last executing test programs: 5m8.519825981s ago: executing program 3 (id=1909): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000240), 0x4) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081084e81f782db44b904021d080006067c09e8fe55a10a0015400300142603600e1208000b0000001001a8001600a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) syz_emit_ethernet(0x36, &(0x7f00000001c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa000000000000080045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="d1020090780001"], 0x0) getsockopt$bt_BT_POWER(r1, 0x112, 0x9, &(0x7f0000000140)=0x9, &(0x7f0000000180)=0x1) syz_emit_ethernet(0x36, &(0x7f00000003c0)=ANY=[@ANYBLOB="aaaaaaaaaaaa00005e6f17bbfbd49fbc0045000028000000000006907864010101ac1414aa00004e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5c02fffe90780000"], 0x0) r3 = socket$inet(0xa, 0x801, 0x84) listen(r3, 0x8) unshare(0x20000400) ppoll(&(0x7f0000000280)=[{0xffffffffffffffff, 0xb1}, {0xffffffffffffffff, 0x605}, {r1, 0x8080}], 0x3, &(0x7f00000002c0), 0x0, 0x0) 5m8.295062723s ago: executing program 3 (id=1913): mmap(&(0x7f0000004000/0x1000)=nil, 0x1000, 0x0, 0x32, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newtaction={0x7c, 0x30, 0x100, 0x0, 0x0, {}, [{0x68, 0x1, [@m_mpls={0x64, 0x17, 0x0, 0x0, {{0x9}, {0x38, 0x2, 0x0, 0x1, [@TCA_MPLS_LABEL={0x8}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x3}, 0x2}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x1}, @TCA_MPLS_LABEL={0x8, 0x5, 0xbb5a5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x7c}}, 0x810) listen(r0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="18020000004000000000000000000000850000007a00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=ANY=[@ANYBLOB="1200000004000000080000000b"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r3, @ANYRES32=r2, @ANYBLOB='\a'], 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCINQ(r4, 0x541b, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r3, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r0}, 0x20) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000140)={r1, 0xc0000000, 0x6, "fae8fe43deb92927d356817b77cf3256bd8ac307e56491a6fb558bae6d0876cf6cf5dc0b0208aa3f688bdd38f0ed00e49b1da1ca379b533ac3fd32b8ef0a2450a77d5586f1cc"}) sendmmsg$inet6(r0, &(0x7f0000000b00)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000000ac0)="01", 0xfffffe9c}], 0x1}}], 0x2, 0x0) 5m8.075780922s ago: executing program 3 (id=1917): unshare(0x62040200) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_PORT_GET(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010700000000000000002e0000000e0001006e657464657673696d0000000f0002"], 0x3c}}, 0x4008010) socket$nl_route(0x10, 0x3, 0x0) 5m6.26225689s ago: executing program 3 (id=1939): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000ffff00000000ac14144400000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x4000) 5m6.025402058s ago: executing program 3 (id=1945): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet(0x2, 0x80001, 0x84) r2 = socket$inet6(0xa, 0x5, 0x0) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) bind$inet(r1, &(0x7f0000000180)={0x2, 0xc620, @local}, 0x10) r3 = socket$inet(0x2, 0x80001, 0x84) bind$inet(r3, &(0x7f0000000180)={0x2, 0xce20, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000000c0)=0x1, 0x4) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0)=0xffffffffffffffff, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), r4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r6, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmsg$ETHTOOL_MSG_TSINFO_GET(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000500)={0x34, r5, 0x6a98047402e98331, 0x0, 0x0, {}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8040}, 0x4008800) r8 = socket$inet6(0xa, 0x1, 0x8010000000000084) sendmmsg$inet6(r8, &(0x7f0000004cc0)=[{{&(0x7f0000000040)={0xa, 0x4e22, 0x1ff, @private0, 0x401}, 0x1c, &(0x7f00000001c0)=[{&(0x7f00000003c0)="f588", 0x2}], 0x1}}, {{&(0x7f0000000480)={0xa, 0x4e24, 0x4, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8e}, 0x1c, &(0x7f0000000d80)=[{&(0x7f0000000c40)="ea", 0x1}], 0x1}}], 0x2, 0x40) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r8, 0x84, 0x9, &(0x7f0000000300)={0x0, @in6={{0xa, 0x4e24, 0x0, @empty}}, 0x0, 0x1, 0x3bf8580d, 0x0, 0xb3550aa4ba878396, 0x2}, 0x9c) setsockopt$IP_VS_SO_SET_DELDEST(r0, 0x0, 0x488, &(0x7f00000005c0)={{0x87, @rand_addr=0x64010102, 0x4e23, 0x4, 'fo\x00', 0x6, 0x3, 0x73}, {@multicast1, 0x4e20, 0x10004, 0x5, 0x1, 0xa7ab}}, 0x44) sendmmsg$inet(r0, &(0x7f0000000f40)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000006c0)="ed", 0x1}, {&(0x7f0000000200)="b5", 0x1}, {&(0x7f0000000340)='.', 0x1}, {&(0x7f0000000140)='A', 0x1}, {&(0x7f0000000000)="f05d078ecf930fe470d9e100"/25, 0x19}], 0x5, 0x0, 0x0, 0xf2ff}}, {{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000580)="f1", 0x1}, {&(0x7f0000000c80)='a', 0x1}, {&(0x7f0000000b40)='M', 0x1}, {&(0x7f0000000d80)='o', 0x1}, {&(0x7f0000000e80)='\b', 0x1}], 0x5}, 0x70040000}, {{0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000000380)="bb", 0x1}, {&(0x7f00000007c0)="a1", 0x1}, {&(0x7f0000000a00)="351398987294918412495ac616bfecb0b82c186ad6dfb79e8c97e52ceba4cb25d8755453504f03d261f0692e558b10c49591f93d3775b7a9caf5da6bbe5de69958ce174ad23e41f06932a4afdf8c891d45abc48d59f9cfab7a41cc106f9874b0c29a368f27c1e0ae743400cf40cdf507ccb1f9f7a0a5fe1d99da0de1683096b51110359a0c60c4b32b735847a7f162ea2388d3d806b2ea860d5845d40bd12d6b2ef6383710890d6cf0310251581c4f15759a8645fd13e634b43d3e7bb5743d7a0714c36a2824fe58a9b843b52b23e33671ce6190ec2b5d23853765a8e2", 0xdd}, {&(0x7f00000009c0)='\\', 0x1}], 0x4}}, {{0x0, 0x0, &(0x7f0000000dc0)=[{&(0x7f0000000440)="88", 0x1}, {&(0x7f0000000840)="e5", 0x1}, {&(0x7f0000001040)="96", 0x1}], 0x3}}], 0x4, 0x4048841) r9 = socket(0x10, 0x3, 0x0) r10 = socket$packet(0x11, 0x2, 0x300) r11 = epoll_create1(0x0) writev(r11, &(0x7f0000000240)=[{&(0x7f0000000100)}, {&(0x7f0000000700)="5ac3e37c11f231d6445bd1d182e1819daabe7ea87618d62411f548a6956b81b8ec4d61e5484c08ee026befc096389bcdef09c3615dc6ab74106260a6310d17309482bcd5090b9ef41387a1416d4ae886ea74d7cdc53b8a6ad4b235afc5435e19b458d49687b0672c8985e0b871074d52171dbd901514fbffefbc02dd1a81d9f2a28eff0d04b1", 0x86}, {&(0x7f0000000b80)="7353100897aa15b786b5f29b50dc110616b6c26b2914610c999a391adaa567a0b2734ea6356c6a860db87c8faf1de3788f8ffdcb01bb2eb0c9ae1b199a0f7356e1124388cccfe227efdbf0eb5e819b48b8bbd454a886d5e9bb204b8cc10eeb80cc283f1414c4946221cab2330980ec63d0a6cdb5336b8c654b652b8f673ce76b537208e644b274b2be4f", 0x8a}], 0x3) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000840)={&(0x7f0000000640)=@newqdisc={0x94, 0x24, 0xf0b, 0x18000020, 0x0, {0x0, 0x0, 0x0, r12, {0x0, 0x4}, {0xffff, 0xffff}, {0xe, 0x4}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x0, 0x100000, 0x0, 0x1, 0x5, 0xf}, [@TCA_NETEM_REORDER={0xc, 0x3, {0x7, 0x1}}, @TCA_NETEM_CORR={0x10, 0x1, {0x5, 0x823, 0x8}}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x5, 0x0, 0x4e71, 0x2b4, 0x5}}]}}}]}, 0x94}, 0x1, 0x0, 0x0, 0x4048005}, 0x0) 5m5.579284631s ago: executing program 3 (id=1949): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x1, 0x5, 0x3, 0xd, "d3592f0923336ed91ee045f6a5d933692d65bc216c8a4e7883ef744af944be8507453b2f7d5987469406fef035381c334fdebb2d7d9342a0f1f25ad65e3be0", 0x4}, 0x80, 0x0}, 0x80) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) (async) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x1, 0x5, 0x3, 0xd, "d3592f0923336ed91ee045f6a5d933692d65bc216c8a4e7883ef744af944be8507453b2f7d5987469406fef035381c334fdebb2d7d9342a0f1f25ad65e3be0", 0x4}, 0x80, 0x0}, 0x80) (async) 4m50.479374353s ago: executing program 32 (id=1949): r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x1, 0x5, 0x3, 0xd, "d3592f0923336ed91ee045f6a5d933692d65bc216c8a4e7883ef744af944be8507453b2f7d5987469406fef035381c334fdebb2d7d9342a0f1f25ad65e3be0", 0x4}, 0x80, 0x0}, 0x80) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$netlink(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) (async) sendmsg$inet(r0, &(0x7f0000000b40)={&(0x7f0000000080)={0x2, 0x4e20, @multicast1}, 0x10, &(0x7f0000000000)=[{&(0x7f0000000800)="e9", 0x9500}, {&(0x7f00000017c0)="ea0189bdebb0c16d420ee9b95082abd6431cc7afc22c4a6b8adecef68f76bd81a86e89f9c80e5c868a12b09e80ba8c01eb3f4b7be71f9fc2355c336cedc15eb778e3a3b35c3f72629ea4d9ae42cf4c17255815fb8a47aafd8b8ff0c202b4e09f7c42811261b5e113fcce27b4329ccb792df14b7d6dcfaf2cf8dbb51946e89c862e9252731f680ec50326fc16386aeefe654bac24", 0x94}], 0x2, &(0x7f0000000100)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0xd}, @loopback}}}], 0x20}, 0xe900) (async) sendmsg$kcm(r0, &(0x7f0000000400)={&(0x7f0000000200)=@nfc_llcp={0x27, 0x0, 0x1, 0x5, 0x3, 0xd, "d3592f0923336ed91ee045f6a5d933692d65bc216c8a4e7883ef744af944be8507453b2f7d5987469406fef035381c334fdebb2d7d9342a0f1f25ad65e3be0", 0x4}, 0x80, 0x0}, 0x80) (async) 2m34.384328312s ago: executing program 0 (id=3335): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, &(0x7f00000001c0)) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x5}, 0x10) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={0x0}}, 0x4c001) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = socket$pptp(0x18, 0x1, 0x2) r4 = socket$pptp(0x18, 0x1, 0x2) bind$pptp(r4, &(0x7f0000000000)={0x18, 0x2, {0x0, @dev={0xac, 0x14, 0x14, 0x21}}}, 0x1e) bind$pptp(r3, &(0x7f0000000000)={0x18, 0x2, {0xfffc, @loopback}}, 0x1e) connect$pptp(r3, &(0x7f00000000c0)={0x18, 0x2, {0x0, @multicast2}}, 0x1e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r5, &(0x7f00000000c0), 0x9) sendfile(r5, r2, 0x0, 0x10000) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, 0x0, 0x0) socket(0xf, 0x80000, 0xc) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f42fc3199f000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80af735ed41793bdf9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbc68223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f00001000000000eeff7c5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729eec082830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d424c14283a94395b64645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d620100000000000000494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd779a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9b0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000002684c2d8eb8cac98930fa6a893ca44c0f64c07a87eb7b05f56ca6c70cb3a0eb328a15fe96a88235155e6d64bd434f641ddf9db2245e47e5904453577895dd81d"], &(0x7f0000000380)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x7, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r7}, 0x10) r8 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r8, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x498, 0x320, 0xa, 0x148, 0x368, 0x60, 0x400, 0x2a8, 0x2a8, 0x400, 0x2a8, 0x3, 0x0, {[{{@ip={@multicast2, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x2f8, 0x368, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x2, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x8601, 0x6, './file0\x00'}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@MARK={0x28}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4f8) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)=ANY=[@ANYBLOB="1b0000000000000000000000060000000000", @ANYRES32=0x1, @ANYBLOB="000000000000001b000000400000000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="03000000030000000100"/28], 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000240)={{r5}, 0x0, &(0x7f00000006c0)='%+9llu \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r9 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) bind$llc(r9, &(0x7f0000000040)={0x1a, 0x33a, 0x0, 0x56}, 0x10) r10 = openat$cgroup_ro(r5, &(0x7f0000000680)='blkio.throttle.io_service_bytes\x00', 0x275a, 0x0) write$cgroup_int(r10, &(0x7f0000000000), 0xffffff6a) sendfile(r1, r10, 0x0, 0x8000001000000000) 2m33.434634479s ago: executing program 0 (id=3341): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x38) 2m33.264592018s ago: executing program 0 (id=3344): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_int(r0, &(0x7f0000000200)='hugetlb.1GB.max_usage_in_bytes\x00', 0x2, 0x0) r2 = openat$cgroup_ro(r0, &(0x7f0000000080)='cpuacct.stat\x00', 0x0, 0x0) sendfile(r1, r2, 0x0, 0x38) (fail_nth: 2) 2m32.822658512s ago: executing program 0 (id=3348): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000ffff00000000ac14144400000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="ff00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000084010500ff010000000000000000000000000001000004d2330000000a"], 0x23c}}, 0x4000) 2m32.714672296s ago: executing program 0 (id=3349): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000ffff00000000ac14144400000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x4000) 2m32.551132301s ago: executing program 0 (id=3351): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0xa40, 0x30, 0x0, 0x0, 0x0, {}, [{0xa2c, 0x1, [@m_ipt={0x104, 0x0, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8}]}, {0xc9, 0x6, "57fbe85299683c7d7425433f51365da0062c97cf7df1ce5ffcda1e1eda5de37d60c37f13c0d537317821de1c9c00f3165331095a1ff001bbb780f23ebedd86319a8324a3c1c9d5f14188f182b4f8285c010b9a20848ddd608efb6cb2c79e5dad1fe5122b13e4c3ab1e1a78cdfe19a01f60933f08845611ba9aefbc893a21b7f410934347d762d96b2b00277a7b8f894d98338fde9df041fef935a951bf360dbe2158fe723e72fe76a1d59fb1e88db22c492f3ee442afc6e750e276e4f352c9d9df06094593"}, {0xc}, {0xc}}}, @m_ipt={0xa0, 0x0, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8}]}, {0x31, 0x6, "b176df99b05f6b77a316bfc8e283fc48049dda839c90a5ceadad81aedbf42ad55531a586e8c2e5163b0431a344"}, {0xc}, {0xc}}}, @m_ipt={0x884, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x859, 0x6, "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"}, {0xc}, {0xc}}}]}]}, 