead\x00', 0x0, 0x0, 'gcm(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r6 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)=ANY=[], 0x12f4}}, 0x0) read$alg(r6, &(0x7f0000000a00)=""/4096, 0x1000) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4820) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r7) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) syz_genetlink_get_family_id$tipc(&(0x7f0000001780), r7) recvmmsg(r7, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x102}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x3}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, &(0x7f0000001a40)=[{&(0x7f0000005c80)=""/4098, 0x1002}, {&(0x7f0000000440)=""/160, 0xa0}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000100)=""/114, 0x72}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000001840)=""/100, 0x64}, {&(0x7f0000000240)=""/169, 0xa9}, {&(0x7f0000000640)=""/4096, 0x1000}, {&(0x7f0000001640)=""/238, 0xee}], 0x9}, 0x80000000}], 0x4, 0x40008062, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000440)={0x28, 0x0, 0x0, @local}, 0x10) listen(r0, 0x0) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000100)={0x28, 0x0, 0x0, @local}, 0x10) r9 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000a40)=ANY=[@ANYBLOB="2800000014001901000000000000000228"], 0x28}}, 0x0) 1m3.305656379s ago: executing program 1 (id=1593): r0 = socket$unix(0x1, 0x2, 0x0) r1 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) ioctl$BTRFS_IOC_LOGICAL_INO(r1, 0xc0389424, &(0x7f0000000040)={0x3, 0x18, '\x00', 0x0, &(0x7f0000000000)=[0x0, 0x0, 0x0]}) r2 = socket$igmp6(0xa, 0x3, 0x2) ioctl$FS_IOC_FSGETXATTR(r2, 0x801c581f, &(0x7f0000000080)={0x2, 0x0, 0x2, 0x7fffffff, 0x8}) r3 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) connect$802154_dgram(r3, &(0x7f00000000c0)={0x24, @none={0x0, 0x1}}, 0x14) write$cgroup_subtree(r1, &(0x7f0000000100)={[{0x2d, 'net_prio'}]}, 0xa) syz_init_net_socket$ax25(0x3, 0x5, 0x6) r4 = socket(0x28, 0x3, 0xc) r5 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp_SCTP_FRAGMENT_INTERLEAVE(r4, 0x84, 0x12, &(0x7f0000000140), &(0x7f0000000180)=0x4) connect$802154_dgram(r4, &(0x7f00000001c0)={0x24, @short={0x2, 0x2}}, 0x14) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(0xffffffffffffffff, 0x84, 0x65, &(0x7f0000000200)=[@in6={0xa, 0x4e23, 0xe4, @mcast1, 0x16ff3968}, @in6={0xa, 0x4e23, 0xc0e, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xe}}, 0x5}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e22, @remote}, @in={0x2, 0x4e22, @loopback}], 0x78) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r4) sendmsg$NL80211_CMD_DEL_PMKSA(r5, &(0x7f0000000380)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000020}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x28, r6, 0x400, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "ab463d5b055ea536844850f67ee9c159"}]}, 0x28}, 0x1, 0x0, 0x0, 0x4811}, 0x8045) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000540)={0x6, 0x7, &(0x7f00000003c0)=@raw=[@alu={0x4, 0x0, 0xa, 0x8, 0x4, 0x6, 0x4}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x3}, @cb_func={0x18, 0xc, 0x4, 0x0, 0xfffffffffffffffc}, @map_fd={0x18, 0xc}, @generic={0x7, 0x5, 0x4, 0xb, 0x4}], &(0x7f0000000400)='GPL\x00', 0xffffff00, 0x0, &(0x7f0000000440), 0x40f00, 0x50, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x7, 0x1}, 0x8, 0x10, &(0x7f00000004c0)={0x3, 0x1, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000500)=[0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, r0], 0x0, 0x10, 0x5d, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000940)={r7, 0x0, 0xee, 0xab, &(0x7f0000000600)="2746b1423e4834ea7ce40967a4779c9eb991d98bdb921b18122e22ac02b644a799b5946e34358fab50c91fb8c902d5e2c6600b3fd8c6c3c3e82f64ce647fd778cd570168630815edb047c8a7eed767e693fe3f85abc0f688d1085d60c7d3fcdfa8139ec69fa5643a7b6d89a978cb7daba12cac1b5a6d4e14d3b9dce26caa210076a000f3170bac3e2ebe018bbe343af7c88dadbf64b8285b042f543ef4676ce923db925efd820c81575c35a7643f3333bd493b0fa883bd206c93ba7b1571158d80671100cbf74776de782bc7e7a523263dad6fb415e900d0b02698083a95048674379a30d6ffb9d6caae6c96418d", &(0x7f0000000700)=""/171, 0x4, 0x0, 0xaa, 0xb1, &(0x7f00000007c0)="7c50019f9b8666e01ea1b22e7a33c9e0bb4fd46d89e9a405f485ebe8c686982b6965a663fc25c94da4eb500bc76fb78ea20ee7fb12c8ab133b2ce1efac8b7a5a05e1cf7d0ac05a76e850ebcffdbc8e5fbe5aa810b24011c6ee73b0eda042717a8ebe10b73534b9bd7847c2e905acb9cadde2d721251abd342b458b15e0688c6fb9c2a21643cd19604887ff26e758e9af62549b84424d93be6f5185019853ff2569f505dea83fd22ab642", &(0x7f0000000880)="d45d65f9754b6734933f85c4a1e53651238ee4013103be24ab47b0a48c939047248940d1cf7df488d5f9ac6278f590d99b0f90322550aff389b806b983d47a2eca10c379aa816bc34820c5fe1cc368f7a016c31f094c525d79827f2f631bffc45294918026099fa5f02aa4817073b189ecece40fff92460318680f65d23a7da95cf50b30ef57b11d9395209992e93894878799ccc0bdd70c77472c1a067285a1ca55fe904b67ad3cdf8e986f33ffe9d189", 0x1, 0x0, 0x7}, 0x50) syz_genetlink_get_family_id$nl80211(&(0x7f00000009c0), 0xffffffffffffffff) r8 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000a40), r5) sendmsg$WG_CMD_SET_DEVICE(r4, &(0x7f0000001140)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001100)={&(0x7f0000000a80)={0x644, r8, 0x100, 0x70bd29, 0x25dfdbff, {}, [@WGDEVICE_A_FLAGS={0x8, 0x5, 0x1}, @WGDEVICE_A_PEERS={0x628, 0x8, 0x0, 0x1, [{0x1dc, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e24, 0xecb5, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0xd4fa}}, @WGPEER_A_ALLOWEDIPS={0x184, 0x9, 0x0, 0x1, [{0x34, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}]}, {0x64, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x3}}, @ipv6={{0x6}, {0x14, 0x2, @private0={0xfc, 0x0, '\x00', 0x1}}, {0x5, 0x3, 0x2}}]}, {0xe8, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @mcast1}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @private2={0xfc, 0x2, '\x00', 0x1}}, {0x5}}]}]}, @WGPEER_A_FLAGS={0x8, 0x3, 0x4}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0a66df2300234adab86195efade9ba03a42df82a904fb51a776da750b334bbda"}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6}]}, {0x234, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @a_g}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PROTOCOL_VERSION={0x8}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "46411daed3eb66097f7929d2568bda9d2cc6f5f97632d86ada3086aab618b66f"}, @WGPEER_A_ALLOWEDIPS={0x1b4, 0x9, 0x0, 0x1, [{0x118, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @private2}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @private1={0xfc, 0x1, '\x00', 0x1}}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @local}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x3}}, @ipv4={{0x6}, {0x8, 0x2, @empty}, {0x5, 0x3, 0x3}}]}, {0x7c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @broadcast}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x5, 0x3, 0x1}}]}, {0x1c, 0x0, 0x0, 0x1, [@ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5, 0x3, 0x3}}]}]}, @WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}]}, {0x88, 0x0, 0x0, 0x1, [@WGPEER_A_ENDPOINT4={0x14, 0x4, {0x2, 0x4e23, @multicast1}}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "0d432f898418056747cd8e2dc693b36e18fa47dd443ae4ab3ba9d54bf0b16943"}, @WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_PRESHARED_KEY={0x24, 0x2, "57ce8b0da4d071ee5b8169b51a2871d198f70ea85a51304f99e93f785333f917"}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x8000, @private2={0xfc, 0x2, '\x00', 0x1}, 0x9}}]}, {0x24, 0x0, 0x0, 0x1, [@WGPEER_A_FLAGS={0x8, 0x3, 0x2}, @WGPEER_A_FLAGS={0x8, 0x3, 0x1}, @WGPEER_A_PERSISTENT_KEEPALIVE_INTERVAL={0x6, 0x5, 0x7}, @WGPEER_A_PROTOCOL_VERSION={0x8}]}, {0x168, 0x0, 0x0, 0x1, [@WGPEER_A_PUBLIC_KEY={0x24, 0x1, @b_g}, @WGPEER_A_ENDPOINT6={0x20, 0x4, {0xa, 0x4e22, 0x2, @mcast1, 0x470}}, @WGPEER_A_ALLOWEDIPS={0x120, 0x9, 0x0, 0x1, [{0x40, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @rand_addr=0x64010100}, {0x5}}]}, {0xdc, 0x0, 0x0, 0x1, [@ipv6={{0x6}, {0x14, 0x2, @mcast2}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @empty}, {0x5}}, @ipv4={{0x6}, {0x8, 0x2, @loopback}, {0x5, 0x3, 0x2}}, @ipv6={{0x6}, {0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x5, 0x3, 0x1}}, @ipv6={{0x6}, {0x14, 0x2, @dev={0xfe, 0x80, '\x00', 0x34}}, {0x5, 0x3, 0x1}}, @ipv4={{0x6}, {0x8, 0x2, @remote}, {0x5, 0x3, 0x2}}, @ipv4={{0x6}, {0x8, 0x2, @multicast2}, {0x5, 0x3, 0x1}}]}]}]}]}]}, 0x644}, 0x1, 0x0, 0x0, 0x80}, 0x2) socket$nl_route(0x10, 0x3, 0x0) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000011c0), r5) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f00000012c0)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000001280)={&(0x7f0000001200)={0x70, r9, 0x100, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x9a}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x2}, @MPTCP_PM_ATTR_ADDR={0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0xc, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @rand_addr=0x64010100}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x3}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x7}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0xd02}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x108}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd7}]}, 0x70}, 0x1, 0x0, 0x0, 0x8040}, 0x24008011) r10 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000001300)={'wlan1\x00'}) r11 = syz_genetlink_get_family_id$devlink(&(0x7f0000001380), r5) sendmsg$DEVLINK_CMD_RATE_SET(r4, &(0x7f0000001480)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000001440)={&(0x7f00000013c0)={0x80, r11, 0x1, 0x70bd29, 0x25dfdbff, {}, [@handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_TX_MAX={0xc, 0xa7, 0x6}, @handle=@pci={{0x8}, {0x11}}, @DEVLINK_ATTR_RATE_NODE_NAME={0xf, 0xa8, @name2}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x3}, @DEVLINK_ATTR_RATE_TX_SHARE={0xc, 0xa6, 0x100000001}]}, 0x80}, 0x1, 0x0, 0x0, 0x5805}, 0x4000000) 1m3.032032109s ago: executing program 1 (id=1595): r0 = accept4$phonet_pipe(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x80000) getsockopt$PNPIPE_HANDLE(r0, 0x113, 0x3, &(0x7f0000000040), &(0x7f0000000080)=0x4) r1 = socket$inet6(0xa, 0x6, 0x3) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r2, 0x29, 0x4, &(0x7f00000000c0)=0x6, 0x4) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x24, 0x0, 0x4, 0x70bd25, 0x25dfdbfd, {}, [@L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}, @L2TP_ATTR_PEER_CONN_ID={0x8, 0xa, 0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x4004}, 0x8000) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r4, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x100, 0x70bd2c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x9, 0x36}}}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x74}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}]}, 0x40}, 0x1, 0x0, 0x0, 0x4}, 0x200000c0) sendto$inet6(r1, &(0x7f0000000340)="250cd2adae219e8ac92a190aa792c9073f109b60e879c92cbb2a6d0df66ad2d59eac0781b47973c75907cbc602d51f83fe54f5fef2fa6fdc3dabea3aa873c40ecbe87051950d1eeb377d6685208e9aa8", 0x50, 0x8010, &(0x7f00000003c0)={0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x1a}, 0xffffffff}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QGROUP_ASSIGN(r0, 0x40189429, &(0x7f0000000400)={0x0, 0x2a65, 0x2}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000840)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000800)={&(0x7f0000000480)={0x378, 0x0, 0x8, 0x70bd25, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x1, 0x6b}}}}, [@NL80211_ATTR_TID_CONFIG={0x2fc, 0x11d, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x31}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x6}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x1}]}, {0x54, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x4}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x8000}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x100000000}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x79}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x7}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5, 0xc, 0x1}]}, {0x268, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5, 0xa, 0x1}, @NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x8}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x248, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x20, 0x3, 0x0, 0x1, [@NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x2, 0x9, 0x9, 0xfff, 0x7f, 0x1ff, 0x5]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_5GHZ={0x78, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x13, 0x1, [0x6, 0x6, 0xc, 0x6b, 0x30, 0x9, 0x18, 0x18, 0x18, 0x18, 0x24, 0x30, 0x60, 0x26, 0x3]}, @NL80211_TXRATE_LEGACY={0x20, 0x1, [0x36, 0x4, 0x16, 0x36, 0x16, 0x2, 0x1, 0x1, 0x1b, 0x1b, 0x5, 0x5, 0xc, 0x4, 0x6, 0x48, 0x12, 0x16, 0x18, 0x0, 0x12, 0x5, 0xb, 0x63, 0x6c, 0xb, 0xc, 0x5]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xb, 0xf45, 0x2, 0x7f, 0x5, 0x8, 0xf459, 0xcf90]}}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x4, 0x46, 0x120, 0x8, 0x75e, 0x4, 0x4800, 0x7fff]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_LEGACY={0x8, 0x1, [0x6, 0x9, 0x60, 0x1]}]}, @NL80211_BAND_2GHZ={0x14, 0x0, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}]}, @NL80211_BAND_60GHZ={0x64, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HT={0x39, 0x2, [{0x1, 0x9}, {0x4, 0x4}, {0x1, 0x4}, {0x2, 0xa}, {0x1, 0x3}, {0x7, 0x3}, {0x0, 0x7}, {0x4, 0x5}, {0x7, 0x5}, {0x4, 0x5}, {0x5, 0x9}, {0x1, 0x3}, {0x6, 0x1}, {0x5, 0x4}, {0x4, 0x6}, {0x3, 0xa}, {0x6, 0xa}, {0x4, 0x1}, {0x5, 0x5}, {0x0, 0xa}, {0x7, 0x4}, {0x5, 0x5}, {0x0, 0x3}, {0x1, 0x6}, {0x0, 0x8}, {0x5, 0x7}, {0x1, 0x9}, {0x6, 0x3}, {0x0, 0x7}, {0x7}, {0x5, 0x5}, {0x0, 0x4}, {0x2, 0x3}, {0x6}, {0x0, 0x4}, {0x5, 0x3}, {0x4}, {0x0, 0x3}, {0x1, 0x6}, {0x7, 0x4}, {0x3, 0x4}, {0x7, 0x6}, {0x1, 0x9}, {0x4, 0x9}, {0x5, 0x6}, {0x4, 0x9}, {0x1, 0x2}, {0x1, 0x6}, {0x1, 0x9}, {0x4, 0x3}, {0x1, 0x3}, {0x5, 0x8}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xf, 0x31, 0x1, 0x1be9, 0x8000, 0x7fff, 0x1ea9, 0x4]}}]}, @NL80211_BAND_6GHZ={0x4}, @NL80211_BAND_6GHZ={0x28, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x100, 0x8, 0x8, 0xff, 0x6, 0xf9, 0x3, 0x104d]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_6GHZ={0x98, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x3c, 0x2, [{0x1, 0x8}, {0x7, 0x3}, {0x2, 0x2}, {0x3, 0x9}, {0x3, 0xa}, {0x5, 0x14}, {0x5, 0xa}, {0x0, 0x3}, {0x1, 0x9}, {0x3, 0x5}, {0x6, 0x2}, {0x2, 0x3}, {0x0, 0x4}, {0x3}, {0x3, 0x8}, {0x1, 0x5}, {0x7, 0x1}, {0x1, 0x8}, {0x4, 0x3}, {0x4, 0x4}, {0x5}, {0x0, 0x9}, {0x3, 0x5}, {0x0, 0x9}, {0x7, 0x5}, {0x2, 0xa}, {0x1, 0x1}, {0x1, 0xa}, {0x5, 0x4}, {0x4, 0x7}, {0x0, 0x6}, {0x1, 0x2}, {0x4, 0x4}, {0x2, 0x3}, {0x0, 0x9}, {0x6, 0x2}, {0x4}, {0x5, 0x7}, {0x3}, {0x1, 0x3}, {0x7, 0x4}, {0x5, 0x8}, {0x4, 0x5}, {0x6, 0x7}, {0x4, 0x1}, {0x4, 0x9}, {0x6, 0x9}, {0x3, 0x9}, {0x5}, {0x1, 0x4}, {0x7}, {0x5, 0x7}, {0x1, 0xa}, {0x1, 0x5}, {0x1, 0x8}, {0x1, 0x8}]}, @NL80211_TXRATE_LEGACY={0x9, 0x1, [0x1b, 0x5, 0x36, 0x16, 0x9]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x1, 0x990, 0x3, 0x9, 0xd317, 0x5, 0x8, 0xfff8]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0xef1, 0x70, 0x400, 0xf, 0x3, 0x4, 0x3, 0x3ff]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x14, 0x1, [0x9, 0xc, 0x18, 0x24, 0x36, 0x9, 0x5, 0x2b, 0xb, 0x6c, 0x24, 0x2, 0x12, 0x2d, 0x0, 0x18]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HT={0x47, 0x2, [{0x7, 0x8}, {0x0, 0xa}, {0x5, 0x6}, {0x1, 0x5}, {0x0, 0x1}, {0x3, 0x7}, {0x6, 0x2}, {0x7, 0x7}, {0x0, 0x2}, {0x1, 0x8}, {0x5, 0x8}, {0x3, 0x8}, {0x0, 0x4}, {0x6, 0x1}, {0x5, 0x4}, {0x5, 0x3}, {0x2}, {0x0, 0x9}, {0x5, 0x6}, {0x3}, {0x3, 0x8}, {0x0, 0x9}, {0x1, 0x1}, {0x3}, {0x2, 0x9}, {0x5, 0x1}, {0x5, 0xa}, {0x2, 0x5}, {0x0, 0x2}, {0x0, 0x7}, {0x1, 0x7}, {0x6, 0x6}, {0x3, 0x8}, {0x1, 0x4}, {0x1, 0x7}, {0x7, 0xa}, {0x0, 0x8}, {0x3, 0x8}, {0x0, 0x7}, {0x1, 0x2}, {0x0, 0xa}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x6}, {0x7, 0x2}, {0x7, 0x2}, {0x3, 0x8}, {0x6, 0x8}, {0x0, 0x6}, {0x4, 0x9}, {0x5, 0xa}, {0x2, 0x7}, {0x2, 0x5}, {0x5, 0x7}, {0x0, 0x6}, {0x3, 0x3}, {0x4, 0x8}, {0x1, 0xa}, {0x0, 0x1}, {0x1, 0x7}, {0x0, 0xa}, {0x6, 0x2}, {0x0, 0x5}, {0x4, 0x1}, {0x0, 0x2}, {0x6, 0xa}, {0x1, 0x1}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x0, 0x101, 0x401, 0x6, 0x0, 0x7, 0x2, 0x6]}}]}]}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}, @NL80211_ATTR_TID_CONFIG={0x5c, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffffff9}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x8c}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TX_RATE_TYPE={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x7e}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x5b}]}, {0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0x401}]}]}]}, 0x378}, 0x1, 0x0, 0x0, 0x1}, 0xc05) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r4) sendmsg$NL80211_CMD_DEAUTHENTICATE(r4, &(0x7f0000000980)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000940)={&(0x7f0000000900)={0x2c, r6, 0x200, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_IE={0x7, 0x2a, [@sec_chan_ofs={0x3e, 0x1, 0x3}]}, @NL80211_ATTR_MAC={0xa, 0x6, @random="b544404ba933"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40000}, 0x880) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) connect$inet6(r7, &(0x7f00000009c0)={0xa, 0x4e21, 0x8000, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x640}, 0x1c) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000a40), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000a80)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000ac0)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b00)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b40)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000b80)={0xffffffffffffffff}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000bc0)={0xffffffffffffffff}) sendmsg$NBD_CMD_RECONFIGURE(r8, &(0x7f0000000d00)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x88, r9, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x6}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8000000000000000}, @NBD_ATTR_BACKEND_IDENTIFIER={0x9, 0xa, '{!.}{'}, @NBD_ATTR_SOCKETS={0x44, 0x7, 0x0, 0x1, [{0x8, 0x1, r10}, {0x8, 0x1, r11}, {0x8, 0x1, r12}, {0x8, 0x1, r13}, {0x8, 0x1, r3}, {0x8, 0x1, r14}, {0x8, 0x1, r1}, {0x8, 0x1, r15}]}, @NBD_ATTR_TIMEOUT={0xc, 0x4, 0xffff}]}, 0x88}, 0x1, 0x0, 0x0, 0x4000}, 0x4000000) r16 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r14, 0x8933, &(0x7f0000000d40)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r16, &(0x7f0000000e80)={&(0x7f0000000d80)={0x1d, r17}, 0x10, &(0x7f0000000e40)={&(0x7f0000000dc0)={0x7, 0x88, 0xecf, {}, {0x77359400}, {0x3, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x4, 0x1}, 0x35, 0x0, 0x0, 0x0, "577e588e322275a4b88da72d68082151491ed689f891d1b9a5a9a488b4043284f909201893881c59341b2d458423eeae2c28873bbb460447ea652302892d4ec3"}}, 0x80}}, 0x200000c0) 1m3.028351164s ago: executing program 1 (id=1596): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) (async) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) (async) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000040)={0x29, @multicast2, 0x0, 0x0, 'dh\x00', 0x6, 0x89, 0x4000069}, 0x2c) 1m2.844046932s ago: executing program 4 (id=1598): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/22], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000c200000095"], &(0x7f0000000500)='GPL\x00', 0x5, 0x11, &(0x7f00000017c0)=""/4098, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket(0x11, 0x3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r2, 0x107, 0x17, 0x0, 0x20000000) bpf$TOKEN_CREATE(0x24, &(0x7f0000000240)={0x0, r1}, 0x8) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x401, @void, @value}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r4) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)=ANY=[@ANYBLOB="98030000", @ANYRES16=r5, @ANYBLOB, @ANYRES32=r3, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffff"], 0x398}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x40, 0x10, 0x609, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_ADDRESS={0xa, 0x1, @broadcast}]}, 0x40}}, 0x0) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000200)) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(r9, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) write$tun(r11, &(0x7f00000000c0)={@val={0x6f01, 0x800}, @val={0x1, 0x3, 0x0, 0x4, 0x3d}, @mpls={[], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x9, 0x40, 0x63, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x5, 0xb, 0x4, 0xc5, 0x0, 0x4000, {[@window={0x9, 0x3}, @sack={0x5, 0x12, [0x8d6, 0x61, 0xb807, 0xffff]}]}}}}}}, 0x4e) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r10, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000080)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x880}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000540)=@delchain={0x48, 0x64, 0xf31, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r10, {0x9, 0x8}, {0x10, 0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x65, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @mcast1}]}}]}, 0x48}}, 0x1000000) r12 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MIF(r12, 0x29, 0xd0, 0x0, 0x0) r13 = bpf$TOKEN_CREATE(0x24, &(0x7f0000000500), 0x8) sendmsg$unix(r12, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000980)=[@rights={{0x1c, 0x1, 0x1, [r13, r2, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r3, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x80}, 0x44040) getsockopt$PNPIPE_IFINDEX(r2, 0x113, 0x2, &(0x7f0000000040), &(0x7f0000000080)=0x4) 1m2.766830201s ago: executing program 1 (id=1599): r0 = socket(0x28, 0x5, 0x0) accept4$unix(r0, 0x0, 0x0, 0x0) ioctl$sock_inet_tcp_SIOCOUTQ(r0, 0x5411, &(0x7f0000000000)) getsockname$packet(r0, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000140)=0x14) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)={0x20, 0x13, 0xa, 0x3, 0x0, 0x0, {0x2}, [@NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x9, 0x3, 0x348, 0x160, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x278, 0xffffffff, 0xffffffff, 0x278, 0xffffffff, 