last executing test programs: 1m16.231894587s ago: executing program 2 (id=564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r1, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x1403, 0x20, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x6, 0x8, 0x62, @private2, @empty, 0x17, 0x80, 0x0, 0x40}}) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)=@newqdisc={0x1b8, 0x24, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xc}, {0x9, 0x1}, {0xffe0, 0xfff1}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x55, 0x8, 0xca9, 0x6, 0x3, 0x0, 0x7, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x1f, 0x0, 0x20, 0x4, 0x1, 0x4, 0x8, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x2, 0xb5, 0xfffb, 0x8, 0xea214c780c4e5658, 0x3f, 0x0, 0x5}}, {0xe, 0x2, [0x7, 0xef, 0x1a02, 0x0, 0x800]}}]}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x2f, 0x6, 0xeeed, 0x1, 0x40, 0x827, 0x9}}, {0x16, 0x2, [0x1000, 0xf0, 0x1f, 0x40, 0x4, 0x1, 0x8, 0x0, 0xd9]}}, {{0x1c, 0x1, {0x6, 0xae, 0x20, 0xfffffffb, 0x3, 0xff, 0x5ecea7d5, 0x7}}, {0x12, 0x2, [0x7, 0xd9, 0x7, 0xffe1, 0x3, 0x7ff, 0x2e00]}}, {{0x1c, 0x1, {0x9, 0x0, 0x5, 0x0, 0x2, 0x81, 0x5f9f2795, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x7, 0x2, 0xf4, 0x4, 0x2, 0xfffff801, 0x3, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x1, 0x6, 0x83, 0x2, 0x39fb, 0x200, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x2, 0x0, 0x1, 0x3, 0x3, 0x4, 0x4, 0x1}}, {0x6, 0x2, [0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x60, 0x7}}, @TCA_RATE={0x6, 0x5, {0x9, 0x70}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x42001) write$cgroup_devices(r3, &(0x7f0000000680)={'a', ' *:* ', 'm\x00'}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000700)) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9c}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x24}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x401}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40044}, 0x40) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x120, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x28bc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x682}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe6b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x11}, 0x40008080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000ac0)={'erspan0\x00', r4, 0x80, 0x41, 0xd328, 0x1000, {{0x39, 0x4, 0x0, 0x6, 0xe4, 0x66, 0x0, 0x52, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@end, @timestamp={0x44, 0x1c, 0x9, 0x0, 0x1, [0x7f, 0x1, 0x4, 0x0, 0x10001, 0x8000]}, @noop, @timestamp_prespec={0x44, 0x3c, 0xa5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xb}, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xdbd}, {@multicast2, 0x40f9}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9a5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0x94e}]}, @timestamp_prespec={0x44, 0xc, 0x28, 0x3, 0xa, [{@empty, 0x7fffffff}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x23, 0x2, [{0x5, 0x9, "0d3a42556b1c85"}, {0x6, 0x7, "2dde489f70"}, {0x2, 0xd, "ee55c3533df17c96fe05cd"}]}, @lsrr={0x83, 0x27, 0x85, [@remote, @rand_addr=0x64010101, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @local, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x1b}]}, @cipso={0x86, 0xe, 0x3, [{0x6, 0x8, "e38a38cf4050"}]}, @timestamp_addr={0x44, 0xc, 0xdb, 0x1, 0x1, [{@loopback, 0x80}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000c40)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001940)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001900)={&(0x7f0000000cc0)={0xc34, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb32}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r4}, {0x118, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2b, 0x95, 0x57, 0x80}, {0x1, 0x1, 0x1f, 0x401}, {0x40, 0x1, 0xc8, 0x6}, {0x2, 0x6, 0x0, 0xc6}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400e}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x56}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f5d874c}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x64}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x87f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x21}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2831}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1f, 0x8, 0x6, 0x4}, {0x2, 0x7, 0x1f, 0xffff0000}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa38}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x128, 0x1, 0x3, 0x8}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0xc34}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f00000019c0)={'sit0\x00', &(0x7f0000001980)={@dev={0xfe, 0x80, '\x00', 0x39}, @private=0xa010102, 0x6, 0x4}}) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x20, 0xa, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c009}, 0x8000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x28, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2c}, @void, @val={0xc, 0x99, {0x2, 0x43}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000001d80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x88, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_IE={0x5f, 0x2a, [@ibss={0x6, 0x2, 0x5}, @measure_req={0x26, 0x55, {0x5, 0x1f, 0x40, "f1de72bf87c75d14f153c631762a855db7287419d4a9b9af241c3215faf8550892682bbdd3f2d483f4ab60cc97372c69db1ca3376312e6f3c7e6b90b5523d0003108338d97642940cebf575b1e5767097077"}}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008012}, 0x20044044) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001dc0)={'batadv_slave_1\x00', 0x0}) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000001e00)={'ip_vti0\x00', 0xea7, 0x1}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000001f40), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001f80)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001fc0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000025c0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002000)={0x548, r11, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc7aa}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r8}, {0x23c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x80, 0x5, 0x2}, {0x1445, 0xf2, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffdff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x8, 0x7, 0xa5d5}, {0x5}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}]}}, {{0x8, 0x1, r4}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x82}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x548}, 0x1, 0x0, 0x0, 0x800}, 0x400c000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000002680)={0x3, &(0x7f0000002640)=[{0xfff8, 0x16, 0x1, 0x8001}, {0x7f, 0x9, 0x0, 0xfffffff7}, {0xffff, 0x81, 0x9d, 0xfffffffb}]}) 1m1.255152551s ago: executing program 2 (id=564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r1, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x1403, 0x20, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x6, 0x8, 0x62, @private2, @empty, 0x17, 0x80, 0x0, 0x40}}) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)=@newqdisc={0x1b8, 0x24, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xc}, {0x9, 0x1}, {0xffe0, 0xfff1}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x55, 0x8, 0xca9, 0x6, 0x3, 0x0, 0x7, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x1f, 0x0, 0x20, 0x4, 0x1, 0x4, 0x8, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x2, 0xb5, 0xfffb, 0x8, 0xea214c780c4e5658, 0x3f, 0x0, 0x5}}, {0xe, 0x2, [0x7, 0xef, 0x1a02, 0x0, 0x800]}}]}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x2f, 0x6, 0xeeed, 0x1, 0x40, 0x827, 0x9}}, {0x16, 0x2, [0x1000, 0xf0, 0x1f, 0x40, 0x4, 0x1, 0x8, 0x0, 0xd9]}}, {{0x1c, 0x1, {0x6, 0xae, 0x20, 0xfffffffb, 0x3, 0xff, 0x5ecea7d5, 0x7}}, {0x12, 0x2, [0x7, 0xd9, 0x7, 0xffe1, 0x3, 0x7ff, 0x2e00]}}, {{0x1c, 0x1, {0x9, 0x0, 0x5, 0x0, 0x2, 0x81, 0x5f9f2795, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x7, 0x2, 0xf4, 0x4, 0x2, 0xfffff801, 0x3, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x1, 0x6, 0x83, 0x2, 0x39fb, 0x200, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x2, 0x0, 0x1, 0x3, 0x3, 0x4, 0x4, 0x1}}, {0x6, 0x2, [0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x60, 0x7}}, @TCA_RATE={0x6, 0x5, {0x9, 0x70}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x42001) write$cgroup_devices(r3, &(0x7f0000000680)={'a', ' *:* ', 'm\x00'}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000700)) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9c}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x24}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x401}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40044}, 0x40) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x120, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x28bc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x682}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe6b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x11}, 0x40008080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000ac0)={'erspan0\x00', r4, 0x80, 0x41, 0xd328, 0x1000, {{0x39, 0x4, 0x0, 0x6, 0xe4, 0x66, 0x0, 0x52, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@end, @timestamp={0x44, 0x1c, 0x9, 0x0, 0x1, [0x7f, 0x1, 0x4, 0x0, 0x10001, 0x8000]}, @noop, @timestamp_prespec={0x44, 0x3c, 0xa5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xb}, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xdbd}, {@multicast2, 0x40f9}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9a5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0x94e}]}, @timestamp_prespec={0x44, 0xc, 0x28, 0x3, 0xa, [{@empty, 0x7fffffff}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x23, 0x2, [{0x5, 0x9, "0d3a42556b1c85"}, {0x6, 0x7, "2dde489f70"}, {0x2, 0xd, "ee55c3533df17c96fe05cd"}]}, @lsrr={0x83, 0x27, 0x85, [@remote, @rand_addr=0x64010101, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @local, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x1b}]}, @cipso={0x86, 0xe, 0x3, [{0x6, 0x8, "e38a38cf4050"}]}, @timestamp_addr={0x44, 0xc, 0xdb, 0x1, 0x1, [{@loopback, 0x80}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000c40)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001940)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001900)={&(0x7f0000000cc0)={0xc34, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb32}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r4}, {0x118, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2b, 0x95, 0x57, 0x80}, {0x1, 0x1, 0x1f, 0x401}, {0x40, 0x1, 0xc8, 0x6}, {0x2, 0x6, 0x0, 0xc6}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400e}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x56}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f5d874c}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x64}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x87f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x21}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2831}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1f, 0x8, 0x6, 0x4}, {0x2, 0x7, 0x1f, 0xffff0000}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa38}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x128, 0x1, 0x3, 0x8}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0xc34}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f00000019c0)={'sit0\x00', &(0x7f0000001980)={@dev={0xfe, 0x80, '\x00', 0x39}, @private=0xa010102, 0x6, 0x4}}) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x20, 0xa, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c009}, 0x8000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x28, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2c}, @void, @val={0xc, 0x99, {0x2, 0x43}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000001d80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x88, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_IE={0x5f, 0x2a, [@ibss={0x6, 0x2, 0x5}, @measure_req={0x26, 0x55, {0x5, 0x1f, 0x40, "f1de72bf87c75d14f153c631762a855db7287419d4a9b9af241c3215faf8550892682bbdd3f2d483f4ab60cc97372c69db1ca3376312e6f3c7e6b90b5523d0003108338d97642940cebf575b1e5767097077"}}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008012}, 0x20044044) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001dc0)={'batadv_slave_1\x00', 0x0}) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000001e00)={'ip_vti0\x00', 0xea7, 0x1}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000001f40), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001f80)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001fc0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000025c0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002000)={0x548, r11, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc7aa}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r8}, {0x23c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x80, 0x5, 0x2}, {0x1445, 0xf2, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffdff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x8, 0x7, 0xa5d5}, {0x5}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}]}}, {{0x8, 0x1, r4}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x82}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x548}, 0x1, 0x0, 0x0, 0x800}, 0x400c000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000002680)={0x3, &(0x7f0000002640)=[{0xfff8, 0x16, 0x1, 0x8001}, {0x7f, 0x9, 0x0, 0xfffffff7}, {0xffff, 0x81, 0x9d, 0xfffffffb}]}) 43.29491177s ago: executing program 2 (id=564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r1, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x1403, 0x20, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x6, 0x8, 0x62, @private2, @empty, 0x17, 0x80, 0x0, 0x40}}) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)=@newqdisc={0x1b8, 0x24, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xc}, {0x9, 0x1}, {0xffe0, 0xfff1}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x55, 0x8, 0xca9, 0x6, 0x3, 0x0, 0x7, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x1f, 0x0, 0x20, 0x4, 0x1, 0x4, 0x8, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x2, 0xb5, 0xfffb, 0x8, 0xea214c780c4e5658, 0x3f, 0x0, 0x5}}, {0xe, 0x2, [0x7, 0xef, 0x1a02, 0x0, 0x800]}}]}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x2f, 0x6, 0xeeed, 0x1, 0x40, 0x827, 0x9}}, {0x16, 0x2, [0x1000, 0xf0, 0x1f, 0x40, 0x4, 0x1, 0x8, 0x0, 0xd9]}}, {{0x1c, 0x1, {0x6, 0xae, 0x20, 0xfffffffb, 0x3, 0xff, 0x5ecea7d5, 0x7}}, {0x12, 0x2, [0x7, 0xd9, 0x7, 0xffe1, 0x3, 0x7ff, 0x2e00]}}, {{0x1c, 0x1, {0x9, 0x0, 0x5, 0x0, 0x2, 0x81, 0x5f9f2795, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x7, 0x2, 0xf4, 0x4, 0x2, 0xfffff801, 0x3, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x1, 0x6, 0x83, 0x2, 0x39fb, 0x200, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x2, 0x0, 0x1, 0x3, 0x3, 0x4, 0x4, 0x1}}, {0x6, 0x2, [0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x60, 0x7}}, @TCA_RATE={0x6, 0x5, {0x9, 0x70}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x42001) write$cgroup_devices(r3, &(0x7f0000000680)={'a', ' *:* ', 'm\x00'}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000700)) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9c}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x24}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x401}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40044}, 0x40) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x120, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x28bc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x682}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe6b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x11}, 0x40008080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000ac0)={'erspan0\x00', r4, 0x80, 0x41, 0xd328, 0x1000, {{0x39, 0x4, 0x0, 0x6, 0xe4, 0x66, 0x0, 0x52, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@end, @timestamp={0x44, 0x1c, 0x9, 0x0, 0x1, [0x7f, 0x1, 0x4, 0x0, 0x10001, 0x8000]}, @noop, @timestamp_prespec={0x44, 0x3c, 0xa5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xb}, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xdbd}, {@multicast2, 0x40f9}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9a5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0x94e}]}, @timestamp_prespec={0x44, 0xc, 0x28, 0x3, 0xa, [{@empty, 0x7fffffff}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x23, 0x2, [{0x5, 0x9, "0d3a42556b1c85"}, {0x6, 0x7, "2dde489f70"}, {0x2, 0xd, "ee55c3533df17c96fe05cd"}]}, @lsrr={0x83, 0x27, 0x85, [@remote, @rand_addr=0x64010101, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @local, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x1b}]}, @cipso={0x86, 0xe, 0x3, [{0x6, 0x8, "e38a38cf4050"}]}, @timestamp_addr={0x44, 0xc, 0xdb, 0x1, 0x1, [{@loopback, 0x80}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000c40)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001940)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001900)={&(0x7f0000000cc0)={0xc34, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb32}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r4}, {0x118, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2b, 0x95, 0x57, 0x80}, {0x1, 0x1, 0x1f, 0x401}, {0x40, 0x1, 0xc8, 0x6}, {0x2, 0x6, 0x0, 0xc6}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400e}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x56}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f5d874c}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x64}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x87f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x21}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2831}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1f, 0x8, 0x6, 0x4}, {0x2, 0x7, 0x1f, 0xffff0000}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa38}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x128, 0x1, 0x3, 0x8}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0xc34}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f00000019c0)={'sit0\x00', &(0x7f0000001980)={@dev={0xfe, 0x80, '\x00', 0x39}, @private=0xa010102, 0x6, 0x4}}) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x20, 0xa, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c009}, 0x8000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x28, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2c}, @void, @val={0xc, 0x99, {0x2, 0x43}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000001d80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x88, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_IE={0x5f, 0x2a, [@ibss={0x6, 0x2, 0x5}, @measure_req={0x26, 0x55, {0x5, 0x1f, 0x40, "f1de72bf87c75d14f153c631762a855db7287419d4a9b9af241c3215faf8550892682bbdd3f2d483f4ab60cc97372c69db1ca3376312e6f3c7e6b90b5523d0003108338d97642940cebf575b1e5767097077"}}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008012}, 0x20044044) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001dc0)={'batadv_slave_1\x00', 0x0}) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000001e00)={'ip_vti0\x00', 0xea7, 0x1}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000001f40), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001f80)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001fc0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000025c0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002000)={0x548, r11, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc7aa}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r8}, {0x23c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x80, 0x5, 0x2}, {0x1445, 0xf2, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffdff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x8, 0x7, 0xa5d5}, {0x5}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}]}}, {{0x8, 0x1, r4}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x82}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x548}, 0x1, 0x0, 0x0, 0x800}, 0x400c000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000002680)={0x3, &(0x7f0000002640)=[{0xfff8, 0x16, 0x1, 0x8001}, {0x7f, 0x9, 0x0, 0xfffffff7}, {0xffff, 0x81, 0x9d, 0xfffffffb}]}) 29.865290553s ago: executing program 2 (id=564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r1, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x1403, 0x20, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x6, 0x8, 0x62, @private2, @empty, 0x17, 0x80, 0x0, 0x40}}) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)=@newqdisc={0x1b8, 0x24, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xc}, {0x9, 0x1}, {0xffe0, 0xfff1}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x55, 0x8, 0xca9, 0x6, 0x3, 0x0, 0x7, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x1f, 0x0, 0x20, 0x4, 0x1, 0x4, 0x8, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x2, 0xb5, 0xfffb, 0x8, 0xea214c780c4e5658, 0x3f, 0x0, 0x5}}, {0xe, 0x2, [0x7, 0xef, 0x1a02, 0x0, 0x800]}}]}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x2f, 0x6, 0xeeed, 0x1, 0x40, 0x827, 0x9}}, {0x16, 0x2, [0x1000, 0xf0, 0x1f, 0x40, 0x4, 0x1, 0x8, 0x0, 0xd9]}}, {{0x1c, 0x1, {0x6, 0xae, 0x20, 0xfffffffb, 0x3, 0xff, 0x5ecea7d5, 0x7}}, {0x12, 0x2, [0x7, 0xd9, 0x7, 0xffe1, 0x3, 0x7ff, 0x2e00]}}, {{0x1c, 0x1, {0x9, 0x0, 0x5, 0x0, 0x2, 0x81, 0x5f9f2795, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x7, 0x2, 0xf4, 0x4, 0x2, 0xfffff801, 0x3, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x1, 0x6, 0x83, 0x2, 0x39fb, 0x200, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x2, 0x0, 0x1, 0x3, 0x3, 0x4, 0x4, 0x1}}, {0x6, 0x2, [0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x60, 0x7}}, @TCA_RATE={0x6, 0x5, {0x9, 0x70}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x42001) write$cgroup_devices(r3, &(0x7f0000000680)={'a', ' *:* ', 'm\x00'}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000700)) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9c}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x24}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x401}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40044}, 0x40) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x120, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x28bc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x682}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe6b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x11}, 0x40008080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000ac0)={'erspan0\x00', r4, 0x80, 0x41, 0xd328, 0x1000, {{0x39, 0x4, 0x0, 0x6, 0xe4, 0x66, 0x0, 0x52, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@end, @timestamp={0x44, 0x1c, 0x9, 0x0, 0x1, [0x7f, 0x1, 0x4, 0x0, 0x10001, 0x8000]}, @noop, @timestamp_prespec={0x44, 0x3c, 0xa5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xb}, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xdbd}, {@multicast2, 0x40f9}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9a5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0x94e}]}, @timestamp_prespec={0x44, 0xc, 0x28, 0x3, 0xa, [{@empty, 0x7fffffff}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x23, 0x2, [{0x5, 0x9, "0d3a42556b1c85"}, {0x6, 0x7, "2dde489f70"}, {0x2, 0xd, "ee55c3533df17c96fe05cd"}]}, @lsrr={0x83, 0x27, 0x85, [@remote, @rand_addr=0x64010101, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @local, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x1b}]}, @cipso={0x86, 0xe, 0x3, [{0x6, 0x8, "e38a38cf4050"}]}, @timestamp_addr={0x44, 0xc, 0xdb, 0x1, 0x1, [{@loopback, 0x80}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000c40)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001940)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001900)={&(0x7f0000000cc0)={0xc34, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb32}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r4}, {0x118, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2b, 0x95, 0x57, 0x80}, {0x1, 0x1, 0x1f, 0x401}, {0x40, 0x1, 0xc8, 0x6}, {0x2, 0x6, 0x0, 0xc6}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400e}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x56}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f5d874c}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x64}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x87f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x21}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2831}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1f, 0x8, 0x6, 0x4}, {0x2, 0x7, 0x1f, 0xffff0000}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa38}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x128, 0x1, 0x3, 0x8}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0xc34}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f00000019c0)={'sit0\x00', &(0x7f0000001980)={@dev={0xfe, 0x80, '\x00', 0x39}, @private=0xa010102, 0x6, 0x4}}) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x20, 0xa, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c009}, 