0xa40}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000003"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r5, @ANYBLOB="200001"], 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x3c}}, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000000000006a0a00fe80000000850000000a000000b700000059a700009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x3c}}, 0x0) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) (async) setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x0, 0x3b, 0xfd08, &(0x7f0000000180)="5ae02efc442000000000000000c723fa03faf2acdc0f9d5af8015b0abe92772c580d85e0dfa999ceaef773ead243c07350d9156d0ecc6a43edaeaa20fbf448d756e97a49901cf5", &(0x7f0000000140)=""/24, 0x0, 0x0, 0x37, 0x21}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x0, 0x3b, 0xfd08, &(0x7f0000000180)="5ae02efc442000000000000000c723fa03faf2acdc0f9d5af8015b0abe92772c580d85e0dfa999ceaef773ead243c07350d9156d0ecc6a43edaeaa20fbf448d756e97a49901cf5", &(0x7f0000000140)=""/24, 0x0, 0x0, 0x37, 0x21}, 0x28) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000f, 0x10010, r7, 0x952de000) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000f, 0x10010, r7, 0x952de000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 2m17.467518066s ago: executing program 33 (id=3351): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) (async) bind$alg(r1, &(0x7f0000000280)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=@newtaction={0xa40, 0x30, 0x0, 0x0, 0x0, {}, [{0xa2c, 0x1, [@m_ipt={0x104, 0x0, 0x0, 0x0, {{0x8}, {0x14, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8}]}, {0xc9, 0x6, "57fbe85299683c7d7425433f51365da0062c97cf7df1ce5ffcda1e1eda5de37d60c37f13c0d537317821de1c9c00f3165331095a1ff001bbb780f23ebedd86319a8324a3c1c9d5f14188f182b4f8285c010b9a20848ddd608efb6cb2c79e5dad1fe5122b13e4c3ab1e1a78cdfe19a01f60933f08845611ba9aefbc893a21b7f410934347d762d96b2b00277a7b8f894d98338fde9df041fef935a951bf360dbe2158fe723e72fe76a1d59fb1e88db22c492f3ee442afc6e750e276e4f352c9d9df06094593"}, {0xc}, {0xc}}}, @m_ipt={0xa0, 0x0, 0x0, 0x0, {{0x8}, {0x48, 0x2, 0x0, 0x1, [@TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8}, @TCA_IPT_TABLE={0x24, 0x1, 'mangle\x00'}, @TCA_IPT_HOOK={0x8}, @TCA_IPT_INDEX={0x8}]}, {0x31, 0x6, "b176df99b05f6b77a316bfc8e283fc48049dda839c90a5ceadad81aedbf42ad55531a586e8c2e5163b0431a344"}, {0xc}, {0xc}}}, @m_ipt={0x884, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x859, 0x6, "7cbfd2b8386639fa9f9eb0dac08ba5af1d75046c9fd002401961bf9fade29fcd0f67073543a14079881219edb7da196a2be5ed44c61ca513bed9d2e46552965db936c0e44dcce636bc257d61b98838010f3d00d80535bbea6c219a0a9baf5879aa4ec93cf3f980c7e563721397f4b8effd12159b62542dce8cbf67739b103a9d681c756d9cea82673c915b076d4645db92b1ba0b7af003e88fbcc6df61cfc4cf337dbe4a0bfb5e03ebde9f3bb013d00fd6cf3b09708014d5d8a5e1e1be647015cdb2c5eb63220d5c760cd4ae301f0adaf7dc43288995f3e6e9e34e8c5aca5625d280b81a88028745f7539ef843c0160ec22874180f48bc502ca3fafb58b0b6fb4dafa7d7e53518ecd565ffa1da1158a2a70aba3e6aff0596a8bf84c305d370685b3b907d399de9a35f7af4ffa73238b087a956c3be7dc2f86d98a65d348f3cf2d656e514be42ac2f61570d62c20242d75cb26b69350d02f3f5dd7e7bd3f8fb3777b113a08aedc36e17b551d8eedd5f1f61fa313f21e64c49a0c5697c592b7829468528b1d2f9e74778fc78766409c964ca109163fe27ceb1ec626d85e62a832a5851fdc6c12787b12d5c0fbcdea3b9ea726b5c486bd402d99325d98084f7e21b1063ad6770baca78a789a93f7e59c09d4930d71fed95953c0dedec6d5e908a817d0e9b0c0b0c923bea86bdd128eb7024d3800166f67c2d5c9b29f924e005a62d4ac659185cd15b0b36240fc5043100f59bf5d378aee40b1e94ecc6a0bae6a9380bb17576d46d6b8820b5068e44f37478ff97a6f7048c7ee8104e629525b538a8a4ad7ae1a38878cb6f444e954a5aebab12bcb9663483bb10236810992d8749bf972e6ba3cf6e07a292a5b73e0779a818ac7c1db2708d2eddd0d654feba8eab6e86682f74e0615fd45cbab221577296a30e33c9efce770da5214ae0dec9fa67829a8bf4de2fe55d8ad669c3260e1f2c9368582902fc7d11f3d2c867aa6b371c63393ba85042ec9be83d053971743de6df2e26ff10bc9d8957370efc4450b9f629b9be9d740a70fcd1ce69f459b4a46b1d33381a16fd0ef521f7b1661fa0edbaa3a292cb0d61547f183b3b64a937b1157cfc85cfca9871a634b01706ce2a7547cda760e0379bbc40812a689af6c0c5c0a1144fd9ff0bc753546b6f4161599a1947f8b7b22efa8bd2763bae47a5563cc3fad118c58a2a60d8a46f6a3fa7460055395bba939f9c4c6f9175220aebaa852af1c9526cd5a3d405af621769bd1277e103533dfa57505a308d57c5d5fc30f33f3218dd2cedf1a35acd6d0217e7b094656cfaf34888317ba76efc2eaca3e10cd2c33506f52aec32d8536854e5971e0956a4447cf8b3f0bfec28a923a15588cb567e5e6a7bc9378e363caea682929dec662d6457d7d10aa3e50153b084604e1a1dc1394a229b9bd921e9333beedb8437cec36f30fedb3d84c0237e066d44c25ad82d0ffeda36e1642d123d14bbe9a119cc26e0aaec408463e94ebd59578427ea1291fd7f7fcecd30f94e6e17d6f9874b463eb0b05ce40c9e023edb29406a4ccabfedc8fa1ea8ab27e76d9f35d327aafc6a0ec12a30215b866b0ec97e2f43d946f5f02e2e324283a86a047e3bc2c5d254bd36a23fc841430f5d256569a5adb187f0e19bfa35fee3ce4340dcb95bfbb1699ce3e093bfcf766a6fca11bc9761419c3f7728b45a7c0bed8bcad70dc7d92b2acb69f2a0a9c499f3d56af92093ec10c7210321622e69401e9cbcfffe225be4343adde68ddf5c2b966392f660c8d905338f75612e46a5491749064b348e4e5ab59db74c2e295180f863f853f762fcfab1cb371c9832fa594f7893ebe5b1d97bdfbe1169b74f1d237d4d6a187686302688f9fb4cdfbaa9de0dbb215cba9ea73d1e14cc4f9bf38a3fc902c8b763718a9df2697976cac659f301bff9ef4148e158076d617f930780fc2a3f22a803de0bd8bf79669391f4c99202bb1c25d04d59b821149d500f66cefec32a956c1832838a92f5d2867c3fd4089664c994a6caff48cbcee8994d293089b5447fef235fb13875646dfca51de9304e0fde345063dd6296d59a31bc53f7c97a7f01ece1f9725e551c95bb5f764d999ea3378162dda564f2ca75401bb97ec471acf481d4fa534f236753bb127bd1008664d1940e47786d6aa08a68a9b67720f1864535f8d76f5a2c79d3bd42581584594ccc4c388e810550560fb3154c23ba467721b68d3a3aa4d25d1c7ce48186ab59bafb119a09231c8db55e5224b1c44cc30e0fd1e11becc25adf4d1671378e6360b23603a63ff5c26cb6d8a975a604deb4253d005d860b3c30347d605acae9e4293d7d3764ec8024a5e6591080d1792d7c5079757c547444cbb2111cd0de33fff81299ac4311b9ced0d1a582e3614b720ad53ff2d51016c907b896e3b7f5d4577123e3b4c24b0aaea38325972dc779709b5dd95d64943d23588704c964ffd79f347ffd3dafa7cbc61c8cbed583a0ba5cf7c408a0270f8f2c54d4656f761a9d4d07b189aedcd0acbceb0647e67ae2f13b7050758d2b708815ace2c93ec326c165acbc5d53fcd1029a25966c736706f20959c445ece0259f4827537771e27f8d425702761fd9e91f6edeb043aa5b41ad1d0fecb05cd9730e57ac02168c98c9fbdc95ca5a435f2f76a25f122c7b40c3b787c758052d66a239a78da4d370dc70ff5356471122b13601eafb429d34b077ed67329455f3be9412081ea13239cb29af86e89dad3314249292599701ad105b1dfd01c0c9fc1dceafac374a486f493d544c3204c5803bb7681d3769372aea37f1fe9794cce792cd24ca280917b68cf65a7b2bb783a9aabe4d5e37f5d7142f32fe9acac9ec156f33315ebcee133a1457a951c0c059af6b27585afb3d6db299a6a3529186a1ad0d8e0921205802ec046412404a4f84c6f109d21feb47138591bbf03ce4ada93f4d6f3058b6ba51cbeab5a090ad9146a8ca858a91139c94932b6043feee4b834b1a2c3842d5316b56252c4133"}, {0xc}, {0xc}}}]}]}, 0xa40}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000003"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket(0x10, 0x803, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="3800000056000100000000000000000007020000", @ANYRES32=r5, @ANYBLOB="200001"], 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000680), r3) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000003c0)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="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"], 0x3c}}, 0x4000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r7 = socket$nl_sock_diag(0x10, 0x3, 0x4) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f00000000c0)=ANY=[@ANYBLOB="b702000000000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065060400010000000404000001000000b7050000000000006a0a00fe80000000850000000a000000b700000059a700009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$netlink(0x10, 0x3, 0x0) (async) r9 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x12, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000010000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x67, '\x00', 0x0, @cgroup_sock_addr=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r10 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r10, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r11, {0x0, 0x4}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x4}}, @TCA_EGRESS_BLOCK={0x8}]}, 0x3c}}, 0x0) r12 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) (async) setsockopt$MRT_ADD_VIF(r12, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@rand_addr=0xc0586300, @private}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x0, 0x3b, 0xfd08, &(0x7f0000000180)="5ae02efc442000000000000000c723fa03faf2acdc0f9d5af8015b0abe92772c580d85e0dfa999ceaef773ead243c07350d9156d0ecc6a43edaeaa20fbf448d756e97a49901cf5", &(0x7f0000000140)=""/24, 0x0, 0x0, 0x37, 0x21}, 0x28) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r8, 0x0, 0x3b, 0xfd08, &(0x7f0000000180)="5ae02efc442000000000000000c723fa03faf2acdc0f9d5af8015b0abe92772c580d85e0dfa999ceaef773ead243c07350d9156d0ecc6a43edaeaa20fbf448d756e97a49901cf5", &(0x7f0000000140)=""/24, 0x0, 0x0, 0x37, 0x21}, 0x28) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000f, 0x10010, r7, 0x952de000) (async) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0x100000f, 0x10010, r7, 0x952de000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) 1m54.521541461s ago: executing program 5 (id=3499): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000ffff00000000ac14144400000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x4000) 1m54.298629162s ago: executing program 5 (id=3500): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r0, 0x0, 0x2a, &(0x7f0000000000)={0x2, {{0x2, 0x800, @empty}}}, 0x88) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000240)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @empty}}}, 0x108) close(r0) 1m54.151146584s ago: executing program 5 (id=3502): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x19ee0}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_PEER_NOTIF_DELAY={0x8, 0x1c, 0x7fffffff}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f0000002a80)={'sit0\x00', &(0x7f00000029c0)={'gretap0\x00', 0x0, 0x20, 0x1, 0x6, 0x0, {{0x23, 0x4, 0x2, 0x33, 0x8c, 0x66, 0x0, 0x7f, 0x29, 0x0, @broadcast, @local, {[@rr={0x7, 0x7, 0x63, [@dev={0xac, 0x14, 0x14, 0x3a}]}, @rr={0x7, 0x17, 0xcd, [@remote, @private=0xa010101, @rand_addr=0x64010100, @loopback, @dev={0xac, 0x14, 0x14, 0x1b}]}, @ssrr={0x89, 0xf, 0xd4, [@broadcast, @multicast1, @broadcast]}, @ra={0x94, 0x4, 0x1}, @timestamp_prespec={0x44, 0x44, 0xe1, 0x3, 0x9, [{@remote, 0x9}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0xb0}, {@multicast1, 0x3}, {@private=0xa010101, 0xfffffffd}, {@multicast1, 0x3f}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4}, {@broadcast, 0x9315}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0xf}]}]}}}}}) 1m53.966628389s ago: executing program 5 (id=3504): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000711220000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7ff, @void, @value}, 0x94) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r1, 0x80de02bd3ca0bfdb}, 0x14}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), 0xffffffffffffffff) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000100), 0xffffffffffffffff) r3 = socket$rds(0x15, 0x5, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='cpuacct.usage_user\x00', 0x275a, 0x0) pwrite64(r4, 0x0, 0x0, 0x40008001) bind$rds(r3, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r3, &(0x7f0000001d00)={&(0x7f00000017c0)={0x2, 0x0, @private=0xa010101}, 0x10, 0x0, 0x0, &(0x7f0000000240)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x3}, {&(0x7f00000001c0)=""/117, 0x75}, &(0x7f0000001b40)=[{&(0x7f0000000140)=""/86, 0x56}], 0x1}}, @cswp={0x58, 0x114, 0x7, {{0x7, 0x1}, 0x0, 0x0, 0xa, 0x9, 0x80, 0x9, 0x4, 0x41}}], 0xa0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32, @ANYBLOB="00000a00100000001c001a80080002802d00ff04080002"], 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x63, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x129, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, 0x0, {0xe, 0x3}, {0x6}, {0x4, 0x8}}}, 0x24}}, 0x40004) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x84) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x1c, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000a80)='kfree\x00', r7}, 0x10) r8 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'syz_tun\x00', 0x0}) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x1, 0x32, &(0x7f0000000640), 0x4) sendmsg$unix(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0xc000090) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x8, &(0x7f0000000440)=@framed={{}, [@tail_call]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x40, '\x00', r9, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x75b, @void, @value}, 0x94) r10 = socket$nl_route(0x10, 0x3, 0x0) r11 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x0, {0x0, 0x0, 0x0, r12}}, 0x20}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r5, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYBLOB="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"], 0x21c}, 0x1, 0x0, 0x0, 0x20040010}, 0x4008804) socket$nl_netfilter(0x10, 0x3, 0xc) 1m53.509790579s ago: executing program 5 (id=3507): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$kcm(0xa, 0x7, 0x88) sendmsg$kcm(r0, &(0x7f0000000340)={&(0x7f00000000c0)=@in6={0xa, 0x4e22, 0x0, @dev, 0x7}, 0x80, 0x0}, 0x200ce0c0) listen(0xffffffffffffffff, 0xfffffffc) connect$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2000}, 0xc) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, 0x0, 0x40004) socket$nl_generic(0x10, 0x3, 0x10) r3 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000071116f0000000000060000000000000095"], 0x0, 0x2, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x8, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0xb, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000001c0)={'syztnl2\x00', 0x0, 0x0, 