0x3, &(0x7f0000000200), {[{{@uncond, 0x0, 0xf8, 0x160, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x8}}, @common=@icmp6={{0x28}, {0x4, 'k\t', 0x1}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x1, 0x8, 0x5, 0x3, 'snmp\x00', 'syz0\x00', {0x1ff}}}}, {{@ipv6={@loopback, @mcast1, [0x0, 0xffffff00, 0x0, 0xff], [0xff, 0xff, 0xff000000, 0xffffff00], 'wlan0\x00', 'syz_tun\x00', {0xff}, {}, 0x0, 0x9, 0x6, 0x52}, 0x0, 0xd0, 0x118, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x4}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x1, 0x6, 0xfffffffc, 0x7, 'snmp\x00', {0x9}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3a8) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}, @IFLA_IFNAME={0x14, 0x3, 'geneve1\x00'}]}, 0x5c}}, 0x0) 1m2.538170377s ago: executing program 1 (id=1601): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0xa) sendmsg$nl_route(r2, &(0x7f0000002800)={0x0, 0x0, &(0x7f00000027c0)={&(0x7f0000002740)=@newnexthop={0x24, 0x68, 0x200, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x4, 0x0, 0x1}, [@NHA_RES_GROUP={0xc, 0xc, 0x0, 0x1, [@NHA_RES_GROUP_IDLE_TIMER={0x8, 0x2, 0x8}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x4008000}, 0x40000) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000f6ffffffffffff1100000008000300", @ANYRES32=r3], 0x30}}, 0x0) 1m2.535556404s ago: executing program 4 (id=1602): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x7, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xf, 0x4, 0x4, 0xfffffffe, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000380)={r0, 0x18000000000002a0, 0x1c, 0x0, &(0x7f0000000400)="b9ffddc1ddc8cdde752dfe443b1b5e000000000000895abe5707888e", 0x0, 0x601, 0x60000009, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) 1m0.386957064s ago: executing program 4 (id=1603): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000740)={r0, &(0x7f00000003c0), &(0x7f00000000c0)=""/109}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000ac0)={r0, &(0x7f0000000980), &(0x7f00000009c0)=@tcp6, 0x1}, 0x20) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000004000200040010000800034004000000", 0x58}], 0x1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000bc0)={0x3c, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e59e75e84c"}, @NL80211_KEY_CIPHER={0x8, 0x3, 0xfac05}]}]}, 0x3c}}, 0x0) pipe(&(0x7f0000000200)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0xf, 0xf, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000100000000000000600000018110000", @ANYRES32=r0, @ANYBLOB="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"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x48, 0x48, 0x9, [@float={0x10, 0x0, 0x0, 0x10, 0x8}, @union={0xf, 0x4, 0x0, 0x5, 0x1, 0x7, [{0x5, 0x1}, {0xa, 0x5, 0x5}, {0xa, 0x5, 0x7f}, {0x5, 0x1, 0x8}]}]}, {0x0, [0x5f, 0x0, 0x2e, 0x30, 0x61, 0x0, 0x30]}}, &(0x7f0000000e80)=""/4096, 0x69, 0x1000, 0x0, 0xa, 0x10000, @value}, 0x28) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, r5, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) bind$tipc(r9, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000004010000000900010073797a30000000003c000000000a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30"], 0xfc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x8}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x7, 0x1, 0xb, 0x8, 0x9}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {}, {0x18, 0x8, 0x2, 0x0, r6}, {}, {0x46, 0x0, 0x0, 0x76}}], {{}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xc, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socket$inet6_sctp(0xa, 0x5, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) 57.534003547s ago: executing program 1 (id=1604): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x703283d8d4b5ce77}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ppoll(&(0x7f0000000900)=[{r1}], 0x1, &(0x7f0000000940)={0x77359400}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x2, 0x0, 0xfd3c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000240)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x77, 0x7, 0x7, 0x11, @mcast1, @private1, 0x7800, 0x7, 0x23b3ef1d, 0xffffffff}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x24, r9, 0x819, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x8a0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@dellink={0x6c, 0x11, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x0, 0x10001}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_1\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_AF_SPEC={0x30, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x81}]}]}]}, 0x6c}}, 0x20000050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1}, 0x4) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000500)={@remote, 0x0}, &(0x7f0000000540)=0x14) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xd, 0x3, &(0x7f0000001740)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x6, 0xa8, &(0x7f00000007c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x38, 0x0, 0x0, 0x0, 0x40, '\x00', r6, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r14, r13, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r15 = socket$packet(0x11, 0x3, 0x300) bind$packet(r15, &(0x7f0000000780)={0x11, 0xf7, r11, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 53.743991226s ago: executing program 2 (id=1605): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) bind$can_raw(r0, &(0x7f00000005c0), 0x10) r2 = socket$caif_stream(0x25, 0x1, 0x2) connect$caif(r2, &(0x7f00000003c0)=@rfm={0x25, 0x3, "974a7386d371a23ef74ea97b8a3ae5d9"}, 0x18) read(r0, &(0x7f00000027c0)=""/4073, 0xfe9) setsockopt$CAN_RAW_RECV_OWN_MSGS(r0, 0x65, 0x4, &(0x7f0000000580)=0x1, 0x4) ioctl$SIOCGSTAMP(r0, 0x8906, 0x0) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f00000007c0)=@can={{0x2, 0x0, 0x1, 0x1}, 0x1, 0x1, 0x0, 0x0, "80ff3b0969f2aab6"}, 0x10}, 0x1, 0x0, 0x0, 0x4800}, 0x91) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) close(r3) socket$vsock_stream(0x28, 0x1, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8b06, &(0x7f0000000000)={'virt_wifi0\x00', @random="060000000010"}) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@allocspi={0x104, 0x16, 0x1, 0x0, 0x0, {{{@in6=@local, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}, [@mark={0xc, 0x15, {0x35075b}}]}, 0x104}}, 0x0) sendmsg$nl_xfrm(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=@allocspi={0xf8, 0x16, 0x1, 0x0, 0x0, {{{@in, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x33}, @in=@broadcast, {}, {}, {}, 0x0, 0x0, 0xa}, 0x5, 0x5}}, 0xf8}}, 0x0) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6(0xa, 0x802, 0x0) sendmsg$inet(r6, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_u8={{0x11}}, @ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp={0x44, 0xc, 0x7, 0x0, 0x0, [0x0, 0x0]}]}}}], 0x38}, 0x0) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(cast6)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x80000) sendmsg$nl_generic(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000034c0)={0x80, 0x1a, 0x200, 0x70bd28, 0x25dfdbfd, {0x6}, [@typed={0x8, 0x115, 0x0, 0x0, @uid}, @generic="0ba59a19b2b561c39948c189c1302fa306c1c8564189a95023770688d68031b3b2cf381593e4ae7725e98c6283b8dbef5e57c6db32fcf8b82cd1f480cce443cba66fff183d24e8977c80c5ada91df18f293c994f6219d659d0db9b4dad5902981a"]}, 0x80}, 0x1, 0x0, 0x0, 0x8000}, 0x4000081) recvmmsg$unix(r8, &(0x7f0000002d80)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)=""/165, 0xa5}], 0x1}}], 0x1, 0x40010341, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000140)={0x0, 0xd8, &(0x7f0000000900)=[@in6={0xa, 0x4e24, 0xfffffffe, @private0, 0x6}, @in6={0xa, 0x4e22, 0x28, @ipv4={'\x00', '\xff\xff', @local}, 0x10370ad6}, @in6={0xa, 0x4e22, 0xffff0326, @private1={0xfc, 0x1, '\x00', 0x1}, 0x6}, @in6={0xa, 0x4e23, 0x1, @mcast1, 0x4}, @in={0x2, 0x4e21, @private=0xa010102}, @in6={0xa, 0x4e22, 0x5308, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xb81}, @in={0x2, 0x4e24, @multicast1}, @in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e22, 0x0, @mcast1, 0xfcd}]}, &(0x7f00000001c0)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r6, 0x84, 0x18, &(0x7f0000000200)={r9}, 0x8) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r5, 0x84, 0x0, &(0x7f0000000100)={r10}, 0x10) 46.854920097s ago: executing program 4 (id=1606): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x3b}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0xb, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000180)={'syztnl0\x00', 0x0, 0xf4618c7454ca7d8b, 0x1, 0x4, 0x6, {{0x3f, 0x4, 0x0, 0x4, 0xfc, 0x66, 0x0, 0xfc, 0x4, 0x0, @rand_addr=0x64010100, @multicast1, {[@timestamp={0x44, 0xc, 0x5d, 0x0, 0x8, [0x9, 0x80000000]}, @timestamp_prespec={0x44, 0x24, 0x20, 0x3, 0xe, [{@private=0xa010102, 0x2}, {@empty, 0x9}, {@dev={0xac, 0x14, 0x14, 0x31}, 0x1}, {@rand_addr=0x64010100, 0x9}]}, @generic={0x94, 0x9, "0d5a1639914a99"}, @noop, @lsrr={0x83, 0x1b, 0x39, [@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010100, @multicast1, @loopback]}, @cipso={0x86, 0x21, 0x3, [{0x2, 0x6, "f94ef74a"}, {0x5, 0x9, "d239f6f9b7907c"}, {0x5, 0xc, "714ab03bd4a7922ce822"}]}, @cipso={0x86, 0x72, 0x724ab44bf548b490, [{0x5, 0x10, "1925700c55ca57af252978b389d0"}, {0x6, 0x9, "544ff8a5a977ee"}, {0x0, 0x10, "45c88330f0910a4f1bd2fb16e45f"}, {0x1, 0x8, "a77bb2f21aec"}, {0x1, 0xc, "1c68187d9f5819e26f6e"}, {0x1, 0xc, "8976cd505d99e30d6527"}, {0x5, 0x3, "f8"}, {0x2, 0x3, "9b"}, {0x2, 0x11, "8690eba5498101ee6ad918ebc08cbb"}, {0x0, 0xc, "c9c0557486820ea2de15"}]}]}}}}}) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000300)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x18, 0x18, 0x9, [@float={0xb, 0x0, 0x0, 0x10, 0x8}, @type_tag={0x7, 0x0, 0x0, 0x12, 0x4}]}, {0x0, [0x5f, 0x0, 0x0, 0x2e, 0x0, 0x61, 0x30]}}, &(0x7f0000000340)=""/77, 0x39, 0x4d, 0x0, 0x1, 0x0, @void, @value}, 0x28) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000340)={r3, 0x20, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0}}, 0x10) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001840)=r4, 0x4) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000480)='blkio.bfq.io_wait_time\x00', 0x0, 0x0) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x8, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f00000005c0)={{0x1, 0xffffffffffffffff}, &(0x7f0000000540), &(0x7f0000000580)='%-5lx \x00'}, 0x20) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000600)={0x0, 0x400}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0xa, 0x9, &(0x7f0000000080)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4f}, [@generic={0xf, 0x1, 0xb, 0x9, 0x3}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}]}, &(0x7f0000000100)='GPL\x00', 0x2, 0x1d, &(0x7f0000000140)=""/29, 0x40f00, 0x37, '\x00', r1, @fallback=0x12, r2, 0x8, &(0x7f0000000400)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000440)={0x0, 0xa, 0xffffff81, 0x3}, 0x10, r4, r0, 0x9, &(0x7f0000000640)=[0xffffffffffffffff, r5, r6, 0x1, r7, r8], &(0x7f0000000680)=[{0x5, 0x5, 0x8, 0x2}, {0x4, 0x4, 0x6, 0x6}, {0x0, 0x2, 0x9, 0xa}, {0x4, 0x1, 0x3, 0xa}, {0x2, 0x2, 0x7, 0x4}, {0x4, 0x3, 0x4, 0x9}, {0x0, 0x1, 0x1, 0x1}, {0x5, 0x3, 0xa, 0x9}, {0x1, 0x3, 0x0, 0x9}], 0x10, 0x6, @void, @value}, 0x94) 42.622760984s ago: executing program 2 (id=1607): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x24, 0x0, 0x20, 0x70bd2c, 0x25dfdbff, {{}, {@void, @val={0xc, 0x99, {0x0, 0x78}}}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x20000010) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000140), r0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000180)=0x0, &(0x7f00000001c0)=0x4) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x64, r1, 0x100, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_STRSET_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv0\x00'}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}, @ETHTOOL_A_STRSET_HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @ETHTOOL_A_STRSET_COUNTS_ONLY={0x4}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004400}, 0x4000001) (async) r3 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(r3, &(0x7f0000000640)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000600)={&(0x7f0000000340)={0x2b4, 0x13, 0x200, 0x70bd2a, 0x25dfdbfc, {0x15, 0xa3, 0x2, 0x2, {0x4e22, 0x4e20, [0x6, 0x4, 0x8, 0x4], [0x800, 0xb60a, 0x9, 0x5573], r2, [0x9, 0xf19]}, 0xa, 0x2325}, [@INET_DIAG_REQ_BYTECODE={0xc4, 0x1, "ed95d5f5c30e48d84e1cfb1f5ceed263a2078110651f4cb30b29a1140281536fc2961f82d28b5c8d147dc77744d47584e064321a261d0d2d768701a0cf26cdb365d4a6e1893657167cec93c0127ec8afac7532b7236fc19f629758ce2035a522ceb424942d82bdb36f3b66f7155fe6e42f9e594d0d6c291acb887e9709ed92f34d742947f4eb5317833f353eb648fb92ac4ecb4a2d1182316b05bc0e6f767ec110bd2279b7d5abba112e8dd537ef7237e9c38e0d5fa37f8c991f31385aacdd38"}, @INET_DIAG_REQ_BYTECODE={0xba, 0x1, "6621f301f20323c8534f812df7c9e84b3389cb6fc67c2f6a1fd82f02901d987fef611e210152ce17e00c92726dfafa99fd521384351f9cfbdab71715b22f6c45fc4bd9c5e869e4fa15534e51998af803eb40ec2c2b73ca30738fe2399b4fc6cb8dcc383d0768f6da5c973aed238406a02839df17c93e9ecf52aeca367cf53fe8f1fe9ce96bcfccd4428dd05f668e302a648550b5db10a0ae6aa3a0a7b8c1c605632de3bf61485f3fecd9a04fa5066a32c29bff4b007b"}, @INET_DIAG_REQ_BYTECODE={0xc, 0x1, "a7d53544f0beaa26"}, @INET_DIAG_REQ_BYTECODE={0xd9, 0x1, "1a3dcb7b243fbc9959582337b098c019e40e9743ce8fc3994d466a72c8d182e2c27f6fb4952b47f4eacb01777c456cab30c3737bcb4cfdfa1473e251700f2fadf68b4ee0f5cad37739c4f42cf29f78fa501c8e0bfd5e87d410276b1ae5da903cc707c8600f35e89d3c3cdaefd9f4a2a96c772a2c6362105f9046b025a676a853bfc88ebd048742f5958d091660fff7e2e02aba2b0fa5969e5d91a059e8bba0b9c0c0f3c640c216178042829850f99f495471beb98a0e682462ec33bffec0cc15b8c32eb67d91b6672fe955047873943023a654299d"}]}, 0x2b4}, 0x1, 0x0, 0x0, 0x40}, 0x80) (async) r4 = bpf$ITER_CREATE(0x21, &(0x7f0000000680), 0x8) sendmsg$NFT_BATCH(r4, &(0x7f0000000d40)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000700)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x2}, @NFTA_RULE_USERDATA={0x62, 0x7, 0x1, 0x0, "50c216d6632a9c498a1181e8f567c982930bec3e03027c2120d342cb48e156b66e03ab75ed3124491b67bb1c8090f3d9cc36db91649ba0f9e9817f35bbf0f9cbc91212df4c2b8c6cfa8489d0e3efa97fc27e0ad184ae30a5870645736aa9"}]}, @NFT_MSG_NEWSET={0x40, 0x9, 0xa, 0x801, 0x0, 0x0, {0xc}, [@NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x33}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x4}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x60, 0xb, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_EXPR={0x30, 0x11, 0x0, 0x1, @fib={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x16}, @NFTA_FIB_FLAGS={0x8, 0x3, 0x1, 0x0, 0x30}, @NFTA_FIB_FLAGS={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x14}]}}}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8}, @NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x7}]}, @NFT_MSG_NEWFLOWTABLE={0x140, 0x16, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFTA_FLOWTABLE_HOOK={0x12c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge_slave_0\x00'}, {0x14, 0x1, 'macvtap0\x00'}, {0x14, 0x1, 'veth1_vlan\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'dummy0\x00'}, {0x14, 0x1, 'ipvlan1\x00'}, {0x14, 0x1, 'veth1_macvtap\x00'}, {0x14, 0x1, 'lo\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xb6a4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x80}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xc9}, @NFTA_FLOWTABLE_HOOK_DEVS={0x54, 0x3, 0x0, 0x1, [{0x14, 0x1, 'vxcan1\x00'}, {0x14, 0x1, 'nicvf0\x00'}, {0x14, 0x1, 'syzkaller1\x00'}, {0x14, 0x1, 'veth0_to_hsr\x00'}]}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'dvmrp0\x00'}]}]}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x234, 0x0, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x7}, [@NFTA_TABLE_FLAGS={0x8}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_USERDATA={0x8b, 0x6, "5a5b4ccfe67fdf628b21a10322e1b73d38ed60cbf46b4b70f7a6b7f407f7ec37346b3aedc882c9a3f2c398fd2bf72ec60bcd65b99e77851499b9f7b8287843b75372b37f448fcf06a5c6761bfae70559a7c8bd528a3740fbbdb6d0624bb44982ded9434d73d7c06729c7115b2c8ca2952ef99a11c67b074c834fcfe66da065dd453506d4698933"}, @NFTA_TABLE_USERDATA={0x45, 0x6, "e940e661605e453d975f96274f52f11d7d53c58f363345f19d9850fd962970fe7bf7bcfd5a007191f2f10bc055d05846f43f445803e6a9b2299829832551ba71de"}, @NFTA_TABLE_USERDATA={0x101, 0x6, "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"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x3}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x5c, 0x3, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0x22, 0xc, "37c008d0719ad221aa99b44219afb7fd1badf376e9abdca4ab2a9c99f129"}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x7c, 0x2, 0xa, 0x101, 0x0, 0x0, {0x2, 0x0, 0x3}, [@NFTA_TABLE_USERDATA={0x5a, 0x6, "94b064c11fdf823c3c36642d512a0b9777cccd1cf1452e1771726024aceeab0f808442c023d1ae9728a6d62aec11be6b8777cdb2f8649e5e0cfb8511a60799787956ef98335d77f50c3d71e037fa2c4d191084affa90"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0xa}}}, 0x5d4}, 0x1, 0x0, 0x0, 0x2890}, 0x20008041) connect$inet(r4, &(0x7f0000000d80)={0x2, 0x4e22, @broadcast}, 0x10) (async) sendmsg$SOCK_DIAG_BY_FAMILY(r3, &(0x7f0000000e80)={&(0x7f0000000dc0), 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x14, 0x14, 0x800, 0x70bd29, 0x25dfdbfd, {0xa, 0x1b}}, 0x14}, 0x1, 0x0, 0x0, 0x4040050}, 0x10) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000f80)={'sit0\x00', &(0x7f0000000ec0)={'sit0\x00', r2, 0x80, 0x0, 0x1, 0x6, {{0x22, 0x4, 0x1, 0x0, 0x88, 0x66, 0x0, 0x1, 0x4, 0x0, @remote, @remote, {[@ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0x7e, 0x1, 0x5, [{@private=0xa010100, 0x2}, {@remote, 0xc29c}, {@broadcast, 0x800}, {@multicast2, 0x200}, {@empty, 0x4}]}, @generic={0x88, 0xf, "cb48ae24681523d11524fa39ac"}, @timestamp_addr={0x44, 0x34, 0xbf, 0x1, 0x7, [{@rand_addr=0x64010101, 0x7ff}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0x2}, {@multicast2, 0x4}, {@dev={0xac, 0x14, 0x14, 0x26}, 0x9}, {@dev={0xac, 0x14, 0x14, 0xd}, 0xe95}, {@empty, 0xd3}]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000001300)={'syztnl1\x00', &(0x7f0000001280)={'ip6_vti0\x00', r5, 0x4, 0xa, 0x1, 0x400, 0x4, @mcast1, @mcast2, 0x80, 0x0, 0xbe, 0x5}}) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001640)={r4, 0xe0, &(0x7f0000001540)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f0000001380)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x9, &(0x7f00000013c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000001400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x2f, &(0x7f0000001440)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000001480), &(0x7f00000014c0), 0x8, 0x90, 0x8, 0x8, &(0x7f0000001500)}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000001740)={0x3, 0x2b, &(0x7f0000000fc0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x25}, @generic={0x5, 0xf, 0xf, 0x3, 0x8}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @printk={@ld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}}, @ldst={0x0, 0x1, 0x6, 0x0, 0x1}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001140)='syzkaller\x00', 0x0, 0xe9, &(0x7f0000001180)=""/233, 0x41100, 0x4, '\x00', r6, @sched_cls=0x37, r4, 0x8, 0x0, 0x0, 0x10, &(0x7f0000001340)={0x1, 0x10, 0x60, 0x8}, 0x10, r7, r4, 0x5, &(0x7f0000001680)=[r4], &(0x7f00000016c0)=[{0x1, 0x1, 0xe, 0x3}, {0x1, 0x4, 0x0, 0x2}, {0x3, 0x5, 0x4, 0xb}, {0x1, 0x1, 0x8, 0x6}, {0x1, 0x5, 0x9, 0xc}], 0x10, 0x5, @void, @value}, 0x94) (async) r9 = syz_genetlink_get_family_id$tipc(&(0x7f0000001840), r4) sendmsg$TIPC_CMD_SHOW_STATS(r0, &(0x7f0000001900)={&(0x7f0000001800)={0x10, 0x0, 0x0, 0x80002}, 0xc, &(0x7f00000018c0)={&(0x7f0000001880)={0x1c, r9, 0x400, 0x70bd27, 0x25dfdbfd, {}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000010}, 0x8005) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001980), r4) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000019c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a40)={&(0x7f0000001a00)={0x40, r10, 0x2, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r11}, @val={0xc, 0x99, {0x1599e76b, 0x64}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x40}, 0x1, 0x0, 0x0, 0x40000c0}, 0x20000080) getsockopt$WPAN_WANTLQI(r4, 0x0, 0x3, &(0x7f0000001ac0), &(0x7f0000001b00)=0x4) (async) r12 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000001b40)='ns/time_for_children\x00') ioctl$BTRFS_IOC_SUBVOL_GETFLAGS(r12, 0x80089419, &(0x7f0000001b80)) (async) writev(r0, &(0x7f0000001e80)=[{&(0x7f0000001bc0)="f7452ee135cfbee591742cff9b61d535fc2f425366c4a01f5ed32528834ba9d3d115cac39b81104d581932f6f50e9e237bed55ab2425a70867d8cace9dc3981a536a75e65c34bda1fc012abac52004ce0ca045bbb96efd075086", 0x5a}, {&(0x7f0000001c40)="e3661265aa714cc1e56c7f216307e7b62ff77658475ff04f1c1428fb8364c836ceb1c3d361d3e11a9f5ec4bd0def278e1595c8a842c915b174b828c7b70683b5ed4a15b098fbc7e7000ad24ce20a6d9a6ac462b7b00e6d1d83619c2422d600a9f48f82bc424b94f1e0f2a9955799e26778c7d0ded2fd28a7c13e02cbaa996be15621a963f235058c5818f178b87952e80323b67df3a0a9184a3a43aaa8a533f71bcafc", 0xa3}, {&(0x7f0000001d00)="b08a5d0ceddf1de76c935cf5186e184d20f50434e0693f682e81d79a39c739ac0ae45252b3cee1c99530b18206c23659ab7c4f52fc954432a04a0ad688f1b3227d4e0d0ff62c4dad69c1b1c1b3110b1a0c4f1394efa131c692ca14c18d98673879ceaf7b7a88ba8968bb9e730811948d5c1c41123eef53698afc095e85e85f4301fd49ba462125ff440a8f85ad2f3508df8fff587d032a399fa8c24283212e77a0b446df03bcc6b995bb0bc616a4e5661b2893c5b28f90fa389a75a6d6c43abb62f79e1a8b9a17e8e8f629df196e84d1104112f403eabc0385fe9399", 0xdc}, {&(0x7f0000001e00)="b6be962e4aa8a3511e49927257386156f286e7db5e92d13bd0440c90ca7f1451c76dc41237cafb5f4f326c56b314722b7f2ac352fbc543a775bcc24c03acd1fb6eb35038", 0x44}], 0x4) r13 = syz_genetlink_get_family_id$gtp(&(0x7f0000001f00), r4) sendmsg$GTP_CMD_DELPDP(r0, &(0x7f0000002000)={&(0x7f0000001ec0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000001fc0)={&(0x7f0000001f40)={0x4c, r13, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@GTPA_O_TEI={0x8, 0x9, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r12}, @GTPA_FLOW={0x6}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_I_TEI={0x8, 0x8, 0x2}, @GTPA_NET_NS_FD={0x8, 0x7, r4}, @GTPA_O_TEI={0x8, 0x9, 0x1}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c010}, 