0x8000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x28, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2c}, @void, @val={0xc, 0x99, {0x2, 0x43}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000001d80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x88, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_IE={0x5f, 0x2a, [@ibss={0x6, 0x2, 0x5}, @measure_req={0x26, 0x55, {0x5, 0x1f, 0x40, "f1de72bf87c75d14f153c631762a855db7287419d4a9b9af241c3215faf8550892682bbdd3f2d483f4ab60cc97372c69db1ca3376312e6f3c7e6b90b5523d0003108338d97642940cebf575b1e5767097077"}}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008012}, 0x20044044) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001dc0)={'batadv_slave_1\x00', 0x0}) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000001e00)={'ip_vti0\x00', 0xea7, 0x1}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000001f40), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001f80)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001fc0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000025c0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002000)={0x548, r11, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc7aa}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r8}, {0x23c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x80, 0x5, 0x2}, {0x1445, 0xf2, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffdff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x8, 0x7, 0xa5d5}, {0x5}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}]}}, {{0x8, 0x1, r4}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x82}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x548}, 0x1, 0x0, 0x0, 0x800}, 0x400c000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000002680)={0x3, &(0x7f0000002640)=[{0xfff8, 0x16, 0x1, 0x8001}, {0x7f, 0x9, 0x0, 0xfffffff7}, {0xffff, 0x81, 0x9d, 0xfffffffb}]}) 15.912990314s ago: executing program 2 (id=564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r1, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x1403, 0x20, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x6, 0x8, 0x62, @private2, @empty, 0x17, 0x80, 0x0, 0x40}}) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)=@newqdisc={0x1b8, 0x24, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xc}, {0x9, 0x1}, {0xffe0, 0xfff1}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x55, 0x8, 0xca9, 0x6, 0x3, 0x0, 0x7, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x1f, 0x0, 0x20, 0x4, 0x1, 0x4, 0x8, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x2, 0xb5, 0xfffb, 0x8, 0xea214c780c4e5658, 0x3f, 0x0, 0x5}}, {0xe, 0x2, [0x7, 0xef, 0x1a02, 0x0, 0x800]}}]}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x2f, 0x6, 0xeeed, 0x1, 0x40, 0x827, 0x9}}, {0x16, 0x2, [0x1000, 0xf0, 0x1f, 0x40, 0x4, 0x1, 0x8, 0x0, 0xd9]}}, {{0x1c, 0x1, {0x6, 0xae, 0x20, 0xfffffffb, 0x3, 0xff, 0x5ecea7d5, 0x7}}, {0x12, 0x2, [0x7, 0xd9, 0x7, 0xffe1, 0x3, 0x7ff, 0x2e00]}}, {{0x1c, 0x1, {0x9, 0x0, 0x5, 0x0, 0x2, 0x81, 0x5f9f2795, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x7, 0x2, 0xf4, 0x4, 0x2, 0xfffff801, 0x3, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x1, 0x6, 0x83, 0x2, 0x39fb, 0x200, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x2, 0x0, 0x1, 0x3, 0x3, 0x4, 0x4, 0x1}}, {0x6, 0x2, [0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x60, 0x7}}, @TCA_RATE={0x6, 0x5, {0x9, 0x70}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x42001) write$cgroup_devices(r3, &(0x7f0000000680)={'a', ' *:* ', 'm\x00'}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000700)) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9c}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x24}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x401}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40044}, 0x40) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x120, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x28bc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x682}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe6b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x11}, 0x40008080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000ac0)={'erspan0\x00', r4, 0x80, 0x41, 0xd328, 0x1000, {{0x39, 0x4, 0x0, 0x6, 0xe4, 0x66, 0x0, 0x52, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@end, @timestamp={0x44, 0x1c, 0x9, 0x0, 0x1, [0x7f, 0x1, 0x4, 0x0, 0x10001, 0x8000]}, @noop, @timestamp_prespec={0x44, 0x3c, 0xa5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xb}, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xdbd}, {@multicast2, 0x40f9}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9a5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0x94e}]}, @timestamp_prespec={0x44, 0xc, 0x28, 0x3, 0xa, [{@empty, 0x7fffffff}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x23, 0x2, [{0x5, 0x9, "0d3a42556b1c85"}, {0x6, 0x7, "2dde489f70"}, {0x2, 0xd, "ee55c3533df17c96fe05cd"}]}, @lsrr={0x83, 0x27, 0x85, [@remote, @rand_addr=0x64010101, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @local, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x1b}]}, @cipso={0x86, 0xe, 0x3, [{0x6, 0x8, "e38a38cf4050"}]}, @timestamp_addr={0x44, 0xc, 0xdb, 0x1, 0x1, [{@loopback, 0x80}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000c40)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001940)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001900)={&(0x7f0000000cc0)={0xc34, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb32}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r4}, {0x118, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2b, 0x95, 0x57, 0x80}, {0x1, 0x1, 0x1f, 0x401}, {0x40, 0x1, 0xc8, 0x6}, {0x2, 0x6, 0x0, 0xc6}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400e}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x56}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f5d874c}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x64}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x87f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x21}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2831}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1f, 0x8, 0x6, 0x4}, {0x2, 0x7, 0x1f, 0xffff0000}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa38}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x128, 0x1, 0x3, 0x8}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0xc34}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f00000019c0)={'sit0\x00', &(0x7f0000001980)={@dev={0xfe, 0x80, '\x00', 0x39}, @private=0xa010102, 0x6, 0x4}}) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x20, 0xa, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c009}, 0x8000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x28, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2c}, @void, @val={0xc, 0x99, {0x2, 0x43}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000001d80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x88, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_IE={0x5f, 0x2a, [@ibss={0x6, 0x2, 0x5}, @measure_req={0x26, 0x55, {0x5, 0x1f, 0x40, "f1de72bf87c75d14f153c631762a855db7287419d4a9b9af241c3215faf8550892682bbdd3f2d483f4ab60cc97372c69db1ca3376312e6f3c7e6b90b5523d0003108338d97642940cebf575b1e5767097077"}}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008012}, 0x20044044) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001dc0)={'batadv_slave_1\x00', 0x0}) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000001e00)={'ip_vti0\x00', 0xea7, 0x1}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000001f40), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001f80)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001fc0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000025c0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002000)={0x548, r11, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc7aa}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r8}, {0x23c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x80, 0x5, 0x2}, {0x1445, 0xf2, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffdff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x8, 0x7, 0xa5d5}, {0x5}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}]}}, {{0x8, 0x1, r4}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x82}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x548}, 0x1, 0x0, 0x0, 0x800}, 0x400c000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000002680)={0x3, &(0x7f0000002640)=[{0xfff8, 0x16, 0x1, 0x8001}, {0x7f, 0x9, 0x0, 0xfffffff7}, {0xffff, 0x81, 0x9d, 0xfffffffb}]}) 4.620134362s ago: executing program 0 (id=2206): bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$SO_RDS_TRANSPORT(0xffffffffffffffff, 0x114, 0x8, 0x0, 0x0) r0 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r0, 0x0, 0xffffffffffffffb5) connect$inet(r0, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'lo\x00', 0x0}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000005c0)={r3}, 0x4) r4 = socket$kcm(0x10, 0x2, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='tlb_flush\x00', r6}, 0x10) write$binfmt_script(r5, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r5, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0xb00000000065808, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCETHTOOL(r7, 0x8946, &(0x7f0000000040)={'macvtap0\x00', &(0x7f0000000000)=@ethtool_wolinfo={0x6, 0x0, 0x0, "7f293841f30d"}}) bind$alg(0xffffffffffffffff, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, 0x0, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="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"/299, 0x12b) ioctl$EXT4_IOC_SWAP_BOOT(r5, 0x6611) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x2, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000035000b63d25a80648c2594f90324fc60", 0x14}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x6, 0x200000000000007d, &(0x7f0000000140)=ANY=[@ANYRES8, @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', r2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5}, 0x90) 3.691429779s ago: executing program 0 (id=2217): r0 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0xb3c2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000200)={0x1, 0xffffffffffffffff}, 0x4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r4, &(0x7f0000000040)=0x800000000000000, r3, 0x0, 0x800000000fd, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x1f}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r1}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3c2bd89a}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @jmp={0x5, 0x1, 0x2, 0x5, 0x9, 0xffffffffffffffe0, 0xfffffffffffffff0}, @map_fd={0x18, 0x0, 0x1, 0x0, r3}, @call={0x85, 0x0, 0x0, 0x79}, @alu={0x4, 0x1, 0x1, 0x5, 0x4, 0xffffffffffffffe0, 0xfffffffffffffffc}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0xfd36, 0x0, 0x0, 0x32, '\x00', 0x0, 0x24}, 0x90) 3.5731557s ago: executing program 0 (id=2219): socket$inet6(0xa, 0x2, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_UPGRADEABLE_SERVICE(r0, 0x110, 0x5, 0x0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) setsockopt$MRT_DEL_VIF(0xffffffffffffffff, 0x0, 0xcb, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r2 = socket(0x2, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000200)='dctcp-reno\x00', 0xb) listen(r5, 0x0) r6 = accept(0xffffffffffffffff, &(0x7f0000000200)=@isdn, &(0x7f0000000080)=0x80) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r2) sendmsg$TIPC_NL_NODE_GET(r6, &(0x7f0000000440)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000340)={&(0x7f0000000880)={0x308, r7, 0x200, 0x70bd2b, 0x25dfdbfb, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x7}]}, @TIPC_NLA_BEARER={0x70, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x44, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0xfffffffa}}, {0x20, 0x2, @in6={0xa, 0x4e20, 0x1, @ipv4={'\x00', '\xff\xff', @loopback}, 0x3}}}}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}]}, @TIPC_NLA_BEARER_NAME={0xc, 0x1, @l2={'eth', 0x3a, 'wg0\x00'}}]}, @TIPC_NLA_BEARER={0xa4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}]}, @TIPC_NLA_BEARER_NAME={0x16, 0x1, @l2={'eth', 0x3a, 'veth0_to_bond\x00'}}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e20, 0x400, @empty, 0x1000}}, {0x14, 0x2, @in={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0x17}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'bond0\x00'}}]}, @TIPC_NLA_LINK={0x78, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}]}, @TIPC_NLA_BEARER={0x80, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0x14, 0x1, @l2={'ib', 0x3a, 'bond_slave_1\x00'}}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}]}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x80}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @multicast2}}, {0x14, 0x2, @in={0x2, 0x4e21, @broadcast}}}}, @TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'pimreg0\x00'}}]}, @TIPC_NLA_LINK={0xdc, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_PROP={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x301}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x81}]}, @TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xb6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x11f6879f}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8}]}]}]}, 0x308}, 0x1, 0x0, 0x0, 0x4001}, 0x4000000) socket$packet(0x11, 0x3, 0x300) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r8, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) setsockopt$SO_TIMESTAMPING(r8, 0x1, 0x25, &(0x7f0000000040)=0x213a, 0x4) sendmmsg$inet(r8, &(0x7f0000001980)=[{{&(0x7f00000002c0)={0x2, 0x4e22, @multicast1}, 0x10, 0x0}}], 0x1, 0x240080e4) setsockopt$sock_int(r8, 0x1, 0x1d, &(0x7f0000000080)=0x81, 0x4) setsockopt$sock_int(r8, 0x1, 0x29, &(0x7f0000000100)=0x6, 0x4) sendmmsg$inet(r8, &(0x7f0000007180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) recvmmsg(r8, &(0x7f0000005a00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x40002110, 0x0) socket$inet_dccp(0x2, 0x6, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=ANY=[@ANYBLOB="600000001000370400"/20, @ANYRES32=r4, @ANYBLOB="830405000100000040001284fe9d313303905565727370616e0000002c00028014000700fc020000000000000000000000000000040012000500fdff000000000800150065730700"], 0x60}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x7, 0x4, 0x40008400, 0x0, 0x0, 0xffffffffffffffff, 0x40, '\x00', 0x0, 0xffffffffffffffff, 0x3}, 0x48) 3.274759105s ago: executing program 0 (id=2222): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x24}}, 0x0) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x18, 0xb1, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x24, r1, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_RULES={0x8, 0x22, 0x0, 0x1, [{0x4}]}, @NL80211_ATTR_REG_ALPHA2={0x7, 0x21, 'bb\x00'}]}, 0x24}}, 0x0) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x18, 0xb1, 0x7f, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) (async) 3.079931815s ago: executing program 0 (id=2225): setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@dev, 0x0, 0x0, 0x0, 0xc}, 0x20) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000001900)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, &(0x7f0000000340), 0x10) ioctl(r1, 0x8b32, &(0x7f0000000040)) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r4, 0x6, 0xd, &(0x7f00000000c0)='cdg\x00', 0x4) connect$inet6(r3, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0xd, 0x0, 0x0) syz_emit_ethernet(0x16, &(0x7f0000000000)={@local, @dev, @void, {@llc={0x4, {@snap={0xaa, 0x0, 'C', "cd7a01"}}}}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000005c0)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) r6 = socket$packet(0x11, 0x0, 0x300) write$binfmt_script(r5, &(0x7f0000000100), 0xfffffd9d) sendfile(r3, r5, 0x0, 0x8000002b) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r5, &(0x7f0000000280)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000240)={&(0x7f0000000140)={0x30, 0x2, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x22f0}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x84}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x8081) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000002c0)={'erspan0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="4000000010003b0c00"/20, @ANYRES32=r7, @ANYBLOB="0000000000000000200012800b0001004a727370616e000010000280020000000600100000000000"], 0x40}}, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000001000)=ANY=[@ANYRESHEX, @ANYRESHEX=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095", @ANYRESHEX=r6, @ANYRES8=r4, @ANYRESDEC=r0, @ANYBLOB="f52800658e87cbe79c8885379c3f98c107d81ffeb315202b26a2acc9fcb26c14b551dad3dd2ede4249abe9f5e93a845acd2e758e3bce0d50f4ddccc1dd53e94f3ac441db9ee21004af9188356366fab6e63f637eb170a427d1e5c5d80ddcbdc1f8c4d64df8ef54bbf222e1b31dc5cadba6f06e4b9cdcc969148965fafc0831bbef7b4a89a85e70dbbd5e2de436a19f093d940ebd7bcbbeee9f253b9b84df7de54df4be1058db03abb22db9e88e55b96fee07e956d4600f0c4b36bde9ebfff5419660c774cd3653ab91379a94381d97446a79897a12937666adfbb710dd0386e94e4b858295", @ANYRESHEX=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x52, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) recvmmsg(r1, &(0x7f0000000d80)=[{{&(0x7f0000000380)=@nfc, 0x80, &(0x7f0000000440)=[{&(0x7f0000000e00)=""/121, 0x79}, {&(0x7f0000000480)=""/87, 0x57}], 0x2, &(0x7f0000000600)=""/50, 0x32}, 0x2}, {{&(0x7f0000000640)=@pppol2tpv3in6, 0x80, &(0x7f0000000c00), 0x0, &(0x7f00000008c0)=""/227, 0xe3}, 0xffffffff}], 0x2, 0x2002, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r9}, 0x10) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000880)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@bloom_filter={0x21, 0x0, 0xc92, 0x0, 0x64, 0x1, 0x7fffffff, '\x00', 0x0, r5, 0x80000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000780)=ANY=[@ANYRES16=r2], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, 0x11}, 0x90) 3.076827909s ago: executing program 3 (id=2226): sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000444ff8)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xca}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r2, 0x0, 0x0) (async) sendmsg$nl_route(r2, 0x0, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @generic={0x66}, @initr0, @exit, @printk={@d, {0x3, 0x0, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0x2}}]}, &(0x7f0000000000)='GPL\x00', 0x2, 0xe2, &(0x7f0000000240)=""/226}, 0x90) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x4800, &(0x7f0000000000)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r8, @ANYBLOB="c6397b1a6d63faedbc4e5359195caf41cc84b37ff766fd7e36eb39876f9afa8ab2007358455d0de3aac48a74661ff9cb498b504535154eb579450c41b18e338b31c2828ece5ab6fd011dfa8ac17a8dc82981234c2f46fbc33b8f925f80b1ba1033060000000000000003641b4d8517ffff00000000000091384963fdff10cb06dd97016334ed2d4d8104e387178da5ddb5eb96edc5d62a6e3430de8005a816"], 0x3c}}, 0x0) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f00000004c0)=ANY=[@ANYBLOB="2000000011005504000000000000000010000000", @ANYRES32=r9, @ANYBLOB="2bc900000000003d93cef49c649d1524edc21846dc000000eeb0747a4a3021d923510626673cf51df14d09e37c44c1e6df7e2ab957a375e771915b503a32aae119"], 0x20}}, 0x0) socket(0x10, 0x803, 0x0) (async) r10 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r10, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x32}}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) (async) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) (async) getsockname$packet(r10, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x6b) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32=r11, @ANYBLOB="03000016010000001800120008000100736974000c0002000800030036"], 0x38}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000c80)=@getnetconf={0x14, 0x52, 0x200, 0x70bd28, 0x25dfdbfd, {}, ["", ""]}, 0x14}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) (async) sendmmsg$inet6(r0, &(0x7f0000003c40)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000240)=[{&(0x7f0000000140)="03", 0x1}], 0x1}}], 0x1, 0x0) 2.820214417s ago: executing program 1 (id=2229): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) write$cgroup_int(r2, &(0x7f0000000040), 0x12) close(r2) preadv(r2, &(0x7f0000000300)=[{&(0x7f0000000640)=""/4096, 0x48400}], 0x1, 0x0, 0x0) r3 = accept4(0xffffffffffffffff, &(0x7f0000000100)=@pptp={0x18, 0x2, {0x0, @dev}}, &(0x7f0000000180)=0x80, 0x800) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f00000002c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40080000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@NBD_ATTR_SOCKETS={0x1c, 0x7, 0x0, 0x1, [{0x8, 0x1, r2}, {0x8, 0x1, r3}, {0x8, 0x1, r4}]}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x40}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}, @NBD_ATTR_INDEX={0x8, 0x1, 0x0}]}, 0x4c}}, 0x4000041) socket$inet_udp(0x2, 0x2, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000980)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000000)={'wpan4\x00', 0x0}) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000040)=ANY=[@ANYBLOB="d90af598ec42b3282d35dcea3364a6e38e217d2fcd56edca8d2bd81d6567ec290d37668a84730117b29df35ab9df4f11119d41e759ffffffffffffffffaad9e93e", @ANYRES16=r1, @ANYBLOB="050000000000000000002500000005002a00fb00000008000200", @ANYRES32=r6, @ANYBLOB], 0x24}}, 0x0) 2.799851015s ago: executing program 4 (id=2230): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x8, &(0x7f0000000340)=@int=0xa00, 0x4) 2.72250817s ago: executing program 1 (id=2231): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f0000000040)={0x2, &(0x7f0000000000)=[{0x2d, 0x0, 0xf7}, {}]}) r2 = socket(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001240)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x8020) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0xdbc, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4}, [@filter_kind_options=@f_cgroup={{0xb}, {0xd8c, 0x2, [@TCA_CGROUP_EMATCHES={0x174, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x78, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x0, 0x0, 0x0, {{}, {0x0, 0x0, 0x9}}}, @TCF_EM_IPT={0x24, 0x2, 0x0, 0x0, {{0x2, 0x9, 0x7}, [@TCA_EM_IPT_HOOK={0x8}, @TCA_EM_IPT_HOOK={0x8, 0x1, 0x1}, @TCA_EM_IPT_MATCH_REVISION={0x5}]}}, @TCF_EM_META={0xc}, @TCF_EM_CMP={0x18, 0x2, 0x0, 0x0, {{0x60, 0x1, 0xf001}, {0x0, 0x7d33, 0x3ff, 0x0, 0x2}}}, @TCF_EM_META={0x14, 0x0, 0x0, 0x0, {{}, [@TCA_EM_META_RVALUE={0x4}, @TCA_EM_META_RVALUE={0x4}]}}]}, @TCA_EMATCH_TREE_LIST={0xf8, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x0, 0x0, 0x0, {{0x0, 0x1, 0x8}, {0x1400000, 0x1000, 0x0, 0x0, 0x4, 0x1, 0x3}}}, @TCF_EM_CONTAINER={0xb8, 0x1, 0x0, 0x0, {{0x5, 0x0, 0x1}, "594f0f8ecd0a951ba95048f426e7f4fba6db5c4591401b9002a3e60bd39577bf809854bfede8752761ff0940864fb71cf401185d2eb3dfdb3ee9195b45ad8bed7d636e0bf0e05ecb935f327ad8c0c87cd00d61968cb1298e4d5716e2a723753fcf7062e42086725069f5c23738b5f71ef68fc51b23294e33a438aadaef90c287e45cd6b048c0395888a303415126fc907d71d948c24d09872d661a231a87b2c5434cb024e0b1bc5dcb80"}}, @TCF_EM_IPSET={0x10, 0x0, 0x0, 0x0, {{0x0, 0x8, 0xffff}, {0xffffffffffffffff, 0x2, 0x6}}}, @TCF_EM_CANID={0x14, 0x0, 0x0, 0x0, {{0x0, 0x7, 0x1ff}, {{0x4, 0x1, 0x1}, {0x3}}}}]}]}, @TCA_CGROUP_ACT={0x3c, 0x1, [@m_vlan={0x38, 0xb, 0x0, 0x0, {{0x9}, {0xc, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_ID={0x6}]}, {0x4}, {0xc}, {0xc}}}]}, @TCA_CGROUP_POLICE={0xc, 0x2, [@TCA_POLICE_RESULT={0x8}]}, @TCA_CGROUP_ACT={0xb88, 0x1, [@m_ct={0x3c, 0x13, 0x0, 0x0, {{0x7}, {0x14, 0x2, 0x0, 0x1, [@TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @private}, @TCA_CT_NAT_IPV4_MAX={0x8, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x4f0, 0x1f, 0x0, 0x0, {{0xb}, {0x4bc, 0x2, 0x0, 0x1, [[], [@TCA_POLICE_RATE={0x404, 0x2, [0x3ff, 0x3, 0x1, 0x9, 0x7, 0xffff, 0x96a, 0x1f, 0x400, 0x81, 0x30a, 0xe5ac, 0x5, 0x3461e42a, 0x9, 0x400, 0x800, 0x9, 0x62a, 0x7, 0x8000, 0x3, 0x0, 0x7fffffff, 0x4, 0x5, 0x5cf, 0x9, 0xb5db, 0x0, 0x4, 0x0, 0x0, 0x3, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x557, 0x81, 0x5, 0x4, 0x10001, 0x6, 0x0, 0xffffffff, 0x0, 0x80000000, 0x9, 0x0, 0x0, 0x8, 0x0, 0x83, 0x4, 0x9, 0x800, 0x3, 0x1ff, 0x7, 0x1, 0xfffffff8, 0x0, 0x0, 0x200, 0x9, 0x0, 0x5, 0x0, 0x40, 0x1, 0x3, 0x2, 0x4, 0xbfe, 0x0, 0x0, 0xce, 0x0, 0x1f, 0x6, 0x1f, 0xfb, 0x3f, 0x2, 0x401, 0x0, 0x0, 0x63c, 0x6, 0xea87, 0xa6, 0x3f, 0x0, 0x0, 0xf4, 0x40000000, 0x9, 0x80000000, 0x9, 0x1, 0x0, 0x5, 0x10000, 0x0, 0x7d53, 0x4d45f08f, 0x7fffffff, 0x401, 0x0, 0x0, 0xfff, 0x3ff, 0x1f, 0x0, 0x0, 0x100, 0x3, 0x0, 0xb5, 0xc, 0x5, 0xbaa, 0x1, 0xda0, 0x20, 0xfff, 0x5, 0x0, 0x5, 0x0, 0x3, 0x6, 0x3, 0x0, 0x2, 0x8, 0x8b, 0x9, 0x0, 0x8, 0x6, 0x9007, 0x3, 0x0, 0x0, 0x0, 0xe0, 0x5, 0x80, 0x6, 0x1, 0x200005, 0x0, 0x20, 0x8, 0x9, 0xd6, 0x7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0xfffffff7, 0x0, 0x0, 0x7fffffff, 0x9, 0xfffffeff, 0x3, 0x8, 0x7f, 0x0, 0x7ff, 0x0, 0x8, 0x8000, 0x80000000, 0x81, 0x0, 0xfffffffc, 0x8000, 0x0, 0x7, 0x0, 0xffffffff, 0x9, 0x6000, 0x0, 0xffffffff, 