0x3, 0x7d, 0x7fffffff, 0x10, @loopback, @loopback={0x0, 0xffff888101827518}, 0x700, 0x40, 0x2, 0xfffffffd}}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 1m53.032271261s ago: executing program 5 (id=3510): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0xfffffffffffffeaf, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000001a00)=0x72b, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f00000000c0)=0xa4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000001100)=@raw={'raw\x00', 0x41, 0x3, 0x338, 0x98, 0x68, 0x0, 0x0, 0x0, 0x2a0, 0x1f0, 0x1f0, 0x2a0, 0x1f0, 0x3, 0x0, {[{{@ip={@private=0xfffffffe, @broadcast, 0x0, 0x0, 'hsr0\x00', 'wg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@local, @broadcast, 0xffffffff, 0x0, 'batadv_slave_1\x00'}, 0x0, 0x1e8, 0x208, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x7, 0x100, 0x20, 0x11, 0x3, 0x4, 0x1, 0x8, 0x18}, {0x1}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 1m37.908641721s ago: executing program 34 (id=3510): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0xfffffffffffffeaf, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000240)='pmap_register\x00', r1, 0x0, 0xf69}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r2, 0x29, 0x8, &(0x7f0000001a00)=0x72b, 0x4) getsockopt$inet6_buf(r2, 0x29, 0x6, 0xfffffffffffffffd, &(0x7f00000000c0)=0xa4) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x4000000000000, 0x40, &(0x7f0000001100)=@raw={'raw\x00', 0x41, 0x3, 0x338, 0x98, 0x68, 0x0, 0x0, 0x0, 0x2a0, 0x1f0, 0x1f0, 0x2a0, 0x1f0, 0x3, 0x0, {[{{@ip={@private=0xfffffffe, @broadcast, 0x0, 0x0, 'hsr0\x00', 'wg1\x00', {}, {0xff}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0xffffffffa0028000}}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@local, @broadcast, 0xffffffff, 0x0, 'batadv_slave_1\x00'}, 0x0, 0x1e8, 0x208, 0x0, {}, [@common=@inet=@hashlimit2={{0x150}, {'veth1\x00', {0x7, 0x100, 0x20, 0x11, 0x3, 0x4, 0x1, 0x8, 0x18}, {0x1}}}, @inet=@rpfilter={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) 1m35.860435681s ago: executing program 2 (id=2947): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c", 0x93}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r2, r7, 0x8f5, 0x100000000000000) write(r4, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000280)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000005000000000000c1928700f7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="186f7591b5c4408efac700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000000feffffb703000008000000b70400000000000085000000550000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000002c0)="ad56c408000000adf1f8b2d23292ea54c7b6ef00000000bbbcde8037a069e380f94eafc775206f4901a555be63bcb42de4520b8d697691393dfd4f7e0244e80a33fd2f564d6fb8418f17d8ecb02cb935765fd6a4861410441fdbcb9e2d4736b6f15598b36f244034457dbb2b114fe74ddd4eaac6d161cb43749d163586e997bd0eb2b4299dca132038d5bfb74d2d755cc2a0", 0x92) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newnexthop={0x24, 0x68, 0x5fb9a818fb7378e9, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x1}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="37f545b88018bc910400"/20, @ANYRES32=0x0, @ANYBLOB="00000000195000002c0012800c0001006d6163766c616e001c000280080009000000000006000200010000000800070000f0ffff140035006d6163766c616e300000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) r12 = socket$inet6(0xa, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x7) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000003c0)={0x0, 0x4, 0x5, 0xcc, 0x8}, 0x14) setsockopt$inet6_int(r12, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r12) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfffffff4, 0x60000000, 0x0, 0xc8, &(0x7f0000000000), &(0x7f0000000e00)="7bafde4b0184c4ea185845c29a1f5f019fe6e19905204cc30cdff1d16dfe91d4dcd2affa9e975239bafe5f2710ca9bc51c61daedc4df055952db983f6f55665491755bfd313f93af08a04e5d6fb5e0fbc89b0706edf916107e4158cad5400b3b2289e78f16f7ebe4a472ddb22dd626d0b2325b3396f289920045effbbef8797b57c7100b9a9bd56f471eac7a6c356b99a327a0f9b81f0ddd76023f878fea9860af16f7db9b148f1c8e75a5af8d820cc451a7f00c194539cc6d3e982f596b0e0d6998234284f1a3eb", 0x1}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) 1m33.488568797s ago: executing program 1 (id=3204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r3, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0xe) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (async) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @remote}, {0x1}, 0x8, {0x2, 0x4e21, @multicast1}, 'batadv0\x00'}) (async) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x401, 0x0, &(0x7f0000000040)) recvmsg$unix(r7, &(0x7f00000002c0)={&(0x7f00000000c0), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)=""/71, 0x47}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000240)=""/63, 0x3f}], 0x3, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x40000002) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)={0x54, r1, 0x8, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_team\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2fe0db7316d09df25ca73ecc6905590eff7f023c2f4be7cb"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) 1m13.391372357s ago: executing program 2 (id=2947): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c", 0x93}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r2, r7, 0x8f5, 0x100000000000000) write(r4, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000280)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000005000000000000c1928700f7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="186f7591b5c4408efac700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000000feffffb703000008000000b70400000000000085000000550000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000002c0)="ad56c408000000adf1f8b2d23292ea54c7b6ef00000000bbbcde8037a069e380f94eafc775206f4901a555be63bcb42de4520b8d697691393dfd4f7e0244e80a33fd2f564d6fb8418f17d8ecb02cb935765fd6a4861410441fdbcb9e2d4736b6f15598b36f244034457dbb2b114fe74ddd4eaac6d161cb43749d163586e997bd0eb2b4299dca132038d5bfb74d2d755cc2a0", 0x92) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newnexthop={0x24, 0x68, 0x5fb9a818fb7378e9, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x1}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="37f545b88018bc910400"/20, @ANYRES32=0x0, @ANYBLOB="00000000195000002c0012800c0001006d6163766c616e001c000280080009000000000006000200010000000800070000f0ffff140035006d6163766c616e300000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) r12 = socket$inet6(0xa, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x7) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000003c0)={0x0, 0x4, 0x5, 0xcc, 0x8}, 0x14) setsockopt$inet6_int(r12, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r12) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0fff9ffffff79a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00010000850000000d000000b7000000000000009500000000000000496cf2827fb43a431ca711fcd0cdfa146ec56175037958e271f60d25b7937f02c8695e5a1b24df41dc10d1e8bf076d83923dd29c034055b67dafe6c8dc3d5d78c07fa1f7e655ce34e4d5b318e2ec0e1a00897a74a0091ff110026e6d2ef831ab7ea0c34f17efd36ef3bb622003b538dfd8e012e79578e51bc53099e90fbdb2ca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e060e3670ef0e789f93781965f1328d6704902cbe7bc0cb82d2789cb132b8667c21476619f28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fbce841f8a97be6148ba532e6ea09c346dfebd31a08b32808b80200000000009dd27080e71113610e1019c12a73748b049604fa72c64ed858e8327ef01fb6c86adac12233f9a1fb9c2aec61ce63a3462fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2ed8576a3f7f3deadd7130856f756436303767d2e24f29e5dad9796edb697a6e97180aabc18cae2ed4b4390af9a9ceafd07ed00b0000002cab154ad029a119ca3c972780870014601c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f4b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a2a71bc85018e5ff2c910496f19afc91b47683db01a469398685211bbae0e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bde792c88c5b8dcdcc22ee17476d738992533ac2a9f5a699593f084419cae0b4183fb01c73f99857399537f5dc2acb72c7eae993fc9eb22d130665b6341da114f08cd0509d380578673fffffffd7917f23837a6b24db0e067345560942fa629fbef2461c96a08707671315c302fae29187d4f5c06a960fd37c10223fdae7ed04935c3c90d3add8eebc8619d73415e6adcda2130f5011e48455b588b90dfae158b94f50adab988dd8e12baf5cc9398c88607a08009c2977aab37d9a44cfc1c7b4000000000000fa47742f6c5b9c4b11e7d7262a1457c39495c826b956ba859ac8e3c177b91bd7d5ca1664fe2f3ced8468911806e8916dc15e21644db60c2498d5d16d7d915836ab26c169482008ef069dc42749289f854797f2f900c2a12d8c38a967c1bbe09315c29877a331bcc87dc3addb08141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d4a3e1a9e90d76c1993e0799d4894ee7f8249dc1e342892129369ee1b85afa1a5be5f6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1038debd64cbe359454a3f2239cfe35f81b7aded448859968ff0e90500d0b07c0dd00490f167e6d5c1109681739dc33f75b20428d6474a0a91ee90b8de802c6b538622e6bbcb80f87b415263c401e64ed69a2f75409000000000000001d695c4559b82cabac3cccadc1e1c19af4e03020abf5ff0433d660f20898d2a045d009a0ffb20a77c9af2b80c05184a66d30bbea2ca45a4d6d6d1e6e79aef42355b17402a500587b603306a5af8d867d80a07f10b854b1c8c768c001496fa99ce5b5040be9194123e918914a71ad5a8521fb956dbc60f7d9719b55b3abb6bba3d113a680a8d46fe074c83fbe378a3889e8145b2eaceab05ef932c6e4f8ef0ed0d818a7b76d839cf3c6775e19f0b7e70803000000b168c38fa32e49563cfee3a7f0fc18bfa32c418cef875fb49e2989172a1bcd1e30280bc586e79a5dd8076c248e7d6e97b3ce267dd4e27b6ef206660090bb2164474cef378f97ca33fccf363361dcdba10c1547053453d0c9aec91a24079b21d52fb5516bf0c28ef37aa76442f6083dc99cd61afaf6be45d7b00d3639f2f10ac2d5c759c3e5468f5874c24411d415b6b085fb73a2d7c3852e0e658ffeb4e863428a792bee94f6cd895424360e0464f9d7ea425f2fa6aa0000000000000000532ff181c985f54b7ae20aa5e63055b4d6a36fa98a44e379d2bccf977c3e88538f406b598307c9912fb097601f3f88a2ea6fd1f9320cfe7f09aed4d1e72d26e5c7a93854c8e9f7f15f02e177ce23f43a154b42e26f037e8a01377cbd3f509e6e540c9ba9c2a589ac5d8ad67a65e9a44c576dc24452eaa9d819e2b04bdd1c000000070000000000000000000000005333c6199c12dcd92689192727a7267c47cf897853d160100b39b613faefe16bd91fc105dddd77ab929b95032d3717fa9fbdc2bdc0e98ae2c3f23a6131e2879f0484ee3bfe30b92dd493be66c2242f8184733b80ba28e824910844df31f3d4bb2f89049c5f6d63956995747639964217aacfe548fc869098aa8e07e51dbc9e2d4db3c5f79fd355222ec2a00cf7f2ccd6dd6d2dc2a815d8314221a5472f1318a9dfbec5a759579caf3262129b14e99040b5d91398e17df85c25ccae973eecc7d187168d5c9cd848d566cc1758763f0000009c927da38d83314480b15e23138c5b877a72bd4cf74a299df4fbfc8e6ea96939f15d254d9033c5a45706bda78ab602000000000000000000113a3065a478d1de98be3a66f6fbf68f2f5693050fa56db62e2f99cf916059ee364dad078fc88d17cbde37a2270f90a60afe8548f4c579b09c333382c6e7a316ac03aa23d379836b96173a5541fa96c27e7fb6d2585d828aa330f3438d8487912bb7742be1502e706644f7a937451beb7a5f6ca3ef21e8cb8f841af6d54334d82a8b816b6daccf0c66162f897623ee325d714f9f10636a7573582ff31c7f9c6f767c806ef4af486cc19a5355bdc814cb5557c6fa6404179c865980b0815b907a7f268e97828c196f5ac033d395a217b4e1e45663023a0292003c36a3b7461fc2c8566e0f3f693bfacae26aa2b7d17962989ccb943633c080aacc9b7d311c251686fc66aa80bf41a5bf6cd72d5aa995820fb318fad61a79a61d0a969fd6018ac9f131fe02fe31d565723cbf9b63841e21417fc29a3e7a03886d80566ae001861799a4aad91c72139e681ced8625b675dfbd6d458d4b2d9e6d565430248172ad942cdb41639f4113896827c8806e049218cd1eef89d6b9b14dd707da40705c07f878263ff9b71ccf28ec50178c7aac83bef7bd1045a5e4bcb6cfe05e2ac3e17c1f8f12ddf5b6770ce0da8cb3aba3a935a6b737b6d3ebf2c715dcc11c5759bd0acdecf333f2b77c52fb2251336bbd92f73ad1a30bb9162bd9d699c49d824b827f3e7c1096354946e09922db25904c83262c6dcb87457e4abefa0e9dcb17d79c173895b74aae2ed4419662690a16494e7b27d0d2688c69b4be3d21b783195f6a5e5dc5c07c73f0d0f0670db10ac9ef5b8295ff88df734e3c6ab8555c0390f962cbf559bce9c42e1034dba78997b2877b485d9d4ae2fcd3e757b84319879d0337785773c940af6e57d162f4606d101def01199325c8676a32e26303560271b720216d95e0013265a45b02bd2414bebda89b7b5e71e70e0000000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfffffff4, 0x60000000, 0x0, 0xc8, &(0x7f0000000000), &(0x7f0000000e00)="7bafde4b0184c4ea185845c29a1f5f019fe6e19905204cc30cdff1d16dfe91d4dcd2affa9e975239bafe5f2710ca9bc51c61daedc4df055952db983f6f55665491755bfd313f93af08a04e5d6fb5e0fbc89b0706edf916107e4158cad5400b3b2289e78f16f7ebe4a472ddb22dd626d0b2325b3396f289920045effbbef8797b57c7100b9a9bd56f471eac7a6c356b99a327a0f9b81f0ddd76023f878fea9860af16f7db9b148f1c8e75a5af8d820cc451a7f00c194539cc6d3e982f596b0e0d6998234284f1a3eb", 0x1}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) 1m12.269136404s ago: executing program 1 (id=3204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r3, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0xe) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (async) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @remote}, {0x1}, 0x8, {0x2, 0x4e21, @multicast1}, 'batadv0\x00'}) (async) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x401, 0x0, &(0x7f0000000040)) recvmsg$unix(r7, &(0x7f00000002c0)={&(0x7f00000000c0), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)=""/71, 0x47}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000240)=""/63, 0x3f}], 0x3, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x40000002) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)={0x54, r1, 0x8, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_team\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2fe0db7316d09df25ca73ecc6905590eff7f023c2f4be7cb"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) 1m8.506110036s ago: executing program 7 (id=3664): socket$packet(0x11, 0x3, 0x300) (async, rerun: 32) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (rerun: 32) unshare(0x20000400) (async) openat$cgroup(r0, &(0x7f0000000100)='syz1\x00', 0x200002, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$kcm(0x11, 0x2, 0x0) (async, rerun: 32) socket$inet6(0xa, 0x2, 0x0) (async, rerun: 32) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x19}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r1, &(0x7f0000000000), &(0x7f0000000500)=""/73}, 0x20) 1m8.274188137s ago: executing program 7 (id=3667): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000580)=ANY=[@ANYBLOB="3c02000019000100000000000000000000000000000000000000ffff00000000ac14144400000000000000000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x23c}}, 0x4000) 1m8.114724845s ago: executing program 7 (id=3669): r0 = socket$kcm(0x2, 0x2, 0x2) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a000000040000009e0000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x79, 0x11, 0xb0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000001c0)={@in6={{0xa, 0x0, 0x40000000, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}}}, 0x0, 0x0, 0x0, 0x0, "aeb81d8ee3a82d67eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f6945d296a285858a891a3b4e7bff572ef69992da867f406182d70f38773434b8349435f2ad628d62a3b45bb98872fb1900"}, 0xd8) (async) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000180)={'netdevsim0\x00', @link_local}) (async) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) sendto$phonet(r4, &(0x7f0000000040)="7cf015ae6acbcdee1a6da39837fa8bd3f31a2ce7898541b3dbe231584e063ba60145c92d8beb32748ab7429990", 0x2d, 0x24048005, &(0x7f0000000080)={0x23, 0x5, 0x7, 0x9}, 0x10) 1m7.83185352s ago: executing program 7 (id=3670): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000340)=@nameseq={0x1e, 0x1, 0x3, {0x43}}, 0x10) r2 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r2, 0x10f, 0x87, &(0x7f0000000300)={0x43, 0x3, 0x3, 0x3}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000100)={0x43, 0x0, 0x3, 0x3}, 0x10) sendmsg$tipc(r1, &(0x7f0000000280)={&(0x7f0000000040), 0x10, 0x0}, 0x0) sendmsg$tipc(r2, &(0x7f00000000c0)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x1}, 0x1}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0xc084}, 0x24000080) r3 = socket(0x10, 0x803, 0x0) sendto(r3, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) setsockopt$inet6_tcp_TCP_MD5SIG(r3, 0x6, 0xe, &(0x7f00000004c0)={@in6={{0xa, 0x4e21, 0x8, @private0, 0x7}}, 0x0, 0x0, 0x13, 0x0, "b961f951cfa417b0805f26127e628c46a467c5a9ac3dd190e81b211f0668a2f65aabe49276a60708918ec6fe43b8274b2603640f444848090b398b96cf0a6f8ed6f1ca1ce7ea6d551b505e543fe951fd"}, 0xd8) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="5700000010000100"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000300012800b00010067656e657665000020000280080001000100000014000700000000000000000000000000000000001400030067656e65766531000000000000000000"], 0x64}}, 0x2000000) 1m7.445808124s ago: executing program 7 (id=3672): r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000580)=@bpf_tracing={0x1a, 0x1e, &(0x7f0000000380)=@raw=[@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @ringbuf_output={{}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @alu={0x4, 0x0, 0x4, 0x7, 0x8, 0x80, 0xfffffffffffffffd}, @map_idx={0x18, 0x7, 0x5, 0x0, 0xa}, @map_fd={0x18, 0xb, 0x1, 0x0, r0}, @cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffb}, @jmp={0x5, 0x0, 0xd, 0xf, 0x9, 0x80, 0x10}], &(0x7f0000000040)='GPL\x00', 0x101, 0x7d, &(0x7f00000002c0)=""/125, 0x41100, 0x8, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000480)={0x4, 0x3}, 0x8, 0x10, &(0x7f00000004c0)={0x2, 0x2, 0x3, 0xfff}, 0x10, 0x1f368, 0xffffffffffffffff, 0x3, &(0x7f0000000500)=[r0, r0, r0], &(0x7f0000000540)=[{0x1, 0x4, 0x4, 0xb}, {0x0, 0x3, 0xc, 0x8}, {0x2, 0x2, 0x10, 0x7}], 0x10, 0x7a, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x18, 0x8, &(0x7f0000000c40)=ANY=[@ANYBLOB="1801000020786c2500000000002020207b1af8ff00000000bfa1000000000000af7678cb2f5007010000f8ffffffb702000008000000b7030000000060008500000006000000c603cf46cd3a36fa50cf9d4b891da26a9037914d56f19d6ceaab04ac67fd7ae9d124df61d3573b4253c940"], &(0x7f0000000680)='GPL\x00', 0x7fff, 0xbc, &(0x7f00000006c0)=""/188, 0x41100, 0x74, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000780)={0x2, 0x4}, 0x8, 0x10, &(0x7f00000007c0)={0x3, 0x0, 0x0, 0x3}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0x0, &(0x7f0000000800)=[{0x2, 0x1, 0x3, 0x3}], 0x10, 0xff, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r3, 0x0, 0xd}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/22], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a80)={{r5}, &(0x7f0000000e00), &(0x7f0000000dc0)=r2}, 0x20) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000003700010324bd700279dbdf2506"], 0x14}, 0x1, 0x0, 0x0, 0x4004004}, 0x40) syz_genetlink_get_family_id$smc(&(0x7f0000000cc0), r4) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000480)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="2e000000100081", 0x7}], 0x1}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) writev(r9, &(0x7f0000000040), 0x2) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x27, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r11, 0x0, 0xd2, &(0x7f0000000040)={@empty, @multicast2, 0x0, "ffff01e03d66a89131fda05322cb0c9c924a00", 0xfffffffc, 0xffffffff, 0x6}, 0x3c) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000a80)='mm_page_free_batched\x00', r10}, 0x18) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000004c0)={0x1b, 0x0, 0x0, 0x5bf5, 0x0, r8, 0xc199, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000006c0)={@cgroup=r7, 0x16, 0x0, 0x3, &(0x7f00000005c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x8, 0x0, &(0x7f0000000600)=[0x0, 0x0], &(0x7f0000000640)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000680)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000d40)=ANY=[@ANYRES32=r8, @ANYRES32=r6, @ANYBLOB='3\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=r6, @ANYBLOB="381e28ffdc44b1e453998971e643a8225674b746fdc38033c86bf8c13b81bb3b3cdc5dfd17aaef20951ca1b419317effb7300cde2d3e323818316427072ca157a767947c78e4f876f032cffc7fbf808d9b94b8b5561b5daeb121af", @ANYRES32=r10, @ANYBLOB, @ANYRES64=r12], 0x20) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000100)={@cgroup=r4, 0xffffffffffffffff, 0x10, 0x9, r4, @void, @value=r3, @void, @void, r12}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000c00)={0xffffffffffffffff, 0xe0, &(0x7f0000000b00)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, &(0x7f0000000940)=[0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000980)=[0x0, 0x0], &(0x7f00000009c0)=[0x0, 0x0, 0x0], 0x0, 0xcb, &(0x7f0000000a00)=[{}, {}], 0x10, 0x10, &(0x7f0000000a40), &(0x7f0000000a80), 0x8, 0xef, 0x8, 0x8, &(0x7f0000000ac0)}}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000900)={@map, r1, 0x1d, 0x2f, r2, @void, @void, @void, @value=r13, r12}, 0x20) bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x48) r14 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0xfd6d, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r14) socket$inet6_tcp(0xa, 0x1, 0x0) 1m7.252163855s ago: executing program 7 (id=3673): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000000c0)={0x2, 0x7, 0x3}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 59.302217977s ago: executing program 2 (id=2947): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c", 0x93}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r2, r7, 0x8f5, 0x100000000000000) write(r4, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000280)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000005000000000000c1928700f7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="186f7591b5c4408efac700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000000feffffb703000008000000b70400000000000085000000550000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000002c0)="ad56c408000000adf1f8b2d23292ea54c7b6ef00000000bbbcde8037a069e380f94eafc775206f4901a555be63bcb42de4520b8d697691393dfd4f7e0244e80a33fd2f564d6fb8418f17d8ecb02cb935765fd6a4861410441fdbcb9e2d4736b6f15598b36f244034457dbb2b114fe74ddd4eaac6d161cb43749d163586e997bd0eb2b4299dca132038d5bfb74d2d755cc2a0", 0x92) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newnexthop={0x24, 0x68, 0x5fb9a818fb7378e9, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x1}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="37f545b88018bc910400"/20, @ANYRES32=0x0, @ANYBLOB="00000000195000002c0012800c0001006d6163766c616e001c000280080009000000000006000200010000000800070000f0ffff140035006d6163766c616e300000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) r12 = socket$inet6(0xa, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x7) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000003c0)={0x0, 0x4, 0x5, 0xcc, 0x8}, 0x14) setsockopt$inet6_int(r12, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r12) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfffffff4, 0x60000000, 0x0, 0xc8, &(0x7f0000000000), &(0x7f0000000e00)="7bafde4b0184c4ea185845c29a1f5f019fe6e19905204cc30cdff1d16dfe91d4dcd2affa9e975239bafe5f2710ca9bc51c61daedc4df055952db983f6f55665491755bfd313f93af08a04e5d6fb5e0fbc89b0706edf916107e4158cad5400b3b2289e78f16f7ebe4a472ddb22dd626d0b2325b3396f289920045effbbef8797b57c7100b9a9bd56f471eac7a6c356b99a327a0f9b81f0ddd76023f878fea9860af16f7db9b148f1c8e75a5af8d820cc451a7f00c194539cc6d3e982f596b0e0d6998234284f1a3eb", 0x1}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) 55.430662705s ago: executing program 1 (id=3204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r3, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0xe) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (async) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @remote}, {0x1}, 0x8, {0x2, 0x4e21, @multicast1}, 'batadv0\x00'}) (async) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x401, 0x0, &(0x7f0000000040)) recvmsg$unix(r7, &(0x7f00000002c0)={&(0x7f00000000c0), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)=""/71, 0x47}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000240)=""/63, 0x3f}], 0x3, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x40000002) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)={0x54, r1, 0x8, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_team\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2fe0db7316d09df25ca73ecc6905590eff7f023c2f4be7cb"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) 51.91766038s ago: executing program 35 (id=3673): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='rpc_clnt_new\x00', r0, 0x0, 0xb9b}, 0x18) ioctl$F2FS_IOC_SEC_TRIM_FILE(0xffffffffffffffff, 0x4018f514, &(0x7f00000000c0)={0x2, 0x7, 0x3}) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 42.62731341s ago: executing program 2 (id=2947): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c", 0x93}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r2, r7, 0x8f5, 0x100000000000000) write(r4, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000280)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000005000000000000c1928700f7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="186f7591b5c4408efac700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000000feffffb703000008000000b70400000000000085000000550000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000002c0)="ad56c408000000adf1f8b2d23292ea54c7b6ef00000000bbbcde8037a069e380f94eafc775206f4901a555be63bcb42de4520b8d697691393dfd4f7e0244e80a33fd2f564d6fb8418f17d8ecb02cb935765fd6a4861410441fdbcb9e2d4736b6f15598b36f244034457dbb2b114fe74ddd4eaac6d161cb43749d163586e997bd0eb2b4299dca132038d5bfb74d2d755cc2a0", 0x92) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newnexthop={0x24, 0x68, 0x5fb9a818fb7378e9, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x1}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="37f545b88018bc910400"/20, @ANYRES32=0x0, @ANYBLOB="00000000195000002c0012800c0001006d6163766c616e001c000280080009000000000006000200010000000800070000f0ffff140035006d6163766c616e300000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) r12 = socket$inet6(0xa, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x7) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000003c0)={0x0, 0x4, 0x5, 0xcc, 0x8}, 0x14) setsockopt$inet6_int(r12, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r12) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfffffff4, 0x60000000, 0x0, 0xc8, &(0x7f0000000000), &(0x7f0000000e00)="7bafde4b0184c4ea185845c29a1f5f019fe6e19905204cc30cdff1d16dfe91d4dcd2affa9e975239bafe5f2710ca9bc51c61daedc4df055952db983f6f55665491755bfd313f93af08a04e5d6fb5e0fbc89b0706edf916107e4158cad5400b3b2289e78f16f7ebe4a472ddb22dd626d0b2325b3396f289920045effbbef8797b57c7100b9a9bd56f471eac7a6c356b99a327a0f9b81f0ddd76023f878fea9860af16f7db9b148f1c8e75a5af8d820cc451a7f00c194539cc6d3e982f596b0e0d6998234284f1a3eb", 0x1}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) 41.475355397s ago: executing program 1 (id=3204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r3, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0xe) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (async) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @remote}, {0x1}, 0x8, {0x2, 0x4e21, @multicast1}, 'batadv0\x00'}) (async) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x401, 0x0, &(0x7f0000000040)) recvmsg$unix(r7, &(0x7f00000002c0)={&(0x7f00000000c0), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)=""/71, 0x47}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000240)=""/63, 0x3f}], 0x3, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x40000002) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)={0x54, r1, 0x8, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_team\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2fe0db7316d09df25ca73ecc6905590eff7f023c2f4be7cb"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) 27.662800461s ago: executing program 2 (id=2947): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c", 