0x880) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x1000006, 0x4000010, r4, 0xb9e5a000) (async) sendmsg$NL80211_CMD_SET_MCAST_RATE(r0, &(0x7f0000002140)={&(0x7f0000002040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000002100)={&(0x7f0000002080)={0x4c, r10, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x168}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x37}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0xf0}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x6e}, @NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x5a}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004040}, 0x40) (async) mmap(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x5, 0x10, r8, 0xc1090000) (async) sendmsg$nl_route(r4, &(0x7f0000002240)={&(0x7f0000002180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000002200)={&(0x7f00000021c0)=@ipmr_newroute={0x2c, 0x18, 0x800, 0x70bd2b, 0x25dfdbfe, {0x80, 0x10, 0x80, 0x2, 0xfd, 0x1, 0xc8, 0x9, 0x200}, [@RTA_DST={0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_TABLE={0x8, 0xf, 0xff}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x40000) 42.565667313s ago: executing program 4 (id=1608): socket$nl_route(0x10, 0x3, 0x0) connect$inet6(0xffffffffffffffff, &(0x7f0000000140)={0xa, 0x4e20, 0x8, @private2, 0x6}, 0x1c) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="580000000206010400000000000000000000000005000400000000000900020073797a30000000000c000780080006400000080005000500020000000500f0ff0600000012000300686173683a6e65742c706f7274000000"], 0x58}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400000000508000240000000000800044000000000080003400000001508000540000000020900010073797a30000000000900020073797a32"], 0x98}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000000)=ANY=[@ANYRESHEX=r2], 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x4000) 40.89684472s ago: executing program 32 (id=1604): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000040)) socket$netlink(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000e80)={0x11, 0xf, &(0x7f0000000200)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r1}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x703283d8d4b5ce77}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ppoll(&(0x7f0000000900)=[{r1}], 0x1, &(0x7f0000000940)={0x77359400}, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000011c0)={&(0x7f0000000040)='hrtimer_init\x00', r2}, 0x10) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r3, 0x0, 0x2, 0x0, 0xfd3c) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_TIOCINQ(r5, 0x541b, &(0x7f0000000240)) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000140)={'ip6_vti0\x00', &(0x7f0000000300)={'syztnl1\x00', 0x0, 0x2f, 0x77, 0x7, 0x7, 0x11, @mcast1, @private1, 0x7800, 0x7, 0x23b3ef1d, 0xffffffff}}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000480)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000004c0)={0x24, r9, 0x819, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x24}, 0x1, 0x0, 0x0, 0x8a0}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@dellink={0x6c, 0x11, 0x200, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, 0x0, 0x10001}, [@IFLA_ALT_IFNAME={0x14, 0x35, 'bridge_slave_1\x00'}, @IFLA_OPERSTATE={0x5, 0x10, 0x1}, @IFLA_AF_SPEC={0x30, 0x1a, 0x0, 0x1, [@AF_MPLS={0x4}, @AF_MPLS={0x4}, @AF_BRIDGE={0x4}, @AF_INET6={0x20, 0xa, 0x0, 0x1, [@IFLA_INET6_TOKEN={0x14, 0x7, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_INET6_ADDR_GEN_MODE={0x5, 0x8, 0x81}]}]}]}, 0x6c}}, 0x20000050) ioctl$PPPIOCGDEBUG(r0, 0x80047441, &(0x7f0000000000)) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000280)={0x1}, 0x4) getsockopt$inet6_mreq(r5, 0x29, 0x1b, &(0x7f0000000500)={@remote, 0x0}, &(0x7f0000000540)=0x14) r12 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000980)={0xd, 0x3, &(0x7f0000001740)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x6, 0xa8, &(0x7f00000007c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x9}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[], &(0x7f0000000180)='GPL\x00', 0x38, 0x0, 0x0, 0x0, 0x40, '\x00', r6, @fallback=0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r14, r13, 0x0, 0x0, 0x0, 0x10, 0xfffffffd, @void, @value}, 0x94) r15 = socket$packet(0x11, 0x3, 0x300) bind$packet(r15, &(0x7f0000000780)={0x11, 0xf7, r11, 0x1, 0x4, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x14) openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) 37.799956594s ago: executing program 4 (id=1610): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x6d, 0x0, &(0x7f0000001040)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}, 0x6}, 0x1c) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x1005}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="6ac19adce262ee23d87b7d43dcb747a6000000002d9afdf36c3b4ce4313e4e218dd1aa93fd1b63dfe79a4eb1a02f1eea6bc48b29a9a58fae66db980d0600b4805fe74250681927753520308bf3afddb0f7c9b98ceacc9878f2796a57a4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="5800000010000d04000000000000000000000000f14d42800069df673f42610595429095d2ba3dfe63caf8f6bcb81c47986142779f8abe99910aceca83fe6ff101718e60c0f4e16ded2034fe9b697aa965aadd1917f3a1d3bcd949b6c93b840ef09da87805eefc5783ea48279525ca0a44bb98c3158689863065d0a356edc09b097b43606bf1dc95122da6abfeb9c5e0e6142334923f3ef9f49d64363a1d98f3870bf95ac45544cb28d8b6b6d435318f5a418772a4e1a7216540e5c70d2a9dbb6e537886d0", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000900fdffffff0800010002000000140035006d6163766c616e300000000000000000"], 0x58}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000002fb40d0000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x8, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006c0000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1c) writev(r0, &(0x7f0000000640)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f310000001725001700000000040037000900030001372564b758b9a64411f6bb74", 0x35}, {&(0x7f0000000300)="ef894fdcbcdabcaf90e7b7bd070042628d1de763acdbe34ab066973b7a7959dc4816bcdeaeba1f54b70df7c54652940cc4119dc1d88adad3737e526e1904fd07ff0890c5d72e87faa64ec51484ebb67694514b6b993ee0a7c79141433a049fa39cbd91c454b68bbd689b2a1b019ea90f9dc3d10060cbe6a09fc555840d7597cc556aa7005b31c5386d8525cf49d3626978f016c343ff1c53c7c7c444d840a7fca1731dc0c6a0e626375fe2e08d25029445fe9cecc0d6b362935fcdcea7ad", 0xbe}, {&(0x7f0000000440)="fd84da8e2ced18c5ea67173834ac3526e115ea78bcf48452e00a16e9a80756bb4b60262eceb7879ad73808749756d8f2f142b13e1f26e315067560a81e2c015d3b958724a162fa8331433d49faad75c15feb9f16120d9b91895533abaf1730552c", 0x61}, {&(0x7f00000003c0)}], 0x4) 37.374301797s ago: executing program 2 (id=1611): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000a80)=@raw={'raw\x00', 0x8, 0x3, 0x2e0, 0x0, 0x11, 0x148, 0x158, 0x10, 0x248, 0x2a8, 0x2a8, 0x248, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0xf0, 0x158, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x8, 0x0, 0x0, 0xffffffff, 0x8}}}, @common=@unspec=@cpu={{0x28}, {0x2, 0x1}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0xfffc, 0x0, 0x0, 'syz0\x00', 'syz1\x00', {0x9}}}}, {{@ip={@multicast1, @broadcast, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00', {0xff}, {0xff}, 0x1, 0x0, 0x30}, 0x0, 0xa8, 0xf0, 0x0, {}, [@common=@unspec=@statistic={{0x38}, {0x0, 0x1, 0xc, 0x3, 0x1, {0xffff}}}]}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@private1={0xfc, 0x1, '\x00', 0x1}, 'veth1_to_hsr\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x340) recvfrom$ax25(0xffffffffffffffff, &(0x7f0000000000)=""/58, 0x3a, 0x20, &(0x7f0000000040)={{0x3, @default, 0x6}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) 32.50646758s ago: executing program 2 (id=1612): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000640)={0x24, 0x7, 0x6, 0x301, 0x0, 0x0, {0x7, 0x0, 0x6}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x24008000}, 0x884) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="2000000010004b0401000000000000007a00000048e290f24fca78767f9c9f11464d85e83b4ed1", @ANYRES32=0x0, @ANYBLOB="3c84030000000000"], 0x20}}, 0x80) (async) r2 = socket$inet6_icmp(0xa, 0x2, 0x3a) sendmmsg$inet6(r2, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f00000000c0)="e36f32d56372f6fc55203bfdaa107fe7f379b156859c35308d97d4c2b821825e627b165e606987c2d6e35254124bd4705e0f7f08bee49359d798bac42a3c193e73c1d9e7f4af9f300d4aa0dc54658d05d21b9f930b795fba14f4776073a54a1a07808d684182767c4a796e288f04976c08bfe4788f4961593c", 0x79}, {&(0x7f0000000140)="ca6b779a07a414ef13430a6ffa124496b583d43142de1cc1fdded3bfdbe8d2981381b3a47471c0675ee4fc6a23be6bb3ea3bcbaebf333f4c98477e08c8c4d8ac2d68ba58943d0c2f05969300d160cf93ac34fdc255ad9d4e", 0x58}, {&(0x7f00000001c0)="d23b4d0395caab89bf150e52bb5e9787425ea73a1b6b5a4cf5fa0cc5a652e0613022c7e5aa1604604407232e2e89a897becc28ba8a3b6c854f5cff925e7145996709163ae2d587e77098ce8f3b023ce45cbe47cb92731c228e22153f9bdcaf2df55c0a03d928d1df60858ab6c5aad250c7e9531cf878bc20b06be913f41b", 0x7e}, {&(0x7f0000000240)="bc99ef9a74c5b0b959aced71b087bba46b3695b2c8597409375efec621c25342b4bf19c5aa0b9b0be8576958e062d63ede5ec76d0d67a7d6c129aa0f0be2e40c81c1c770d7a07f2f30d154cbf90eb12ae4f8b8bea3bc77173cab169e2593ac", 0x5f}], 0x4, &(0x7f0000000300)=[@dontfrag={{0x14, 0x29, 0x3e, 0x5}}, @dontfrag={{0x14, 0x29, 0x3e, 0x1000}}, @tclass={{0x14, 0x29, 0x43, 0x80000001}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000380)="1d49102645242390a622fbacad04d9a4be0722779c995219f02892c931558c6c99decb995130245a4df79015d998740e8d5fc84433cede2c90ab826d621732006155c894509fac52914cf963d245793ac2d9950df8f385c778633709f8fbd383e5ccd6ab89bf411110bc34d46f9a28d72b806b12f803fe4c608a6ae284d5da1105a30809569e63a1493603209dbf77661135607ff89799ab", 0x98}, {&(0x7f0000000440)="330a02730ee5b8493c3ff84ed34ab7d7854ebc5f2fa984292506132b117e7bf91b6760273d74bbadd79823f1aa26a51b989a109ebfaa13f156229e1bd665a6514ad064604559c9c51e5b592c63eed77f97ca1357209b10f6abae64f2fed26cb22147d818b90d0fdc351387c01b499699ec90d28e9ea38c43236bdcd9a665d765dac96e01b8777de20a4a34acd4cc949c048a99b3716803018905051b6026fbb6c45526", 0xa3}], 0x2, &(0x7f0000000540)=[@rthdr={{0x68, 0x29, 0x39, {0x3b, 0xa, 0x0, 0x6, 0x0, [@dev={0xfe, 0x80, '\x00', 0x28}, @private0={0xfc, 0x0, '\x00', 0x1}, @private2, @private1, @remote]}}}], 0x68}}], 0x2, 0x4) 22.243021288s ago: executing program 2 (id=1613): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000003380)=ANY=[@ANYBLOB="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"], &(0x7f00002bf000)='syzkaller\x00', 0x4, 0x436, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x7, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f00000001c0)={r1, r0}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r2, 0x84, 0x76, &(0x7f0000000000)={r4, 0x9}, &(0x7f0000000080)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000200)={r4, 0x4, 0x20}, 0xc) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_inet_SIOCSIFADDR(r5, 0x8915, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000000000000000000000000008500000007000000180100002020752500000000002020207b1af8ff00000000bfa101000000010007010000f8ffffffb702000008000000b703000000eb00edc3d8e5fd6530650095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = accept$ax25(0xffffffffffffffff, &(0x7f0000000240)={{0x3, @rose}, [@rose, @netrom, @netrom, @default, @netrom, @null, @netrom, @null]}, &(0x7f00000002c0)=0x48) ioctl$SIOCAX25ADDFWD(r6, 0x89ea, &(0x7f0000000300)={@default, @default}) 20.836305623s ago: executing program 33 (id=1610): r0 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket(0x2, 0x80805, 0x0) getsockopt$bt_hci(r2, 0x84, 0x6d, 0x0, &(0x7f0000001040)) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) bind$inet6(r1, &(0x7f0000000040)={0xa, 0x4e24, 0x2, @dev={0xfe, 0x80, '\x00', 0x12}, 0x6}, 0x1c) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(r1, 0x6, 0x21, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000440)={0x0, 0x1005}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB="6ac19adce262ee23d87b7d43dcb747a6000000002d9afdf36c3b4ce4313e4e218dd1aa93fd1b63dfe79a4eb1a02f1eea6bc48b29a9a58fae66db980d0600b4805fe74250681927753520308bf3afddb0f7c9b98ceacc9878f2796a57a4", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000700)=ANY=[@ANYBLOB="5800000010000d04000000000000000000000000f14d42800069df673f42610595429095d2ba3dfe63caf8f6bcb81c47986142779f8abe99910aceca83fe6ff101718e60c0f4e16ded2034fe9b697aa965aadd1917f3a1d3bcd949b6c93b840ef09da87805eefc5783ea48279525ca0a44bb98c3158689863065d0a356edc09b097b43606bf1dc95122da6abfeb9c5e0e6142334923f3ef9f49d64363a1d98f3870bf95ac45544cb28d8b6b6d435318f5a418772a4e1a7216540e5c70d2a9dbb6e537886d0", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800c0001006d6163766c616e001400028008000900fdffffff0800010002000000140035006d6163766c616e300000000000000000"], 0x58}}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_DREG={0x8}, @NFTA_XFRM_SPNUM={0x8}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="160000000000000004000000ff00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000000000002fb40d0000"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x8, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000010000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006c0000009500000000000000"], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x1c) writev(r0, &(0x7f0000000640)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f310000001725001700000000040037000900030001372564b758b9a64411f6bb74", 0x35}, {&(0x7f0000000300)="ef894fdcbcdabcaf90e7b7bd070042628d1de763acdbe34ab066973b7a7959dc4816bcdeaeba1f54b70df7c54652940cc4119dc1d88adad3737e526e1904fd07ff0890c5d72e87faa64ec51484ebb67694514b6b993ee0a7c79141433a049fa39cbd91c454b68bbd689b2a1b019ea90f9dc3d10060cbe6a09fc555840d7597cc556aa7005b31c5386d8525cf49d3626978f016c343ff1c53c7c7c444d840a7fca1731dc0c6a0e626375fe2e08d25029445fe9cecc0d6b362935fcdcea7ad", 0xbe}, {&(0x7f0000000440)="fd84da8e2ced18c5ea67173834ac3526e115ea78bcf48452e00a16e9a80756bb4b60262eceb7879ad73808749756d8f2f142b13e1f26e315067560a81e2c015d3b958724a162fa8331433d49faad75c15feb9f16120d9b91895533abaf1730552c", 0x61}, {&(0x7f00000003c0)}], 0x4) 15.688205414s ago: executing program 2 (id=1615): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x40}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00010000ac0000001c0012800b000100697036746e6c00000c000280060011004e210000b6a31aa94d1f1e014d06d76b3018fbb058c67e882f4c7ecc14526f372011c9a13da4106f6559744b304bf834bd1fe14b9236055222fbc3fa7ee8301cd7a78ac03c2994f2ef00c07678b6cbc440a99932cad4366ba1fa2694ccc2f26c0d57216f5f571d750f2fcb54cab5fdfe49f91c96e3098170db67d9873ebfae66cb68abfbc960c36d415380"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000990000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0xfffff000, 0x0, 0x27, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x40}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00010000ac0000001c0012800b000100697036746e6c00000c000280060011004e210000b6a31aa94d1f1e014d06d76b3018fbb058c67e882f4c7ecc14526f372011c9a13da4106f6559744b304bf834bd1fe14b9236055222fbc3fa7ee8301cd7a78ac03c2994f2ef00c07678b6cbc440a99932cad4366ba1fa2694ccc2f26c0d57216f5f571d750f2fcb54cab5fdfe49f91c96e3098170db67d9873ebfae66cb68abfbc960c36d415380"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000990000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0xfffff000, 0x0, 0x27, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) 0s ago: executing program 34 (id=1615): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x40}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = socket(0x10, 0x803, 0x0) r5 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00010000ac0000001c0012800b000100697036746e6c00000c000280060011004e210000b6a31aa94d1f1e014d06d76b3018fbb058c67e882f4c7ecc14526f372011c9a13da4106f6559744b304bf834bd1fe14b9236055222fbc3fa7ee8301cd7a78ac03c2994f2ef00c07678b6cbc440a99932cad4366ba1fa2694ccc2f26c0d57216f5f571d750f2fcb54cab5fdfe49f91c96e3098170db67d9873ebfae66cb68abfbc960c36d415380"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000990000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0xfffff000, 0x0, 0x27, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) socket(0x2a, 0x2, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0xfffffffd, 0x0, {0x0, 0x0, 0x0, r1, {0xfff3}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000740)=@newtfilter={0x40, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_POLICE={0x4}]}}, @TCA_CHAIN={0x8, 0xb, 0x8}]}, 0x40}}, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendmsg$nl_route_sched(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=@getchain={0x24, 0x66, 0x0, 0x0, 0x2000}, 0x24}}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000740)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000900)=0x14) (async) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newlink={0x48, 0x10, 0x401, 0x0, 0x1, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x14, 0x3, @mcast2}]}}}]}, 0x48}}, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=r6, @ANYBLOB="00010000ac0000001c0012800b000100697036746e6c00000c000280060011004e210000b6a31aa94d1f1e014d06d76b3018fbb058c67e882f4c7ecc14526f372011c9a13da4106f6559744b304bf834bd1fe14b9236055222fbc3fa7ee8301cd7a78ac03c2994f2ef00c07678b6cbc440a99932cad4366ba1fa2694ccc2f26c0d57216f5f571d750f2fcb54cab5fdfe49f91c96e3098170db67d9873ebfae66cb68abfbc960c36d415380"], 0x3c}, 0x1, 0x0, 0x0, 0x40001}, 0x20004090) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x6, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000990000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r3, @ANYBLOB="0000000000000000b704000008000000850000009500000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r7, 0xfffff000, 0x0, 0x27, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) kernel console output (not intermixed with test programs): twork, BSSID 50:50:50:50:50:50 [ 157.875525][ T9505] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 157.883351][ T9505] gretap1: entered promiscuous mode [ 157.903406][ T9510] netlink: 8 bytes leftover after parsing attributes in process `syz.2.995'. [ 157.915576][ T9505] gretap1: entered allmulticast mode [ 158.150491][ T9515] netlink: 4 bytes leftover after parsing attributes in process `syz.1.996'. [ 158.397303][ T9535] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 158.571793][ T9544] pim6reg527: entered allmulticast mode [ 158.948071][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.199619][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.538234][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.698337][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.800003][ T12] bridge_slave_1: left allmulticast mode [ 159.806154][ T12] bridge_slave_1: left promiscuous mode [ 159.811879][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.821866][ T12] bridge_slave_0: left allmulticast mode [ 159.839205][ T12] bridge_slave_0: left promiscuous mode [ 159.863866][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.187091][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 160.203970][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 160.219535][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 160.230869][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 160.239931][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 160.256460][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 160.365805][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 160.378139][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 160.388244][ T12] bond0 (unregistering): Released all slaves [ 160.446803][ T9579] lo speed is unknown, defaulting to 1000 [ 160.598029][ T9582] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1017'. [ 160.784913][ T9594] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1018'. [ 161.115899][ T12] hsr_slave_0: left promiscuous mode [ 161.121835][ T12] hsr_slave_1: left promiscuous mode [ 161.133655][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 161.142316][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 161.152521][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 161.160768][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 161.179550][ T12] veth1_macvtap: left promiscuous mode [ 161.186058][ T12] veth0_macvtap: left promiscuous mode [ 161.191626][ T12] veth1_vlan: left promiscuous mode [ 161.197496][ T12] veth0_vlan: left promiscuous mode [ 161.585814][ T12] team0 (unregistering): Port device team_slave_1 removed [ 161.633220][ T12] team0 (unregistering): Port device team_slave_0 removed [ 162.150597][ T9624] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1026'. [ 162.281830][ T9579] chnl_net:caif_netlink_parms(): no params data found [ 162.345102][ T5840] Bluetooth: hci1: command tx timeout [ 162.613091][ T9579] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.627218][ T9579] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.634661][ T9579] bridge_slave_0: entered allmulticast mode [ 162.642863][ T9579] bridge_slave_0: entered promiscuous mode [ 162.651712][ T9579] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.661224][ T9579] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.669073][ T9579] bridge_slave_1: entered allmulticast mode [ 162.679851][ T9648] netlink: 'syz.2.1033': attribute type 2 has an invalid length. [ 162.696068][ T9579] bridge_slave_1: entered promiscuous mode [ 162.754753][ T9657] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 162.770992][ T9579] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.815059][ T9579] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.890770][ T9661] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1037'. [ 162.914646][ T9664] netlink: 1260 bytes leftover after parsing attributes in process `syz.4.1038'. [ 162.923275][ T9666] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1037'. [ 162.928786][ T9579] team0: Port device team_slave_0 added [ 162.961858][ T9664] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 162.976048][ T9579] team0: Port device team_slave_1 added [ 163.049483][ T9579] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.073932][ T9579] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.100745][ T9579] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.133573][ T9579] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.151127][ T9579] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.215015][ T9579] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.339117][ T9686] netlink: 'syz.2.1045': attribute type 1 has an invalid length. [ 163.357610][ T9579] hsr_slave_0: entered promiscuous mode [ 163.376344][ T9579] hsr_slave_1: entered promiscuous mode [ 163.382952][ T9579] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.393370][ T9686] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1045'. [ 163.414000][ T9579] Cannot create hsr debugfs directory [ 163.639925][ T9708] ieee802154 phy1 wpan1: encryption failed: -90 [ 163.653031][ T9705] netlink: 'syz.4.1051': attribute type 2 has an invalid length. [ 163.662173][ T9711] netlink: 'syz.0.1053': attribute type 1 has an invalid length. [ 163.748416][ T9705] bridge0: port 1(ipvlan0) entered blocking state [ 163.781130][ T9705] bridge0: port 1(ipvlan0) entered disabled state [ 163.821984][ T9705] ipvlan0: entered allmulticast mode [ 163.828120][ T9705] bridge0: entered allmulticast mode [ 163.837988][ T9705] ipvlan0: left allmulticast mode [ 163.843061][ T9705] bridge0: left allmulticast mode [ 164.081465][ T9728] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.095507][ T9728] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 49123 - 0 [ 164.174673][ T9739] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1061'. [ 164.193693][ T9737] xt_TCPMSS: Only works on TCP SYN packets [ 164.278721][ T9728] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.300269][ T9728] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 49123 - 0 [ 164.425829][ T5840] Bluetooth: hci1: command tx timeout [ 164.498392][ T9728] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.533845][ T9728] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 49123 - 0 [ 164.557059][ T9761] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1068'. [ 164.620519][ T9760] netlink: 'syz.4.1067': attribute type 1 has an invalid length. [ 164.645053][ T9760] netlink: 224 bytes leftover after parsing attributes in process `syz.4.1067'. [ 164.663583][ T9579] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 164.686638][ T9579] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 164.712681][ T9579] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 164.762058][ T9579] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 164.832413][ T9728] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 49123 - 0 [ 164.857546][ T9728] netdevsim netdevsim2 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 164.892520][ T9728] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 49123 - 0 [ 164.910859][ T9728] netdevsim netdevsim2 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 164.930567][ T9728] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 49123 - 0 [ 164.988914][ T9728] netdevsim netdevsim2 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 165.028598][ T9728] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 49123 - 0 [ 165.044721][ T9728] netdevsim netdevsim2 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 165.136959][ T9790] bond0: (slave bond_slave_0): Releasing backup interface [ 165.177419][ T9790] bond0: (slave bond_slave_1): Releasing backup interface [ 165.224390][ T9790] team0: Port device team_slave_0 removed [ 165.244423][ T9790] team0: Port device team_slave_1 removed [ 165.407980][ T9579] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.416213][ T9802] netlink: 'syz.2.1081': attribute type 10 has an invalid length. [ 165.453267][ T9802] bridge0: port 4(team0) entered blocking state [ 165.468589][ T9802] bridge0: port 4(team0) entered disabled state [ 165.488439][ T9802] team0: entered allmulticast mode [ 165.493620][ T9802] team_slave_0: entered allmulticast mode [ 165.515444][ T9802] team_slave_1: entered allmulticast mode [ 165.523026][ T9802] team0: entered promiscuous mode [ 165.529391][ T9802] team_slave_0: entered promiscuous mode [ 165.537309][ T9802] team_slave_1: entered promiscuous mode [ 165.551105][ T9579] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.607463][ T1092] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.614589][ T1092] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.661083][ T991] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.668316][ T991] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.678496][ T9814] netlink: 'syz.2.1086': attribute type 10 has an invalid length. [ 165.708248][ T9818] __nla_validate_parse: 3 callbacks suppressed [ 165.708264][ T9818] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1087'. [ 165.720529][ T9579] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 165.738574][ T9579] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 165.759083][ T9814] team0: left allmulticast mode [ 165.764236][ T9814] team_slave_0: left allmulticast mode [ 165.770831][ T9814] team_slave_1: left allmulticast mode [ 165.777133][ T9814] team0: left promiscuous mode [ 165.781922][ T9814] team_slave_0: left promiscuous mode [ 165.790672][ T9814] team_slave_1: left promiscuous mode [ 165.798516][ T9814] bridge0: port 4(team0) entered disabled state [ 165.806661][ T9817] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1088'. [ 165.807938][ T9814] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.826405][ T9821] netlink: 104 bytes leftover after parsing attributes in process `syz.2.1086'. [ 165.838739][ T9814] bond0: (slave team0): Enslaving as an active interface with an up link [ 165.870297][ T9820] tipc: Started in network mode [ 165.886969][ T9820] tipc: Node identity ac1414aa, cluster identity 4711 [ 165.910719][ T9820] tipc: Enabling of bearer rejected, failed to enable media [ 165.949271][ T9825] netlink: 'syz.1.1089': attribute type 1 has an invalid length. [ 165.986756][ T9825] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1089'. [ 166.088737][ T9579] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.112539][ T9832] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1091'. [ 166.201259][ T9579] veth0_vlan: entered promiscuous mode [ 166.224043][ T9579] veth1_vlan: entered promiscuous mode [ 166.234163][ T9834] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1092'. [ 166.251348][ T9838] netlink: 'syz.1.1093': attribute type 7 has an invalid length. [ 166.311214][ T9834] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1092'. [ 166.324591][ T9579] veth0_macvtap: entered promiscuous mode [ 166.348445][ T9579] veth1_macvtap: entered promiscuous mode [ 166.369759][ T9840] netlink: 64 bytes leftover after parsing attributes in process `syz.4.1092'. [ 166.394583][ T9841] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1093'. [ 166.401685][ T9579] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 166.430250][ T9579] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 166.478777][ T9579] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 166.505200][ T5840] Bluetooth: hci1: command tx timeout [ 166.508977][ T9579] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 166.561570][ T9579] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.593903][ T9579] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.621507][ T9579] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.640089][ T9579] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 166.839586][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.874585][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.948219][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.005502][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.105741][ T9882] netlink: 132 bytes leftover after parsing attributes in process `syz.2.1103'. [ 167.362592][ T9902] netlink: 'syz.4.1108': attribute type 3 has an invalid length. [ 168.043028][ T52] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.511594][ T52] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.723475][ T52] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.808348][ T52] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.889886][ T52] bridge_slave_1: left allmulticast mode [ 168.897088][ T52] bridge_slave_1: left promiscuous mode [ 168.902798][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.912662][ T52] bridge_slave_0: left allmulticast mode [ 168.918822][ T52] bridge_slave_0: left promiscuous mode [ 168.924486][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.540648][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 169.560535][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 169.583985][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 169.589896][ T9977] netlink: 'syz.4.1123': attribute type 1 has an invalid length. [ 169.594123][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 169.615295][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 169.626254][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 169.638284][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 169.661472][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 169.674739][ T52] bond0 (unregistering): Released all slaves [ 169.730936][ T9974] lo speed is unknown, defaulting to 1000 [ 170.143664][ T9994] ieee802154 phy1 wpan1: encryption failed: -90 [ 170.360160][T10003] netlink: 'syz.0.1132': attribute type 4 has an invalid length. [ 170.392752][T10003] netlink: 'syz.0.1132': attribute type 4 has an invalid length. [ 170.506783][T10003] vlan1: entered promiscuous mode [ 170.512076][T10003] vlan1: entered allmulticast mode [ 170.600987][T10003] team0: Port device bridge0 removed [ 170.737332][ T52] hsr_slave_0: left promiscuous mode [ 170.748810][ T52] hsr_slave_1: left promiscuous mode [ 170.767593][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.781570][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 170.858486][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.875728][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 170.926087][ T52] veth1_macvtap: left promiscuous mode [ 170.931669][ T52] veth0_macvtap: left promiscuous mode [ 170.942487][ T52] veth1_vlan: left promiscuous mode [ 170.948070][ T52] veth0_vlan: left promiscuous mode [ 171.014516][T10042] x_tables: duplicate underflow at hook 3 [ 171.244018][T10053] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 171.549796][ T52] team0 (unregistering): Port device team_slave_1 removed [ 171.596660][ T52] team0 (unregistering): Port device team_slave_0 removed [ 171.708840][ T5840] Bluetooth: hci1: command tx timeout [ 172.011453][ T9974] chnl_net:caif_netlink_parms(): no params data found [ 172.336379][ T9974] bridge0: port 1(bridge_slave_0) entered blocking state [ 172.343601][ T9974] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.365084][ T9974] bridge_slave_0: entered allmulticast mode [ 172.373311][ T9974] bridge_slave_0: entered promiscuous mode [ 172.604565][T10090] sctp: [Deprecated]: syz.1.1154 (pid 10090) Use of int in max_burst socket option. [ 172.604565][T10090] Use struct sctp_assoc_value instead [ 172.739897][T10077] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 172.757517][T10096] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 172.757761][T10077] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 172.787040][T10077] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 172.796373][T10077] bond0 (unregistering): Released all slaves [ 172.811677][ T9974] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.819595][ T9974] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.827795][ T9974] bridge_slave_1: entered allmulticast mode [ 172.835997][ T9974] bridge_slave_1: entered promiscuous mode [ 172.988690][ T9974] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.047989][ T9974] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.091781][T10108] x_tables: duplicate underflow at hook 2 [ 173.146660][ T9974] team0: Port device team_slave_0 added [ 173.162334][ T9974] team0: Port device team_slave_1 added [ 173.210631][T10115] __nla_validate_parse: 11 callbacks suppressed [ 173.210650][T10115] netlink: 1280 bytes leftover after parsing attributes in process `syz.4.1162'. [ 173.228855][T10115] openvswitch: netlink: Flow actions attr not present in new flow. [ 173.274253][ T9974] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.274783][T10115] openvswitch: netlink: IP tunnel dst address not specified [ 173.292716][ T9974] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.323295][ T9974] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 173.345548][ T9974] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 173.347615][T10117] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1163'. [ 173.354586][ T9974] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 173.388537][ T9974] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 173.500527][ T9974] hsr_slave_0: entered promiscuous mode [ 173.512534][ T9974] hsr_slave_1: entered promiscuous mode [ 173.519180][ T9974] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 173.527309][ T9974] Cannot create hsr debugfs directory [ 173.785186][ T5835] Bluetooth: hci1: command tx timeout [ 174.066499][ T9974] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 174.089642][ T9974] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 174.104097][ T9974] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 174.120005][T10144] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1170'. [ 174.131607][T10145] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1170'. [ 174.133732][ T9974] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 174.249747][ T9974] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.307840][ T9974] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.330224][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.337434][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 174.365826][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 174.372969][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 174.384563][T10156] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1174'. [ 174.450526][ T9974] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 174.466769][ T9974] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 174.728290][T10176] netlink: 'syz.2.1178': attribute type 1 has an invalid length. [ 174.754365][ T9974] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.778899][T10176] lo speed is unknown, defaulting to 1000 [ 174.829208][T10172] netlink: 'syz.2.1178': attribute type 1 has an invalid length. [ 174.841607][ T9974] veth0_vlan: entered promiscuous mode [ 174.893204][ T9974] veth1_vlan: entered promiscuous mode [ 174.923441][T10183] pim6reg1: entered promiscuous mode [ 174.932303][T10183] pim6reg1: entered allmulticast mode [ 175.018271][ T9974] veth0_macvtap: entered promiscuous mode [ 175.036810][ T9974] veth1_macvtap: entered promiscuous mode [ 175.071463][ T9974] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 175.100145][ T9974] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 175.121533][ T9974] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 175.156064][ T9974] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 175.210244][ T9974] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.235518][ T9974] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.255672][ T9974] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.270819][ T9974] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 175.373854][T10203] netlink: 'syz.0.1186': attribute type 1 has an invalid length. [ 175.387441][T10203] netlink: 'syz.0.1186': attribute type 11 has an invalid length. [ 175.402462][T10203] netlink: 220 bytes leftover after parsing attributes in process `syz.0.1186'. [ 175.488714][T10207] bridge_slave_0: mtu less than device minimum [ 175.506302][T10207] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1188'. [ 175.538321][ T1092] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.560293][ T1092] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.620054][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 175.642639][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 175.866707][ T5835] Bluetooth: hci1: command 0x040f tx timeout [ 176.306164][T10248] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1197'. [ 176.806287][T10276] SET target dimension over the limit! [ 176.904381][T10278] netlink: 10 bytes leftover after parsing attributes in process `syz.0.1205'. [ 177.161558][ T35] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.210734][T10290] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1209'. [ 177.849031][ T35] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.985197][ T35] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.050120][ T35] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 178.142812][ T35] bridge_slave_1: left allmulticast mode [ 178.149529][ T35] bridge_slave_1: left promiscuous mode [ 178.157014][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 178.169285][ T35] bridge_slave_0: left allmulticast mode [ 178.175177][ T35] bridge_slave_0: left promiscuous mode [ 178.180851][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 178.543899][T10309] netlink: 'syz.2.1214': attribute type 10 has an invalid length. [ 178.703211][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 178.726974][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 178.743465][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 178.760998][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 178.777850][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 178.785667][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 178.830827][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.842270][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.853122][ T35] bond0 (unregistering): Released all slaves [ 178.869756][T10309] hsr0: entered promiscuous mode [ 178.896388][T10309] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 178.911320][T10309] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 178.924279][T10309] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 179.007766][T10314] lo speed is unknown, defaulting to 1000 [ 179.032967][T10319] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1215'. [ 179.105589][T10322] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 179.112696][T10322] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 179.298923][T10329] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1219'. [ 179.386712][T10333] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1220'. [ 179.489133][T10338] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1222'. [ 179.643769][T10345] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1227'. [ 179.747685][ T35] hsr_slave_0: left promiscuous mode [ 179.751774][T10353] netlink: 'syz.2.1229': attribute type 8 has an invalid length. [ 179.763874][ T35] hsr_slave_1: left promiscuous mode [ 179.775667][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.784170][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 179.797469][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 179.801049][T10356] netlink: 'syz.0.1228': attribute type 1 has an invalid length. [ 179.806798][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 179.836660][ T35] veth1_macvtap: left promiscuous mode [ 179.842239][ T35] veth0_macvtap: left promiscuous mode [ 179.848517][ T35] veth1_vlan: left promiscuous mode [ 179.853867][ T35] veth0_vlan: left promiscuous mode [ 180.318665][ T35] team0 (unregistering): Port device team_slave_1 removed [ 180.368622][ T35] team0 (unregistering): Port device team_slave_0 removed [ 180.797071][T10353] tipc: Enabling of bearer rejected, media not registered [ 180.859441][T10363] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 180.871634][T10368] IPVS: Unknown mcast interface: veth0_macvtap [ 180.905992][ T5840] Bluetooth: hci1: command tx timeout [ 181.008157][T10314] chnl_net:caif_netlink_parms(): no params data found [ 181.289657][T10314] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.311377][T10314] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.334006][T10314] bridge_slave_0: entered allmulticast mode [ 181.358891][T10314] bridge_slave_0: entered promiscuous mode [ 181.375622][T10314] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.391534][T10314] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.399639][T10314] bridge_slave_1: entered allmulticast mode [ 181.407562][T10314] bridge_slave_1: entered promiscuous mode [ 181.410254][T10394] netlink: 'syz.4.1239': attribute type 10 has an invalid length. [ 181.459457][T10394] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 181.500702][T10394] team0: Port device netdevsim0 added [ 181.532690][T10314] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 181.568078][T10314] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 181.622076][T10314] team0: Port device team_slave_0 added [ 181.687380][T10314] team0: Port device team_slave_1 added [ 181.784018][T10314] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 181.798171][T10314] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.811288][T10419] delete_channel: no stack [ 181.827492][T10314] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 181.845340][T10314] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 181.852547][T10314] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 181.880209][T10314] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 181.963163][T10314] hsr_slave_0: entered promiscuous mode [ 181.969429][T10314] hsr_slave_1: entered promiscuous mode [ 181.976513][T10314] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 181.984091][T10314] Cannot create hsr debugfs directory [ 182.529305][T10314] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 182.541131][T10314] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 182.555224][T10314] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 182.572241][T10314] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 182.777060][T10314] 8021q: adding VLAN 0 to HW filter on device bond0 [ 182.788965][T10438] netlink: 'syz.2.1254': attribute type 4 has an invalid length. [ 182.833402][T10314] 8021q: adding VLAN 0 to HW filter on device team0 [ 182.849546][T10438] netlink: 'syz.2.1254': attribute