0xff, 0x4, 0x9, 0xb3f0, 0x4, 0x7f, 0xfe, 0x3, 0x1e59, 0xff, 0x7, 0x800, 0x0, 0x0, 0x0, 0x400, 0x22, 0x7ff, 0x0, 0x5, 0x86a, 0x6, 0x8, 0x0, 0xa9f8, 0x40, 0x9, 0x6, 0x0, 0xce, 0x4, 0x0, 0x0, 0x0, 0x0, 0x2, 0x80000000, 0x3, 0xec7, 0x8, 0x0, 0x4, 0x26, 0x7f, 0x2, 0x80000000, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x20]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x2}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}], [@TCA_POLICE_TBF={0x3c, 0x1, {0x3f, 0x8, 0x0, 0x0, 0x8, {0x0, 0x2, 0x0, 0x40, 0x0, 0xa7}, {0x0, 0x1, 0xff, 0xfffb}, 0x5, 0x10000, 0x9}}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}], [@TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x7e976eab}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x0, 0x1000, 0x0, 0xffffcc58, {0x0, 0x0, 0x8000, 0x7f, 0xc000, 0x3}, {0x40, 0x0, 0xdb, 0x0, 0x1}}}]]}, {0xb, 0x6, "df67838b50803c"}, {0xc}, {0xc, 0x8, {0x3, 0x1}}}}, @m_nat={0x12c, 0x11, 0x0, 0x0, {{0x8}, {0xa4, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{0x9, 0x7f, 0x10000000, 0x1, 0xb6f}, @loopback, @remote}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x0, 0xffffffff}, @remote, @multicast2, 0xff000000}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x96dd, 0x0, 0x7}, @private=0xa010101, @remote, 0xff000000, 0x1}}, @TCA_NAT_PARMS={0x28, 0x1, {{0x2, 0xced, 0x6, 0x8bc2, 0xff}, @multicast2, @local}}]}, {0x64, 0x6, "61f3d4addde40594c4a385c09584cd7a1f1e2541f300bc67e96e6ea34ab1f35ce47ded5953cbc1861d5ad534e738b8cb6211893a26648697cb7c1772e93564e5e3d50e71f989619d0eda35da8454d51acd43735257cb9d61aee6c2b6e4c5a070"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3}}}}, @m_simple={0x140, 0x0, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [@TCA_DEF_DATA={0x24, 0x3, 'blkio.throttle.write_bps_device\x00'}, @TCA_DEF_PARMS={0x18, 0x2, {0x9, 0x5, 0x0, 0x3, 0x7}}]}, {0xd6, 0x6, "f2fcc68524ae5c655fceab55af72b3be2f94d7c1aa2fcf2cf137daa8a1b9fa9ca38b2533059b8b0e3664e6354a644d9b4e08dcc938692540416feb6077393342812f3899a82d370a35f0ddba37f19a03b7a4e8e20277b30de503278e99d50f42a794d0979c4e428ae5a4ce866b4b6a640ca4edec19205a8765ad94ef31c2d83c98d482f1961608a0029f2456efbd861c095df5b1018012be8f10444ba8c097a35876286557029832080e0e606a50eb32f8409e638a7fbb39c4aef3c1d3dc9ac6f10eea3c88981642196f282193de2cc34ac3"}, {0xc, 0x7, {0x1}}, {0xc, 0x8, {0x2, 0x1}}}}, @m_connmark={0xa4, 0x8, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x7, 0x7, 0x364f, 0x9}, 0x6}}]}, {0x56, 0x6, "bfbb6a329c0666b01a66045ecdacd80ceb02d3616f97276405470ba2b799a744cb1294bb46701e84e75c345942506f93eae9447d9bb0b2ac1c660b831813e12a25644f5a1fc3fc49a81e62ed21773ae8dc8c"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1}}}}, @m_mpls={0x114, 0x1c, 0x0, 0x0, {{0x9}, {0x78, 0x2, 0x0, 0x1, [@TCA_MPLS_TTL={0x5}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x2, 0x1, 0x7}, 0x4}}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x7f, 0x0, 0x3, 0x40, 0xffff}, 0x3}}, @TCA_MPLS_LABEL={0x8, 0x5, 0x22199}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10001, 0x3, 0x6, 0xc5e, 0xb70}, 0x1}}, @TCA_MPLS_TTL={0x5, 0x7, 0x4}]}, {0x71, 0x6, "12e087882d63e6264854c51600812785fbc1688240c7bc3be892e125f10199f996eb0abeeb1ef62a9585299503831f9e50b8b534f89615495391dc9f70c0e3d213ed5d6b3ee62843be3bb153d4472db18221cac04728e8295bb2fe1941359851a576816264fd36831afc16ea1a"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_ctinfo={0x124, 0x1b, 0x0, 0x0, {{0xb}, {0x1c, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x3, 0x3, 0x0, 0x0, 0x2}}]}, {0xdd, 0x6, "c03baea2ecfb636d098bf075db7fe279ce04cfa1f9b14b20a945eccd575c8ba5564318e6a0480e52e982e5b054ba54680422d69fbdf276e76597983b052f4351bcdd03ac022dabec2a5cff8ffc45c9eb714ec58aab159795505cfee5734272d6392f2d923d6d25e7b093b76f19f9bc633c491216311cbdef9b914c12831ff5bc07d465a39fdc11747a0e31567e1d5e83edb5401dca9911766548f5c235160878b10432d7bc3417728112210f99a1d1b6d9783abea07631aed623d34e90c4e8b3724cbcd08c8f0f5361df33a724a862884ee503d3ca92d8da7b"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x1}}}}, @m_mirred={0x110, 0x1e, 0x0, 0x0, {{0xb}, {0xa4, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x9}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0xd52a, 0x0, 0x20000000, 0x7, 0x9}, 0x2}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x0, 0xfffffffd, 0x7}, 0x4}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x8, 0x0, 0x0, 0x0, 0x80000000}, 0x3}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x7, 0x5, 0x0, 0x3, 0x8}, 0x4, r4}}]}, {0x41, 0x6, "87178733abcd340e529ac9330dca6521189e72ab69756c7e2ecf2fba2421a1a1cf29a24bb33d7d9a8b2ba774acc47a77a5d289128b1bb8d8869449b25a"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x0, 0x2}}}}]}, @TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xde1d}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x3, 0x0, 0x0, {{0xffff, 0x1, 0x3ff}, {0x7, 0x0, 0x1, 0x4, 0xb, 0x0, 0x2}}}]}]}, @TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x40}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffd}}]}]}}]}, 0xdbc}}, 0x0) r5 = socket(0x15, 0x5, 0x0) getsockopt$nfc_llcp(r5, 0x114, 0x0, 0x0, 0x20000000) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r7, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r6, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x3c, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r8}, @nested={0xb, 0x0, 0x0, 0x1, [@generic="976b6408686030"]}, @nested={0x15, 0x1, 0x0, 0x1, [@generic="3fb3ebf5f9cbd1185eeba9c895d0e5001a"]}]}, 0x3c}], 0x1}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000080)=0x0, &(0x7f00000000c0)=0x4) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000100)={&(0x7f0000000280)=@flushsa={0x234, 0x1c, 0x10, 0x70bd28, 0x25dfdbfe, {}, [@address_filter={0x28, 0x1a, {@in6=@mcast1, @in6=@dev={0xfe, 0x80, '\x00', 0x18}, 0xa, 0x1, 0x3}}, @policy={0xac, 0x7, {{@in6=@mcast2, @in6=@mcast1, 0x4e24, 0x0, 0x4e21, 0x86f, 0xa, 0x80, 0x20, 0x32, r4, r8}, {0x40, 0x0, 0x8000, 0x10001, 0x1, 0x7, 0x3f, 0x4}, {0x8, 0x80000001, 0x9}, 0x1, 0x6e6bb3, 0x1, 0x1}}, @proto={0x5, 0x19, 0x32}, @offload={0xc, 0x1c, {r9}}, @coaddr={0x14, 0xe, @in=@loopback}, @algo_comp={0x11c, 0x3, {{'deflate\x00'}, 0x6a0, "0a29bf485230a997ed5c2a1634287bd1f8edb04bfa6497b6782f1daa6fbd3358c7e2ca281c8b9791b962dfc567e2e2f30541628b7c345a7f2b7e3ad69cc517c9918ac0b3634696afa09a57bfee6fd869f24a270d8621eb9745ce12b3c82ea2cae40acfd617f2d715a5310e556f4a5d3bea26df8d3a4fb0dcee33ac944e0057b80549269bd8c7c950c8526f3d9fba49c17028847949e1351837af76559ee1ddb64672aedb4295e3a3b21ac4c1c58b47d9aa894bc9bdca3fe2851e83f1bd2809abec8208111d7e393f0e6621d740e343bb71296c33"}}, @proto={0x5, 0x19, 0x32}]}, 0x234}, 0x1, 0x0, 0x0, 0x2000c800}, 0x40080) socket$nl_xfrm(0x10, 0x3, 0x6) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000080), 0xc, 0x0}, 0x40000) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000001600)=@ipv6_newnexthop={0x24, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ID={0x8, 0x1, 0x1}, @NHA_BLACKHOLE={0x4}]}, 0x24}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001300)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x2c, 0x2c, 0x6, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x4, 0x3}]}, @enum, @typedef={0x4, 0x0, 0x0, 0x12, 0x2}]}, {0x0, [0x0, 0x0, 0x0, 0x5f]}}, 0x0, 0x4a}, 0x20) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) close(r11) ioctl$SIOCSIFHWADDR(r11, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) ioctl$SIOCSIFHWADDR(r11, 0x8b06, &(0x7f0000000040)={'wlan1\x00', @random="02000000000a"}) socket$nl_generic(0x10, 0x3, 0x10) 2.672035095s ago: executing program 3 (id=2232): socket(0x1f, 0x803, 0x0) socket$inet6(0xa, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r0, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pK \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{r1}, &(0x7f0000001800), &(0x7f0000001840)='%-010d \x00'}, 0x20) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000009000000090000000000000e02000000010000000400000000000b01000000000000005f5f00"/73], &(0x7f0000000540)=""/246, 0x49, 0xf6, 0x1}, 0x20) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x19, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b704000008000000850000009500000018110000", @ANYRES32=r3, @ANYBLOB="00000000000000ff00000000000900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7885185000000820000009500000000503f4f51a9fb16fa5add170af41df4294e88e9bd890f33f048712380a2711d0a282a10ed8489f4a4fc7343c188dba020e6cf94fc3c3fdee20c00000000000044ff6dd83a941338609297444d824cbb67a2843a8a489dc8917ff82469c7f91fc5b235317a266efe0d100658ee94637ce7ff32935445e2ba14c72b5526b069737ae33b4c51e7f198324a4a017897ec9a4bb117d8f8"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0xfffff000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000000, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x18, 0x4, 0xfff, 0x89, 0x4e9}, 0x48) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000780)={0x11, 0x4, &(0x7f00000001c0)=@raw=[@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}], &(0x7f0000000300)='GPL\x00', 0x5, 0x53, &(0x7f0000000340)=""/83, 0x100, 0x2e, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000003c0)={0x4, 0x5, 0x1ff, 0x9}, 0x10, 0x0, 0x0, 0x1, &(0x7f0000000440)=[r5, r5], &(0x7f0000000480)=[{0x1, 0x3, 0x0, 0x2}], 0x10, 0x99}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000500)={&(0x7f0000000140)='mm_compaction_try_to_compact_pages\x00', r7}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r8}, 0x10) socket$kcm(0x10, 0x3, 0x10) 2.499559487s ago: executing program 4 (id=2233): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x6, &(0x7f00000005c0)={&(0x7f0000000600)={0x78, r1, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_SEC_KEY={0x58, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x14, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}]}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "e696b25aeb23f2d247f72878d8f0ae4a"}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "bbafc458a5138cf4971eed7bb719618c2c8468ded184bf7446b6caa7a8f7586f"}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x78}}, 0x0) 2.466186106s ago: executing program 3 (id=2234): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000020000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x19, 0x4, 0x240, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x100}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000007c0), &(0x7f0000000380), 0xfff, r1, 0x0, 0xa0028000}, 0x38) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x700}, 0x0) close(r2) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000080)={0x40}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r6, &(0x7f0000000080)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r5, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_udp_int(r7, 0x11, 0xa, 0x0, &(0x7f0000000000)) ioctl$EXT4_IOC_MIGRATE(r0, 0x6609) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x2865d469b905726f, &(0x7f0000000600)=ANY=[@ANYBLOB="1800dc42ce152338f083199c5415aa50ad60e19e931b599707de15fd1e92ef227ccb24cc35314392b4ac4d0765169f1489c28c98b5cf7a74214c44d9f14347cde544c788c6b57ccfccbb7aee1e5aa0fccfecd45070f42c0527c5f47cefcc582e38d819847711d3942440c242b6ede3dcd911b02e7cca416472025c1b5085a1e9b26f6be102526fb60c7b9dfb5f2172fdc0873cd48a2acddc4aa963cb656693512cc216766a7c9cb7b396eb079e12"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1e, r6}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0xe}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x61}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0xa8, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x10}, 0x90) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r9, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000013c0)=[{&(0x7f00000001c0)="39000000140081ae0000dc676f97daf01e2357f9ffffffffffffff0521018701546fabca1b4e8a06a6580e", 0x2b}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) close(0xffffffffffffffff) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x24, 0x24, 0x2, [@enum, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x5}}]}}, 0x0, 0x3e}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000400)='kfree\x00'}, 0x10) 2.398541989s ago: executing program 1 (id=2235): sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c1000003e0007012ebd700004101c000100000004000002"], 0x101c}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7903009875f37538e486dd"], 0xfdef) r0 = socket$kcm(0x11, 0x2, 0x0) r1 = socket$kcm(0x11, 0x200000000000002, 0x300) r2 = socket$pppoe(0x18, 0x1, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @local, 'geneve0\x00'}}, 0x1e) connect$pppoe(r2, &(0x7f0000000080)={0x18, 0x0, {0xfffe, @empty, 'geneve0\x00'}}, 0x1e) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r4, 0x40047438, &(0x7f0000000100)=0x1) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCATTCHAN(r5, 0x40047438, &(0x7f0000000100)=0x1) setsockopt$sock_attach_bpf(r1, 0x107, 0x12, &(0x7f00000000c0)=r0, 0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet_udplite(0x2, 0x2, 0x88) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r7, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x4c}}, 0x0) syz_emit_ethernet(0x46, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev={0xac, 0x14, 0x14, 0x42}, @multicast2}, "00186371ae9b1c03"}}}}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0x150, 0x250, 0xffffffff, 0x250, 0x0, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, &(0x7f0000000040), {[{{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @loopback, 0xff, 0xff, 'ipvlan1\x00', 'vlan0\x00', {0x80}, {0xff}, 0x89, 0x1, 0x28}, 0x0, 0x118, 0x150, 0x0, {}, [@common=@set={{0x40}, {{0x2, [0x3, 0x0, 0x5, 0x3, 0x2, 0x4], 0x3, 0x1}}}, @common=@unspec=@physdev={{0x68}, {'veth1_macvtap\x00', {0xff}, 'ip_vti0\x00', {0xff}, 0x18, 0x18}}]}, @NETMAP={0x38, 'NETMAP\x00', 0x0, {0x1, {0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @port=0x4e23, @gre_key=0x3b}}}}, {{@ip={@rand_addr=0x64010100, @remote, 0x0, 0x0, 'nicvf0\x00', 'macvlan0\x00', {}, {}, 0x5e, 0x3, 0x12}, 0x0, 0xc8, 0x100, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[0x4e23, 0x4e22], [0x4e22, 0x4e23], 0x2, 0x40, 0x1}}, @common=@icmp={{0x28}, {0x4, "2e87"}}]}, @DNAT0={0x38, 'DNAT\x00', 0x0, {0x1, {0x12, @local, @rand_addr=0x64010102, @gre_key=0x20, @icmp_id=0x64}}}}, {{@ip={@loopback, @multicast2, 0xff, 0xffffffff, 'rose0\x00', 'team_slave_1\x00', {0xff}, {0xff}, 0x89, 0x0, 0x12}, 0x0, 0x98, 0xe0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0x3f}}]}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x2, @ipv4=@rand_addr=0x64010102, @ipv4=@rand_addr=0x64010102, @icmp_id=0x64, @icmp_id=0x64}}}, {{@uncond, 0x0, 0xe8, 0x120, 0x0, {}, [@common=@osf={{0x50}, {'syz0\x00', 0x0, 0x4, 0x1, 0x2}}, @common=@ttl={{0x28}, {0x3, 0x3e}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0xa, @multicast2, @multicast1, @gre_key=0xd94, @icmp_id=0x64}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 2.332280874s ago: executing program 4 (id=2236): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@setneightbl={0x70, 0x43, 0x400, 0x70bd25, 0x25dfdbfc, {0xa}, [@NDTA_THRESH3={0x8, 0x4, 0xfffffff7}, @NDTA_PARMS={0x30, 0x6, 0x0, 0x1, [@NDTPA_GC_STALETIME={0xc, 0x6, 0x7}, @NDTPA_BASE_REACHABLE_TIME={0xc, 0x4, 0x13}, @NDTPA_UCAST_PROBES={0x8, 0xa, 0x4}, @NDTPA_RETRANS_TIME={0xc, 0x5, 0xfff}]}, @NDTA_THRESH3={0x8, 0x4, 0xff}, @NDTA_GC_INTERVAL={0xc, 0x8, 0x1a}, @NDTA_THRESH3={0x8, 0x4, 0xffff9b6a}, @NDTA_THRESH3={0x8}]}, 0x70}}, 0x0) ioctl$SIOCGSTAMP(r0, 0x8906, &(0x7f0000000040)) 2.280171951s ago: executing program 4 (id=2237): socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x3c, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="c018030221000b63d25a80648c2594f90124fc60350c030b022e0040083582c137153e370248078000f01708d1bd", 0x33fe0}], 0x1, 0x0, 0x0, 0x3000}, 0x0) 2.267007848s ago: executing program 3 (id=2238): r0 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa1000000000000070100"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) (async, rerun: 32) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) (rerun: 32) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, 0x0, 0x4000000) (async) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000000100000008000100", @ANYRES32, @ANYBLOB="3c000200240001"], 0x58}, 0x1, 0xf000}, 0x0) (async, rerun: 32) r3 = socket$nl_generic(0x10, 0x3, 0x10) (rerun: 32) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f0000000a00)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)={0x38, r5, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}]}, 0x38}}, 0x0) (async) ioctl$F2FS_IOC_START_ATOMIC_WRITE(r1, 0xf501, 0x0) (async) sendmsg$netlink(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="140100002b000100000000000000001807"], 0x114}], 0x1}, 0x0) (async, rerun: 64) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x275a, 0x0) (rerun: 64) pwrite64(r6, &(0x7f0000000000)="e7030014000816112ee73cfe11f0102b510b2e73fce8a190dd2958d5", 0xfffffffffffffe34, 0x8001) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x11, 0x0, 0x0, 0x4, 0x0, 0x1}, 0x48) (async, rerun: 64) getsockopt$inet_sctp_SCTP_PRIMARY_ADDR(r6, 0x84, 0x6, &(0x7f00000004c0)={0x0, @in6={{0xa, 0x4e21, 0xffff, @empty, 0x7f}}}, &(0x7f0000000400)=0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, 0x0, &(0x7f00000005c0)) (async, rerun: 32) r7 = socket$netlink(0x10, 0x3, 0x0) (rerun: 32) getsockname(r3, &(0x7f00000002c0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000003c0)=0x80) (async) socket$netlink(0x10, 0x3, 0xf) ioctl$PPPIOCGIDLE(r6, 0x8010743f, &(0x7f00000001c0)) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYRES32=0x0, @ANYBLOB], 0x48}}, 0x0) r8 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) write(r8, &(0x7f0000000380)='@_;', 0x3) 2.040169753s ago: executing program 3 (id=2239): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), r0) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)={0xffffffffffffff58, r5, 0x0, 0x0, 0x0, {}, [@NL80211_ATTR_WIPHY_COVERAGE_CLASS={0x5}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0x8, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000740)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x1, 0x0, r6}, @alu={0x7, 0x1, 0x0, 0x0, 0x8}, @initr0, @exit]}, &(0x7f0000000000)='GPL\x00'}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000000)={r7, 0x0}, 0x20) ioctl$SIOCSIFHWADDR(r8, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 2.038555878s ago: executing program 2 (id=564): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x7c, r1, 0x800, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x7c}, 0x1, 0x0, 0x0, 0x20000010}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r2, 0x6611) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000200)={0x88, 0x1403, 0x20, 0x70bd25, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'syzkaller1\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'nicvf0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team0\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0x5}, 0x0) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r3, 0x89f3, &(0x7f0000000400)={'syztnl2\x00', &(0x7f0000000380)={'syztnl1\x00', 0x0, 0x2f, 0x2, 0x6, 0x8, 0x62, @private2, @empty, 0x17, 0x80, 0x0, 0x40}}) sendmsg$nl_route_sched(r3, &(0x7f0000000640)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000440)=@newqdisc={0x1b8, 0x24, 0x1, 0x70bd25, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xb, 0xc}, {0x9, 0x1}, {0xffe0, 0xfff1}}, [@TCA_STAB={0x78, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x55, 0x8, 0xca9, 0x6, 0x3, 0x0, 0x7, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x1f, 0x0, 0x20, 0x4, 0x1, 0x4, 0x8, 0x1}}, {0x6, 0x2, [0x3]}}, {{0x1c, 0x1, {0x2, 0xb5, 0xfffb, 0x8, 0xea214c780c4e5658, 0x3f, 0x0, 0x5}}, {0xe, 0x2, [0x7, 0xef, 0x1a02, 0x0, 0x800]}}]}, @TCA_STAB={0xb0, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x7, 0x2f, 0x6, 0xeeed, 0x1, 0x40, 0x827, 0x9}}, {0x16, 0x2, [0x1000, 0xf0, 0x1f, 0x40, 0x4, 0x1, 0x8, 0x0, 0xd9]}}, {{0x1c, 0x1, {0x6, 0xae, 0x20, 0xfffffffb, 0x3, 0xff, 0x5ecea7d5, 0x7}}, {0x12, 0x2, [0x7, 0xd9, 0x7, 0xffe1, 0x3, 0x7ff, 0x2e00]}}, {{0x1c, 0x1, {0x9, 0x0, 0x5, 0x0, 0x2, 0x81, 0x5f9f2795, 0x1}}, {0x6, 0x2, [0x0]}}, {{0x1c, 0x1, {0x7, 0x2, 0xf4, 0x4, 0x2, 0xfffff801, 0x3, 0x1}}, {0x6, 0x2, [0x6]}}]}, @TCA_RATE={0x6, 0x5, {0x4, 0x9}}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x8}, @TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x2, 0x1, 0x6, 0x83, 0x2, 0x39fb, 0x200, 0x1}}, {0x6, 0x2, [0x8]}}, {{0x1c, 0x1, {0x2, 0x0, 0x1, 0x3, 0x3, 0x4, 0x4, 0x1}}, {0x6, 0x2, [0x7]}}]}, @TCA_RATE={0x6, 0x5, {0x60, 0x7}}, @TCA_RATE={0x6, 0x5, {0x9, 0x70}}]}, 0x1b8}, 0x1, 0x0, 0x0, 0x4000000}, 0x42001) write$cgroup_devices(r3, &(0x7f0000000680)={'a', ' *:* ', 'm\x00'}, 0x8) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000006c0)={'wlan1\x00', 0x0}) ioctl$sock_TIOCINQ(r2, 0x541b, &(0x7f0000000700)) sendmsg$NL80211_CMD_NEW_STATION(r3, &(0x7f0000000840)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x60, r1, 0x4, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_STA_WME={0x3c, 0x81, [@NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}, @NL80211_STA_WME_MAX_SP={0x5}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x1f}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x9c}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x24}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0x5}]}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x401}, @NL80211_ATTR_OPMODE_NOTIF={0x5, 0xc2, 0xf8}]}, 0x60}, 0x1, 0x0, 0x0, 0x40044}, 0x40) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000a40)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000a00)={&(0x7f00000008c0)={0x120, 0x0, 0x2, 0x70bd27, 0x25dfdbff, {}, [@TIPC_NLA_BEARER={0x38, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x8000}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x28bc}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x7}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xdcd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x682}]}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8}]}, @TIPC_NLA_MEDIA={0xc4, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x34, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xcf4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fff}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0xfffffe6b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x18}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}]}, @TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8000}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x20}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}]}]}, 0x120}, 0x1, 0x0, 0x0, 0x11}, 0x40008080) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r3, 0x89f2, &(0x7f0000000c00)={'sit0\x00', &(0x7f0000000ac0)={'erspan0\x00', r4, 0x80, 0x41, 0xd328, 0x1000, {{0x39, 0x4, 0x0, 0x6, 0xe4, 0x66, 0x0, 0x52, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@end, @timestamp={0x44, 0x1c, 0x9, 0x0, 0x1, [0x7f, 0x1, 0x4, 0x0, 0x10001, 0x8000]}, @noop, @timestamp_prespec={0x44, 0x3c, 0xa5, 0x3, 0x0, [{@dev={0xac, 0x14, 0x14, 0xb}, 0x4}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xdbd}, {@multicast2, 0x40f9}, {@empty, 0x9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9a5}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x2}, {@loopback, 0x94e}]}, @timestamp_prespec={0x44, 0xc, 0x28, 0x3, 0xa, [{@empty, 0x7fffffff}]}, @ra={0x94, 0x4}, @cipso={0x86, 0x23, 0x2, [{0x5, 0x9, "0d3a42556b1c85"}, {0x6, 0x7, "2dde489f70"}, {0x2, 0xd, "ee55c3533df17c96fe05cd"}]}, @lsrr={0x83, 0x27, 0x85, [@remote, @rand_addr=0x64010101, @private=0xa010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x32}, @local, @rand_addr=0x64010101, @empty, @dev={0xac, 0x14, 0x14, 0x1b}]}, @cipso={0x86, 0xe, 0x3, [{0x6, 0x8, "e38a38cf4050"}]}, @timestamp_addr={0x44, 0xc, 0xdb, 0x1, 0x1, [{@loopback, 0x80}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000c40)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_team(r2, 0x8933, &(0x7f0000000c80)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000001940)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000001900)={&(0x7f0000000cc0)={0xc34, 0x0, 0x8, 0x70bd25, 0x25dfdbfd, {}, [{{0x8, 0x1, r4}, {0x1b8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xb32}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x40}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}, {{0x8, 0x1, r4}, {0x84, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r4}, {0x118, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x401}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8}}}, {0x54, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x24, 0x4, [{0x2b, 0x95, 0x57, 0x80}, {0x1, 0x1, 0x1f, 0x401}, {0x40, 0x1, 0xc8, 0x6}, {0x2, 0x6, 0x0, 0xc6}]}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0xf4, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x400e}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x56}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7f5d874c}}, {0x8, 