0x93}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r2, r7, 0x8f5, 0x100000000000000) write(r4, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000280)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000005000000000000c1928700f7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="186f7591b5c4408efac700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000000feffffb703000008000000b70400000000000085000000550000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000002c0)="ad56c408000000adf1f8b2d23292ea54c7b6ef00000000bbbcde8037a069e380f94eafc775206f4901a555be63bcb42de4520b8d697691393dfd4f7e0244e80a33fd2f564d6fb8418f17d8ecb02cb935765fd6a4861410441fdbcb9e2d4736b6f15598b36f244034457dbb2b114fe74ddd4eaac6d161cb43749d163586e997bd0eb2b4299dca132038d5bfb74d2d755cc2a0", 0x92) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newnexthop={0x24, 0x68, 0x5fb9a818fb7378e9, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x1}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="37f545b88018bc910400"/20, @ANYRES32=0x0, @ANYBLOB="00000000195000002c0012800c0001006d6163766c616e001c000280080009000000000006000200010000000800070000f0ffff140035006d6163766c616e300000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) r12 = socket$inet6(0xa, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x7) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000003c0)={0x0, 0x4, 0x5, 0xcc, 0x8}, 0x14) setsockopt$inet6_int(r12, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r12) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfffffff4, 0x60000000, 0x0, 0xc8, &(0x7f0000000000), &(0x7f0000000e00)="7bafde4b0184c4ea185845c29a1f5f019fe6e19905204cc30cdff1d16dfe91d4dcd2affa9e975239bafe5f2710ca9bc51c61daedc4df055952db983f6f55665491755bfd313f93af08a04e5d6fb5e0fbc89b0706edf916107e4158cad5400b3b2289e78f16f7ebe4a472ddb22dd626d0b2325b3396f289920045effbbef8797b57c7100b9a9bd56f471eac7a6c356b99a327a0f9b81f0ddd76023f878fea9860af16f7db9b148f1c8e75a5af8d820cc451a7f00c194539cc6d3e982f596b0e0d6998234284f1a3eb", 0x1}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) 26.753667225s ago: executing program 1 (id=3204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r3, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0xe) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (async) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @remote}, {0x1}, 0x8, {0x2, 0x4e21, @multicast1}, 'batadv0\x00'}) (async) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x401, 0x0, &(0x7f0000000040)) recvmsg$unix(r7, &(0x7f00000002c0)={&(0x7f00000000c0), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)=""/71, 0x47}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000240)=""/63, 0x3f}], 0x3, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x40000002) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)={0x54, r1, 0x8, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_team\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2fe0db7316d09df25ca73ecc6905590eff7f023c2f4be7cb"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) 22.185390965s ago: executing program 4 (id=3868): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x405, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GRE_FWMARK={0x8}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) r1 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000100)={0xffffffffffffffff}) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x89e2, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) 21.888108908s ago: executing program 4 (id=3871): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) close(r0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f00000001c0)={0x0, 0x2, 0x70}, 0xc) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000005c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000540)={0x40, r4, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xb}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0xeb}, @NL802154_ATTR_SEC_OUT_LEVEL={0x8, 0x2a, 0x6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x40}, 0x1, 0x0, 0x0, 0xc4}, 0x8800) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000240)=ANY=[@ANYBLOB="48000000100005ff00000000000000000000004a", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5, @ANYBLOB="0a0073b08800000000000000"], 0x48}, 0x1, 0x0, 0x0, 0x45844}, 0x0) 21.600782723s ago: executing program 4 (id=3872): r0 = socket$caif_seqpacket(0x25, 0x5, 0x4) connect$caif(r0, &(0x7f0000000000)=@rfm={0x25, 0x6, "c36b43fa333f722ac81067b337d49622"}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x54, r2, 0x200, 0x70bd2c, 0x25dfdbfd, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x2}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0xadc}, @BATADV_ATTR_ISOLATION_MARK={0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x80}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x8000}, 0x40) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000240)={@empty, @multicast2, 0x0}, &(0x7f0000000280)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000300)={'syztnl0\x00', &(0x7f00000002c0)={'erspan0\x00', 0x0, 0x1, 0x8, 0x79b, 0x4, {{0x6, 0x4, 0x3, 0x2, 0x18, 0x65, 0x0, 0xb, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x3f}, @multicast2, {[@noop, @end]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000003c0)={'syztnl2\x00', &(0x7f0000000340)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x80, 0x2, 0x40, @local, @ipv4={'\x00', '\xff\xff', @local}, 0x7, 0x10, 0x4, 0x3}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000480)={'syztnl1\x00', &(0x7f0000000400)={'ip6gre0\x00', 0x0, 0x29, 0x70, 0x40, 0xcde6, 0x3, @ipv4={'\x00', '\xff\xff', @empty}, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x700, 0x80, 0x6e7b}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000004c0)={@multicast2, @broadcast, 0x0}, &(0x7f0000000500)=0xc) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(r1, &(0x7f0000000780)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000740)={&(0x7f0000000540)={0x1d0, r3, 0x800, 0x70bd26, 0x9, {}, [@HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x8c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vlan0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team_slave_0\x00'}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan0\x00'}]}, @HEADER={0x80, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x1d0}, 0x1, 0x0, 0x0, 0x80}, 0x804) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r0, &(0x7f00000007c0)={0x40000010}) r9 = socket$nl_route(0x10, 0x3, 0x0) socket$alg(0x26, 0x5, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r10, &(0x7f00000008c0)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000880)={&(0x7f0000000840)={0x30, 0xc, 0x6, 0x3, 0x0, 0x0, {0x1, 0x0, 0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x30}}, 0x4000) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x0, 0x487, &(0x7f0000000900), &(0x7f0000000940)=0x30) r11 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_opts(r11, 0x0, 0xd, &(0x7f0000000980), 0x0) sendto$inet(r11, &(0x7f00000009c0)="0dae2ac11a04a91be29874a16bcd673587d31d7783642821d6f97b90d1cc69d25655ca2bcfd21c2e68d07fdc201607480ca465568b7840cbf036ea0e6904286411749b512416c6feab8ae963cf6c7b55056eecd6ae6f9916c44b36132bed41c50744acbaaa9e068f178cbd1c607fc55d6253ca51260cdeba3aaf42d3307ed85615a46794eab0ad5843162152f1d3fb08991245e05b4a470507dc79b5bd58b9b10afbe8d93e9e10b5fc908739a96cdba615c942358d4f1da19169bc02a3ff483b521a4b0341", 0xc5, 0x44000, &(0x7f0000000ac0)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_EGRESS_PRIORITY_CMD(r9, 0x8983, &(0x7f0000000b00)={0x3, 'batadv_slave_0\x00', {0x4}, 0x3}) listen(0xffffffffffffffff, 0x4) syz_emit_ethernet(0x22, &(0x7f0000000b40)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @local, @val={@void, {0x8100, 0x1, 0x1}}, {@can={0xc, {{0x2, 0x1}, 0x7, 0x2, 0x0, 0x0, "db51734d9d71dd7f"}}}}, &(0x7f0000000b80)={0x1, 0x1, [0x7fe, 0x641, 0xb45, 0x55]}) sendmsg$tipc(r10, &(0x7f0000000e00)={&(0x7f0000000bc0)=@name={0x1e, 0x2, 0x2, {{0x42, 0x1}, 0x4}}, 0x10, &(0x7f0000000dc0)=[{&(0x7f0000000c00)="960bc32d799103d49d06b8cf0da6dbb9054073c3ca817cbde0e70899a0e79e73ce8e4d6e0d5c934a", 0x28}, {&(0x7f0000000c40)="c40225f6752245e05247f0279a0bd4c2f8618665c66e49ad521703e8803e17c4d962eccb084653cb35c681d38ef3be974d5b4320481824f30fcaa7305b5c28abf91359e5bbbcff628f68da7cb96d16c340345be6057ccc692a83110d686cadb870eb5a689fba1e6f493bccc5346a53f0a9acfe455461dbf7ad3b71f660", 0x7d}, {&(0x7f0000000cc0)="af82ef8a7b3468a21af862ac68c3359d7923a71238284f0dbba35b764e858a21632c1b98dc6b05e53e9b504e0eb137506429d534ca191e0d875ed9c7ced9f202491d0cec67e06713a940b63814e5fd07709f5f9833cf50a81b51b8c707657ca5ad31950137e241aacabc911ec0f1fe86", 0x70}, {&(0x7f0000000d40)="f9a60b2c4d517d0531be901166e1efb68b0508b83efbc65072b59dd77578cd9c383c567d9028584ecca04fc82c7ca96b824e9face7bd0713936fbae783a07f78b60d3dd4a3e9d658ea8f9197bddf89ad5d6b4c5a8ea97aa46353fc7360bd0d8c298eb97d9a921a4d85e0bf50069d24db", 0x70}], 0x4, 0x0, 0x0, 0x44000}, 0x44894) r12 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r12, &(0x7f0000000f00)={&(0x7f0000000e40)={0x24, @short={0x2, 0x3, 0xaaa3}}, 0x14, &(0x7f0000000ec0)={&(0x7f0000000e80)="bcfdc7", 0x3}, 0x1, 0x0, 0x0, 0x4}, 0x20004804) socket(0x26, 0x5, 0x4) r13 = openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000f40)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r13, &(0x7f0000000fc0), 0x12) 20.498698683s ago: executing program 4 (id=3876): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff}) ioctl$int_in(r2, 0x5421, &(0x7f0000000140)=0xbc8) (async, rerun: 32) readv(r2, &(0x7f0000001700)=[{&(0x7f0000000300)=""/173, 0xad}, {&(0x7f00000000c0)=""/86, 0x56}, {&(0x7f00000003c0)=""/138, 0x8a}, {&(0x7f0000000480)=""/4096, 0x1000}, {&(0x7f0000001480)=""/230, 0xe6}, {&(0x7f0000001580)=""/207, 0xcf}, {&(0x7f0000001680)=""/109, 0x6d}], 0x7) (async, rerun: 32) readv(r2, &(0x7f00000002c0)=[{&(0x7f0000000180)=""/68, 0x44}], 0x1) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_CHANNELS_GET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)={0x20, r1, 0x305, 0x70bd25, 0x25dfdbfd, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x0) 18.286723609s ago: executing program 4 (id=3881): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000280)={@loopback, 0x800, 0x0, 0x103, 0x1, 0x0, 0x3}, 0x20) (async) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r1, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00', 0x800, 0x0, 0x103, 0x1}, 0x20) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r1}) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000ac0)={'wlan0\x00', 0x0}) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000cc0)=@delchain={0xfc, 0x65, 0x2, 0x70bd2d, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x2, 0xa}, {0x0, 0x1}, {0x0, 0xb}}, [@TCA_RATE={0x6, 0x5, {0x4, 0x28}}, @filter_kind_options=@f_flower={{0xb}, {0xa0, 0x2, [@TCA_FLOWER_KEY_ETH_SRC={0xa}, @TCA_FLOWER_KEY_ENC_UDP_DST_PORT={0x6}, @TCA_FLOWER_KEY_VLAN_PRIO={0x5, 0x18, 0x5}, @TCA_FLOWER_KEY_MPLS_OPTS={0x8, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0x4}}, @TCA_FLOWER_KEY_IP_TTL_MASK={0x5, 0x4c, 0x1}, @TCA_FLOWER_ACT={0x68, 0x3, [@m_skbmod={0x64, 0x1, 0x0, 0x0, {{0xb}, {0x38, 0x2, 0x0, 0x1, [@TCA_SKBMOD_PARMS={0x24, 0x2, {{0x18, 0xc, 0x8, 0xffff7f57, 0x80000000}, 0xe}}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0x6}, @TCA_SKBMOD_ETYPE={0x6, 0x5, 0xfff9}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x3, 0x1}}}}]}, @TCA_FLOWER_KEY_ENC_IP_TOS={0x5, 0x50, 0x2}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x14, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x1}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0xffe0, 0xffe0}}]}}]}, 0xfc}, 0x1, 0x0, 0x0, 0x81}, 0x0) (async) r5 = socket(0x10, 0x803, 0x0) sendto(r5, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r5, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r6 = syz_genetlink_get_family_id$SEG6(&(0x7f0000000340), r2) sendmsg$SEG6_CMD_GET_TUNSRC(r2, &(0x7f0000000a40)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000540)={0x6c, r6, 0x200, 0x70bd28, 0x25dfdbfb, {}, [@SEG6_ATTR_DSTLEN={0x8, 0x2, 0xffffffff}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x9}, @SEG6_ATTR_ALGID={0x5, 0x6, 0x6}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0xfff}, @SEG6_ATTR_HMACKEYID={0x8, 0x3, 0x101}, @SEG6_ATTR_SECRETLEN={0x5, 0x5, 0x1}, @SEG6_ATTR_SECRET={0x10, 0x4, [0x0, 0xf, 0x8]}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x80000000}, @SEG6_ATTR_DSTLEN={0x8, 0x2, 0x8001}]}, 0x6c}, 0x1, 0x0, 0x0, 0x40}, 0x40005) r7 = socket$nl_generic(0x10, 0x3, 0x10) (async) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000cc0), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_KEY(r7, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x1c, r8, 0x1, 0x70bd2a, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x4) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r2, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000080)={&(0x7f0000000640)={0x330, r8, 0x4, 