type 4 has an invalid length. [ 182.871877][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.879095][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 182.912986][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.920221][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 182.998649][ T5840] Bluetooth: hci1: command tx timeout [ 183.208177][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 183.227196][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 183.238948][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 183.249960][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 183.258932][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 183.268054][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 183.358478][T10451] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1256'. [ 183.390424][T10314] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 183.408132][T10450] lo speed is unknown, defaulting to 1000 [ 183.434234][T10314] veth0_vlan: entered promiscuous mode [ 183.450060][T10314] veth1_vlan: entered promiscuous mode [ 183.482137][T10314] veth0_macvtap: entered promiscuous mode [ 183.492561][T10314] veth1_macvtap: entered promiscuous mode [ 183.513456][T10314] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 183.526676][T10314] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 183.538416][T10314] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 183.550093][T10314] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 183.568922][T10314] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.582222][T10314] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.591951][T10314] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.606035][T10314] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 183.771053][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.793148][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.823055][ T1092] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.831760][ T1092] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.941566][T10450] chnl_net:caif_netlink_parms(): no params data found [ 184.068119][T10478] netlink: 'syz.2.1262': attribute type 1 has an invalid length. [ 184.085531][T10478] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 184.161339][T10450] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.177158][T10450] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.185705][T10450] bridge_slave_0: entered allmulticast mode [ 184.197382][T10450] bridge_slave_0: entered promiscuous mode [ 184.206968][T10450] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.215682][T10450] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.222920][T10450] bridge_slave_1: entered allmulticast mode [ 184.231178][T10450] bridge_slave_1: entered promiscuous mode [ 184.301305][T10450] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.313491][T10450] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.364030][T10450] team0: Port device team_slave_0 added [ 184.392125][T10450] team0: Port device team_slave_1 added [ 184.450829][T10450] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.462580][T10450] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.513711][T10450] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.527223][T10450] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.534626][T10450] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.576267][T10450] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.593026][T10497] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1266'. [ 184.606940][T10497] netlink: 64 bytes leftover after parsing attributes in process `syz.2.1266'. [ 184.694019][T10450] hsr_slave_0: entered promiscuous mode [ 184.702903][T10450] hsr_slave_1: entered promiscuous mode [ 184.725436][T10450] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.733051][T10450] Cannot create hsr debugfs directory [ 185.010061][ T1092] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.143109][T10450] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.154174][T10450] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.244388][T10450] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.255453][T10450] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.338605][T10450] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.349100][T10450] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.385394][ T5843] Bluetooth: hci0: command tx timeout [ 185.427468][T10450] netdevsim netdevsim0 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 185.439916][T10450] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.556569][T10450] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 185.565977][T10450] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 185.575210][T10450] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 185.584515][T10450] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 185.613073][ T1092] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.670380][T10450] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.689336][T10450] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.700064][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.707211][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.723647][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.730780][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.884173][T10450] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.919950][T10450] veth0_vlan: entered promiscuous mode [ 185.929692][T10450] veth1_vlan: entered promiscuous mode [ 185.956189][T10450] veth0_macvtap: entered promiscuous mode [ 185.965146][T10450] veth1_macvtap: entered promiscuous mode [ 185.983269][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.994249][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.005919][T10450] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.019050][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.030324][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.040335][T10450] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.051670][T10450] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.062629][T10450] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.074020][T10450] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.083911][T10450] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.093365][T10450] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.103016][T10450] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.162663][ T991] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.181021][ T991] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.204514][ T991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.213545][ T991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.427385][ T5843] Bluetooth: hci2: command 0x0406 tx timeout [ 186.434676][ T5843] Bluetooth: hci3: command 0x0406 tx timeout [ 186.612520][T10534] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1274'. [ 186.677121][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 186.688078][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 186.697247][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 186.707573][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 186.717613][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 186.727086][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 186.773591][ T1092] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.819679][T10537] lo speed is unknown, defaulting to 1000 [ 186.896973][ T1092] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.938967][T10545] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.027169][T10547] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1279'. [ 187.112958][T10550] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1280'. [ 187.123879][T10550] netlink: 864 bytes leftover after parsing attributes in process `syz.2.1280'. [ 187.177200][ T1092] bridge_slave_1: left allmulticast mode [ 187.183141][ T1092] bridge_slave_1: left promiscuous mode [ 187.193573][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.232232][ T1092] bridge_slave_0: left allmulticast mode [ 187.239390][ T1092] bridge_slave_0: left promiscuous mode [ 187.249239][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.801999][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.817226][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.828347][ T1092] bond0 (unregistering): Released all slaves [ 188.058955][T10537] chnl_net:caif_netlink_parms(): no params data found [ 188.208775][T10572] netlink: 84 bytes leftover after parsing attributes in process `syz.4.1284'. [ 188.325135][T10537] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.332279][T10537] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.372184][T10537] bridge_slave_0: entered allmulticast mode [ 188.429121][T10537] bridge_slave_0: entered promiscuous mode [ 188.461464][T10537] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.469456][T10537] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.492880][T10537] bridge_slave_1: entered allmulticast mode [ 188.513891][T10537] bridge_slave_1: entered promiscuous mode [ 188.569195][ T1092] hsr_slave_0: left promiscuous mode [ 188.587625][ T1092] hsr_slave_1: left promiscuous mode [ 188.605220][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.612696][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.635797][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.643277][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.693921][ T1092] veth1_macvtap: left promiscuous mode [ 188.715176][ T1092] veth0_macvtap: left promiscuous mode [ 188.720815][ T1092] veth1_vlan: left promiscuous mode [ 188.735103][ T1092] veth0_vlan: left promiscuous mode [ 188.839428][ T5835] Bluetooth: hci0: command tx timeout [ 188.851925][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 188.863642][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 188.876401][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 188.886890][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 188.895540][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 188.903224][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 189.421489][T10584] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1286'. [ 189.568837][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 189.617828][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 189.830725][T10588] netlink: 808 bytes leftover after parsing attributes in process `syz.2.1287'. [ 190.401398][T10583] bond0: entered promiscuous mode [ 190.409902][T10583] bond0: entered allmulticast mode [ 190.424357][T10583] 8021q: adding VLAN 0 to HW filter on device bond0 [ 190.443333][T10537] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.491851][T10537] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.704346][T10537] team0: Port device team_slave_0 added [ 190.720550][T10537] team0: Port device team_slave_1 added [ 190.764544][T10577] lo speed is unknown, defaulting to 1000 [ 190.818251][T10537] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.844539][T10537] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.913363][ T5835] Bluetooth: hci0: command tx timeout [ 190.923758][T10537] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.988665][ T5835] Bluetooth: hci1: command tx timeout [ 191.059875][T10537] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.068961][T10537] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.099405][T10537] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.222752][T10537] hsr_slave_0: entered promiscuous mode [ 191.246264][T10537] hsr_slave_1: entered promiscuous mode [ 191.252440][T10537] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.284578][T10537] Cannot create hsr debugfs directory [ 191.422054][T10632] netlink: 88 bytes leftover after parsing attributes in process `syz.4.1302'. [ 191.440819][ T1092] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.572895][ T1092] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.636280][T10647] openvswitch: netlink: Key type 34 is out of range max 32 [ 191.691440][ T1092] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.725706][T10650] netlink: 'syz.1.1308': attribute type 13 has an invalid length. [ 191.755119][T10647] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1307'. [ 191.808695][T10652] netlink: 300 bytes leftover after parsing attributes in process `syz.2.1307'. [ 191.826769][ T1092] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.878164][T10577] chnl_net:caif_netlink_parms(): no params data found [ 192.202679][T10577] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.227669][T10675] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.1314'. [ 192.237751][T10675] openvswitch: netlink: Unknown key attributes 20 [ 192.246671][T10577] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.276335][T10577] bridge_slave_0: entered allmulticast mode [ 192.296744][T10577] bridge_slave_0: entered promiscuous mode [ 192.339912][T10577] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.351970][T10577] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.363569][T10577] bridge_slave_1: entered allmulticast mode [ 192.376020][T10577] bridge_slave_1: entered promiscuous mode [ 192.436618][T10577] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 192.444744][T10686] netlink: 668 bytes leftover after parsing attributes in process `syz.4.1317'. [ 192.459207][T10577] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 192.471813][T10686] netlink: 668 bytes leftover after parsing attributes in process `syz.4.1317'. [ 192.471856][T10672] lo speed is unknown, defaulting to 1000 [ 192.489292][ T1092] bridge_slave_1: left allmulticast mode [ 192.502741][ T1092] bridge_slave_1: left promiscuous mode [ 192.509308][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.541743][ T1092] bridge_slave_0: left allmulticast mode [ 192.555851][ T1092] bridge_slave_0: left promiscuous mode [ 192.567048][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.964423][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 192.978040][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 192.988643][ T1092] bond0 (unregistering): Released all slaves [ 192.995889][ T5835] Bluetooth: hci0: command tx timeout [ 193.078642][ T5835] Bluetooth: hci1: command tx timeout [ 193.098535][T10577] team0: Port device team_slave_0 added [ 193.113192][T10577] team0: Port device team_slave_1 added [ 193.258155][T10577] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.265374][T10577] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.293050][T10707] xt_TCPMSS: Only works on TCP SYN packets [ 193.294995][T10577] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.313480][T10577] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.321679][T10577] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.349152][T10577] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.523753][T10713] ax25_connect(): syz.2.1325 uses autobind, please contact jreuter@yaina.de [ 193.588041][T10577] hsr_slave_0: entered promiscuous mode [ 193.606357][T10577] hsr_slave_1: entered promiscuous mode [ 193.615084][T10577] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.634094][T10577] Cannot create hsr debugfs directory [ 193.750737][T10537] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 193.943013][T10537] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 193.961343][T10537] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 193.985735][T10537] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 194.033398][ T1092] hsr_slave_0: left promiscuous mode [ 194.041442][ T1092] hsr_slave_1: left promiscuous mode [ 194.048424][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.056860][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.065030][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.072483][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.092520][ T1092] veth1_macvtap: left promiscuous mode [ 194.098131][ T1092] veth0_macvtap: left promiscuous mode [ 194.104845][ T1092] veth1_vlan: left promiscuous mode [ 194.110458][ T1092] veth0_vlan: left promiscuous mode [ 194.524279][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 194.566051][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 194.606532][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.065503][ T5835] Bluetooth: hci0: command tx timeout [ 195.149662][ T5835] Bluetooth: hci1: command tx timeout [ 195.212827][T10737] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1333'. [ 195.289756][T10737] bond1: left allmulticast mode [ 195.297989][T10737] bond1: left promiscuous mode [ 195.315440][T10744] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1334'. [ 195.324542][T10737] bridge0: port 3(bond1) entered disabled state [ 195.352130][T10737] bridge_slave_1: left allmulticast mode [ 195.359901][T10737] bridge_slave_1: left promiscuous mode [ 195.371109][T10737] bridge0: port 2(bridge_slave_1) entered disabled state [ 195.385694][T10737] bridge_slave_0: left allmulticast mode [ 195.391540][T10737] bridge0: port 1(bridge_slave_0) entered disabled state [ 195.429950][T10753] netlink: 'syz.1.1336': attribute type 1 has an invalid length. [ 195.455377][T10753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1336'. [ 195.545177][T10537] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.632858][T10537] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.669700][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.676886][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.811518][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.818724][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.831031][T10765] x_tables: duplicate underflow at hook 3 [ 196.022237][T10771] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1339'. [ 196.057141][T10771] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1339'. [ 196.177239][T10577] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 196.259841][T10577] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 196.313047][T10577] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 196.330866][T10786] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1341'. [ 196.341817][T10577] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 196.390587][T10793] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1341'. [ 196.420264][T10786] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 196.433041][T10786] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 196.441922][T10786] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 196.548065][T10537] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.714742][T10537] veth0_vlan: entered promiscuous mode [ 196.763235][T10577] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.772208][T10537] veth1_vlan: entered promiscuous mode [ 196.817927][T10577] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.834231][T10537] veth0_macvtap: entered promiscuous mode [ 196.862194][T10537] veth1_macvtap: entered promiscuous mode [ 196.874786][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.881968][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.927445][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.934606][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 197.002100][T10537] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.031265][T10537] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.051964][T10537] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.070382][T10537] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.082805][T10537] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.092495][T10537] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.239203][ T5835] Bluetooth: hci1: command tx timeout [ 197.263643][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.282241][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.330823][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 197.353265][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.430493][T10577] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.533279][T10577] veth0_vlan: entered promiscuous mode [ 197.593777][T10577] veth1_vlan: entered promiscuous mode [ 197.626997][T10577] veth0_macvtap: entered promiscuous mode [ 197.630841][T10832] netlink: 187320 bytes leftover after parsing attributes in process `syz.4.1354'. [ 197.637630][T10577] veth1_macvtap: entered promiscuous mode [ 197.648564][T10832] netlink: zone id is out of range [ 197.653880][T10832] netlink: zone id is out of range [ 197.661505][T10832] netlink: zone id is out of range [ 197.668850][T10832] netlink: zone id is out of range [ 197.672592][T10577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.685880][T10832] netlink: zone id is out of range [ 197.687420][T10577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.691094][T10832] netlink: zone id is out of range [ 197.709461][T10832] netlink: zone id is out of range [ 197.714698][T10832] netlink: zone id is out of range [ 197.728721][T10832] netlink: zone id is out of range [ 197.736608][T10577] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.753829][T10832] netlink: zone id is out of range [ 197.772450][T10577] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.791691][T10577] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.803844][T10577] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.822906][T10577] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.843735][T10577] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.866006][T10577] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.874775][T10577] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.001132][T10850] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1356'. [ 198.158026][ T1092] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.218137][T10854] vlan3: entered promiscuous mode [ 198.223425][T10854] vlan3: entered allmulticast mode [ 198.233137][T10854] hsr_slave_1: entered allmulticast mode [ 198.253927][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.282951][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.321658][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.330382][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.359129][ T1092] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.582326][ T1092] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.779090][ T1092] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.912084][ T1092] bridge_slave_1: left allmulticast mode [ 198.917964][ T1092] bridge_slave_1: left promiscuous mode [ 198.923656][ T1092] bridge0: port 2(bridge_slave_1) entered disabled state [ 198.933591][ T1092] bridge_slave_0: left allmulticast mode [ 198.939787][ T1092] bridge_slave_0: left promiscuous mode [ 198.948106][ T1092] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.259952][ T1092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.270979][ T1092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.282020][ T1092] bond0 (unregistering): Released all slaves [ 199.680771][T10868] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1360'. [ 199.983467][ T1092] hsr_slave_0: left promiscuous mode [ 200.008776][ T1092] hsr_slave_1: left promiscuous mode [ 200.014728][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.053949][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.112841][ T1092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.124652][ T1092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.239813][ T1092] veth1_macvtap: left promiscuous mode [ 200.263594][ T1092] veth0_macvtap: left promiscuous mode [ 200.284976][ T1092] veth1_vlan: left promiscuous mode [ 200.303230][ T1092] veth0_vlan: left promiscuous mode [ 200.344086][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.358106][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.370387][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.383614][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.391880][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 200.399820][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.452061][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.462480][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.471763][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.481522][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.489666][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 200.497598][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 201.102845][ T1092] team0 (unregistering): Port device team_slave_1 removed [ 201.153237][ T1092] team0 (unregistering): Port device team_slave_0 removed [ 201.630759][T10895] lo speed is unknown, defaulting to 1000 [ 202.023684][T10888] lo speed is unknown, defaulting to 1000 [ 202.314281][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.438925][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.505034][ T5835] Bluetooth: hci0: command tx timeout [ 202.586233][ T5835] Bluetooth: hci1: command tx timeout [ 202.599303][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.609199][T10937] netlink: 'syz.4.1378': attribute type 1 has an invalid length. [ 202.639307][T10937] netlink: 'syz.4.1378': attribute type 10 has an invalid length. [ 202.647947][T10895] chnl_net:caif_netlink_parms(): no params data found [ 202.666385][T10937] __nla_validate_parse: 1 callbacks suppressed [ 202.666403][T10937] netlink: 236 bytes leftover after parsing attributes in process `syz.4.1378'. [ 202.749845][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 203.000465][T10957] net_ratelimit: 1472 callbacks suppressed [ 203.000485][T10957] openvswitch: netlink: EtherType 50a is less than min 600 [ 203.016037][T10895] bridge0: port 1(bridge_slave_0) entered blocking state [ 203.035327][T10895] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.042563][T10895] bridge_slave_0: entered allmulticast mode [ 203.051952][T10895] bridge_slave_0: entered promiscuous mode [ 203.105452][T10957] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1384'. [ 203.125653][T10895] bridge0: port 2(bridge_slave_1) entered blocking state [ 203.132889][T10895] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.156297][T10895] bridge_slave_1: entered allmulticast mode [ 203.163379][T10895] bridge_slave_1: entered promiscuous mode [ 203.245486][T10963] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1386'. [ 203.255898][T10888] chnl_net:caif_netlink_parms(): no params data found [ 203.276066][T10963] netlink: 1280 bytes leftover after parsing attributes in process `syz.1.1386'. [ 203.299346][T10895] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 203.399635][T10895] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.428531][ T35] bridge_slave_1: left allmulticast mode [ 203.434601][ T35] bridge_slave_1: left promiscuous mode [ 203.442575][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.468598][ T35] bridge_slave_0: left allmulticast mode [ 203.485193][ T35] bridge_slave_0: left promiscuous mode [ 203.490999][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.894140][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.907237][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.918452][ T35] bond0 (unregistering): Released all slaves [ 204.008921][T10895] team0: Port device team_slave_0 added [ 204.082364][T10895] team0: Port device team_slave_1 added [ 204.115793][T10985] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1392'. [ 204.201778][T10888] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.221992][T10888] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.223054][T10992] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1394'. [ 204.231260][T10888] bridge_slave_0: entered allmulticast mode [ 204.246840][T10888] bridge_slave_0: entered promiscuous mode [ 204.279063][T10888] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.310048][T10888] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.320378][T10888] bridge_slave_1: entered allmulticast mode [ 204.334681][T10888] bridge_slave_1: entered promiscuous mode [ 204.380725][T10895] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 204.393181][T10895] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.461215][T10895] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 204.484530][T10895] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 204.497251][T10895] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 204.538261][T10895] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 204.585263][ T5835] Bluetooth: hci0: command tx timeout [ 204.634629][T10888] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.648382][T10888] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.658081][T11016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1397'. [ 204.667489][ T5835] Bluetooth: hci1: command tx timeout [ 204.675781][T11010] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1396'. [ 204.829213][T10895] hsr_slave_0: entered promiscuous mode [ 204.835814][T10895] hsr_slave_1: entered promiscuous mode [ 204.841977][T10895] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 204.850822][T10895] Cannot create hsr debugfs directory [ 204.864036][T10888] team0: Port device team_slave_0 added [ 204.931135][T11026] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1401'. [ 204.983819][T10888] team0: Port device team_slave_1 added [ 205.044117][T11024] lo speed is unknown, defaulting to 1000 [ 205.171538][ T35] hsr_slave_0: left promiscuous mode [ 205.182784][ T35] hsr_slave_1: left promiscuous mode [ 205.215648][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 205.223122][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 205.241917][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 205.254989][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 205.295416][ T35] veth1_macvtap: left promiscuous mode [ 205.300994][ T35] veth0_macvtap: left promiscuous mode [ 205.307147][ T35] veth1_vlan: left promiscuous mode [ 205.312899][ T35] veth0_vlan: left promiscuous mode [ 205.859268][ T35] team0 (unregistering): Port device team_slave_1 removed [ 205.901506][ T35] team0 (unregistering): Port device team_slave_0 removed [ 206.328492][T10888] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.339696][T10888] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.371903][T10888] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 206.424701][T10888] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 206.432665][T10888] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.474975][T10888] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.568765][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1410'. [ 206.599578][T11064] SET target dimension over the limit! [ 206.665281][ T5835] Bluetooth: hci0: command tx timeout [ 206.690688][T10888] hsr_slave_0: entered promiscuous mode [ 206.700446][T10888] hsr_slave_1: entered promiscuous mode [ 206.721173][T10888] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.732098][T10888] Cannot create hsr debugfs directory [ 206.745127][ T5835] Bluetooth: hci1: command tx timeout [ 206.859711][T11070] veth1_macvtap: left promiscuous mode [ 206.865872][T11070] macsec0: entered promiscuous mode [ 207.143536][T10895] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 207.185925][T10895] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 207.201921][T10895] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 207.213494][T10895] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 207.233439][T11079] xt_CT: No such helper "pptp" [ 207.331690][T11083] lo speed is unknown, defaulting to 1000 [ 207.360140][T10895] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.408553][T10895] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.450287][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.457477][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.471798][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.478988][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.553942][T11089] bond_slave_1: entered promiscuous mode [ 207.581695][T10895] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 207.610841][T10895] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 207.672080][T11089] bond_slave_1: left promiscuous mode [ 207.790020][T10888] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 207.814708][T10888] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 207.831302][T10888] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 207.852668][T10888] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 207.989867][T10895] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.171785][T10895] veth0_vlan: entered promiscuous mode [ 208.236629][T10888] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.257834][T11122] __nla_validate_parse: 2 callbacks suppressed [ 208.257852][T11122] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1425'. [ 208.277604][T11122] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1425'. [ 208.300748][T10895] veth1_vlan: entered promiscuous mode [ 208.302289][T11122] netlink: 'syz.1.1425': attribute type 33 has an invalid length. [ 208.307798][T11124] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 208.317217][T11122] netlink: 152 bytes leftover after parsing attributes in process `syz.1.1425'. [ 208.340351][T10888] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.390773][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.397978][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.420266][ T3016] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.427470][ T3016] bridge0: port 2(bridge_slave_1) entered forwarding state [ 208.428423][T11127] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1427'. [ 208.458284][T10895] veth0_macvtap: entered promiscuous mode [ 208.468083][T11127] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 208.508668][T10895] veth1_macvtap: entered promiscuous mode [ 208.566472][T10895] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.581266][T10895] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.607913][T10895] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.618308][T10895] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.627448][T11137] IPVS: set_ctl: invalid protocol: 44 172.20.20.21:20001 [ 208.644936][T10895] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.653852][T10895] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.745194][ T5835] Bluetooth: hci0: command tx timeout [ 208.802728][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.825781][ T5835] Bluetooth: hci1: command tx timeout [ 208.832047][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.852402][T11142] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 208.877541][ T3016] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.889294][ T3016] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.048284][T10888] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.068537][T11150] netlink: 65047 bytes leftover after parsing attributes in process `syz.2.1433'. [ 209.170502][T10888] veth0_vlan: entered promiscuous mode [ 209.191642][T10888] veth1_vlan: entered promiscuous mode [ 209.199184][T11153] netlink: 'syz.1.1435': attribute type 3 has an invalid length. [ 209.251801][T10888] veth0_macvtap: entered promiscuous mode [ 209.271709][T10888] veth1_macvtap: entered promiscuous mode [ 209.309352][T10888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.334586][T10888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.366185][T10888] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.384463][T10888] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.411527][T10888] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.423244][T11165] netlink: 'syz.1.1437': attribute type 8 has an invalid length. [ 209.444432][T10888] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.464003][T10888] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.473535][T11165] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1437'. [ 209.483828][T10888] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.507297][T10888] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.531895][T10888] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.698361][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.734715][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.798633][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.821397][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.309458][T11176] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1441'. [ 210.659670][ T1139] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.224313][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 211.236446][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 211.244527][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 211.255846][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 211.264208][ T5840] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 211.272564][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 211.314365][T11195] lo speed is unknown, defaulting to 1000 [ 211.520910][T11195] chnl_net:caif_netlink_parms(): no params data found [ 211.578222][T11206] xt_l2tp: invalid flags combination: 4 [ 211.584039][T11207] xt_l2tp: invalid flags combination: 4 [ 211.747950][T11215] netlink: 'syz.1.1450': attribute type 1 has an invalid length. [ 211.765193][T11215] netlink: 'syz.1.1450': attribute type 2 has an invalid length. [ 211.783720][T11215] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 211.856741][T11225] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 211.917603][ T1139] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.953561][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 211.969739][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 211.982941][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 212.008290][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 212.019966][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 212.027699][T11195] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.037102][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 212.038956][T11231] xt_hashlimit: overflow, rate too high: 0 [ 212.049206][T11195] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.058202][T11195] bridge_slave_0: entered allmulticast mode [ 212.066474][T11195] bridge_slave_0: entered promiscuous mode [ 212.074726][T11195] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.082754][T11195] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.090664][T11195] bridge_slave_1: entered allmulticast mode [ 212.100923][T11195] bridge_slave_1: entered promiscuous mode [ 212.141533][ T1139] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.263669][ T1139] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 212.289824][T11195] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.312359][T11233] ip6erspan0: entered promiscuous mode [ 212.333753][T11227] lo speed is unknown, defaulting to 1000 [ 212.336704][T11195] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.429087][T11195] team0: Port device team_slave_0 added [ 212.496353][T11195] team0: Port device team_slave_1 added [ 212.543437][T11253] sock: sock_timestamping_bind_phc: sock not bind to device [ 212.653533][T11195] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.667056][T11195] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.699940][T11195] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.770838][T11195] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.844893][T11195] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.932871][T11195] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.976764][T11275] netlink: 'syz.2.1462': attribute type 1 has an invalid length. [ 213.021885][T11275] netlink: 'syz.2.1462': attribute type 2 has an invalid length. [ 213.141598][T11281] raw_sendmsg: syz.1.1463 forgot to set AF_INET. Fix it! [ 213.164084][ T1139] bridge_slave_1: left allmulticast mode [ 213.194964][ T1139] bridge_slave_1: left promiscuous mode [ 213.200749][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 213.217110][ T1139] bridge_slave_0: left allmulticast mode [ 213.226197][ T1139] bridge_slave_0: left promiscuous mode [ 213.240038][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 213.305852][ T5840] Bluetooth: hci0: command tx timeout [ 213.759713][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 213.770591][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 213.781726][ T1139] bond0 (unregistering): Released all slaves [ 213.814600][T11195] hsr_slave_0: entered promiscuous mode [ 213.835641][T11195] hsr_slave_1: entered promiscuous mode [ 213.842070][T11195] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.850338][T11195] Cannot create hsr debugfs directory [ 213.977667][T11296] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1466'. [ 214.109541][ T5840] Bluetooth: hci1: command tx timeout [ 214.276248][T11227] chnl_net:caif_netlink_parms(): no params data found [ 214.511937][ T1139] hsr_slave_0: left promiscuous mode [ 214.524513][ T1139] hsr_slave_1: left promiscuous mode [ 214.534632][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.543040][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.551318][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.559284][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.582402][ T1139] veth1_macvtap: left promiscuous mode [ 214.589726][ T1139] veth0_macvtap: left promiscuous mode [ 214.596524][ T1139] veth1_vlan: left promiscuous mode [ 214.601936][ T1139] veth0_vlan: left promiscuous mode [ 215.130937][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 215.177793][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 215.398831][ T5840] Bluetooth: hci0: command tx timeout [ 215.606767][T11321] team0: Device vti0 is of different type [ 215.636827][T11326] netlink: 'syz.1.1474': attribute type 21 has an invalid length. [ 215.780541][T11227] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.815313][T11227] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.822615][T11227] bridge_slave_0: entered allmulticast mode [ 215.833422][T11227] bridge_slave_0: entered promiscuous mode [ 215.906051][T11227] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.913217][T11227] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.942808][T11227] bridge_slave_1: entered allmulticast mode [ 215.961372][T11227] bridge_slave_1: entered promiscuous mode [ 216.027544][T11227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.098722][T11227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.187531][ T5840] Bluetooth: hci1: command tx timeout [ 216.213816][T11352] bond0: entered promiscuous mode [ 216.223402][T11352] bond_slave_0: entered promiscuous mode [ 216.233991][T11357] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1481'. [ 216.248059][T11352] bond_slave_1: entered promiscuous mode [ 216.254075][T11352] team0: entered promiscuous mode [ 216.261987][T11352] team_slave_0: entered promiscuous mode [ 216.284044][T11352] team_slave_1: entered promiscuous mode [ 216.318792][T11227] team0: Port device team_slave_0 added [ 216.394256][T11227] team0: Port device team_slave_1 added [ 216.424100][T11195] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 216.436590][T11195] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 216.465872][T11227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.484963][T11227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.529537][T11367] netlink: 'syz.4.1485': attribute type 10 has an invalid length. [ 216.530868][T11227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.571912][T11195] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 216.593104][T11367] veth0_macvtap: left promiscuous mode [ 216.613763][T11227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.624549][T11227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.666229][T11227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.693350][T11195] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 216.750567][T11377] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.1488'. [ 216.769383][T11377] openvswitch: netlink: Missing key (keys=40, expected=80) [ 216.780500][T11375] tipc: Enabling of bearer rejected, already enabled [ 216.829284][T11227] hsr_slave_0: entered promiscuous mode [ 216.846485][T11227] hsr_slave_1: entered promiscuous mode [ 216.853132][T11227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.897831][T11227] Cannot create hsr debugfs directory [ 216.979602][ T1139] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.021193][T11391] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1491'. [ 217.029772][T11386] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1491'. [ 217.050329][T11391] wg0: Master is either lo or non-ether device [ 217.057776][T11386] wg0: Master is either lo or non-ether device [ 217.089278][T11386] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1491'. [ 217.119755][ T1139] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.242715][ T1139] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.383274][ T1139] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.465841][ T5840] Bluetooth: hci0: command tx timeout [ 217.608307][T11195] 8021q: adding VLAN 0 to HW filter on device bond0 [ 217.653953][T11411] tipc: Started in network mode [ 217.665169][T11411] tipc: Node identity , cluster identity 4711 [ 217.690238][T11411] netlink: 2 bytes leftover after parsing attributes in process `syz.1.1501'. [ 217.713612][T11195] 8021q: adding VLAN 0 to HW filter on device team0 [ 217.764214][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.771421][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 217.807383][ T1139] bridge_slave_1: left allmulticast mode [ 217.819037][ T1139] bridge_slave_1: left promiscuous mode [ 217.825991][ T1139] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.840873][ T1139] bridge_slave_0: left allmulticast mode [ 217.847307][ T1139] bridge_slave_0: left promiscuous mode [ 217.853805][ T1139] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.277901][ T5840] Bluetooth: hci1: command tx timeout [ 218.343256][ T1139] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 218.355070][ T1139] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 218.366352][ T1139] bond0 (unregistering): Released all slaves [ 218.457836][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.465035][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 218.802104][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1508'. [ 218.821372][T11451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1508'. [ 218.895838][T11451] netdevsim netdevsim1 eth0: set [1, 1] type 2 family 0 port 59292 - 0 [ 218.904468][T11451] netdevsim netdevsim1 eth1: set [1, 1] type 2 family 0 port 59292 - 0 [ 218.919515][T11451] netdevsim netdevsim1 eth2: set [1, 1] type 2 family 0 port 59292 - 0 [ 218.927894][T11451] netdevsim netdevsim1 eth3: set [1, 1] type 2 family 0 port 59292 - 0 [ 218.936949][T11451] geneve2: entered promiscuous mode [ 218.942216][T11451] geneve2: entered allmulticast mode [ 218.970697][ T1139] hsr_slave_0: left promiscuous mode [ 218.993764][ T1139] hsr_slave_1: left promiscuous mode [ 219.004684][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.026539][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.036023][ T1139] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.045990][ T1139] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.074118][ T1139] veth1_macvtap: left promiscuous mode [ 219.079761][ T1139] veth0_macvtap: left promiscuous mode [ 219.085602][ T1139] veth1_vlan: left promiscuous mode [ 219.090923][ T1139] veth0_vlan: left promiscuous mode [ 219.170811][T11459] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1510'. [ 219.181502][T11459] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1510'. [ 219.546198][ T5835] Bluetooth: hci0: command tx timeout [ 219.586293][ T1139] team0 (unregistering): Port device team_slave_1 removed [ 219.660219][T11463] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1511'. [ 219.803064][ T1139] team0 (unregistering): Port device team_slave_0 removed [ 220.354993][ T5835] Bluetooth: hci1: command tx timeout [ 220.531269][T11195] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 220.565732][T11479] openvswitch: netlink: Message has 20 unknown bytes. [ 220.623356][T11227] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.662154][T11484] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 220.729667][T11227] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.768749][T11227] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.878226][T11227] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.919839][T11195] veth0_vlan: entered promiscuous mode [ 220.943678][T11195] veth1_vlan: entered promiscuous mode [ 220.967769][T11498] team0: Device is already in use. [ 221.031355][T11195] veth0_macvtap: entered promiscuous mode [ 221.105670][T11195] veth1_macvtap: entered promiscuous mode [ 221.148528][T11195] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.180269][T11195] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.236255][T11195] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.256443][T11195] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.275716][T11195] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.285306][T11195] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.371653][T11227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.509499][T11227] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.606173][ T1174] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.613374][ T1174] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.642166][T11554] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 221.676846][T11520] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.683981][T11520] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.722663][T11561] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1530'. [ 221.731946][ T1174] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.747463][ T1174] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.797535][T11523] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.816780][T11523] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.166904][T11580] (unnamed net_device) (uninitialized): option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 222.188488][T11580] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1534'. [ 222.202286][T11580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1534'. [ 222.214270][T11583] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 222.412653][ T1174] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.426787][ T5835] Bluetooth: hci1: command 0x0405 tx timeout [ 222.452753][T11227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 222.526490][ T1174] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.548380][T11227] veth0_vlan: entered promiscuous mode [ 222.558786][T11227] veth1_vlan: entered promiscuous mode [ 222.581749][T11227] veth0_macvtap: entered promiscuous mode [ 222.592674][T11227] veth1_macvtap: entered promiscuous mode [ 222.616559][ T1174] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.640881][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 222.651714][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.663985][T11227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 222.682876][T11227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.693974][T11227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.715649][T11227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.742127][ T1174] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 222.760778][T11227] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.770554][T11227] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.779419][T11227] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.789019][T11227] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.851867][ T7268] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.867451][ T7268] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.889866][T11520] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.898965][T11520] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 223.113751][ T1174] bridge_slave_1: left allmulticast mode [ 223.119714][ T1174] bridge_slave_1: left promiscuous mode [ 223.126651][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.136916][ T1174] bridge_slave_0: left allmulticast mode [ 223.142572][ T1174] bridge_slave_0: left promiscuous mode [ 223.149655][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.440701][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.452578][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.463721][ T1174] bond0 (unregistering): Released all slaves [ 223.784065][ T1174] hsr_slave_0: left promiscuous mode [ 223.793354][ T1174] hsr_slave_1: left promiscuous mode [ 223.811765][ T1174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.820141][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.828370][ T1174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.836132][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 223.861324][ T1174] veth1_macvtap: left promiscuous mode [ 223.867103][ T1174] veth0_macvtap: left promiscuous mode [ 223.872721][ T1174] veth1_vlan: left promiscuous mode [ 223.878684][ T1174] veth0_vlan: left promiscuous mode [ 224.233368][ T5835] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 224.247843][ T5835] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 224.257006][ T5835] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 224.271204][ T5835] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 224.287418][ T5835] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 224.294984][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 224.468474][ T1174] team0 (unregistering): Port device team_slave_1 removed [ 224.547247][ T1174] team0 (unregistering): Port device team_slave_0 removed [ 224.571983][T11597] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 224.797118][T11610] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.015367][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.030242][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.044182][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.059680][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.076047][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 225.087449][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 225.330397][T11616] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1543'. [ 225.388803][T11619] lo speed is unknown, defaulting to 1000 [ 225.485865][T11625] netlink: 808 bytes leftover after parsing attributes in process `syz.4.1544'. [ 225.549138][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1545'. [ 225.605288][T11628] bond3: entered promiscuous mode [ 225.611148][T11628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.821800][T11593] lo speed is unknown, defaulting to 1000 [ 225.908258][T11628] 8021q: adding VLAN 0 to HW filter on device bond3 [ 225.926657][T11628] bond3: (slave vti0): The slave device specified does not support setting the MAC address [ 225.943942][T11646] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1548'. [ 225.946603][T11628] bond3: (slave vti0): Error -95 calling set_mac_address [ 225.961957][T11647] netlink: 76 bytes leftover after parsing attributes in process `syz.1.1548'. [ 226.160638][ T1174] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.210162][T11657] netem: incorrect ge model size [ 226.217455][T11657] netem: change failed [ 226.318476][ T1174] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.333844][T11662] xt_TPROXY: Can be used only with -p tcp or -p udp [ 226.345404][ T5840] Bluetooth: hci0: command tx timeout [ 226.350923][T11662] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1554'. [ 226.379910][T11619] chnl_net:caif_netlink_parms(): no params data found [ 226.489422][ T1174] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.530400][T11667] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1556'. [ 226.544535][T11671] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1557'. [ 226.584716][T11676] lo speed is unknown, defaulting to 1000 [ 226.647698][ T1174] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.795926][T11674] tunl0: entered promiscuous mode [ 226.958331][T11619] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.974746][T11619] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.006443][T11619] bridge_slave_0: entered allmulticast mode [ 227.013578][T11619] bridge_slave_0: entered promiscuous mode [ 227.057603][T11619] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.065311][T11619] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.072687][T11619] bridge_slave_1: entered allmulticast mode [ 227.079722][T11619] bridge_slave_1: entered promiscuous mode [ 227.090186][T11698] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1564'. [ 227.112289][T11619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 227.128272][T11619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 227.129978][T11699] netlink: 'syz.2.1563': attribute type 1 has an invalid length. [ 227.145104][ T5840] Bluetooth: hci1: command tx timeout [ 227.167013][T11698] can: request_module (can-proto-0) failed. [ 227.173366][T11693] tipc: Enabled bearer , priority 11 [ 227.305887][T11704] xt_TCPMSS: Only works on TCP SYN packets [ 227.322722][T11619] team0: Port device team_slave_0 added [ 227.337692][T11619] team0: Port device team_slave_1 added [ 227.348119][T11593] chnl_net:caif_netlink_parms(): no params data found [ 227.445993][ T1174] bridge_slave_1: left allmulticast mode [ 227.459016][ T1174] bridge_slave_1: left promiscuous mode [ 227.469898][ T1174] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.487226][ T1174] bridge_slave_0: left allmulticast mode [ 227.493792][ T1174] bridge_slave_0: left promiscuous mode [ 227.504302][T11709] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1568'. [ 227.516559][ T1174] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.954595][ T1174] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 227.966155][ T1174] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 227.977280][ T1174] bond0 (unregistering): Released all slaves [ 228.021792][T11619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.032995][T11619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.063566][T11619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.125559][T11619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.132570][T11619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.169943][ T8] tipc: Node number set to 2886997162 [ 228.173942][T11619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 228.427996][ T5840] Bluetooth: hci0: command tx timeout [ 228.440299][T11593] bridge0: port 1(bridge_slave_0) entered blocking state [ 228.448915][T11593] bridge0: port 1(bridge_slave_0) entered disabled state [ 228.459015][T11593] bridge_slave_0: entered allmulticast mode [ 228.466870][T11593] bridge_slave_0: entered promiscuous mode [ 228.493863][T11593] bridge0: port 2(bridge_slave_1) entered blocking state [ 228.502957][T11593] bridge0: port 2(bridge_slave_1) entered disabled state [ 228.511511][T11593] bridge_slave_1: entered allmulticast mode [ 228.523805][T11593] bridge_slave_1: entered promiscuous mode [ 228.545129][T11619] hsr_slave_0: entered promiscuous mode [ 228.560230][T11619] hsr_slave_1: entered promiscuous mode [ 228.581997][T11619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 228.612543][T11619] Cannot create hsr debugfs directory [ 228.717976][T11593] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.760318][T11750] set match dimension is over the limit! [ 228.858633][ T1174] hsr_slave_0: left promiscuous mode [ 228.885578][ T1174] hsr_slave_1: left promiscuous mode [ 228.895332][ T1174] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.902910][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 228.914604][ T1174] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.923864][ T1174] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 228.949125][ T1174] veth1_macvtap: left promiscuous mode [ 228.954654][ T1174] veth0_macvtap: left promiscuous mode [ 228.961264][ T1174] veth1_vlan: left promiscuous mode [ 228.967010][ T1174] veth0_vlan: left promiscuous mode [ 229.230355][ T5840] Bluetooth: hci1: command tx timeout [ 229.398336][ T1174] team0 (unregistering): Port device team_slave_1 removed [ 229.443253][ T1174] team0 (unregistering): Port device team_slave_0 removed [ 229.885783][T11593] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 229.994410][T11766] openvswitch: netlink: IP tunnel TTL not specified. [ 230.083980][T11593] team0: Port device team_slave_0 added [ 230.105679][T11593] team0: Port device team_slave_1 added [ 230.223112][T11593] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 230.244320][T11593] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.300301][T11593] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 230.317008][T11593] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 230.323997][T11593] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 230.350757][T11593] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 230.401844][T11779] Cannot find set identified by id 752 to match [ 230.471512][T11593] hsr_slave_0: entered promiscuous mode [ 230.486224][T11593] hsr_slave_1: entered promiscuous mode [ 230.496508][T11593] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 230.505221][ T5840] Bluetooth: hci0: command tx timeout [ 230.514725][T11593] Cannot create hsr debugfs directory [ 230.811896][T11792] __nla_validate_parse: 3 callbacks suppressed [ 230.811915][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1592'. [ 230.833165][T11792] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1592'. [ 231.041170][T11619] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 231.052860][T11619] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 231.083845][T11619] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 231.108597][T11806] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1594'. [ 231.152830][T11619] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 231.185959][T11810] IPVS: set_ctl: invalid protocol: 41 224.0.0.2:0 [ 231.305068][ T5840] Bluetooth: hci1: command tx timeout [ 231.315421][T11619] 8021q: adding VLAN 0 to HW filter on device bond0 [ 231.350640][T11619] 8021q: adding VLAN 0 to HW filter on device team0 [ 231.386962][ T67] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.394101][ T67] bridge0: port 1(bridge_slave_0) entered forwarding state [ 231.504256][ T67] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.511474][ T67] bridge0: port 2(bridge_slave_1) entered forwarding state [ 231.582040][T11818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1598'. [ 231.641043][T11818] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1598'. [ 231.671737][T11619] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 231.694795][T11593] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 231.727927][T11593] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 231.864135][T11593] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 232.619283][ T5840] Bluetooth: hci0: command tx timeout [ 233.365790][T11593] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 233.385166][ T5840] Bluetooth: hci1: command tx timeout [ 239.844838][ C0] sched: DL replenish lagged too much [ 250.248950][T11619] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 256.054017][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 260.795044][T11868] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1610'. [ 275.815960][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 275.935276][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 275.949028][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 275.968929][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 276.345620][ T5835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 276.352982][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 278.545197][ T5835] Bluetooth: hci4: command tx timeout [ 280.605333][ T5835] Bluetooth: hci4: command tx timeout [ 282.666325][ T5835] Bluetooth: hci4: command tx timeout [ 283.868500][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 283.878872][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 283.888627][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 283.899472][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 284.041003][ T5840] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 284.048805][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 284.745518][ T5840] Bluetooth: hci4: command tx timeout [ 286.185512][ T5840] Bluetooth: hci5: command tx timeout [ 288.265471][ T5840] Bluetooth: hci5: command tx timeout [ 290.515021][ T5840] Bluetooth: hci5: command tx timeout [ 292.594021][ T5840] Bluetooth: hci5: command tx timeout [ 302.936520][ T5835] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 302.955183][ T5835] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.010147][ T5835] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.019782][ T5835] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.226409][ T5835] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 303.237275][ T5835] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 305.389461][ T5840] Bluetooth: hci6: command tx timeout [ 307.468981][ T5840] Bluetooth: hci6: command tx timeout [ 309.549054][ T5840] Bluetooth: hci6: command tx timeout [ 309.846053][ T5835] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 309.895378][ T5835] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 309.903836][ T5835] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 309.914277][ T5835] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 310.006322][ T5835] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 310.013900][ T5835] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 311.628891][ T5840] Bluetooth: hci6: command tx timeout [ 311.891120][ T5835] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 311.902137][ T5835] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 311.918403][ T5835] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 311.926574][ T5835] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 311.934128][ T5835] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 311.942836][ T5835] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 312.108575][ T5835] Bluetooth: hci7: command tx timeout [ 314.195626][ T5835] Bluetooth: hci7: command tx timeout [ 314.346087][ T5835] Bluetooth: hci8: command tx timeout [ 316.265565][ T5835] Bluetooth: hci7: command tx timeout [ 316.655013][ T5835] Bluetooth: hci8: command tx timeout [ 317.494923][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 318.345403][ T5835] Bluetooth: hci7: command tx timeout [ 318.665870][ T5835] Bluetooth: hci8: command tx timeout [ 320.585168][ T1174] gretap0 (unregistering): left promiscuous mode [ 320.756160][ T5835] Bluetooth: hci8: command tx timeout [ 327.610517][ T5840] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 327.620760][ T5840] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 327.986216][ T5840] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 328.050420][ T5840] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 328.202026][ T5840] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 328.209822][ T5840] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 330.505959][ T5840] Bluetooth: hci9: command tx timeout [ 332.661088][ T5840] Bluetooth: hci9: command tx timeout [ 334.745623][ T5840] Bluetooth: hci9: command tx timeout [ 336.995074][ T5840] Bluetooth: hci9: command tx timeout [ 342.717582][ T5835] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 342.758151][ T5835] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 342.772032][ T5835] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 342.796716][ T5835] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 342.875758][ T5835] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 342.883778][ T5835] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 344.985148][ T5835] Bluetooth: hci10: command tx timeout [ 347.065740][ T5835] Bluetooth: hci10: command tx timeout [ 349.154927][ T5840] Bluetooth: hci10: command tx timeout [ 350.267579][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 351.331077][ T5835] Bluetooth: hci10: command tx timeout [ 351.778380][ T1174] bond1 (unregistering): Released all slaves [ 353.172266][ T1174] bond0 (unregistering): Released all slaves [ 355.465798][ T5840] Bluetooth: hci1: command 0x0406 tx timeout [ 358.727004][ T5843] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 358.784092][ T5843] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 358.805767][ T5843] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 358.813808][ T5843] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 358.825956][ T5843] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 358.833342][ T5843] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 361.085062][ T5835] Bluetooth: hci11: command tx timeout [ 363.235019][ T5835] Bluetooth: hci11: command tx timeout [ 365.285313][ T1174] : left promiscuous mode [ 365.515682][ T5835] Bluetooth: hci11: command tx timeout [ 367.668146][ T5835] Bluetooth: hci11: command tx timeout [ 369.649318][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 369.750159][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 369.898804][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 370.108897][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 370.161602][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 370.170230][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 372.808037][ T5843] Bluetooth: hci0: command tx timeout [ 374.425875][ T5835] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 374.531273][ T5835] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 374.695336][ T5835] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 374.703275][ T5835] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 374.712611][ T5835] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 374.720411][ T5835] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 374.876389][ T5835] Bluetooth: hci0: command tx timeout [ 376.931655][ T5840] Bluetooth: hci1: command tx timeout [ 376.945828][ T5840] Bluetooth: hci0: command tx timeout [ 378.954049][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.005325][ T5843] Bluetooth: hci0: command tx timeout [ 379.010785][ T5843] Bluetooth: hci1: command tx timeout [ 381.145016][ T5843] Bluetooth: hci1: command tx timeout [ 383.225968][ T5843] Bluetooth: hci1: command tx timeout [ 385.877490][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 385.888914][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 386.027209][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 386.165908][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 386.324733][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 386.376772][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 388.205947][T11906] lo speed is unknown, defaulting to 1000 [ 388.528150][ T5843] Bluetooth: hci2: command tx timeout [ 390.655128][ T5843] Bluetooth: hci2: command tx timeout [ 392.665553][ T5843] Bluetooth: hci2: command tx timeout [ 395.006006][ T5843] Bluetooth: hci2: command tx timeout [ 396.113743][T11911] lo speed is unknown, defaulting to 1000 [ 404.725538][T11919] lo speed is unknown, defaulting to 1000 [ 409.536099][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 409.547833][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 409.556389][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 409.564338][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 409.573917][ T5840] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 409.581930][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 411.628564][ T5840] Bluetooth: hci3: command tx timeout [ 412.613480][T11936] lo speed is unknown, defaulting to 1000 [ 413.775851][ T5840] Bluetooth: hci3: command tx timeout [ 415.865243][ T5840] Bluetooth: hci3: command tx timeout [ 417.946099][ T5840] Bluetooth: hci3: command tx timeout [ 418.516527][T11926] lo speed is unknown, defaulting to 1000 [ 418.618740][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 418.629923][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 418.639997][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 418.653995][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 418.741589][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 418.898567][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 422.435907][ T5843] Bluetooth: hci4: command tx timeout [ 424.515276][ T5843] Bluetooth: hci4: command tx timeout [ 424.645610][T11928] lo speed is unknown, defaulting to 1000 [ 426.605344][ T5843] Bluetooth: hci4: command tx timeout [ 428.708224][ T5843] Bluetooth: hci4: command tx timeout [ 432.866059][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 432.878423][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 432.887441][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 432.897925][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 432.906358][ T5840] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 432.913611][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 433.550322][ T5840] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 433.622386][ T5840] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 433.632231][ T5840] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 433.696573][ T5840] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 433.715382][ T5840] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 433.724448][ T5840] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 434.110120][T11944] lo speed is unknown, defaulting to 1000 [ 435.556022][ T5840] Bluetooth: hci5: command tx timeout [ 436.025648][ T5840] Bluetooth: hci6: command tx timeout [ 436.346055][ T1174] batadv_slave_1: left promiscuous mode [ 436.721026][ T1174] hsr_slave_0: left promiscuous mode [ 436.736261][ T1174] hsr_slave_1: left promiscuous mode [ 437.635413][ T5840] Bluetooth: hci5: command tx timeout [ 438.106662][ T5840] Bluetooth: hci6: command tx timeout [ 438.308790][ T1174] veth1_vlan: left promiscuous mode [ 438.331577][ T1174] veth0_vlan: left promiscuous mode [ 439.767033][ T5840] Bluetooth: hci5: command tx timeout [ 440.185702][ T5840] Bluetooth: hci6: command tx timeout [ 440.417917][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.785987][ T5840] Bluetooth: hci5: command tx timeout [ 442.335061][ T5840] Bluetooth: hci6: command tx timeout [ 452.668429][ T5843] Bluetooth: hci9: command 0x0406 tx timeout [ 460.073018][ T5843] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 460.257282][ T5843] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 460.371619][ T5843] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 460.469967][ T5843] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 460.479336][ T5843] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 460.487518][ T5843] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 462.615936][ T5843] Bluetooth: hci7: command tx timeout [ 464.738224][ T5843] Bluetooth: hci7: command tx timeout [ 466.784935][ T5840] Bluetooth: hci7: command tx timeout [ 468.034937][ T5840] Bluetooth: hci10: command 0x0406 tx timeout [ 468.825646][ T5840] Bluetooth: hci7: command tx timeout [ 472.319973][ T5840] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 472.975830][ T5840] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 472.984495][ T5840] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 473.077016][ T5840] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 473.084627][ T5840] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 473.135666][ T5840] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 475.498034][ T5843] Bluetooth: hci8: command tx timeout [ 477.638014][ T5843] Bluetooth: hci8: command tx timeout [ 479.741850][ T5843] Bluetooth: hci8: command tx timeout [ 481.895405][ T5840] Bluetooth: hci8: command tx timeout [ 483.384986][ T5840] Bluetooth: hci11: command 0x0406 tx timeout [ 484.444124][ T1174] pim6reg527 (unregistering): left allmulticast mode [ 487.801689][ T5840] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 487.813460][ T5840] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 487.867348][ T5840] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 487.981805][ T5840] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 488.066179][ T5840] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 488.073634][ T5840] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 490.601529][ T5840] Bluetooth: hci12: command tx timeout [ 492.731367][ T5840] Bluetooth: hci12: command tx timeout [ 493.636364][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 493.910701][T11988] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 494.043543][T11988] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 494.052500][T11988] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 494.081272][ T5835] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 494.197365][ T5835] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 494.288103][ T5835] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 494.297058][ T5835] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 494.306332][ T5835] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 494.352350][ T5835] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 494.362030][ T5835] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 494.370680][T11993] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 494.378708][T11993] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 494.745879][T11993] Bluetooth: hci12: command tx timeout [ 496.506556][T11993] Bluetooth: hci13: command tx timeout [ 496.513010][T11993] Bluetooth: hci14: command tx timeout [ 497.441128][ T5843] Bluetooth: hci12: command tx timeout [ 498.644371][ T5843] Bluetooth: hci14: command tx timeout [ 498.644490][T11993] Bluetooth: hci13: command tx timeout [ 498.748494][T11993] Bluetooth: hci1: command 0x0406 tx timeout [ 500.698527][T11988] Bluetooth: hci13: command tx timeout [ 500.704086][T11988] Bluetooth: hci14: command tx timeout [ 501.921150][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 502.855114][T11988] Bluetooth: hci14: command tx timeout [ 502.860671][T11988] Bluetooth: hci13: command tx timeout [ 504.538685][T11993] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 504.696959][T11993] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 504.858574][T11993] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 504.868288][T11993] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 504.876742][T11993] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 505.017953][T11993] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 506.318393][ T1174] team0 (unregistering): Port device vlan0 removed [ 507.065551][T11988] Bluetooth: hci15: command tx timeout [ 508.985977][T11988] Bluetooth: hci2: command 0x0406 tx timeout [ 509.145589][T11988] Bluetooth: hci15: command tx timeout [ 511.225821][T11988] Bluetooth: hci15: command tx timeout [ 513.305632][T11988] Bluetooth: hci15: command tx timeout [ 526.576532][T11988] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 526.590534][T11988] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 526.599056][T11988] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 526.608165][T11988] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 526.665966][T11988] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 526.674498][T11988] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 528.825737][T11993] Bluetooth: hci16: command tx timeout [ 530.974773][T11993] Bluetooth: hci16: command tx timeout [ 533.135141][T11988] Bluetooth: hci16: command tx timeout [ 534.585347][T11988] Bluetooth: hci3: command 0x0406 tx timeout [ 535.186865][T11988] Bluetooth: hci16: command tx timeout [ 541.218668][ T1174] team0 (unregistering): Port device team_slave_1 removed [ 545.036238][T11988] Bluetooth: hci4: command 0x0406 tx timeout [ 546.802373][ T5843] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 546.838196][ T5843] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 546.847845][ T5843] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 546.856777][ T5843] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 546.865367][ T5843] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 546.875776][ T5843] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 547.147218][ T1174] team0 (unregistering): Port device team_slave_0 removed [ 550.025868][T11993] Bluetooth: hci17: command tx timeout [ 552.118513][T11993] Bluetooth: hci17: command tx timeout [ 553.360387][ T5843] Bluetooth: hci18: unexpected cc 0x0c03 length: 249 > 1 [ 553.371500][ T5843] Bluetooth: hci18: unexpected cc 0x1003 length: 249 > 9 [ 553.516493][ T5843] Bluetooth: hci18: unexpected cc 0x1001 length: 249 > 9 [ 553.599019][ T5843] Bluetooth: hci18: unexpected cc 0x0c23 length: 249 > 4 [ 554.049235][ T5843] Bluetooth: hci18: unexpected cc 0x0c25 length: 249 > 3 [ 554.215386][ T5843] Bluetooth: hci17: command tx timeout [ 554.220969][ T5843] Bluetooth: hci18: unexpected cc 0x0c38 length: 249 > 2 [ 554.929375][T11993] Bluetooth: hci19: unexpected cc 0x0c03 length: 249 > 1 [ 555.099110][T11993] Bluetooth: hci19: unexpected cc 0x1003 length: 249 > 9 [ 555.108090][T11993] Bluetooth: hci19: unexpected cc 0x1001 length: 249 > 9 [ 555.132070][T11993] Bluetooth: hci19: unexpected cc 0x0c23 length: 249 > 4 [ 555.398337][T11993] Bluetooth: hci19: unexpected cc 0x0c25 length: 249 > 3 [ 555.452176][T11993] Bluetooth: hci19: unexpected cc 0x0c38 length: 249 > 2 [ 556.505961][T11993] Bluetooth: hci17: command tx timeout [ 556.511539][T11993] Bluetooth: hci18: command tx timeout [ 557.705146][T11993] Bluetooth: hci19: command tx timeout [ 558.585393][T11990] Bluetooth: hci18: command tx timeout [ 559.785632][T11990] Bluetooth: hci19: command tx timeout [ 560.185424][T11990] Bluetooth: hci5: command 0x0406 tx timeout [ 560.192821][T11988] Bluetooth: hci6: command 0x0406 tx timeout [ 560.665431][ T5843] Bluetooth: hci18: command tx timeout [ 561.881263][ T5843] Bluetooth: hci19: command tx timeout [ 562.745880][ T5843] Bluetooth: hci18: command tx timeout [ 563.350624][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 564.075259][ T5843] Bluetooth: hci19: command tx timeout [ 570.266078][ T30] INFO: task syz-executor:11911 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 571.055898][ T30] Not tainted 6.14.0-rc2-syzkaller-00158-g071ed42cff4f #0 [ 571.063581][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 572.098402][ T30] task:syz-executor state:D stack:22712 pid:11911 tgid:11911 ppid:1 task_flags:0x400140 flags:0x00004006 [ 572.474981][ T30] Call Trace: [ 572.478319][ T30] [ 572.481265][ T30] __schedule+0x190e/0x4c90 [ 572.699606][ T30] ? __pfx___schedule+0x10/0x10 [ 572.704526][ T30] ? __pfx_lock_release+0x10/0x10 [ 573.055176][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 573.061241][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 573.358253][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 573.363445][ T30] ? schedule+0x90/0x320 [ 573.434990][ T30] schedule+0x14b/0x320 [ 573.439224][ T30] schedule_preempt_disabled+0x13/0x30 [ 573.444699][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 573.655055][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 573.661033][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 573.885272][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 573.890372][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 573.905110][ T30] ? __pfx_lock_release+0x10/0x10 [ 573.910181][ T30] ? __mutex_lock+0x397/0x1010 [ 574.055621][ T30] down_write+0x1d7/0x220 [ 574.063307][ T30] ? __pfx_down_write+0x10/0x10 [ 574.115480][ T30] ? rdma_net_to_dev_net+0x23/0x240 [ 574.120746][ T30] rdma_dev_exit_net+0x8e/0x350 [ 574.265166][ T30] ? __pfx___might_resched+0x10/0x10 [ 574.270529][ T30] ? __pfx_ppp_exit_net+0x10/0x10 [ 574.285276][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 574.290785][ T30] ? mutex_is_locked+0x17/0x50 [ 574.436427][ T30] ? rtnl_is_locked+0x15/0x20 [ 574.441164][ T30] ? cfg80211_pernet_exit+0xf0/0x140 [ 574.465079][ T30] setup_net+0x794/0x9e0 [ 574.469378][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 574.484940][ T30] ? __pfx_setup_net+0x10/0x10 [ 574.489763][ T30] ? debug_mutex_init+0x38/0x70 [ 574.494633][ T30] copy_net_ns+0x33f/0x570 [ 574.525083][ T30] create_new_namespaces+0x425/0x7b0 [ 574.530436][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 574.898662][ T30] ksys_unshare+0x57d/0xa70 [ 574.903243][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 574.966059][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 574.972455][ T30] ? do_syscall_64+0x100/0x230 [ 575.124888][ T30] __x64_sys_unshare+0x38/0x40 [ 575.129715][ T30] do_syscall_64+0xf3/0x230 [ 575.134235][ T30] ? clear_bhb_loop+0x35/0x90 [ 575.324870][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 575.330837][ T30] RIP: 0033:0x7f2d5418e5e7 [ 575.641627][ T30] RSP: 002b:00007ffe23d13008 EFLAGS: 00000206 ORIG_RAX: 0000000000000110 [ 575.755769][ T30] RAX: ffffffffffffffda RBX: 00007f2d543a5f40 RCX: 00007f2d5418e5e7 [ 575.763803][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 575.924939][ T30] RBP: 00007f2d543a6738 R08: 0000000000000000 R09: 0000000000000000 [ 575.932971][ T30] R10: 0000000000000000 R11: 0000000000000206 R12: 0000000000000008 [ 576.241371][ T30] R13: 0000000000000003 R14: 0000000000000009 R15: 0000000000000000 [ 576.294933][ T30] [ 576.335049][ T30] INFO: task syz-executor:11919 blocked for more than 149 seconds. [ 576.342998][ T30] Not tainted 6.14.0-rc2-syzkaller-00158-g071ed42cff4f #0 [ 576.775472][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 576.784197][ T30] task:syz-executor state:D stack:24768 pid:11919 tgid:11919 ppid:1 task_flags:0x400140 flags:0x00004006 [ 577.101990][ T30] Call Trace: [ 577.115022][ T30] [ 577.118019][ T30] __schedule+0x190e/0x4c90 [ 577.122569][ T30] ? __pfx___schedule+0x10/0x10 [ 577.285022][ T30] ? __pfx_lock_release+0x10/0x10 [ 577.290128][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 577.514915][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 577.521316][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 577.774985][ T30] ? schedule+0x90/0x320 [ 577.779296][ T30] schedule+0x14b/0x320 [ 577.783469][ T30] schedule_preempt_disabled+0x13/0x30 [ 578.026200][ T30] rwsem_down_write_slowpath+0xeee/0x13b0 [ 578.031983][ T30] ? rwsem_down_write_slowpath+0xa09/0x13b0 [ 578.245064][ T30] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 578.251291][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 578.265052][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 578.270132][ T30] ? __pfx_lock_release+0x10/0x10 [ 578.284957][ T30] ? __mutex_lock+0x397/0x1010 [ 578.289784][ T30] down_write+0x1d7/0x220 [ 578.294133][ T30] ? __pfx_down_write+0x10/0x10 [ 578.674926][ T30] ? rdma_net_to_dev_net+0x23/0x240 [ 578.680207][ T30] rdma_dev_exit_net+0x8e/0x350 [ 578.745060][ T30] ? __pfx___might_resched+0x10/0x10 [ 578.750412][ T30] ? __pfx_ppp_exit_net+0x10/0x10 [ 578.775024][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 578.780546][ T30] ? mutex_is_locked+0x17/0x50 [ 578.925145][ T30] ? rtnl_is_locked+0x15/0x20 [ 578.929888][ T30] ? cfg80211_pernet_exit+0xf0/0x140 [ 578.945313][ T30] setup_net+0x794/0x9e0 [ 578.949611][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 579.098435][ T30] ? __pfx_setup_net+0x10/0x10 [ 579.103268][ T30] ? debug_mutex_init+0x38/0x70 [ 579.118745][ T30] copy_net_ns+0x33f/0x570 [ 579.123214][ T30] create_new_namespaces+0x425/0x7b0 [ 579.436185][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 579.441968][ T30] ksys_unshare+0x57d/0xa70 [ 579.465050][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 579.470135][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 579.615098][ T30] ? do_syscall_64+0x100/0x230 [ 579.619944][ T30] __x64_sys_unshare+0x38/0x40 [ 579.624726][ T30] do_syscall_64+0xf3/0x230 [ 579.694909][ T30] ? clear_bhb_loop+0x35/0x90 [ 579.699654][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 579.854977][ T30] RIP: 0033:0x7fcdacd8e5e7 [ 579.859456][ T30] RSP: 002b:00007ffcaf9a0428 EFLAGS: 00000202 ORIG_RAX: 0000000000000110 [ 580.071763][ T30] RAX: ffffffffffffffda RBX: 00007fcdacfa5f40 RCX: 00007fcdacd8e5e7 [ 580.094936][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000040000000 [ 580.115115][ T30] RBP: 00007fcdacfa6738 R08: 0000000000000000 R09: 0000000000000000 [ 580.123131][ T30] R10: 0000000000000000 R11: 0000000000000202 R12: 0000000000000008