0x6, r6}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x124, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x64}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}]}}, {{0x8, 0x1, r4}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}]}}, {{0x8, 0x1, r4}, {0x1e8, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x87f}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x21}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x1}}, {0x8, 0x6, r4}}}]}}, {{0x8, 0x1, r4}, {0x21c, 0x2, 0x0, 0x1, [{0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2831}}}, {0x3c, 0x1, @name={{0x24}, {0x5}, {0xb, 0x4, 'random\x00'}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x1f, 0x8, 0x6, 0x4}, {0x2, 0x7, 0x1f, 0xffff0000}]}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8}}, {0x8, 0x6, r4}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r4}}, {0x8}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x80}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}]}}, {{0x8, 0x1, r8}, {0x1e8, 0x2, 0x0, 0x1, [{0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0xa38}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0xfffffff8}}}, {0x3c, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0xc, 0x4, [{0x128, 0x1, 0x3, 0x8}]}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0x1}}}]}}]}, 0xc34}, 0x1, 0x0, 0x0, 0x840}, 0x8000000) ioctl$sock_ipv6_tunnel_SIOCCHG6RD(r3, 0x89fb, &(0x7f00000019c0)={'sit0\x00', &(0x7f0000001980)={@dev={0xfe, 0x80, '\x00', 0x39}, @private=0xa010102, 0x6, 0x4}}) sendmsg$IPSET_CMD_DEL(r3, &(0x7f0000001ac0)={&(0x7f0000001a00)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)={0x20, 0xa, 0x6, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x400c009}, 0x8000) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000001bc0)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000001b80)={&(0x7f0000001b40)={0x28, r1, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x1, 0x2c}, @void, @val={0xc, 0x99, {0x2, 0x43}}}}, ["", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4000010) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001c40), r0) sendmsg$NL80211_CMD_JOIN_IBSS(r0, &(0x7f0000001d80)={&(0x7f0000001c00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000001d40)={&(0x7f0000001c80)={0x88, r9, 0x400, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_IE={0x5f, 0x2a, [@ibss={0x6, 0x2, 0x5}, @measure_req={0x26, 0x55, {0x5, 0x1f, 0x40, "f1de72bf87c75d14f153c631762a855db7287419d4a9b9af241c3215faf8550892682bbdd3f2d483f4ab60cc97372c69db1ca3376312e6f3c7e6b90b5523d0003108338d97642940cebf575b1e5767097077"}}]}, @NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random}]}, 0x88}, 0x1, 0x0, 0x0, 0x4008012}, 0x20044044) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000001dc0)={'batadv_slave_1\x00', 0x0}) ioctl$SIOCX25GSUBSCRIP(r3, 0x89e0, &(0x7f0000001e00)={'ip_vti0\x00', 0xea7, 0x1}) r11 = syz_genetlink_get_family_id$team(&(0x7f0000001f40), r0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000001f80)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000001fc0)={'batadv0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(r3, &(0x7f00000025c0)={&(0x7f0000001f00)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000002580)={&(0x7f0000002000)={0x548, r11, 0x20, 0x70bd29, 0x25dfdbfe, {}, [{{0x8, 0x1, r4}, {0xec, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r4}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @lb_hash_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x9}}, {0x8}}}]}}, {{0x8, 0x1, r8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0xc7aa}}, {0x8, 0x6, r12}}}]}}, {{0x8, 0x1, r8}, {0x23c, 0x2, 0x0, 0x1, [{0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x4}}, {0x8, 0x6, r4}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x9, 0x80, 0x5, 0x2}, {0x1445, 0xf2, 0x5}]}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8, 0x4, 0xfffffdff}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r7}}, {0x8}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7}}, {0x8, 0x6, r10}}}, {0x38, 0x1, @mcast_rejoin_count={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8, 0x4, r6}}, {0x8}}}, {0x44, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x14, 0x4, [{0x7, 0x8, 0x7, 0xa5d5}, {0x5}]}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8, 0x6, r8}}}]}}, {{0x8, 0x1, r8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8, 0x4, r13}}}]}}, {{0x8, 0x1, r4}, {0x164, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x800}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x82}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8001}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0xffffffff}}, {0x8, 0x6, r7}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x4}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}]}}]}, 0x548}, 0x1, 0x0, 0x0, 0x800}, 0x400c000) ioctl$PPPIOCSPASS(0xffffffffffffffff, 0x40107447, &(0x7f0000002680)={0x3, &(0x7f0000002640)=[{0xfff8, 0x16, 0x1, 0x8001}, {0x7f, 0x9, 0x0, 0xfffffff7}, {0xffff, 0x81, 0x9d, 0xfffffffb}]}) 2.037703818s ago: executing program 4 (id=2240): socket$netlink(0x10, 0x3, 0x0) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYBLOB="5000000010000304000000000000000000007400", @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b0001006272696467650002901521affcf0e283c11a19dab7002000028005001700000000000ce31f000200"], 0x50}}, 0x0) socket$l2tp(0x2, 0x2, 0x73) write$binfmt_script(r0, 0x0, 0xfffffe5d) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r2, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="8db1260267fd240c080d474b56ff21158272839e271b41bd07043748421c256f4fc10bf26018cd0506942899086c863554b32382adc06d86e537d412", @ANYRES16=r1, @ANYBLOB="010000000000000000001400000018000180140002006e657464657673696d3000000000000008000d000700000005000b000100000005000c0000000000"], 0x44}}, 0x0) getsockname$packet(r0, &(0x7f0000000280)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = epoll_create1(0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r4, 0x8946, &(0x7f00000016c0)={'gretap0\x00', &(0x7f0000001680)=@ethtool_wolinfo={0x34, 0x0, 0x0, "701916572366"}}) r5 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r5, 0x65, 0x2, &(0x7f0000000000)=0x800023fe, 0x4) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f00000000c0)={'vxcan1\x00', 0x0}) bind$can_raw(r0, &(0x7f0000000240)={0x1d, r7}, 0x10) poll(&(0x7f0000000100)=[{}, {r3}], 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xe, 0x4, 0x4, 0x10001, 0x4}, 0x48) getsockname$packet(r0, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040), 0x48) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r8 = socket(0x1e, 0x1, 0x0) connect$tipc(r8, &(0x7f0000000000)=@name={0x1e, 0x2, 0x0, {{0x1, 0x1}}}, 0x10) setsockopt$MRT_DEL_MFC_PROXY(0xffffffffffffffff, 0x0, 0xd3, 0x0, 0x0) socket$kcm(0x10, 0x7, 0x4) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)}, 0x0) r9 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000740)=ANY=[], 0x3c}, 0x1, 0x0, 0x0, 0x4040018}, 0x0) 244.926003ms ago: executing program 0 (id=2241): unshare(0x400) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000200)=ANY=[@ANYBLOB="280000005e0001ee00000000000000000c00000001000000000000800c00fe8008000200", @ANYRES32, @ANYBLOB], 0x28}], 0x1}, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000140)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmmsg$sock(r2, &(0x7f00000046c0)=[{{0x0, 0x0, &(0x7f0000000b40)=[{&(0x7f0000000ac0)="a5", 0x1}], 0x1}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000001d00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000001d80)=""/45, 0x2d}], 0x1}}], 0x2, 0x0, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x100, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, &(0x7f0000000100)='GPL\x00', 0x1000d, 0xfffffffffffffc60}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000395f00009500000000000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r4 = socket$nl_route(0x10, 0x3, 0x0) (async) r5 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000003c0)=@framed={{}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r5}, {}, {0x85, 0x0, 0x0, 0xb3}}, @printk={@lx}]}, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x70, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r6}, 0xc) ioctl(r4, 0x8b2a, &(0x7f0000000040)) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r3, 0xc008744c, 0x0) (async, rerun: 32) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_DELCHAIN={0x30, 0x5, 0xa, 0x201, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}]}], {0x14}}, 0x58}}, 0x0) (async, rerun: 32) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e370c0c18800aac0f000300", 0x33fe0}], 0x1}, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000009c0), r9) sendmsg$NLBL_MGMT_C_PROTOCOLS(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000000)=ANY=[@ANYBLOB="148f8770210a6931000000000000", @ANYRES16=r10, @ANYBLOB="a7f7000000000000000007000000"], 0x14}}, 0x0) 243.261207ms ago: executing program 1 (id=2242): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000001280)=ANY=[@ANYBLOB='D'], 0x4c}}, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) write$binfmt_misc(r0, &(0x7f0000001280)=ANY=[], 0xfffffdef) 241.92848ms ago: executing program 3 (id=2243): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x4e20, @local}]}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x8, &(0x7f0000000340)=@int=0xa00, 0x4) 241.507908ms ago: executing program 4 (id=2244): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r0, 0x0, &(0x7f0000000100)=0x9) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000200)={0xa, 0x4a1f, 0x367, @mcast1}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r1, 0x11a, 0x3, &(0x7f0000000080)=0x3f, 0x4) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r4) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f0000000340)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEV(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x50, r5, 0x852dd6c070cd7e4d, 0x2000000, 0x0, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r7}, @IEEE802154_ATTR_PAN_ID={0x6}, @IEEE802154_ATTR_SHORT_ADDR={0x6}]}, 0x50}, 0x4, 0x700000000000000}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r2, &(0x7f0000000340)={&(0x7f0000000040), 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x5c, r3, 0x800, 0x70bd2c, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x80) read(r0, &(0x7f0000000140)=""/186, 0xba) writev(r0, 0x0, 0x0) socket$kcm(0x10, 0x0, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(0xffffffffffffffff, 0x0, 0x0) 141.236312ms ago: executing program 1 (id=2245): write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @random="7f0a00034011", @void, {@ipv4={0x805, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0xb, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2f, 0x0, @loopback, @private}}}}}}, 0x0) 0s ago: executing program 1 (id=2246): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000003a80)={0x0, 0x1c, &(0x7f0000003980)=[@in6={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}]}, &(0x7f0000003ac0)=0x10) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r0, 0x84, 0x6d, &(0x7f0000000080), &(0x7f00000000c0)=0x3930) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000200)={r0}) getsockname$packet(r1, &(0x7f0000000340)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000380)=0x14) getsockopt$inet_sctp6_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f00000003c0), &(0x7f0000000400)=0x4) socket$nl_route(0x10, 0x3, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) close(r2) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x100002, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x48400) r5 = socket$alg(0x26, 0x5, 0x0) sendfile(r3, r2, 0x0, 0x81) bind$alg(r5, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) write$binfmt_script(r2, &(0x7f0000000e00)={'#! ', './file0', [], 0xa, "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"}, 0xf7d) r6 = accept4(r5, 0x0, 0x0, 0x0) sendfile(r6, r2, 0x0, 0xfacf) r7 = socket(0x1, 0x803, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif-generic\x00'}, 0x58) r9 = accept4(r8, 0x0, 0x0, 0x0) sendmmsg$unix(r9, &(0x7f00000050c0)=[{{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f00000012c0)='R', 0x1}, {&(0x7f0000000640)="94", 0x1}], 0x2}}], 0x1, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r7, 0x89f1, &(0x7f0000000180)={'syztnl1\x00', &(0x7f0000000000)={'gretap0\x00', r10, 0x7800, 0x7, 0x80, 0x2, {{0xa, 0x4, 0x1, 0x2d, 0x28, 0x64, 0x0, 0x2, 0x4, 0x0, @empty, @rand_addr=0x64010100, {[@timestamp={0x44, 0x14, 0xc6, 0x0, 0x4, [0x7, 0xf, 0x101, 0x9]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000240)={'batadv0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$nl_route(r12, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@ipv6_getaddr={0x3c, 0x16, 0x400, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x0, 0xc8, r11}, [@IFA_RT_PRIORITY={0x8, 0x9, 0xe47}, @IFA_RT_PRIORITY={0x8, 0x9, 0xfffffffc}, @IFA_LOCAL={0x14, 0x2, @rand_addr=' \x01\x00'}]}, 0x3c}}, 0x0) kernel console output (not intermixed with test programs): ac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.513593][ T9589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.544365][ T9589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.568885][ T9589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.584468][ T9589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 218.626389][ T9589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.660829][ T9589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 218.725686][ T9589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.765990][ T9589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.796433][ T9589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.839697][ T9589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.856400][ T9589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.877301][ T9589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.895761][ T9589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.915020][ T9589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.938057][ T9589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.948912][ T9589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.959474][ T9589] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 218.974371][ T9589] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 218.991083][ T9589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.052995][ T9841] ɶƣ0GCTw: entered promiscuous mode [ 219.101881][ T9589] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.156070][ T9589] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.164848][ T9589] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.176762][ T9848] openvswitch: netlink: Missing key (keys=40, expected=80) [ 219.194710][ T9589] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.232228][ T9842] ɶƣ0GC¦: entered promiscuous mode [ 219.422611][ T9852] lo speed is unknown, defaulting to 1000 [ 219.517616][ T2394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.525516][ T2394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.612715][ T9855] __nla_validate_parse: 10 callbacks suppressed [ 219.612739][ T9855] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1314'. [ 219.698640][ T1098] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.720730][ T1098] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 220.261311][ T9876] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1321'. [ 220.494546][ T9893] vxcan1: entered promiscuous mode [ 220.503141][ T9893] vlan3: entered promiscuous mode [ 220.511305][ T9893] vlan3: entered allmulticast mode [ 220.525135][ T9893] vxcan1: entered allmulticast mode [ 220.535742][ T9893] vxcan1: left allmulticast mode [ 220.550496][ T9893] vxcan1: left promiscuous mode [ 220.599376][ T9892] IPVS: Error connecting to the multicast addr [ 220.627949][ T9898] openvswitch: netlink: Missing key (keys=40, expected=80) [ 221.171342][ T9916] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 221.199060][ T29] audit: type=1804 audit(1719909399.265:11): pid=9916 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1335" name="/root/syzkaller.AZB7nh/14/cgroup.controllers" dev="sda1" ino=1975 res=1 errno=0 [ 221.314722][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.601281][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.752558][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.826345][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 221.971706][ T51] bridge_slave_1: left allmulticast mode [ 221.985101][ T51] bridge_slave_1: left promiscuous mode [ 222.006830][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.042560][ T51] bridge_slave_0: left allmulticast mode [ 222.052912][ T51] bridge_slave_0: left promiscuous mode [ 222.063804][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.398928][ T9930] netlink: 'syz.3.1341': attribute type 1 has an invalid length. [ 222.709923][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 222.730241][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 222.745380][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 222.761908][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 222.780389][ T5096] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 222.791518][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 223.004900][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 223.024073][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 223.048709][ T51] bond0 (unregistering): Released all slaves [ 223.064715][ T9925] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 223.135346][ T9938] lo speed is unknown, defaulting to 1000 [ 223.573462][ T9963] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1349'. [ 223.726371][ T9963] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1349'. [ 223.866197][ T51] hsr_slave_0: left promiscuous mode [ 223.893573][ T51] hsr_slave_1: left promiscuous mode [ 223.903218][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 223.911627][ T9974] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1354'. [ 223.930613][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 223.950063][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 223.962543][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 224.002924][ T51] veth1_macvtap: left promiscuous mode [ 224.010071][ T51] veth0_macvtap: left promiscuous mode [ 224.017979][ T51] veth1_vlan: left promiscuous mode [ 224.024680][ T51] veth0_vlan: left promiscuous mode [ 224.821268][ T51] team0 (unregistering): Port device team_slave_1 removed [ 224.870951][ T51] team0 (unregistering): Port device team_slave_0 removed [ 224.901049][ T5096] Bluetooth: hci1: command tx timeout [ 225.548297][ T9996] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 225.654175][ T9938] chnl_net:caif_netlink_parms(): no params data found [ 225.713544][T10007] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1360'. [ 225.759878][T10007] netlink: 'syz.3.1360': attribute type 2 has an invalid length. [ 225.994160][T10016] netlink: 196 bytes leftover after parsing attributes in process `syz.4.1364'. [ 226.044214][T10016] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1364'. [ 226.071768][ T9938] bridge0: port 1(bridge_slave_0) entered blocking state [ 226.097938][T10016] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1364'. [ 226.106390][ T9938] bridge0: port 1(bridge_slave_0) entered disabled state [ 226.113201][T10016] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1364'. [ 226.134698][ T9938] bridge_slave_0: entered allmulticast mode [ 226.146984][ T9938] bridge_slave_0: entered promiscuous mode [ 226.165560][T10016] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1364'. [ 226.181847][ T9938] bridge0: port 2(bridge_slave_1) entered blocking state [ 226.216158][ T9938] bridge0: port 2(bridge_slave_1) entered disabled state [ 226.223740][ T9938] bridge_slave_1: entered allmulticast mode [ 226.236511][ T9938] bridge_slave_1: entered promiscuous mode [ 226.320515][ T9938] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 226.349932][ T9938] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 226.389309][T10029] vxcan1: entered promiscuous mode [ 226.408848][T10029] vlan3: entered promiscuous mode [ 226.414600][T10029] vlan3: entered allmulticast mode [ 226.446216][T10029] vxcan1: entered allmulticast mode [ 226.464149][T10029] vxcan1: left allmulticast mode [ 226.470338][T10029] vxcan1: left promiscuous mode [ 226.552423][T10035] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1370'. [ 226.664435][ T9938] team0: Port device team_slave_0 added [ 226.683272][ T9938] team0: Port device team_slave_1 added [ 226.753615][T10040] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1372'. [ 226.809589][ T9938] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 226.820813][ T9938] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.850201][ T9938] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 226.866250][ T9938] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 226.880859][ T9938] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 226.977091][ T9938] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 226.978699][ T5096] Bluetooth: hci1: command tx timeout [ 227.094567][ T9938] hsr_slave_0: entered promiscuous mode [ 227.106314][ T9938] hsr_slave_1: entered promiscuous mode [ 227.129236][T10054] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 227.135985][ T9938] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 227.151604][ T9938] Cannot create hsr debugfs directory [ 227.206950][T10051] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 228.152718][ T9938] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 228.216118][ T9938] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 228.260755][ T9938] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 228.304276][ T9938] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 228.675715][T10096] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.717741][T10096] batadv_slave_1: entered promiscuous mode [ 228.756751][T10109] netlink: 'syz.4.1396': attribute type 46 has an invalid length. [ 228.767489][T10109] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1396'. [ 228.827344][T10105] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1397'. [ 228.908762][ T9938] 8021q: adding VLAN 0 to HW filter on device bond0 [ 229.001526][ T9938] 8021q: adding VLAN 0 to HW filter on device team0 [ 229.047723][ T5201] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.054961][ T5201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 229.068316][ T5096] Bluetooth: hci1: command tx timeout [ 229.115368][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.122761][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 229.871888][ T9938] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 229.991669][ T9938] veth0_vlan: entered promiscuous mode [ 230.019596][ T9938] veth1_vlan: entered promiscuous mode [ 230.133296][ T9938] veth0_macvtap: entered promiscuous mode [ 230.193457][ T9938] veth1_macvtap: entered promiscuous mode [ 230.257542][ T9938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.304628][ T9938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.322145][ T9938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.354825][ T9938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.406752][ T9938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.435559][ T9938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.446088][ T9938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.465905][ T9938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.486377][ T9938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 230.497303][ C0] ip6_tunnel: ip6tnl1 xmit: Local address not yet configured! [ 230.532822][ T9938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.549578][ T9938] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.592058][ T9938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.625736][ T9938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.648323][ T9938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.674454][ T9938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.723330][ T9938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.767489][ T9938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.806759][ T9938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.839493][ T9938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.861318][ T9938] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 230.881775][ T9938] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 230.899399][ T9938] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.982394][ T9938] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.004799][ T9938] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.025917][ T9938] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.044896][ T9938] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.137668][ T5096] Bluetooth: hci1: command tx timeout [ 231.380507][ T2394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.417033][ T2394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.490082][ T2394] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 231.508074][ T2394] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 231.760753][T10201] netlink: 'syz.4.1426': attribute type 10 has an invalid length. [ 231.789849][T10201] geneve0: entered promiscuous mode [ 231.854742][T10201] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 232.195826][T10213] netlink: 'syz.3.1430': attribute type 1 has an invalid length. [ 232.262080][ T29] audit: type=1804 audit(1719909410.325:12): pid=10219 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1432" name="/root/syzkaller.AZB7nh/35/cgroup.controllers" dev="sda1" ino=1976 res=1 errno=0 [ 232.602899][T10225] __nla_validate_parse: 33 callbacks suppressed [ 232.602923][T10225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1433'. [ 232.765221][T10245] netlink: 'syz.0.1439': attribute type 3 has an invalid length. [ 232.823102][T10248] netlink: 36 bytes leftover after parsing attributes in process `syz.3.1438'. [ 233.066881][T10257] dccp_invalid_packet: P.Data Offset(0) too small [ 233.127361][T10261] xt_CT: You must specify a L4 protocol and not use inversions on it [ 233.264052][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1443'. [ 233.862062][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.421148][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.490139][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.552354][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 234.670234][ T51] bridge_slave_1: left allmulticast mode [ 234.678330][ T51] bridge_slave_1: left promiscuous mode [ 234.684162][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 234.695561][ T51] bridge_slave_0: left allmulticast mode [ 234.701997][ T51] bridge_slave_0: left promiscuous mode [ 234.708512][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 235.163496][T10315] IPVS: lblc: TCP 172.20.20.170:0 - no destination available [ 235.575071][ T4493] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 235.590038][ T4493] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 235.599042][ T4493] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 235.612211][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 235.618793][ T4493] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 235.632338][ T4493] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 235.641326][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 235.645487][ T4493] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 235.666623][ T51] bond0 (unregistering): Released all slaves [ 235.840128][T10337] netlink: 'syz.1.1464': attribute type 1 has an invalid length. [ 235.855527][T10330] lo speed is unknown, defaulting to 1000 [ 236.037290][T10344] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 236.087670][ T29] audit: type=1804 audit(1719909414.145:13): pid=10344 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1465" name="/root/syzkaller.AZB7nh/44/cgroup.controllers" dev="sda1" ino=1978 res=1 errno=0 [ 236.324817][ T51] hsr_slave_0: left promiscuous mode [ 236.352798][ T51] hsr_slave_1: left promiscuous mode [ 236.370388][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 236.383795][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 236.403190][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 236.419449][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 236.450442][T10353] IPVS: lblc: TCP 172.20.20.170:0 - no destination available [ 236.492388][ T51] veth1_macvtap: left promiscuous mode [ 236.504263][ T51] veth0_macvtap: left promiscuous mode [ 236.511527][ T51] veth1_vlan: left promiscuous mode [ 236.526274][ T51] veth0_vlan: left promiscuous mode [ 237.521940][ T51] team0 (unregistering): Port device team_slave_1 removed [ 237.572722][ T51] team0 (unregistering): Port device team_slave_0 removed [ 237.697347][ T4493] Bluetooth: hci1: command tx timeout [ 238.156330][T10365] netlink: 'syz.3.1474': attribute type 1 has an invalid length. [ 238.242514][T10379] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1476'. [ 238.583246][T10393] IPVS: lblc: TCP 172.20.20.170:0 - no destination available [ 238.801347][T10330] chnl_net:caif_netlink_parms(): no params data found [ 239.147663][T10330] bridge0: port 1(bridge_slave_0) entered blocking state [ 239.155236][T10330] bridge0: port 1(bridge_slave_0) entered disabled state [ 239.163794][T10330] bridge_slave_0: entered allmulticast mode [ 239.190472][T10330] bridge_slave_0: entered promiscuous mode [ 239.203910][T10420] netlink: 'syz.4.1489': attribute type 1 has an invalid length. [ 239.247796][T10330] bridge0: port 2(bridge_slave_1) entered blocking state [ 239.257720][T10330] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.268758][T10330] bridge_slave_1: entered allmulticast mode [ 239.277266][T10330] bridge_slave_1: entered promiscuous mode [ 239.349503][T10330] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 239.369608][T10330] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 239.428532][T10430] netlink: 'syz.3.1492': attribute type 10 has an invalid length. [ 239.461667][T10427] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1492'. [ 239.477323][T10430] bond0: (slave team0): Releasing backup interface [ 239.509185][T10430] batman_adv: batadv0: Adding interface: team0 [ 239.516332][T10430] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 239.546203][T10430] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 239.692974][T10330] team0: Port device team_slave_0 added [ 239.721657][T10439] netdevsim netdevsim4 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 239.739593][T10439] netdevsim netdevsim4 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 239.764110][T10439] netdevsim netdevsim4 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 239.779976][T10439] netdevsim netdevsim4 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 239.788973][ T4493] Bluetooth: hci1: command tx timeout [ 239.795387][T10439] geneve2: entered promiscuous mode [ 239.803624][T10439] geneve2: entered allmulticast mode [ 239.819708][T10330] team0: Port device team_slave_1 added [ 239.968164][ T29] audit: type=1804 audit(1719909418.025:14): pid=10445 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1496" name="/root/syzkaller.YHOgr1/350/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 240.005548][T10330] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 240.030691][T10330] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.069408][T10330] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 240.091795][T10330] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 240.100978][T10330] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 240.132052][T10330] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 240.177968][T10454] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.216393][T10454] bridge0: port 2(bridge_slave_1) entered blocking state [ 240.223674][T10454] bridge0: port 2(bridge_slave_1) entered forwarding state [ 240.502055][T10330] hsr_slave_0: entered promiscuous mode [ 240.536654][T10330] hsr_slave_1: entered promiscuous mode [ 240.553909][T10330] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 240.561819][T10330] Cannot create hsr debugfs directory [ 241.857934][ T4493] Bluetooth: hci1: command tx timeout [ 241.944046][T10330] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 242.001268][T10330] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 242.057419][T10540] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 242.081006][T10540] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 242.101913][T10540] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 242.120486][T10540] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 242.142528][T10540] geneve2: entered promiscuous mode [ 242.159380][T10540] geneve2: entered allmulticast mode [ 242.179689][T10544] netlink: 'syz.4.1525': attribute type 2 has an invalid length. [ 242.190380][T10544] netlink: 'syz.4.1525': attribute type 8 has an invalid length. [ 242.217385][T10544] netlink: 132 bytes leftover after parsing attributes in process `syz.4.1525'. [ 242.244643][T10330] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 242.299594][T10330] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 242.445749][T10563] netlink: 201400 bytes leftover after parsing attributes in process `syz.3.1530'. [ 242.496817][T10563] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 242.505173][T10563] openvswitch: netlink: Message has 8446 unknown bytes. [ 242.544458][T10567] IPVS: lblc: TCP 172.20.20.170:0 - no destination available [ 242.558647][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1532'. [ 242.595394][T10571] ebt_among: wrong size: 2080 against expected 2280, rounded to 2280 [ 242.622367][T10568] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1532'. [ 242.830783][T10330] 8021q: adding VLAN 0 to HW filter on device bond0 [ 242.884477][T10330] 8021q: adding VLAN 0 to HW filter on device team0 [ 242.918813][ T5201] bridge0: port 1(bridge_slave_0) entered blocking state [ 242.926110][ T5201] bridge0: port 1(bridge_slave_0) entered forwarding state [ 242.972203][ T5201] bridge0: port 2(bridge_slave_1) entered blocking state [ 242.979588][ T5201] bridge0: port 2(bridge_slave_1) entered forwarding state [ 243.451090][T10596] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1540'. [ 243.657940][T10612] netlink: 'syz.4.1540': attribute type 22 has an invalid length. [ 243.692249][T10613] netlink: 'syz.1.1542': attribute type 1 has an invalid length. [ 243.704832][T10613] netlink: 168864 bytes leftover after parsing attributes in process `syz.1.1542'. [ 243.800900][T10602] netlink: 'syz.1.1542': attribute type 21 has an invalid length. [ 243.816463][T10602] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1542'. [ 243.841667][T10602] netlink: 'syz.1.1542': attribute type 6 has an invalid length. [ 243.850246][T10602] netlink: 23 bytes leftover after parsing attributes in process `syz.1.1542'. [ 243.862549][T10598] netlink: 'syz.0.1541': attribute type 2 has an invalid length. [ 243.870838][T10598] netlink: 'syz.0.1541': attribute type 8 has an invalid length. [ 243.878903][T10598] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1541'. [ 243.946881][ T4493] Bluetooth: hci1: command tx timeout [ 244.013443][T10330] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 244.276432][T10330] veth0_vlan: entered promiscuous mode [ 244.388539][T10330] veth1_vlan: entered promiscuous mode [ 244.484702][T10330] veth0_macvtap: entered promiscuous mode [ 244.514709][T10330] veth1_macvtap: entered promiscuous mode [ 244.566491][T10639] IPVS: lblc: TCP 172.20.20.170:0 - no destination available [ 244.619263][T10330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.678013][T10330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.730490][T10330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.764873][T10330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.806285][T10330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.836386][T10330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.868449][T10330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.883749][T10330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.908774][T10330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 244.914825][T10649] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 244.931185][T10330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 244.953789][T10330] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 244.992638][T10650] netlink: 'syz.1.1556': attribute type 2 has an invalid length. [ 245.006756][T10650] netlink: 'syz.1.1556': attribute type 8 has an invalid length. [ 245.024735][T10650] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1556'. [ 245.112700][T10330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.125299][T10330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.159601][T10330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.196116][T10330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.225740][T10330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.253648][T10330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.274132][T10330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.298393][T10330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.319603][T10330] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 245.351264][T10330] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 245.372701][T10330] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 245.422880][T10664] mac80211_hwsim hwsim9 wlan0: entered promiscuous mode [ 245.457431][T10664] macvlan3: entered allmulticast mode [ 245.484548][T10664] mac80211_hwsim hwsim9 wlan0: entered allmulticast mode [ 245.532563][T10664] mac80211_hwsim hwsim9 wlan0: left allmulticast mode [ 245.569330][T10664] mac80211_hwsim hwsim9 wlan0: left promiscuous mode [ 245.669866][T10330] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.706766][T10330] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.724321][T10330] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 245.735703][T10330] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 246.062493][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.105203][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 246.261959][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 246.277856][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 247.137850][T10717] bond0: entered promiscuous mode [ 247.143158][T10717] bond_slave_0: entered promiscuous mode [ 247.156210][T10717] bond_slave_1: entered promiscuous mode [ 247.175823][T10717] bond0: left promiscuous mode [ 247.183603][T10717] bond_slave_0: left promiscuous mode [ 247.216560][T10717] bond_slave_1: left promiscuous mode [ 247.262503][T10721] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1582'. [ 247.758151][T10737] netlink: 'syz.3.1590': attribute type 7 has an invalid length. [ 247.780683][T10737] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1590'. [ 248.266757][ T51] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.365385][T10767] IPv6: NLM_F_CREATE should be specified when creating new route [ 248.392481][T10767] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1598'. [ 248.691912][ T51] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.818079][ T51] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 248.989141][ T51] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.217247][ T51] bridge_slave_1: left allmulticast mode [ 249.223001][ T51] bridge_slave_1: left promiscuous mode [ 249.236774][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 249.247175][ T51] bridge_slave_0: left allmulticast mode [ 249.252870][ T51] bridge_slave_0: left promiscuous mode [ 249.259704][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 249.911343][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 249.921400][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 249.931654][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 249.952258][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 249.975429][ T5096] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 249.984807][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 250.316971][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.361388][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.390302][ T51] bond0 (unregistering): Released all slaves [ 250.437205][T10784] batadv0: entered promiscuous mode [ 250.457453][T10784] 8021q: adding VLAN 0 to HW filter on device macvlan0 [ 250.509899][T10784] batadv0: left promiscuous mode [ 250.606029][T10787] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1602'. [ 250.923292][T10790] lo speed is unknown, defaulting to 1000 [ 250.931081][T10796] netlink: 'syz.0.1604': attribute type 25 has an invalid length. [ 250.942357][T10796] netlink: 'syz.0.1604': attribute type 7 has an invalid length. [ 251.047939][ T51] hsr_slave_0: left promiscuous mode [ 251.067444][ T51] hsr_slave_1: left promiscuous mode [ 251.116074][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.124045][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.167039][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.190529][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 251.240382][ T51] veth1_macvtap: left promiscuous mode [ 251.247649][ T51] veth0_macvtap: left promiscuous mode [ 251.253546][ T51] veth1_vlan: left promiscuous mode [ 251.261060][ T51] veth0_vlan: left promiscuous mode [ 251.735165][T10828] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 252.097373][ T5096] Bluetooth: hci1: command tx timeout [ 252.098411][ T51] team0 (unregistering): Port device team_slave_1 removed [ 252.154122][ T51] team0 (unregistering): Port device team_slave_0 removed [ 252.644439][T10810] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1608'. [ 252.654277][T10816] netlink: 'syz.4.1610': attribute type 1 has an invalid length. [ 252.668691][T10816] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 252.705321][T10830] netlink: 'syz.0.1614': attribute type 10 has an invalid length. [ 252.741639][T10830] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 252.800826][T10830] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 253.484413][T10790] chnl_net:caif_netlink_parms(): no params data found [ 253.820635][T10790] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.845425][T10790] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.859714][T10790] bridge_slave_0: entered allmulticast mode [ 253.868050][T10790] bridge_slave_0: entered promiscuous mode [ 253.877649][T10790] bridge0: port 2(bridge_slave_1) entered blocking state [ 253.886475][T10790] bridge0: port 2(bridge_slave_1) entered disabled state [ 253.894020][T10790] bridge_slave_1: entered allmulticast mode [ 253.903739][T10790] bridge_slave_1: entered promiscuous mode [ 253.954259][T10881] vlan2: entered promiscuous mode [ 254.083622][T10790] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.115578][T10790] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.187245][ T5096] Bluetooth: hci1: command tx timeout [ 254.270812][T10790] team0: Port device team_slave_0 added [ 254.281512][T10790] team0: Port device team_slave_1 added [ 254.328714][T10790] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.346267][T10790] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.383586][T10790] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.417810][T10790] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.424914][T10790] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.506418][T10790] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.559698][T10910] (unnamed net_device) (uninitialized): (slave tunl0): Device is not bonding slave [ 254.576889][T10910] (unnamed net_device) (uninitialized): option active_slave: invalid value (tunl0) [ 254.718050][ T29] audit: type=1804 audit(1719909432.775:15): pid=10912 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1635" name="/root/syzkaller.1wvOc8/243/cgroup.controllers" dev="sda1" ino=1975 res=1 errno=0 [ 254.772692][T10790] hsr_slave_0: entered promiscuous mode [ 254.786485][T10790] hsr_slave_1: entered promiscuous mode [ 254.854452][T10790] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 254.880499][T10790] Cannot create hsr debugfs directory [ 254.981195][T10927] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1642'. [ 255.333990][ T29] audit: type=1804 audit(1719909433.395:16): pid=10938 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1646" name="/root/syzkaller.YHOgr1/383/cgroup.controllers" dev="sda1" ino=1973 res=1 errno=0 [ 256.028971][T10790] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 256.077951][T10790] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 256.108916][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.115515][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.150681][T10790] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 256.222228][T10790] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 256.266414][ T5096] Bluetooth: hci1: command tx timeout [ 256.527010][T10790] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.550007][T10978] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1659'. [ 256.584957][T10790] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.670095][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.677326][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.730231][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.737590][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.795809][T10980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1661'. [ 257.345164][T10790] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.427007][T11013] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1670'. [ 257.509866][T10790] veth0_vlan: entered promiscuous mode [ 257.517475][T11019] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1670'. [ 257.621937][T10790] veth1_vlan: entered promiscuous mode [ 257.787722][T10790] veth0_macvtap: entered promiscuous mode [ 257.846707][T10790] veth1_macvtap: entered promiscuous mode [ 257.952767][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 257.986897][T11030] IPVS: set_ctl: invalid protocol: 29 224.0.0.2:20003 [ 258.005913][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.015816][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.096992][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.120019][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.166071][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.195049][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 258.225304][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.238633][T10790] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.265356][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.283325][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.312501][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.342614][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.355282][ T5096] Bluetooth: hci1: command tx timeout [ 258.373158][ T29] audit: type=1800 audit(1719909436.435:17): pid=11042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1680" name="memory.events" dev="sda1" ino=1974 res=0 errno=0 [ 258.380414][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.423132][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.433662][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.454585][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.473023][T10790] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 258.494621][T10790] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 258.510237][T10790] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.549312][ T29] audit: type=1804 audit(1719909436.615:18): pid=11042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1680" name="/root/syzkaller.1wvOc8/257/memory.events" dev="sda1" ino=1974 res=1 errno=0 [ 258.553922][T10790] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.609303][ T29] audit: type=1804 audit(1719909436.655:19): pid=11042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1680" name="/root/syzkaller.1wvOc8/257/memory.events" dev="sda1" ino=1974 res=1 errno=0 [ 258.643399][T10790] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.656687][T10790] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.666352][ T4493] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 258.667926][T10790] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.693495][ T4493] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 258.706291][ T4493] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 258.721542][ T4493] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 258.731858][ T4493] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 258.746317][ T4493] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 258.824990][T11048] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1680'. [ 259.074733][T11045] lo speed is unknown, defaulting to 1000 [ 259.171826][ T1046] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.200440][ T1046] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.232091][ T1046] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 259.313356][T11062] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1685'. [ 259.364644][ T1046] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.380375][T11065] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1685'. [ 259.390816][ T1046] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.410395][ T1046] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 259.640038][ T1046] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.652461][ T1046] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.664817][ T1046] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 