0x70bd25, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0x60, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9d94cd2f18c461e4"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "33a120c658c8a1b1"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "84453dde16bf2c69"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="0c9e3418ebadbc93eb52eab6b01f0a91"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="2e5a34744692d599b8904051b90924d6b2b8eecf48d16878b4c117773e4b8555"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="d5c01a659951bb54f744bdac9d1ead34"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7f}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a75a35d6c7892571"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}]}, @NL80211_ATTR_REKEY_DATA={0x94, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="750d67ad5c002dc3794d062990e20d4ff7582200712646efeb62678a2ff2fca1"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x40}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="be591c20e883c749b4fa8b1cec39a0ee6a898ad342edfa54"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "79bc729df4009b37"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="951ed614c1d7e2e0a4667eafa8f7ddbcb0cad7f65963bc2f"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "dd305027e462a270"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x4}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "3707ae5727a2b0cf"}]}, @NL80211_ATTR_REKEY_DATA={0x48, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="6c8c69fcbac13468997f106fa800"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6e5e38192e3897f58d6e51289f70b068f7fd656cf27e5432893c4db5ab9dc310"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9f041f8a3c0b9a35"}]}, @NL80211_ATTR_REKEY_DATA={0x34, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9ffe1e2f5d008a97"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "21bac341efa5ae58"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "23c9c73a58d99a59"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "09f02df4e6f53bea"}]}, @NL80211_ATTR_REKEY_DATA={0x98, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="6bca82614ec9030fb6836cdafef5824a"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "f1c0600ba6c61f4f"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="a114b66f8970db3ad0e3c2bf1f12001f523a0569a5bb68a4e40210acf7dde609"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="eeeb7ec664068fa07ed296f3f3afc79f03c5ec552a25a9dba6689c4dae084d63"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="afeea1423c9f2e89c2138ad5dddcc6281867667b2c7d41f4a37e3a6a8e1dae72"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x887}]}, @NL80211_ATTR_REKEY_DATA={0x6c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "ad57451cae3fea4d"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="dcf515bf0bba441b486fa5472efbfc95"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x5}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "a5bb659901090b48"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x2}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x7}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="965468989d95205c00a566d0c89d3c0cada3824f8c0851ae"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x23df}]}, @NL80211_ATTR_REKEY_DATA={0x4c, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "1616a82d15901b0a"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="1243580953a45c456a431b789f1fcfd9948c02a35b2ccddf"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "bdaf3db65975089a"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="d0e2ea18bf388a4a2bc0e1be3a10ca14"}]}, @NL80211_ATTR_REKEY_DATA={0x28, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="6d50ea347cea3a8cea802e4099f60e0b0404ed3bca1f24f3a51ecc308e3736f9"}]}]}, 0x330}, 0x1, 0x0, 0x0, 0x5}, 0x8040) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000005c0)=@newlink={0x44, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, 0x0, 0x800, 0x55007}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_SNOOPING={0x5}, @IFLA_BR_MCAST_QUERY_USE_IFADDR={0x5, 0x18, 0x1}]}}}]}, 0x44}, 0x1, 0x0, 0x0, 0x800}, 0x0) 15.688144767s ago: executing program 4 (id=3883): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c001a"], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e24, 0x3ff, @remote, 0x8}}, 0x0, 0x9}, 0x90) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r7, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}], 0x2c) 11.649909407s ago: executing program 2 (id=2947): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r5, 0x0, r7, 0x0, 0xf3a, 0x0) write(r3, &(0x7f0000000240)="94", 0x1) vmsplice(r7, &(0x7f0000000380)=[{&(0x7f0000013580)="0dd2e7c8926dc6acd0ae6c178054e95986faff9544de5fc4c30adf404da41181a77466ac5075905ea5f50134fdd517a957fe2ee59b61f9fe8d7aabe595ea23de2723e437af0423a56686a4c2d957be1a0ab922fbbd3cb1d8c6ab0d58440a327c8eb05d445b4ac5f20abe449e4084f8b996268d0564f67980d3ed3479e0edfe5cec7b4f89bface391c9c4c58ad123b91c33173c", 0x93}, {&(0x7f0000013680)="c578381bf5113dad8319d9ea5294285ae9a90384ce23866477bef9de4399237d8b3522c9c194e71edaf3332a2f169682f9d8fa271683d4d441b710409e506333e0c3b64e52e8720734b6787f4a84f5bebb046649c6c697d978affd349031b2cd874c7a8961a586a9f2d62f945e7a5bf2f5f7a31684c0503704881d2578a2a98ac3ef4e4a4b0dcdb70db735d5c1652eed3848b2dd4131bb0eb7cfadfaf5", 0x9d}], 0x2, 0x0) tee(r2, r7, 0x8f5, 0x100000000000000) write(r4, 0x0, 0x0) ioctl$sock_SIOCGSKNS(r2, 0x894c, &(0x7f0000000280)) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB="000000000005000000000000c1928700f7", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="186f7591b5c4408efac700"/20, @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702000000feffffb703000008000000b70400000000000085000000550000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r9 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r9, 0x117, 0x1, &(0x7f00000002c0)="ad56c408000000adf1f8b2d23292ea54c7b6ef00000000bbbcde8037a069e380f94eafc775206f4901a555be63bcb42de4520b8d697691393dfd4f7e0244e80a33fd2f564d6fb8418f17d8ecb02cb935765fd6a4861410441fdbcb9e2d4736b6f15598b36f244034457dbb2b114fe74ddd4eaac6d161cb43749d163586e997bd0eb2b4299dca132038d5bfb74d2d755cc2a0", 0x92) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@ipv6_newnexthop={0x24, 0x68, 0x5fb9a818fb7378e9, 0x70bd26, 0x25dfdbfc, {0xa, 0x0, 0x1}, [@NHA_FDB={0x4}, @NHA_OIF={0x8}]}, 0x24}}, 0x4000000) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000700000e0000000000000000000a20000000000a03000000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a01080000000000000000010000000900020073797a32000000003400038030000080080003400000000224000b80200001800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30"], 0xe4}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB="37f545b88018bc910400"/20, @ANYRES32=0x0, @ANYBLOB="00000000195000002c0012800c0001006d6163766c616e001c000280080009000000000006000200010000000800070000f0ffff140035006d6163766c616e300000000000000000"], 0x60}, 0x1, 0x0, 0x0, 0x4}, 0x0) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xb, &(0x7f0000000f80)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095", @ANYRES32=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x2, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r11}, 0x10) r12 = socket$inet6(0xa, 0x3, 0xff) socket$netlink(0x10, 0x3, 0x7) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f00000003c0)={0x0, 0x4, 0x5, 0xcc, 0x8}, 0x14) setsockopt$inet6_int(r12, 0x29, 0x16, &(0x7f00000001c0)=0x7f, 0x4) close(r12) r13 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r13, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfffffff4, 0x60000000, 0x0, 0xc8, &(0x7f0000000000), &(0x7f0000000e00)="7bafde4b0184c4ea185845c29a1f5f019fe6e19905204cc30cdff1d16dfe91d4dcd2affa9e975239bafe5f2710ca9bc51c61daedc4df055952db983f6f55665491755bfd313f93af08a04e5d6fb5e0fbc89b0706edf916107e4158cad5400b3b2289e78f16f7ebe4a472ddb22dd626d0b2325b3396f289920045effbbef8797b57c7100b9a9bd56f471eac7a6c356b99a327a0f9b81f0ddd76023f878fea9860af16f7db9b148f1c8e75a5af8d820cc451a7f00c194539cc6d3e982f596b0e0d6998234284f1a3eb", 0x1}, 0x50) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r6) 10.369184103s ago: executing program 1 (id=3204): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000dc0)={&(0x7f0000000c80)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@const]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xd}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_SET_DATA_TYPE={0x8}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000080)={r3, 0x20, &(0x7f0000000140)={0xfffffffffffffffd, 0x0, 0x0, 0xfffffffffffffffe}}, 0x10) (async) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) write$bt_hci(r2, &(0x7f0000000080)=ANY=[], 0xe) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) r6 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r6, 0x0, 0x32, &(0x7f0000000f00)=0x1000000, 0x4) (async) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000000)={{0x2, 0x4e24, @remote}, {0x1}, 0x8, {0x2, 0x4e21, @multicast1}, 'batadv0\x00'}) (async) r7 = socket(0x15, 0x5, 0x0) getsockopt(r7, 0x200000000114, 0x401, 0x0, &(0x7f0000000040)) recvmsg$unix(r7, &(0x7f00000002c0)={&(0x7f00000000c0), 0x6e, &(0x7f0000000280)=[{&(0x7f0000000180)=""/71, 0x47}, {&(0x7f0000000380)=""/203, 0xcb}, {&(0x7f0000000240)=""/63, 0x3f}], 0x3, &(0x7f0000000500)=[@cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x28, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xe8}, 0x40000002) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000600)={0x54, r1, 0x8, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'veth1_to_team\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "2fe0db7316d09df25ca73ecc6905590eff7f023c2f4be7cb"}]]}, 0x54}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) 4.162249617s ago: executing program 8 (id=3921): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1f, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18}, 0x14010016) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000540)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) accept4(r0, 0x0, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f0000001540)={0x1f, 0x19, &(0x7f0000000140)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1f, 0x0, 0x0, 0x0, 0x81}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8020}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xb3}}]}, &(0x7f00000000c0)='GPL\x00', 0x3, 0x0, 0x0, 0x41100, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000000)={r5}, 0xc) (async) sendmsg$alg(r1, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=[@assoc={0x18, 0x117, 0x4, 0x2}], 0x18}, 0x14010016) (async) syz_genetlink_get_family_id$ipvs(&(0x7f00000000c0), r1) (async) 2.335197024s ago: executing program 6 (id=3926): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d80000001c0081064e81f782db44b9040a1d08040600000000f309a1180002000607002603600e12080b0f0000810401a8001605200001400200000803604e0cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4ee0000001fb791643a5ee422fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd400d65afd67580ae4edef5d2defd5ccae8d3fb7c27a1059ae31c6", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5, 0x2d, 0x1}, @IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0x1}]}}}]}, 0x44}, 0x1, 0xba01, 0x0, 0x4004001}, 0x0) 2.332183615s ago: executing program 8 (id=3927): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r0, &(0x7f0000000240)={0x0, 0x10, &(0x7f0000000200)={&(0x7f0000000840)={0x18, r1, 0x1, 0x4, 0x80000, {}, [@ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x2400c035}, 0x40) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000500)={&(0x7f0000000540)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000400000002000000000000110400000000000000000000000000000200000000020000000000000602000000020000000000000e0300000000000000000061"], 0x0, 0x54, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) unshare(0x6020400) socket$packet(0x11, 0x3, 0x300) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x2}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=@getchain={0x24, 0x66, 0x903, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r5, {0xe, 0x7}, {0x1, 0xfff1}, {0xa}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r6, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r6, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r6, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r6, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) shutdown(r6, 0x1) ppoll(&(0x7f0000000000)=[{r6, 0x4}], 0x1, 0x0, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="00000000c278fb92b113196a3f7d10bdefeb6da051d06a83a135cc9ea5515b151003000000000000007ac8a94bc24e346387d8b2b75dde4cf14b69e463126ca5f7b2", @ANYRES32=0x0, @ANYBLOB="00000000000000004c0012800c0001006d6163766c616e003c00028008000100100000001c0005800a000400aaaaaaaaaaaa00000a000400aaaaaaaaaaaa000008000300030000000a000400aaaaaaaaaabb000008000500", @ANYRES32=r9], 0x74}, 0x1, 0x0, 0x0, 0x20000004}, 0x0) 2.054319556s ago: executing program 6 (id=3928): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r1) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r1) recvmmsg(r1, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000001c40)=""/4096, 0x1000}, {&(0x7f0000002c40)=""/186, 0xba}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)=""/193, 0xc1}, {&(0x7f0000000540)=""/237, 0xed}, {&(0x7f0000000980)=""/51, 0x33}, {&(0x7f0000000440)=""/65, 0x41}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/231, 0xe7}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x22, 0x0) getsockopt$bt_hci(r0, 0x0, 0x2, &(0x7f0000000000)=""/1, &(0x7f0000001840)=0x1) 1.841957363s ago: executing program 8 (id=3929): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'ipvs\x00'}, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x1c, 0x2d, 0x9, 0x70bd27, 0x25dfdbfe, {0x5}, [@typed={0x8, 0xa, 0x0, 0x0, @uid}]}, 0x1c}}, 0x20000086) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000000)=ANY=[], 0x114}], 0x1}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r4, 0x0) r5 = socket$rds(0x15, 0x5, 0x0) bind$rds(r5, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r5, &(0x7f0000001600)={&(0x7f0000000400)={0x2, 0x4e21, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{0x0, 0x1000000}, {0x0}, &(0x7f0000000500)=[{&(0x7f0000000100)=""/44, 0x2c}, {&(0x7f0000000440)=""/88, 0x58}, {&(0x7f0000000800)=""/202, 0xca}, {0x0}], 0x4, 0x30, 0x4}}], 0x48, 0x14}, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x8, 0x3032, 0xffffffffffffffff, 0x54099000) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r6, 0x0) close(r2) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=@newlink={0x34, 