259.689811][T11073] sctp: [Deprecated]: syz.0.1687 (pid 11073) Use of int in max_burst socket option. [ 259.689811][T11073] Use struct sctp_assoc_value instead [ 259.711970][ T2394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.721790][ T2394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.789403][ T1046] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 259.800430][ T1046] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.811181][ T1046] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 259.896645][T11077] RDS: rds_bind could not find a transport for ::8000:20:0:0, load rds_tcp or rds_rdma? [ 259.925954][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 259.934143][T11078] can: request_module (can-proto-0) failed. [ 259.986476][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 260.490980][ T29] audit: type=1800 audit(1719909438.555:20): pid=11094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1694" name="memory.events" dev="sda1" ino=1975 res=0 errno=0 [ 260.534422][ T29] audit: type=1804 audit(1719909438.585:21): pid=11094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1694" name="/root/syzkaller.1wvOc8/261/memory.events" dev="sda1" ino=1975 res=1 errno=0 [ 260.536344][ T1046] bridge_slave_1: left allmulticast mode [ 260.570897][ T29] audit: type=1804 audit(1719909438.585:22): pid=11094 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1694" name="/root/syzkaller.1wvOc8/261/memory.events" dev="sda1" ino=1975 res=1 errno=0 [ 260.615403][ T1046] bridge_slave_1: left promiscuous mode [ 260.628475][ T1046] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.649781][ T1046] bridge_slave_0: left allmulticast mode [ 260.658134][ T1046] bridge_slave_0: left promiscuous mode [ 260.665395][ T1046] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.722797][T11096] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1694'. [ 260.819102][ T4493] Bluetooth: hci2: command tx timeout [ 261.259059][ T29] audit: type=1804 audit(1719909439.315:23): pid=11112 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1698" name="/root/syzkaller.Rq0vYy/386/cgroup.controllers" dev="sda1" ino=1974 res=1 errno=0 [ 261.764887][ T1046] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 261.885157][T11141] IPVS: length: 206 != 8 [ 262.109634][ T1046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 262.133632][ T1046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 262.147605][ T1046] bond0 (unregistering): Released all slaves [ 262.203410][ T29] audit: type=1800 audit(1719909440.265:24): pid=11147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.1707" name="memory.events" dev="sda1" ino=1974 res=0 errno=0 [ 262.247592][ T29] audit: type=1804 audit(1719909440.295:25): pid=11147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1707" name="/root/syzkaller.Rq0vYy/392/memory.events" dev="sda1" ino=1974 res=1 errno=0 [ 262.273386][ T29] audit: type=1804 audit(1719909440.305:26): pid=11147 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.1707" name="/root/syzkaller.Rq0vYy/392/memory.events" dev="sda1" ino=1974 res=1 errno=0 [ 262.380768][T11148] netlink: 48 bytes leftover after parsing attributes in process `syz.1.1707'. [ 262.458131][ T1046] bond1 (unregistering): Released all slaves [ 262.482725][ T1046] bond2 (unregistering): Released all slaves [ 262.525410][T11045] chnl_net:caif_netlink_parms(): no params data found [ 262.739845][ T1046] tipc: Left network mode [ 262.829920][T11162] netlink: 'syz.1.1710': attribute type 3 has an invalid length. [ 262.838034][T11162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1710'. [ 262.900699][ T5096] Bluetooth: hci2: command tx timeout [ 263.094431][T11045] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.118076][T11045] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.125394][T11045] bridge_slave_0: entered allmulticast mode [ 263.167666][T11045] bridge_slave_0: entered promiscuous mode [ 263.198849][T11045] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.220275][ T29] audit: type=1800 audit(1719909441.275:27): pid=11173 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.1713" name="memory.events" dev="sda1" ino=1974 res=0 errno=0 [ 263.224960][T11045] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.265331][T11045] bridge_slave_1: entered allmulticast mode [ 263.299648][ T5096] Bluetooth: hci4: command 0x0406 tx timeout [ 263.318349][T11045] bridge_slave_1: entered promiscuous mode [ 263.386914][T11170] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1714'. [ 263.483308][T11045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.501225][T11045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.513478][ T1046] hsr_slave_0: left promiscuous mode [ 263.520762][ T1046] hsr_slave_1: left promiscuous mode [ 263.527923][ T1046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 263.535486][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 263.563242][ T1046] veth1_macvtap: left promiscuous mode [ 263.924206][ T1046] team0 (unregistering): Port device veth0_to_hsr removed [ 264.053444][ T1046] team0 (unregistering): Port device team_slave_1 removed [ 264.104417][ T1046] team0 (unregistering): Port device team_slave_0 removed [ 264.526153][T11180] nbd: must specify at least one socket [ 264.690258][T11045] team0: Port device team_slave_0 added [ 264.761867][ T29] audit: type=1800 audit(1719909442.825:28): pid=11188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1720" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 264.762204][T11045] team0: Port device team_slave_1 added [ 264.865561][ T29] audit: type=1804 audit(1719909442.885:29): pid=11188 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1720" name="/root/syzkaller.1wvOc8/270/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 264.977409][ T4493] Bluetooth: hci2: command tx timeout [ 265.039780][T11194] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1720'. [ 265.063178][T11045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 265.094414][T11045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.166096][T11045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.217924][T11045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.227113][T11045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.284059][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 265.300329][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 265.313703][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 265.314947][T11045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.339858][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 265.354173][ T5096] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 265.362694][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 265.641828][T11045] hsr_slave_0: entered promiscuous mode [ 265.662355][T11045] hsr_slave_1: entered promiscuous mode [ 265.681116][T11045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.699281][T11045] Cannot create hsr debugfs directory [ 265.706236][T11209] netlink: 'syz.3.1726': attribute type 11 has an invalid length. [ 265.770602][T11198] lo speed is unknown, defaulting to 1000 [ 265.779870][ T1046] IPVS: stop unused estimator thread 0... [ 266.043158][T11214] GUP no longer grows the stack in syz.1.1728 (11214): 20006000-2000a000 (20005000) [ 266.066623][T11214] CPU: 0 PID: 11214 Comm: syz.1.1728 Not tainted 6.10.0-rc5-syzkaller-01158-g74d6529b78f7 #0 [ 266.076880][T11214] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 266.087085][T11214] Call Trace: [ 266.090422][T11214] [ 266.093400][T11214] dump_stack_lvl+0x241/0x360 [ 266.098166][T11214] ? __pfx_dump_stack_lvl+0x10/0x10 [ 266.103422][T11214] ? __pfx__printk+0x10/0x10 [ 266.108078][T11214] ? find_vma+0xf9/0x170 [ 266.112438][T11214] __get_user_pages+0x10e3/0x1590 [ 266.117553][T11214] ? __gup_longterm_locked+0x1ec9/0x2a80 [ 266.123431][T11214] ? __pfx___get_user_pages+0x10/0x10 [ 266.128943][T11214] ? __lock_acquire+0x1346/0x1fd0 [ 266.134035][T11214] __gup_longterm_locked+0x1ff6/0x2a80 [ 266.139779][T11214] ? __pfx___gup_longterm_locked+0x10/0x10 [ 266.145657][T11214] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 266.151700][T11214] ? sanity_check_pinned_pages+0x12bb/0x13c0 [ 266.157760][T11214] gup_fast_fallback+0x2732/0x2b40 [ 266.163230][T11214] ? __pfx_gup_fast_fallback+0x10/0x10 [ 266.169014][T11214] ? __pfx_validate_chain+0x10/0x10 [ 266.174234][T11214] ? unwind_get_return_address+0x91/0xc0 [ 266.179912][T11214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.186012][T11214] ? arch_stack_walk+0x16d/0x1b0 [ 266.191021][T11214] ? __lock_acquire+0x1346/0x1fd0 [ 266.196066][T11214] ? is_valid_gup_args+0x124/0x200 [ 266.201197][T11214] pin_user_pages_fast+0xcc/0x160 [ 266.206239][T11214] ? __pfx_pin_user_pages_fast+0x10/0x10 [ 266.211987][T11214] iov_iter_extract_pages+0x3db/0x720 [ 266.217401][T11214] bio_iov_iter_get_pages+0x541/0x1930 [ 266.222886][T11214] ? bio_associate_blkg+0x6c/0x230 [ 266.228034][T11214] ? bio_associate_blkg_from_css+0xb0c/0xc70 [ 266.234060][T11214] ? bio_associate_blkg_from_css+0xa4/0xc70 [ 266.239983][T11214] ? __pfx_bio_iov_iter_get_pages+0x10/0x10 [ 266.245906][T11214] ? bio_alloc_bioset+0x6d7/0x1130 [ 266.251044][T11214] iomap_dio_bio_iter+0xc8e/0x1670 [ 266.256211][T11214] __iomap_dio_rw+0x1295/0x2370 [ 266.261102][T11214] ? do_syscall_64+0xf3/0x230 [ 266.265971][T11214] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.272089][T11214] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 266.278097][T11214] ? __pfx___iomap_dio_rw+0x10/0x10 [ 266.283344][T11214] ? jbd2_journal_stop+0x902/0xd80 [ 266.288490][T11214] ? __pfx_jbd2_journal_stop+0x10/0x10 [ 266.293976][T11214] ? __pfx_ext4_orphan_add+0x10/0x10 [ 266.299290][T11214] iomap_dio_rw+0x46/0xa0 [ 266.303669][T11214] ext4_file_write_iter+0x15e5/0x1a10 [ 266.309079][T11214] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 266.314850][T11214] vfs_write+0xa72/0xc90 [ 266.319116][T11214] ? __pfx_ext4_file_write_iter+0x10/0x10 [ 266.324863][T11214] ? __pfx_vfs_write+0x10/0x10 [ 266.329643][T11214] ? do_futex+0x392/0x560 [ 266.334096][T11214] ksys_write+0x1a0/0x2c0 [ 266.338458][T11214] ? __pfx_ksys_write+0x10/0x10 [ 266.343332][T11214] ? do_syscall_64+0x100/0x230 [ 266.348136][T11214] ? do_syscall_64+0xb6/0x230 [ 266.352836][T11214] do_syscall_64+0xf3/0x230 [ 266.357376][T11214] ? clear_bhb_loop+0x35/0x90 [ 266.362085][T11214] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 266.368012][T11214] RIP: 0033:0x7f5fad775b99 [ 266.372449][T11214] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 266.392086][T11214] RSP: 002b:00007f5fae53d048 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 266.400643][T11214] RAX: ffffffffffffffda RBX: 00007f5fad903fa0 RCX: 00007f5fad775b99 [ 266.408889][T11214] RDX: 0000000000043400 RSI: 0000000020000200 RDI: 000000000000000b [ 266.416872][T11214] RBP: 00007f5fad7f677e R08: 0000000000000000 R09: 0000000000000000 [ 266.424857][T11214] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 266.432860][T11214] R13: 000000000000000b R14: 00007f5fad903fa0 R15: 00007fff42f7e468 [ 266.440882][T11214] [ 266.669320][ T1046] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.065995][ T4493] Bluetooth: hci2: command tx timeout [ 267.090228][ T1046] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.107226][ T29] kauditd_printk_skb: 1 callbacks suppressed [ 267.107247][ T29] audit: type=1800 audit(1719909445.175:31): pid=11243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.1735" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 267.208029][T11247] netlink: 'syz.1.1738': attribute type 7 has an invalid length. [ 267.217282][T11247] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1738'. [ 267.232075][ T29] audit: type=1804 audit(1719909445.295:32): pid=11243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1735" name="/root/syzkaller.1wvOc8/275/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 267.296426][ T29] audit: type=1804 audit(1719909445.305:33): pid=11243 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.1735" name="/root/syzkaller.1wvOc8/275/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 267.457753][ T4493] Bluetooth: hci1: command tx timeout [ 267.476617][T11251] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1735'. [ 267.552428][ T1046] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 267.670170][T11258] xt_TCPMSS: Only works on TCP SYN packets [ 267.679017][T11258] rdma_op ffff88801fbcd9f0 conn xmit_rdma 0000000000000000 [ 267.960981][T11266] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1742'. [ 268.038646][ T1046] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 268.375561][T11198] chnl_net:caif_netlink_parms(): no params data found [ 268.451066][ T5096] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 268.465964][ T5096] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 268.477834][ T5096] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 268.491829][ T5096] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 268.507922][ T5096] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 268.517564][ T5096] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 268.797801][ T1046] bridge_slave_1: left allmulticast mode [ 268.803522][ T1046] bridge_slave_1: left promiscuous mode [ 268.813183][ T1046] bridge0: port 2(bridge_slave_1) entered disabled state [ 268.823929][ T1046] bridge_slave_0: left allmulticast mode [ 268.835731][ T1046] bridge_slave_0: left promiscuous mode [ 268.842566][ T1046] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.364755][ T1046] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.382938][ T1046] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.396917][ T1046] bond0 (unregistering): Released all slaves [ 269.536775][ T4493] Bluetooth: hci1: command tx timeout [ 269.560722][T11272] lo speed is unknown, defaulting to 1000 [ 269.566299][T11045] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 269.591794][T11045] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 269.739470][T11045] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 269.758746][T11045] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 269.889945][T11198] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.897395][T11198] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.904724][T11198] bridge_slave_0: entered allmulticast mode [ 269.913569][T11198] bridge_slave_0: entered promiscuous mode [ 270.013394][T11198] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.036075][T11198] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.043378][T11198] bridge_slave_1: entered allmulticast mode [ 270.058352][T11198] bridge_slave_1: entered promiscuous mode [ 270.182388][ T1046] hsr_slave_0: left promiscuous mode [ 270.198909][ T1046] hsr_slave_1: left promiscuous mode [ 270.228003][ T1046] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.235492][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.265155][ T1046] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.273149][ T1046] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.301714][ T1046] veth1_macvtap: left promiscuous mode [ 270.307622][ T1046] veth0_macvtap: left promiscuous mode [ 270.313389][ T1046] veth1_vlan: left promiscuous mode [ 270.321379][ T1046] veth0_vlan: left promiscuous mode [ 270.580355][ T4493] Bluetooth: hci3: command tx timeout [ 271.031674][ T1046] team0 (unregistering): Port device team_slave_1 removed [ 271.084722][ T1046] team0 (unregistering): Port device team_slave_0 removed [ 271.616122][ T4493] Bluetooth: hci1: command tx timeout [ 271.623922][T11311] netlink: 'syz.3.1756': attribute type 13 has an invalid length. [ 271.676202][T11329] netlink: 'syz.0.1759': attribute type 4 has an invalid length. [ 271.737141][T11330] netlink: 'syz.0.1759': attribute type 4 has an invalid length. [ 271.764161][T11198] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.809117][T11198] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.938714][T11198] team0: Port device team_slave_0 added [ 272.014533][T11198] team0: Port device team_slave_1 added [ 272.117407][T11198] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 272.133798][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.173041][T11198] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 272.231660][T11341] tc_dump_action: action bad kind [ 272.244203][T11198] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 272.258795][T11198] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 272.319960][T11198] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 272.485599][T11198] hsr_slave_0: entered promiscuous mode [ 272.494045][T11198] hsr_slave_1: entered promiscuous mode [ 272.507753][T11198] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 272.524386][T11198] Cannot create hsr debugfs directory [ 272.594136][T11354] tun0: tun_chr_ioctl cmd 2147767507 [ 272.657137][ T4493] Bluetooth: hci3: command tx timeout [ 272.746363][T11272] chnl_net:caif_netlink_parms(): no params data found [ 272.998005][T11370] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1771'. [ 273.002624][T11045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.131144][T11272] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.139028][T11272] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.150012][T11272] bridge_slave_0: entered allmulticast mode [ 273.161053][T11272] bridge_slave_0: entered promiscuous mode [ 273.189896][T11272] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.198568][T11272] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.206710][T11272] bridge_slave_1: entered allmulticast mode [ 273.215572][T11272] bridge_slave_1: entered promiscuous mode [ 273.295521][T11045] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.407838][T11272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 273.422528][T11272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 273.483068][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.490359][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.545116][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.552428][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.654158][T11272] team0: Port device team_slave_0 added [ 273.696473][ T4493] Bluetooth: hci1: command tx timeout [ 273.720777][T11272] team0: Port device team_slave_1 added [ 273.851712][T11272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 273.862590][T11272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.931521][T11272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 273.961740][T11272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 273.976297][T11272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 273.977232][T11395] ebt_among: dst integrity fail: 102 [ 274.033360][T11272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 274.112959][T11400] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1777'. [ 274.161827][T11045] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 274.189784][T11045] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 274.211753][T11398] wg2: entered promiscuous mode [ 274.221972][T11398] wg2: entered allmulticast mode [ 274.295631][T11404] sock: sock_timestamping_bind_phc: sock not bind to device [ 274.361747][T11272] hsr_slave_0: entered promiscuous mode [ 274.377786][T11272] hsr_slave_1: entered promiscuous mode [ 274.393827][T11272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 274.401884][T11272] Cannot create hsr debugfs directory [ 274.556182][T11198] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 274.663477][T11198] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 274.715954][ T29] audit: type=1804 audit(1719909452.775:34): pid=11416 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1783" name="/root/syzkaller.1wvOc8/292/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 274.725130][T11198] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 274.759398][ T4493] Bluetooth: hci3: command tx timeout [ 274.797236][ T8] IPVS: starting estimator thread 0... [ 274.886348][T11418] IPVS: using max 17 ests per chain, 40800 per kthread [ 274.899997][T11422] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 274.912762][T11198] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 274.959949][T11045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 275.108978][T11425] team0: Port device team_slave_0 removed [ 275.130512][T11425] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 275.460015][T11272] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.472163][T11272] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 275.507870][T11432] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1786'. [ 275.691437][T11272] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.722928][T11272] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 275.781853][T11443] netlink: 'syz.0.1789': attribute type 3 has an invalid length. [ 275.796839][T11443] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1789'. [ 275.815122][T11443] netlink: 'syz.0.1789': attribute type 3 has an invalid length. [ 275.830225][T11443] netlink: 199836 bytes leftover after parsing attributes in process `syz.0.1789'. [ 275.931056][T11272] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 275.946256][T11272] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 276.070668][T11451] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1793'. [ 276.101401][T11272] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 276.126067][T11272] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 20000 - 0 [ 276.144186][T11455] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1793'. [ 276.225105][T11198] 8021q: adding VLAN 0 to HW filter on device bond0 [ 276.242909][T11045] veth0_vlan: entered promiscuous mode [ 276.310424][T11198] 8021q: adding VLAN 0 to HW filter on device team0 [ 276.352608][T11045] veth1_vlan: entered promiscuous mode [ 276.385471][ T8] bridge0: port 1(bridge_slave_0) entered blocking state [ 276.392909][ T8] bridge0: port 1(bridge_slave_0) entered forwarding state [ 276.395234][T11459] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 276.424365][ T8] bridge0: port 2(bridge_slave_1) entered blocking state [ 276.431631][ T8] bridge0: port 2(bridge_slave_1) entered forwarding state [ 276.589368][T11045] veth0_macvtap: entered promiscuous mode [ 276.630607][T11272] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 276.644488][T11459] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 276.678632][T11272] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 276.701784][T11045] veth1_macvtap: entered promiscuous mode [ 276.739969][T11272] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 276.777743][T11272] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 276.813408][T11045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.826164][T11045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.832286][ T4493] Bluetooth: hci3: command tx timeout [ 276.836285][T11045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.893512][T11045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 276.946328][T11045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 276.975599][T11045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.000455][T11045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 277.015044][T11045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.040020][T11045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 277.088573][T11472] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 277.103083][T11472] batman_adv: batadv0: Adding interface: ip6gretap1 [ 277.110487][T11472] batman_adv: batadv0: The MTU of interface ip6gretap1 is too small (1434) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 277.140125][T11476] dccp_v6_rcv: dropped packet with invalid checksum [ 277.147200][T11472] batman_adv: batadv0: Not using interface ip6gretap1 (retrying later): interface not active [ 277.169463][T11045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.190516][T11045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.209238][T11045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.254539][T11045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.277155][T11045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.294922][T11045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.306392][T11045] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 277.319563][T11045] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 277.332001][T11045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 277.343989][T11474] netlink: 'syz.3.1798': attribute type 1 has an invalid length. [ 277.352555][T11474] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1798'. [ 277.380504][T11045] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.397905][T11045] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.407281][T11045] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.416593][T11045] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 