0x10, 0x401, 0x8000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x4, 0x2, 0x0, 0x1, @void}}}]}, 0x34}}, 0x0) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f0000000180)=[@in6={0xa, 0x4e21, 0x8, @mcast2, 0x7}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r6, 0x84, 0x1d, &(0x7f00000001c0), &(0x7f0000000140)=0x4) syz_emit_ethernet(0x66, &(0x7f0000000300)=ANY=[@ANYBLOB="bbbbbbbbbbbb6076b5cad4f686dd6075e70000303a002001000000000000000000f5ffffff00ff020000000000000000000000000001040090780000000060a3579e00002b00ff01000000660109de7ffba9100000000000000000000001fc010000000000000000000000000001"], 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000280)={0x500, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="0203000910000000010000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000000000200010000000000000007"], 0x80}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000c40)=@filter={'filter\x00', 0x4, 0x4, 0x418, 0xffffffff, 0x140, 0x140, 0x258, 0xfeffffff, 0xffffffff, 0x348, 0x348, 0x348, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@empty, @mcast1, [0xff, 0xff, 0xff, 0xff000000], [0xffffff00, 0xff, 0xff, 0xffffff00], 'macvtap0\x00', 'dvmrp0\x00', {}, {}, 0x3c, 0x6, 0x4, 0x44}, 0x2f2, 0x118, 0x140, 0x0, {}, [@common=@hl={{0x28}, {0x1, 0x9}}, @common=@hbh={{0x48}, {0x400, 0x3, 0x1, [0x7f, 0x6, 0xd5, 0x9, 0x8, 0x3, 0x3, 0x3, 0x0, 0x0, 0xf000, 0x5, 0x3, 0x9, 0xfffd, 0xc], 0xe}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, [0x0, 0xff000000], [], 'wg2\x00', 'batadv_slave_1\x00', {}, {}, 0x3b, 0x4}, 0x0, 0xf0, 0x118, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0xfffa, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2]}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@empty, @ipv4={'\x00', '\xff\xff', @remote}, [], [0x0, 0xff], 'ip6tnl0\x00', 'dvmrp0\x00', {}, {}, 0x0, 0x0, 0x0, 0x40}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@empty, 'pim6reg1\x00', {0x3}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x478) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x21, 0xc, 0x42, 0x40, 0xc0, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x20000000, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080), &(0x7f0000000080), 0x1003, r9}, 0x38) 1.77586528s ago: executing program 6 (id=3930): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x19, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x24}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) pipe(&(0x7f00000000c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x6, 0xc, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000a80000850000000f000000180108002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000003900000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x4, '\x00', 0x0, @xdp=0x25, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x57, @void, @value}, 0x94) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r1, 0x0, 0xc8, &(0x7f0000003d40), 0x4) setsockopt$MRT_ADD_VIF(r1, 0x0, 0xca, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_addr=@local, @dev}, 0x10) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_mreq(r2, 0x0, 0x23, &(0x7f0000000000)={@multicast1=0xe0000300, @local}, 0x8) syz_emit_ethernet(0x3e, &(0x7f0000000040)={@local, @remote, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x20, 0xfc, 0x2, 0x0, @rand_addr=0x1c, @multicast1=0xe0000300}, @dest_unreach={0x3, 0x6, 0x0, 0x0, 0xfa, 0x9, {0x5, 0x4, 0x0, 0x3d, 0xfff6, 0x65, 0x5, 0x1, 0x4, 0x3, @private=0xa010102, @local}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000002c00)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000840)=""/230, 0xe6}, {&(0x7f0000002e00)=""/4121, 0x1019}, {&(0x7f00000006c0)=""/229, 0xe5}], 0x4}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x2}, {{0x0, 0x0, 0x0}, 0x9}, {{0x0, 0x2, &(0x7f0000001a80)=[{&(0x7f0000001880)=""/120, 0x78}, {&(0x7f0000001900)=""/229, 0xe5}, {&(0x7f0000005080)=""/4096, 0x1000}, {&(0x7f0000006080)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/81, 0x51}], 0x5}, 0xb0}, {{0x0, 0x0, 0x0}, 0x2}], 0x8, 0x20, 0x0) 1.695048349s ago: executing program 8 (id=3931): socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x80002, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_LOOPBACK(r2, 0x65, 0x3, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$ETHTOOL_MSG_WOL_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)={0x34, r1, 0x1, 0x0, 0x0, {0x1b}, [@HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}]}, 0x34}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010e7010000000000000000000000000a20000000000a03000000000000000000070000000c00044000000000000000021c000000090a010400000000000000000700"], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x11, 0x3, &(0x7f0000000240)=ANY=[@ANYBLOB="c3aa00020000000071101a00000000009500000031689feb392f9f58125dd17d013cce02fda1cc2a760fa85b797f7dccb37fd97f2c837aeb6d31d4e7f6b009c2"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f00000008c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000880)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x0, &(0x7f0000000640), 0x0, 0x10, &(0x7f00000002c0), &(0x7f0000000580), 0x8, 0x0, 0x8, 0x8, &(0x7f0000000700)}}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={0x0}, 0x1, 0x0, 0x0, 0x10}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe8c, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r10 = socket(0x10, 0x803, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, 0x0) sendmsg$nl_route_sched(r11, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56741, 0x1, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x0, 0xf}, {0xffff, 0x19}, {0x3}}, [@TCA_INGRESS_BLOCK={0x8}]}, 0x2c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00'}, 0x10) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1503}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r9}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x44}, 0x1, 0x0, 0x0, 0x4001}, 0x0) sendmsg$IPVS_CMD_GET_DAEMON(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r7, 0xb0b}, 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r6) r12 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000340)="5c00000013006bcd9e3fe3dc4e48aa31086b8703140000001f03000000000000040014000d000a000d0000009ee517d34460bc08eab556a705251e6182949a3651f60a84c9f5d1938837e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x0) 1.194375977s ago: executing program 6 (id=3932): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x3c1, 0x3, 0x3b8, 0x1d8, 0x12, 0x60d, 0x0, 0x202, 0x2e8, 0x2e8, 0x2e8, 0x2e8, 0x2c0, 0x4, 0x0, {[{{@ipv6={@private1, @remote, [], [], 'tunl0\x00', 'macsec0\x00'}, 0x0, 0x190, 0x1d8, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'kmp\x00', "000000165a8c2e0617ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f672225d6147864fa03182f5cf11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac05a602061c96baebc989f1f34a214e6726401fe4b124e0f7323a587d2a1fcf07000000eca0a7b66c60c527bac2b5", 0x7, 0x2}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x0, 0xd0, 0x110, 0x0, {}, [@common=@hl={{0x28}}]}, @common=@unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x16, 0xe, {0x8}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1}], 0x1, 0x0) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000b40)=""/21, 0x15}], 0x1}, 0x0) getsockopt$netrom_NETROM_T2(r2, 0x103, 0x2, &(0x7f0000000080)=0x5, &(0x7f0000000180)=0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x5, 0x5, &(0x7f0000000580)=ANY=[@ANYRES8], 0x0, 0x5b4230ff, 0x0, 0x0, 0x41100, 0x2a, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0xf739, @void, @value}, 0x94) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r5, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r4, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x34, 0x2, 0x3, 0x301, 0x0, 0x0, {}, [@NFQA_CFG_QUEUE_MAXLEN={0x8, 0x3, 0x1, 0x0, 0x9}, @NFQA_CFG_MASK={0x8, 0x4, 0x1, 0x0, 0x22}, @NFQA_CFG_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFQA_CFG_CMD={0x8, 0x1, {0x1, 0x0, 0x29}}]}, 0x34}}, 0x0) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000040)={'gre0\x00', @link_local}) shutdown(r6, 0x1) r7 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r7, &(0x7f0000000040)={0xa, 0x4e20, 0x0, @empty, 0xc7ec}, 0x1c) r8 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="581b0800", @ANYRES16, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) sendmsg(r7, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) 1.18966165s ago: executing program 8 (id=3933): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0x9}, {0xffff, 0xc}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) socket(0x10, 0x2, 0x0) r0 = socket(0x2a, 0x2, 0x0) socket(0x11, 0x800000003, 0x0) openat$cgroup_type(0xffffffffffffffff, 0x0, 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x19, 0x4, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x400000}, [@call={0x85, 0x0, 0x0, 0x6c}]}, &(0x7f0000000040)='GPL\x00', 0x1, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) unshare(0x2020000) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r2 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r2, 0x400448c8, &(0x7f0000000340)={r0, r1, 0x8, 0x0, 0x0, 0x2, 0x11, 0x15be, 0xfbff, 0x40, 0x0, 0x4e, 'syz0\x00'}) shutdown(r1, 0x0) write(r1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x275a, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000080), 0x4) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000180)=@ccm_128={{0x304}, "4ae3ee958efe513b", "883fd30decb536a37c4e229c1e93db27", "be5da84e", "7e850a84e9599672"}, 0x28) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f0000000040), 0x4) recvmmsg(r3, &(0x7f0000000b80)=[{{0x0, 0x0, 0x0}, 0xb00}], 0x1, 0x10020, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000580)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000600)={0x2, 0x4, 0x8, 0x1, 0x80, r4, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x3, 0x3, 0x0, @void, @value, @void, @value}, 0x50) socket$inet6(0xa, 0x1, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x800448f0, &(0x7f0000000540)={0x0, 0x0, "a23f3b", 0x23, 0x7}) 947.040326ms ago: executing program 6 (id=3934): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000140), 0x4) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$FICLONERANGE(r2, 0x4020940d, &(0x7f0000005640)={{}, 0x5, 0x0, 0xfffffffffffffff2}) r3 = accept(r0, 0x0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0x4, 0x6, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r4}, 0x38) sendmsg$AUDIT_USER_AVC(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=ANY=[], 0x454}}, 0x0) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000005c0)=ANY=[], 0x20}}, 0x40000) r5 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_VM_SOCKETS_BUFFER_MIN_SIZE(r5, 0x28, 0x1, &(0x7f0000000380)=0xffffffff00000041, 0x8) bind$vsock_stream(r5, &(0x7f0000000940), 0x10) listen(r5, 0x0) r6 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r6, &(0x7f00000000c0)={0x28, 0x0, 0x0, @local}, 0x10) writev(0xffffffffffffffff, &(0x7f0000000200), 0x4b) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(r6, 0x28, 0x6, &(0x7f0000000100), 0x10) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x10, &(0x7f0000000000)=@framed={{0x18, 0x8}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r7}, {}, {}, {0x7, 0x0, 0xb, 0x7}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xfffffffe}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r8, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x4e21, 0xffffff00, @local, 0x13}, 0x1c) setsockopt$inet6_int(r8, 0x29, 0x3c, 0x0, 0x0) recvfrom(r1, &(0x7f0000000180)=""/60, 0xfffffffffffffecb, 0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) 202.498447ms ago: executing program 8 (id=3935): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r1, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000180)=[{0x50, 0x0, 0x5, 0x2}, {0x6, 0x0, 0x2, 0x6}]}, 0x10) (async) syz_emit_ethernet(0x0, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x24}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r4 = socket$packet(0x11, 0x3, 0x300) (async) bind$packet(0xffffffffffffffff, &(0x7f0000000d00)={0x11, 0x0, r3, 0x1, 0x7f, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x31}}, 0x14) (async) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000040)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fdd411efc40800040000000000000000", 0x39}], 0x1) (async) writev(r0, &(0x7f0000000080)=[{&(0x7f00000000c0)="390000e61b7f03020072fde1c3e4fe366d78dabe66b76ee025ff0611000000000025fec900190004005ee040000000000000000080000000000000f93132", 0x3e}, {&(0x7f00000001c0)="ef37074a2df0f5da41be0bafdcf2df575aa3cda2eb4a9bd0d272514b29bdd08f53d6fcd0143ad9b50227d6f5d7a03ba13baf6dcc6dfc14d9ca7882dd3ff0a32a17d250873bf6208dfa9eb9096cae481af494412ba0313da5e37d4fd52563ebccdffd61805c0e2b98dada7966aa2c432957bff1c27c48229d82ee197a515e190abc6e2d4b8a2c22483b0d9784b95b0384bdb3d5a75f227d7e7c6d83958d203a526bcce477a0de3578f023c6d3a90a4ab6ff0aab788bfbaceac08962a2db81fc74db8868bf6b6dbf249e36ae6a9b072cd98ba9022948f734899f2dd66d894373f146b438e5465e", 0xe6}], 0x2) close(r4) 174.214235ms ago: executing program 36 (id=3883): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="280000001800090000000000000000001c140000fe000001000000000c001a"], 0x28}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002d40)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = gettid() sendmsg$unix(r3, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000000640)='Q', 0x1}], 0x1, &(0x7f0000001040)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r4, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000030000000000000000100000001000000", @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="1c000000000000000100000402000000", @ANYRES32, @ANYRES32=0xee01, @ANYRES32=0x0, @ANYBLOB="0000000014000000000000000100000001000000", @ANYRES32=r2, @ANYBLOB="0000000018"], 