277.481563][T11198] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.589109][T11483] netlink: 'syz.3.1800': attribute type 3 has an invalid length. [ 277.863992][ T2912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 277.888789][ T2912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 277.926772][T11494] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 277.982815][T11272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.996710][T11198] veth0_vlan: entered promiscuous mode [ 278.047406][ T2912] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.058345][ T2912] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.068777][T11496] lo speed is unknown, defaulting to 1000 [ 278.133936][T11272] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.154804][T11198] veth1_vlan: entered promiscuous mode [ 278.221497][T11498] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 278.248458][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.255674][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.298354][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.305445][T11501] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1673'. [ 278.305559][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.485979][T11503] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1806'. [ 278.639591][T11510] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1808'. [ 278.841198][T11198] veth0_macvtap: entered promiscuous mode [ 278.919163][T11198] veth1_macvtap: entered promiscuous mode [ 279.038996][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.086080][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.117156][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.171676][T11528] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 279.176092][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.200860][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.227105][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.247183][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.298069][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.325956][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 279.360092][T11534] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1816'. [ 279.362283][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.383038][T11198] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.417278][T11538] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 279.430337][T11536] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 279.497711][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.534603][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.565798][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.583236][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.594140][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.605616][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.617902][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.630069][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.640617][T11198] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 279.652102][T11198] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 279.671492][T11198] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 279.703530][T11198] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.725258][T11198] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.765054][T11198] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.796472][T11198] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 279.833062][T11542] lo speed is unknown, defaulting to 1000 [ 280.080664][T11272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 280.325677][ T2394] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.363544][ T2394] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.541886][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.556304][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.613606][T11272] veth0_vlan: entered promiscuous mode [ 280.888139][T11272] veth1_vlan: entered promiscuous mode [ 281.028977][T11272] veth0_macvtap: entered promiscuous mode [ 281.042814][T11272] veth1_macvtap: entered promiscuous mode [ 281.103694][ T29] audit: type=1804 audit(1719909459.165:35): pid=11575 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.1827" name="/root/syzkaller.v94fp6/7/cgroup.controllers" dev="sda1" ino=1977 res=1 errno=0 [ 281.130296][T11272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.167658][T11272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.186138][T11272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.210761][T11272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.237264][T11272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.248631][T11272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.259242][T11272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.271212][T11272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.285089][T11272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.299568][T11272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.311008][T11272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 281.322054][T11272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.342745][T11272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 281.410983][T11272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.425244][T11272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.435348][T11272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.446082][T11272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.457249][T11272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.467845][T11272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.478508][T11272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.491280][T11272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.502987][T11272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.513648][T11272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.523555][T11272] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 281.536864][T11272] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 281.548926][T11272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 281.560581][T11272] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.569533][T11272] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.578548][T11272] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.590424][T11272] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 281.724654][ T2394] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.772599][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.788793][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 281.821496][ T1046] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 281.831533][ T1046] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 282.057563][ T2394] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.125733][ T2394] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.214228][ T2394] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 282.339733][ T2394] bridge_slave_1: left allmulticast mode [ 282.345453][ T2394] bridge_slave_1: left promiscuous mode [ 282.352822][ T2394] bridge0: port 2(bridge_slave_1) entered disabled state [ 282.367621][ T2394] bridge_slave_0: left allmulticast mode [ 282.373330][ T2394] bridge_slave_0: left promiscuous mode [ 282.380113][ T2394] bridge0: port 1(bridge_slave_0) entered disabled state [ 282.727478][T11582] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1828'. [ 282.803961][T11591] netlink: 165 bytes leftover after parsing attributes in process `syz.1.1832'. [ 283.193386][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 283.195446][ T2394] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 283.212047][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 283.222345][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 283.235354][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 283.245907][ T5096] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 283.253598][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 283.254156][ T2394] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 283.277456][ T2394] bond0 (unregistering): Released all slaves [ 283.482913][T11596] lo speed is unknown, defaulting to 1000 [ 283.563515][T11603] can: request_module (can-proto-4) failed. [ 283.739990][T11602] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1837'. [ 284.056093][ T2394] hsr_slave_0: left promiscuous mode [ 284.067483][ T2394] hsr_slave_1: left promiscuous mode [ 284.100903][ T2394] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.129488][ T2394] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 284.151046][ T2394] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 284.180368][ T2394] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 284.207762][T11635] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1845'. [ 284.247123][ T2394] veth1_macvtap: left promiscuous mode [ 284.284294][ T2394] veth0_macvtap: left promiscuous mode [ 284.297000][ T2394] veth1_vlan: left promiscuous mode [ 284.302433][ T2394] veth0_vlan: left promiscuous mode [ 284.313511][T11636] sctp: [Deprecated]: syz.0.1848 (pid 11636) Use of struct sctp_assoc_value in delayed_ack socket option. [ 284.313511][T11636] Use struct sctp_sack_info instead [ 284.895611][T11626] delete_channel: no stack [ 285.195227][ T2394] team0 (unregistering): Port device team_slave_1 removed [ 285.242687][ T2394] team0 (unregistering): Port device team_slave_0 removed [ 285.388101][ T4493] Bluetooth: hci1: command tx timeout [ 285.841080][T11635] netlink: 40 bytes leftover after parsing attributes in process `syz.4.1845'. [ 286.182732][T11596] chnl_net:caif_netlink_parms(): no params data found [ 286.326168][T11666] sctp: [Deprecated]: syz.4.1856 (pid 11666) Use of int in max_burst socket option deprecated. [ 286.326168][T11666] Use struct sctp_assoc_value instead [ 286.435124][T11668] netlink: 'syz.1.1855': attribute type 16 has an invalid length. [ 286.622905][T11685] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1858'. [ 286.642077][T11685] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 286.682751][T11596] bridge0: port 1(bridge_slave_0) entered blocking state [ 286.695188][T11596] bridge0: port 1(bridge_slave_0) entered disabled state [ 286.703116][T11596] bridge_slave_0: entered allmulticast mode [ 286.713413][T11596] bridge_slave_0: entered promiscuous mode [ 286.746387][T11596] bridge0: port 2(bridge_slave_1) entered blocking state [ 286.753855][T11596] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.768033][T11596] bridge_slave_1: entered allmulticast mode [ 286.778017][T11596] bridge_slave_1: entered promiscuous mode [ 286.786858][T11690] netlink: 332 bytes leftover after parsing attributes in process `syz.0.1860'. [ 286.903128][T11596] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 286.938642][T11596] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.970232][T11695] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1862'. [ 287.054269][T11596] team0: Port device team_slave_0 added [ 287.073269][T11700] netlink: 'syz.4.1864': attribute type 1 has an invalid length. [ 287.096926][T11700] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1864'. [ 287.103195][T11596] team0: Port device team_slave_1 added [ 287.213546][T11596] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 287.231365][T11596] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.262752][T11596] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 287.283711][T11707] bridge0: port 3(vlan2) entered blocking state [ 287.295426][T11707] bridge0: port 3(vlan2) entered disabled state [ 287.310475][T11707] vlan2: entered allmulticast mode [ 287.327575][T11707] vlan2: left allmulticast mode [ 287.345762][T11596] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 287.353549][T11596] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 287.382942][T11596] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 287.460849][ T4493] Bluetooth: hci1: command tx timeout [ 287.615005][T11596] hsr_slave_0: entered promiscuous mode [ 287.642800][T11596] hsr_slave_1: entered promiscuous mode [ 287.650340][T11596] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 287.676734][T11596] Cannot create hsr debugfs directory [ 287.755350][T11720] netlink: 666 bytes leftover after parsing attributes in process `syz.0.1871'. [ 287.857296][T11720] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1871'. [ 287.892994][T11720] xfrm1: entered promiscuous mode [ 287.906737][T11720] xfrm1: entered allmulticast mode [ 288.402934][T11739] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1880'. [ 288.859817][T11763] __nla_validate_parse: 1 callbacks suppressed [ 288.859842][T11763] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1886'. [ 289.105456][T11781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1892'. [ 289.108628][T11596] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 289.144351][T11781] netlink: 'syz.1.1892': attribute type 1 has an invalid length. [ 289.153166][T11596] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 289.160725][T11781] netlink: 'syz.1.1892': attribute type 2 has an invalid length. [ 289.200691][T11596] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 289.220079][T11781] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1892'. [ 289.243810][T11596] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 289.435233][T11794] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1897'. [ 289.536674][ T4493] Bluetooth: hci1: command tx timeout [ 289.549598][T11596] 8021q: adding VLAN 0 to HW filter on device bond0 [ 289.578044][T11596] 8021q: adding VLAN 0 to HW filter on device team0 [ 289.594641][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 289.602053][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 289.631691][ T5142] bridge0: port 2(bridge_slave_1) entered blocking state [ 289.638956][ T5142] bridge0: port 2(bridge_slave_1) entered forwarding state [ 289.744301][T11596] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 289.813878][T11809] netlink: 'syz.4.1902': attribute type 63 has an invalid length. [ 289.906808][T11807] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1901'. [ 290.113326][T11821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1906'. [ 290.123665][T11821] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1906'. [ 290.205598][T11596] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 290.305250][T11827] bridge0: port 3(macvlan1) entered blocking state [ 290.336188][T11827] bridge0: port 3(macvlan1) entered disabled state [ 290.347832][T11827] macvlan1: entered allmulticast mode [ 290.353278][T11827] veth1_vlan: entered allmulticast mode [ 290.376560][T11830] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1910'. [ 290.398213][T11827] macvlan1: entered promiscuous mode [ 290.434019][T11827] bridge0: port 3(macvlan1) entered blocking state [ 290.440813][T11827] bridge0: port 3(macvlan1) entered forwarding state [ 290.499851][T11837] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1912'. [ 290.522090][T11837] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 290.667788][T11596] veth0_vlan: entered promiscuous mode [ 290.699676][T11596] veth1_vlan: entered promiscuous mode [ 290.792623][T11596] veth0_macvtap: entered promiscuous mode [ 290.837795][T11596] veth1_macvtap: entered promiscuous mode [ 290.880668][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.896720][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.916978][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.930780][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.941256][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 290.967817][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 290.990349][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.030774][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.059017][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.097553][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.117907][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 291.145631][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.173857][T11596] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 291.210385][T11862] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1921'. [ 291.222490][T11862] netlink: 'syz.3.1921': attribute type 30 has an invalid length. [ 291.254817][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.274482][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.285044][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.300014][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.310095][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.322529][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.342951][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.354130][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.365247][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.385988][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.405802][T11596] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 291.432146][T11596] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 291.458387][T11596] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 291.485192][T11596] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.503547][T11596] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.522645][T11596] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.542980][T11596] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 291.626671][ T4493] Bluetooth: hci1: command tx timeout [ 291.787623][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.817764][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 291.884159][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 291.894683][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 292.197014][T11890] Bluetooth: MGMT ver 1.22 [ 292.215098][T11890] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 293.471867][T11951] netlink: 'syz.3.1952': attribute type 11 has an invalid length. [ 293.513026][T11953] hsr0: entered promiscuous mode [ 293.522163][T11953] macsec1: entered promiscuous mode [ 293.874239][T11968] netlink: 'syz.0.1959': attribute type 75 has an invalid length. [ 294.263531][T11985] __nla_validate_parse: 3 callbacks suppressed [ 294.263553][T11985] netlink: 56 bytes leftover after parsing attributes in process `syz.0.1963'. [ 294.721745][ T62] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.716784][ T62] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.793546][ T62] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 295.855569][ T62] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 296.002936][ T62] bridge_slave_1: left allmulticast mode [ 296.009755][ T62] bridge_slave_1: left promiscuous mode [ 296.015578][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 296.038107][ T62] bridge_slave_0: left allmulticast mode [ 296.044075][ T62] bridge_slave_0: left promiscuous mode [ 296.056191][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 296.611922][T12026] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1979'. [ 296.655050][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 296.681991][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 296.701121][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 296.723692][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 296.738128][ T5096] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 296.768316][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 297.014204][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 297.027690][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 297.041605][ T62] bond0 (unregistering): Released all slaves [ 297.100661][T12038] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1980'. [ 297.224857][T12028] lo speed is unknown, defaulting to 1000 [ 297.800680][T12072] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1991'. [ 297.915387][T12079] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 297.963523][T12080] geneve0: entered allmulticast mode [ 297.994571][T12079] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1994'. [ 298.080971][ T62] hsr_slave_0: left promiscuous mode [ 298.097979][ T62] hsr_slave_1: left promiscuous mode [ 298.109649][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 298.124496][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 298.147719][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 298.161973][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 298.240164][ T62] veth1_macvtap: left promiscuous mode [ 298.253252][ T62] veth0_macvtap: left promiscuous mode [ 298.264415][ T62] veth1_vlan: left promiscuous mode [ 298.277151][ T62] veth0_vlan: left promiscuous mode [ 298.724385][T12105] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2001'. [ 298.744053][T12105] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2001'. [ 298.762205][T12105] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2001'. [ 298.816115][ T4493] Bluetooth: hci1: command tx timeout [ 299.286751][ T62] team0 (unregistering): Port device team_slave_1 removed [ 299.343843][ T62] team0 (unregistering): Port device team_slave_0 removed [ 299.932588][T12028] chnl_net:caif_netlink_parms(): no params data found [ 299.990895][T12107] pim6reg: entered allmulticast mode [ 300.291211][T12112] pim6reg: entered allmulticast mode [ 300.516462][T12028] bridge0: port 1(bridge_slave_0) entered blocking state [ 300.550059][T12028] bridge0: port 1(bridge_slave_0) entered disabled state [ 300.566573][T12028] bridge_slave_0: entered allmulticast mode [ 300.584585][T12028] bridge_slave_0: entered promiscuous mode [ 300.649140][T12028] bridge0: port 2(bridge_slave_1) entered blocking state [ 300.678186][T12028] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.692182][T12028] bridge_slave_1: entered allmulticast mode [ 300.700496][T12028] bridge_slave_1: entered promiscuous mode [ 300.835408][T12028] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 300.892027][T12028] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 300.896527][ T4493] Bluetooth: hci1: command tx timeout [ 301.019363][T12028] team0: Port device team_slave_0 added [ 301.039619][T12028] team0: Port device team_slave_1 added [ 301.148092][T12159] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2014'. [ 301.153222][T12028] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 301.174980][T12028] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.219866][T12028] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 301.258962][T12028] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 301.274193][T12028] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 301.321228][T12028] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 301.450074][T12028] hsr_slave_0: entered promiscuous mode [ 301.472928][T12028] hsr_slave_1: entered promiscuous mode [ 301.491647][T12028] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 301.505243][T12028] Cannot create hsr debugfs directory [ 301.912969][T12183] netlink: 'syz.3.2025': attribute type 2 has an invalid length. [ 301.944720][ T57] IPVS: starting estimator thread 0... [ 301.954391][T12189] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2026'. [ 301.975344][T12183] : entered promiscuous mode [ 302.046153][T12190] IPVS: using max 17 ests per chain, 40800 per kthread [ 302.284248][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2029'. [ 302.354123][T12199] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2029'. [ 302.598629][T12028] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 302.635070][T12028] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 302.664042][T12028] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 302.705985][T12028] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 302.934565][T12224] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2039'. [ 302.966838][T12028] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.976346][ T4493] Bluetooth: hci1: command tx timeout [ 303.023377][T12028] 8021q: adding VLAN 0 to HW filter on device team0 [ 303.044822][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 303.052178][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 303.079514][ T5104] bridge0: port 2(bridge_slave_1) entered blocking state [ 303.086848][ T5104] bridge0: port 2(bridge_slave_1) entered forwarding state [ 303.279746][T12231] netlink: 'syz.3.2041': attribute type 3 has an invalid length. [ 303.462935][T12243] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2044'. [ 303.525302][T12243] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2044'. [ 303.823230][T12028] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.984994][T12028] veth0_vlan: entered promiscuous mode [ 304.029612][T12271] ax25_connect(): syz.1.2050 uses autobind, please contact jreuter@yaina.de [ 304.046776][T12028] veth1_vlan: entered promiscuous mode [ 304.173740][T12028] veth0_macvtap: entered promiscuous mode [ 304.191440][T12028] veth1_macvtap: entered promiscuous mode [ 304.224828][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.247448][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.271247][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.293094][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.309259][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.332405][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.353294][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.369852][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.391167][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.425174][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.442217][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.463296][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.488774][T12028] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.514350][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.527566][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.540188][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.553707][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.575080][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.599077][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.616379][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.636125][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.649605][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.667318][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.679243][T12028] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.691185][T12028] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.704274][T12028] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.759598][T12028] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.784338][T12028] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.817294][T12028] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.847757][T12028] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.966828][T12301] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2057'. [ 305.016172][T12301] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2057'. [ 305.056365][ T4493] Bluetooth: hci1: command tx timeout [ 305.188296][T12309] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.2058'. [ 305.214628][T12309] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 305.223799][ T2912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.243985][ T2912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.315051][T12313] ipt_REJECT: TCP_RESET invalid for non-tcp [ 305.331483][ T29] audit: type=1804 audit(1719909483.375:36): pid=12309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.2058" name="/root/syzkaller.x4KXQI/64/cgroup.controllers" dev="sda1" ino=1985 res=1 errno=0 [ 305.342390][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.410008][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.483148][T12316] nftables ruleset with unbound chain [ 307.218432][T12394] __nla_validate_parse: 1 callbacks suppressed [ 307.218454][T12394] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2085'. [ 307.367874][T12404] vcan0: tx drop: invalid da for name 0x000000000000c700 [ 307.505023][T12412] netlink: 204 bytes leftover after parsing attributes in process `syz.0.2089'. [ 307.549508][T12412] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2089'. [ 308.212948][T12437] batadv_slave_1: entered promiscuous mode [ 308.289157][T12436] batadv_slave_1: left promiscuous mode [ 308.297606][T12441] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2100'. [ 308.438762][T12446] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2102'. [ 308.620248][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.658039][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.736922][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.816803][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 309.942555][ T35] bridge_slave_1: left allmulticast mode [ 309.948793][ T35] bridge_slave_1: left promiscuous mode [ 309.956996][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 309.967735][ T35] bridge_slave_0: left allmulticast mode [ 309.973413][ T35] bridge_slave_0: left promiscuous mode [ 309.979499][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 310.677659][ T5096] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 310.691562][ T5096] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 310.710450][ T5096] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 310.731299][ T5096] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 310.741914][ T5096] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 310.749713][ T5096] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 310.839813][T12489] netlink: 100 bytes leftover after parsing attributes in process `syz.1.2112'. [ 310.890867][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 310.911964][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 310.924766][ T35] bond0 (unregistering): Released all slaves [ 310.961111][T12464] team0: entered promiscuous mode [ 310.973872][T12464] team_slave_1: entered promiscuous mode [ 310.986609][T12471] tun0: tun_chr_ioctl cmd 1074025675 [ 311.016729][T12471] tun0: persist disabled [ 311.040868][T12474] bridge_slave_0: default FDB implementation only supports local addresses [ 311.129101][T12468] team0: left promiscuous mode [ 311.133945][T12468] team_slave_1: left promiscuous mode [ 311.262743][T12493] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2114'. [ 311.561146][T12493] tipc: Started in network mode [ 311.586266][T12493] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 311.617179][T12493] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 311.643745][T12493] tipc: Enabled bearer , priority 10 [ 311.661521][T12481] lo speed is unknown, defaulting to 1000 [ 311.786617][ T35] hsr_slave_0: left promiscuous mode [ 311.822871][ T35] hsr_slave_1: left promiscuous mode [ 311.840785][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 311.869979][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 311.900618][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 311.914609][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 311.969924][ T35] veth1_macvtap: left promiscuous mode [ 311.975621][ T35] veth0_macvtap: left promiscuous mode [ 311.983667][ T35] veth1_vlan: left promiscuous mode [ 311.989176][ T35] veth0_vlan: left promiscuous mode [ 312.148874][T12531] netlink: 'syz.4.2123': attribute type 3 has an invalid length. [ 312.166508][T12531] netlink: 201372 bytes leftover after parsing attributes in process `syz.4.2123'. [ 312.681796][ T35] team0 (unregistering): Port device team_slave_1 removed [ 312.731052][ T35] team0 (unregistering): Port device team_slave_0 removed [ 312.759848][ T5142] tipc: Node number set to 1 [ 312.816883][ T5096] Bluetooth: hci1: command tx timeout [ 313.799138][T12555] tipc: Started in network mode [ 313.808978][T12555] tipc: Node identity ac1414aa, cluster identity 4711 [ 313.822684][T12555] tipc: New replicast peer: 10.1.1.0 [ 313.830394][T12555] tipc: Enabled bearer , priority 10 [ 313.978393][T12481] chnl_net:caif_netlink_parms(): no params data found [ 314.229634][T12481] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.257334][T12481] bridge0: port 1(bridge_slave_0) entered disabled state [ 314.287786][T12481] bridge_slave_0: entered allmulticast mode [ 314.310548][T12481] bridge_slave_0: entered promiscuous mode [ 314.347936][T12481] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.355121][T12481] bridge0: port 2(bridge_slave_1) entered disabled state [ 314.392862][T12481] bridge_slave_1: entered allmulticast mode [ 314.418422][T12481] bridge_slave_1: entered promiscuous mode [ 314.492908][T12578] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 314.598509][T12481] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 314.647243][T12481] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 314.734105][T12481] team0: Port device team_slave_0 added [ 314.769284][T12481] team0: Port device team_slave_1 added [ 314.876661][T12596] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 314.889393][T12481] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.896655][ T5096] Bluetooth: hci1: command tx timeout [ 314.911460][T12481] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.948990][ T5104] tipc: Node number set to 2886997162 [ 314.949174][T12481] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.988550][T12481] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.996179][T12481] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.023039][T12481] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.153896][T12481] hsr_slave_0: entered promiscuous mode [ 315.182068][T12481] hsr_slave_1: entered promiscuous mode [ 315.194131][T12481] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.204352][T12481] Cannot create hsr debugfs directory [ 315.562393][T12628] vlan2: entered promiscuous mode [ 315.569199][T12628] bond0: entered promiscuous mode [ 315.574766][T12628] bond_slave_0: entered promiscuous mode [ 315.581138][T12628] bond_slave_1: entered promiscuous mode [ 315.612702][T12628] bond0: left promiscuous mode [ 315.650148][T12628] bond_slave_0: left promiscuous mode [ 315.667058][T12628] bond_slave_1: left promiscuous mode [ 315.686681][T12631] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2148'. [ 315.727856][T12631] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2148'. [ 316.281165][T12656] netlink: 'syz.1.2156': attribute type 36 has an invalid length. [ 316.509835][T12481] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 316.553778][T12481] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 316.589218][T12481] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 316.628119][T12481] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 316.755329][T12683] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2165'. [ 316.786568][T12686] netlink: 48 bytes leftover after parsing attributes in process `syz.1.2166'. [ 316.835189][T12688] tipc: Started in network mode [ 316.850962][T12688] tipc: Node identity 402, cluster identity 4711 [ 316.858268][T12688] tipc: Enabling of bearer rejected, failed to enable media [ 316.977872][ T5096] Bluetooth: hci1: command tx timeout [ 317.009324][T12697] xt_l2tp: wrong L2TP version: 0 [ 317.122940][T12481] 8021q: adding VLAN 0 to HW filter on device bond0 [ 317.232744][T12481] 8021q: adding VLAN 0 to HW filter on device team0 [ 317.260584][T12706] batadv_slave_1: entered promiscuous mode [ 317.291625][T12706] netlink: 4 bytes leftover after parsing attributes in process `syz.4.2173'. [ 317.296646][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.307788][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 317.308734][T12701] netlink: 'syz.1.2172': attribute type 28 has an invalid length. [ 317.362403][T12701] netlink: 160 bytes leftover after parsing attributes in process `syz.1.2172'. [ 317.380661][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.388009][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 317.429591][T12705] batadv_slave_1: left promiscuous mode [ 317.554808][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.561360][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.756136][T12727] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 317.821199][ T29] audit: type=1804 audit(1719909495.885:37): pid=12728 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.2180" name="/root/syzkaller.AZB7nh/238/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 318.061552][T12481] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 318.214458][T12750] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 318.251009][T12481] veth0_vlan: entered promiscuous mode [ 318.402648][T12481] veth1_vlan: entered promiscuous mode [ 318.547602][T12481] veth0_macvtap: entered promiscuous mode [ 318.587212][T12481] veth1_macvtap: entered promiscuous mode [ 318.603398][T12760] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2191'. [ 318.670661][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.691542][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.716621][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.729891][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.743069][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.755512][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.767787][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.778621][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.789066][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.802000][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.821337][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 318.833276][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.863856][T12481] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 318.919935][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 318.959413][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 318.987976][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.001256][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.031164][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.052872][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.056483][ T5096] Bluetooth: hci1: command tx timeout [ 319.069195][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.069223][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.069252][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.069269][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.069288][T12481] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 319.135379][T12481] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 319.150412][T12481] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 319.164902][T12481] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.195282][T12481] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.228025][T12481] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.264821][T12481] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 319.281106][T12772] netlink: 'syz.1.2195': attribute type 2 has an invalid length. [ 319.327808][T12788] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2199'. [ 319.458103][T12795] netlink: 'syz.0.2202': attribute type 10 has an invalid length. [ 319.531330][T12795] team0: Failed to send options change via netlink (err -105) [ 319.542556][T12795] team0: Port device netdevsim0 added [ 319.604557][T12794] team0: Port device macvlan1 added [ 319.742374][ T2912] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.780078][ T2912] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 319.905271][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 319.934291][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 320.610640][T12835] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2215'. [ 321.316625][T12862] ieee802154 phy0 wpan0: encryption failed: -22 [ 321.360215][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 321.821434][T12884] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2231'. [ 322.117343][T12893] x_tables: duplicate underflow at hook 1 [ 322.432344][T12904] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2239'. [ 323.073513][T12906] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2240'. [ 323.311618][ T1098] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.408536][ T1098] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.503602][ T1098] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.571143][ T1098] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 323.712679][ T1098] bridge_slave_1: left allmulticast mode [ 323.719002][ T1098] bridge_slave_1: left promiscuous mode [ 323.724740][ T1098] bridge0: port 2(bridge_slave_1) entered disabled state [ 323.734843][ T1098] bridge_slave_0: left allmulticast mode [ 323.741526][ T1098] bridge_slave_0: left promiscuous mode [ 323.749088][ T1098] bridge0: port 1(bridge_slave_0) entered disabled state [ 324.342169][ T5142] ================================================================== [ 324.350295][ T5142] BUG: KASAN: slab-use-after-free in nf_tables_trans_destroy_work+0x152b/0x1750 [ 324.359361][ T5142] Read of size 2 at addr ffff888021e101c4 by task kworker/1:3/5142 [ 324.367281][ T5142] [ 324.369629][ T5142] CPU: 1 PID: 5142 Comm: kworker/1:3 Not tainted 6.10.0-rc5-syzkaller-01158-g74d6529b78f7 #0 [ 324.379808][ T5142] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 SYZFAIL: failed to recv rpc fd=3 want=4 sent=0 n=0 (errno 9: Bad file descriptor) [ 324.389895][ T5142] Workqueue: events nf_tables_trans_destroy_work [ 324.396288][ T5142] Call Trace: [ 324.399599][ T5142] [ 324.402554][ T5142] dump_stack_lvl+0x241/0x360 [ 324.407273][ T5142] ? __pfx_dump_stack_lvl+0x10/0x10 [ 324.411658][T12928] sctp: [Deprecated]: syz.1.2246 (pid 12928) Use of int in max_burst socket option. [ 324.411658][T12928] Use struct sctp_assoc_value instead [ 324.412490][ T5142] ? __pfx__printk+0x10/0x10 [ 324.431675][ T5142] ? _printk+0xd5/0x120 [ 324.435854][ T5142] ? __virt_addr_valid+0x183/0x520 [ 324.441002][ T5142] ? __virt_addr_valid+0x183/0x520 [ 324.446128][ T5142] print_report+0x169/0x550 [ 324.450648][ T5142] ? __virt_addr_valid+0x183/0x520 [ 324.455771][ T5142] ? __virt_addr_valid+0x183/0x520 [ 324.460893][ T5142] ? __virt_addr_valid+0x44e/0x520 [ 324.466013][ T5142] ? __phys_addr+0xba/0x170 [ 324.470526][ T5142] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 324.476771][ T5142] kasan_report+0x143/0x180 [ 324.481288][ T5142] ? nf_tables_trans_destroy_work+0x152b/0x1750 [ 324.487559][ T5142] nf_tables_trans_destroy_work+0x152b/0x1750 [ 324.493648][ T5142] ? __pfx_nf_tables_trans_destroy_work+0x10/0x10 [ 324.500086][ T5142] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 324.506093][ T5142] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 324.512441][ T5142] ? process_scheduled_works+0x945/0x1830 [ 324.518166][ T5142] process_scheduled_works+0xa2c/0x1830 [ 324.523728][ T5142] ? __pfx_process_scheduled_works+0x10/0x10 [ 324.529719][ T5142] ? assign_work+0x364/0x3d0 [ 324.534404][ T5142] worker_thread+0x86d/0xd50 [ 324.539003][ T5142] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 324.544908][ T5142] ? __kthread_parkme+0x169/0x1d0 [ 324.549938][ T5142] ? __pfx_worker_thread+0x10/0x10 [ 324.555055][ T5142] kthread+0x2f0/0x390 [ 324.559138][ T5142] ? __pfx_worker_thread+0x10/0x10 [ 324.564256][ T5142] ? __pfx_kthread+0x10/0x10 [ 324.568871][ T5142] ret_from_fork+0x4b/0x80 [ 324.573334][ T5142] ? __pfx_kthread+0x10/0x10 [ 324.577950][ T5142] ret_from_fork_asm+0x1a/0x30 [ 324.582742][ T5142] [ 324.585764][ T5142] [ 324.588086][ T5142] Allocated by task 12920: [ 324.592496][ T5142] kasan_save_track+0x3f/0x80 [ 324.597182][ T5142] __kasan_kmalloc+0x98/0xb0 [ 324.601777][ T5142] kmalloc_trace_noprof+0x19c/0x2c0 [ 324.606978][ T5142] nf_tables_newtable+0x52e/0x1dc0 [ 324.612097][ T5142] nfnetlink_rcv+0x1427/0x2a90 [ 324.616870][ T5142] netlink_unicast+0x7f0/0x990 [ 324.621812][ T5142] netlink_sendmsg+0x8e4/0xcb0 [ 324.626580][ T5142] __sock_sendmsg+0x221/0x270 [ 324.631257][ T5142] ____sys_sendmsg+0x525/0x7d0 [ 324.636031][ T5142] __sys_sendmsg+0x2b0/0x3a0 [ 324.640632][ T5142] do_syscall_64+0xf3/0x230 [ 324.645139][ T5142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.651036][ T5142] [ 324.653451][ T5142] Freed by task 12921: [ 324.657599][ T5142] kasan_save_track+0x3f/0x80 [ 324.662281][ T5142] kasan_save_free_info+0x40/0x50 [ 324.667306][ T5142] poison_slab_object+0xe0/0x150 [ 324.672251][ T5142] __kasan_slab_free+0x37/0x60 [ 324.677020][ T5142] kfree+0x149/0x360 [ 324.680924][ T5142] __nft_release_table+0xe80/0xf40 [ 324.686047][ T5142] nft_rcv_nl_event+0x55f/0x6d0 [ 324.690909][ T5142] notifier_call_chain+0x19f/0x3e0 [ 324.696026][ T5142] blocking_notifier_call_chain+0x69/0x90 [ 324.701754][ T5142] netlink_release+0x11a6/0x1b10 [ 324.706698][ T5142] sock_close+0xbc/0x240 [ 324.710947][ T5142] __fput+0x406/0x8b0 [ 324.714931][ T5142] task_work_run+0x24f/0x310 [ 324.719526][ T5142] do_exit+0xa27/0x27e0 [ 324.723685][ T5142] do_group_exit+0x207/0x2c0 [ 324.728279][ T5142] get_signal+0x16a1/0x1740 [ 324.732792][ T5142] arch_do_signal_or_restart+0x96/0x860 [ 324.738353][ T5142] syscall_exit_to_user_mode+0xc9/0x370 [ 324.743905][ T5142] do_syscall_64+0x100/0x230 [ 324.748500][ T5142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.754399][ T5142] [ 324.756719][ T5142] Last potentially related work creation: [ 324.762449][ T5142] kasan_save_stack+0x3f/0x60 [ 324.767150][ T5142] __kasan_record_aux_stack+0xac/0xc0 [ 324.772535][ T5142] insert_work+0x3e/0x330 [ 324.776877][ T5142] __queue_work+0xc16/0xee0 [ 324.781389][ T5142] queue_work_on+0x1c2/0x380 [ 324.785983][ T5142] rhltable_remove+0x1097/0x1160 [ 324.790929][ T5142] nf_tables_commit+0x3401/0x8a40 [ 324.795958][ T5142] nfnetlink_rcv+0x1e44/0x2a90 [ 324.800735][ T5142] netlink_unicast+0x7f0/0x990 [ 324.805509][ T5142] netlink_sendmsg+0x8e4/0xcb0 [ 324.810280][ T5142] __sock_sendmsg+0x221/0x270 [ 324.814963][ T5142] ____sys_sendmsg+0x525/0x7d0 [ 324.819737][ T5142] __sys_sendmsg+0x2b0/0x3a0 [ 324.824375][ T5142] do_syscall_64+0xf3/0x230 [ 324.828883][ T5142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 324.834784][ T5142] [ 324.837112][ T5142] The buggy address belongs to the object at ffff888021e10000 [ 324.837112][ T5142] which belongs to the cache kmalloc-cg-512 of size 512 [ 324.851425][ T5142] The buggy address is located 452 bytes inside of [ 324.851425][ T5142] freed 512-byte region [ffff888021e10000, ffff888021e10200) [ 324.865227][ T5142] [ 324.867554][ T5142] The buggy address belongs to the physical page: [ 324.873976][ T5142] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x21e10 [ 324.882743][ T5142] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 324.891242][ T5142] memcg:ffff88801e4b3501 [ 324.895480][ T5142] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 324.903486][ T5142] page_type: 0xffffefff(slab) [ 324.908191][ T5142] raw: 00fff00000000040 ffff88801504f140 0000000000000000 dead000000000001 [ 324.916795][ T5142] raw: 0000000000000000 0000000080100010 00000001ffffefff ffff88801e4b3501 [ 324.925398][ T5142] head: 00fff00000000040 ffff88801504f140 0000000000000000 dead000000000001 [ 324.934078][ T5142] head: 0000000000000000 0000000080100010 00000001ffffefff ffff88801e4b3501 [ 324.942751][ T5142] head: 00fff00000000002 ffffea0000878401 ffffffffffffffff 0000000000000000 [ 324.951437][ T5142] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 324.960113][ T5142] page dumped because: kasan: bad access detected [ 324.966532][ T5142] page_owner tracks the page as allocated [ 324.972244][ T5142] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4556, tgid 4556 (udevd), ts 29669116093, free_ts 29667929939 [ 324.993183][ T5142] post_alloc_hook+0x1f3/0x230 [ 324.997964][ T5142] get_page_from_freelist+0x2e4c/0x2f10 [ 325.003514][ T5142] __alloc_pages_noprof+0x256/0x6c0 [ 325.008717][ T5142] alloc_slab_page+0x5f/0x120 [ 325.013400][ T5142] allocate_slab+0x5a/0x2f0 [ 325.017913][ T5142] ___slab_alloc+0xcd1/0x14b0 [ 325.022597][ T5142] __slab_alloc+0x58/0xa0 [ 325.026939][ T5142] kmalloc_node_track_caller_noprof+0x281/0x440 [ 325.033187][ T5142] kmalloc_reserve+0x111/0x2a0 [ 325.037956][ T5142] __alloc_skb+0x1f3/0x440 [ 325.042386][ T5142] alloc_skb_with_frags+0xc3/0x770 [ 325.047506][ T5142] sock_alloc_send_pskb+0x91a/0xa60 [ 325.052723][ T5142] unix_dgram_sendmsg+0x6d3/0x1f80 [ 325.057835][ T5142] __sock_sendmsg+0x221/0x270 [ 325.062517][ T5142] sock_write_iter+0x2dd/0x400 [ 325.067283][ T5142] vfs_write+0xa72/0xc90 [ 325.071546][ T5142] page last free pid 4549 tgid 4549 stack trace: [ 325.077869][ T5142] free_unref_page+0xd22/0xea0 [ 325.082640][ T5142] __slab_free+0x31b/0x3d0 [ 325.087073][ T5142] qlist_free_all+0x9e/0x140 [ 325.091670][ T5142] kasan_quarantine_reduce+0x14f/0x170 [ 325.097231][ T5142] __kasan_slab_alloc+0x23/0x80 [ 325.102099][ T5142] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 325.108020][ T5142] __alloc_skb+0x1c3/0x440 [ 325.112454][ T5142] netlink_sendmsg+0x638/0xcb0 [ 325.117225][ T5142] __sock_sendmsg+0x221/0x270 [ 325.121908][ T5142] ____sys_sendmsg+0x525/0x7d0 [ 325.126683][ T5142] __sys_sendmsg+0x2b0/0x3a0 [ 325.131371][ T5142] do_syscall_64+0xf3/0x230 [ 325.135880][ T5142] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 325.141789][ T5142] [ 325.144112][ T5142] Memory state around the buggy address: [ 325.149739][ T5142] ffff888021e10080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 325.157816][ T5142] ffff888021e10100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 325.165895][ T5142] >ffff888021e10180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 325.173991][ T5142] ^ [ 325.180190][ T5142] ffff888021e10200: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 325.188262][ T5142] ffff888021e10280: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 325.196328][ T5142] ==================================================================