0xa0}, 0x4004881) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x2}, 0x8) r6 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(r6, 0x84, 0x84, &(0x7f0000000480)={0x0, @in6={{0xa, 0x4e24, 0x3ff, @remote, 0x8}}, 0x0, 0x9}, 0x90) r7 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmmsg$inet(r7, &(0x7f00000020c0)=[{{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f00000004c0)='\f', 0x1}], 0x1, 0x0, 0x0, 0x2000000}}], 0xfdef, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000001c0)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, @in6={0xa, 0x4e20, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x200}], 0x2c) 0s ago: executing program 6 (id=3937): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000940)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd25, 0x8000, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {0x0, 0xf2ff}, {0x7, 0x1}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x4}, @TCA_FLOWER_KEY_ENC_OPTS_MASK={0x4}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x800) kernel console output (not intermixed with test programs): adv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.120292][T18088] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 493.347667][T18103] hsr_slave_0: entered promiscuous mode [ 493.370245][T18103] hsr_slave_1: entered promiscuous mode [ 493.389054][T18103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.406330][T18103] Cannot create hsr debugfs directory [ 493.534121][T18088] hsr_slave_0: entered promiscuous mode [ 493.541843][T18088] hsr_slave_1: entered promiscuous mode [ 493.551948][T18088] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 493.560570][T18088] Cannot create hsr debugfs directory [ 493.595494][T18177] lo speed is unknown, defaulting to 1000 [ 493.688208][ T5836] Bluetooth: hci3: command tx timeout [ 493.853958][ T6264] bridge_slave_1: left allmulticast mode [ 493.862343][ T6264] bridge_slave_1: left promiscuous mode [ 493.872941][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.898797][ T6264] bridge_slave_0: left allmulticast mode [ 493.904493][ T6264] bridge_slave_0: left promiscuous mode [ 493.916366][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state [ 494.438061][ T6264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.453248][ T6264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.464148][ T6264] bond0 (unregistering): Released all slaves [ 494.963935][ T6264] hsr_slave_0: left promiscuous mode [ 494.970524][ T6264] hsr_slave_1: left promiscuous mode [ 494.976798][ T6264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.984250][ T6264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.997430][ T6264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.004914][ T6264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.046332][ T5836] Bluetooth: hci1: command tx timeout [ 495.051075][ T6264] veth1_macvtap: left promiscuous mode [ 495.066303][ T6264] veth0_macvtap: left promiscuous mode [ 495.072958][ T6264] veth1_vlan: left promiscuous mode [ 495.079308][ T6264] veth0_vlan: left promiscuous mode [ 495.700140][ T6264] team0 (unregistering): Port device team_slave_1 removed [ 495.750635][ T6264] team0 (unregistering): Port device team_slave_0 removed [ 495.769238][ T5836] Bluetooth: hci3: command tx timeout [ 496.276614][T18195] bridge_slave_0: left allmulticast mode [ 496.282321][T18195] bridge_slave_0: left promiscuous mode [ 496.288688][T18195] bridge0: port 1(bridge_slave_0) entered disabled state [ 496.300975][T18195] bridge_slave_1: left allmulticast mode [ 496.307945][T18195] bridge_slave_1: left promiscuous mode [ 496.313799][T18195] bridge0: port 2(bridge_slave_1) entered disabled state [ 496.324390][T18195] bond0: (slave bond_slave_0): Releasing backup interface [ 496.333390][T18195] bond_slave_0: left promiscuous mode [ 496.339193][T18195] bond_slave_0: left allmulticast mode [ 496.345989][T18195] bond0: (slave bond_slave_1): Releasing backup interface [ 496.361206][T18195] bond_slave_1: left promiscuous mode [ 496.367795][T18195] bond_slave_1: left allmulticast mode [ 496.377258][T18195] team0: Port device team_slave_0 removed [ 496.384611][T18195] team0: Port device team_slave_1 removed [ 496.393622][T18195] team0: Port device geneve0 removed [ 496.399721][T18195] vlan2: left allmulticast mode [ 496.404601][T18195] bond0: left allmulticast mode [ 496.410170][T18195] vlan2: left promiscuous mode [ 496.414963][T18195] bond0: left promiscuous mode [ 496.420252][T18195] bridge0: port 3(vlan2) entered disabled state [ 496.431121][T18195] bond2: (slave vlan3): Releasing active interface [ 496.545656][T18201] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3552'. [ 496.634587][T18201] IPVS: set_ctl: invalid protocol: 45184 255.255.255.255:65535 [ 497.135303][T18088] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 497.160623][T18088] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 497.174197][T18088] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 497.199016][T18088] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 497.432853][T18103] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 497.464386][T18103] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 497.482575][T18103] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 497.501733][T18103] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 497.582071][T18088] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.663936][T18088] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.715607][T12103] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.722875][T12103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 497.760392][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state [ 497.767637][ T6264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 497.844770][T18103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 497.910616][T18103] 8021q: adding VLAN 0 to HW filter on device team0 [ 497.945370][T12107] bridge0: port 1(bridge_slave_0) entered blocking state [ 497.952661][T12107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 498.010263][T18103] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 498.021302][T18103] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 498.064630][T12107] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.071964][T12107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 498.483553][T18239] netlink: 'syz.4.3561': attribute type 10 has an invalid length. [ 498.508828][T18239] 8021q: adding VLAN 0 to HW filter on device team0 [ 498.528358][T18239] bond0: (slave team0): Enslaving as an active interface with an up link [ 498.568999][ T5840] Bluetooth: hci4: command 0x0406 tx timeout [ 498.717901][T18103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.763815][T18088] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 498.923753][T18103] veth0_vlan: entered promiscuous mode [ 498.970955][T18088] veth0_vlan: entered promiscuous mode [ 498.991873][T18103] veth1_vlan: entered promiscuous mode [ 499.023758][T18088] veth1_vlan: entered promiscuous mode [ 499.119807][T18253] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 499.156972][T18088] veth0_macvtap: entered promiscuous mode [ 499.201242][T18103] veth0_macvtap: entered promiscuous mode [ 499.219382][T18088] veth1_macvtap: entered promiscuous mode [ 499.259988][T18103] veth1_macvtap: entered promiscuous mode [ 499.311525][T18088] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.335499][T18103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 499.383105][T18088] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.417239][T18103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 499.438441][T18257] netlink: 'syz.4.3566': attribute type 26 has an invalid length. [ 499.463797][T18088] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.502188][T18088] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.529175][T18088] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.545101][T18088] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.570365][T18103] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.598512][T18103] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.614029][T18103] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.614929][ T5840] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 499.624969][T18103] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 499.644174][ T5840] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 499.655739][ T5840] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 499.664182][ T5840] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 499.672530][ T5840] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 499.809728][T18262] lo speed is unknown, defaulting to 1000 [ 500.023491][ T6264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.057122][ T6264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.188110][T12103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.216545][T12103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.282498][T18277] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3571'. [ 500.294233][ T6247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 500.314368][ T6247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 500.394515][T18278] syzkaller0: entered promiscuous mode [ 500.405778][T18278] syzkaller0: entered allmulticast mode [ 500.507410][T18277] lo: entered allmulticast mode [ 501.612983][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 501.771066][ T5836] Bluetooth: hci7: command tx timeout [ 502.129866][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 502.148649][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 502.173369][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 502.189850][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 502.208418][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 502.552588][T18277] lo: left allmulticast mode [ 502.649852][ T6264] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.686349][T12680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 502.717676][T12680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 502.778841][ T6264] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 502.836567][T18292] netlink: 'syz.6.3574': attribute type 1 has an invalid length. [ 502.844474][T18292] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3574'. [ 502.894013][T18289] pimreg: entered allmulticast mode [ 502.903362][T18290] 8021q: VLANs not supported on pimreg [ 502.962159][ T6264] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.031876][T18289] pimreg: left allmulticast mode [ 503.084363][T18284] lo speed is unknown, defaulting to 1000 [ 503.217495][ T6264] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.295879][T18262] chnl_net:caif_netlink_parms(): no params data found [ 503.611183][T18262] bridge0: port 1(bridge_slave_0) entered blocking state [ 503.619025][T18262] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.626431][T18262] bridge_slave_0: entered allmulticast mode [ 503.633746][T18262] bridge_slave_0: entered promiscuous mode [ 503.655112][T18262] bridge0: port 2(bridge_slave_1) entered blocking state [ 503.663097][T18262] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.670505][T18262] bridge_slave_1: entered allmulticast mode [ 503.678857][T18262] bridge_slave_1: entered promiscuous mode [ 503.685605][ T6264] bridge_slave_1: left allmulticast mode [ 503.691508][ T6264] bridge_slave_1: left promiscuous mode [ 503.700141][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state [ 503.710117][ T6264] bridge_slave_0: left allmulticast mode [ 503.715885][ T6264] bridge_slave_0: left promiscuous mode [ 503.722159][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state [ 503.849286][ T5152] Bluetooth: hci7: command tx timeout [ 504.118133][ T6264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 504.130369][ T6264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 504.140723][ T6264] bond0 (unregistering): Released all slaves [ 504.246442][ T5152] Bluetooth: hci1: command tx timeout [ 504.358890][T18262] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 504.550662][T18262] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 504.627008][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 504.639849][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 504.652357][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 504.664106][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 504.674393][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 504.730377][T18324] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3581'. [ 504.812403][T18262] team0: Port device team_slave_0 added [ 504.910343][T18262] team0: Port device team_slave_1 added [ 504.917274][T18335] bridge0: entered promiscuous mode [ 504.937054][T18335] macvlan2: entered promiscuous mode [ 504.943445][T18335] bridge0: port 1(macvlan2) entered blocking state [ 504.953738][T18335] bridge0: port 1(macvlan2) entered disabled state [ 504.960656][T18335] macvlan2: entered allmulticast mode [ 504.967510][T18335] bridge0: entered allmulticast mode [ 504.975103][T18335] macvlan2: left allmulticast mode [ 504.980479][T18335] bridge0: left allmulticast mode [ 504.989964][T18336] netlink: 'syz.6.3583': attribute type 10 has an invalid length. [ 504.999995][T18336] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3583'. [ 505.054656][T18336] batadv0: entered promiscuous mode [ 505.062199][T18336] batadv0: entered allmulticast mode [ 505.076974][T18336] bridge0: port 1(batadv0) entered blocking state [ 505.085678][T18336] bridge0: port 1(batadv0) entered disabled state [ 505.120927][T18284] chnl_net:caif_netlink_parms(): no params data found [ 505.148249][T18334] bridge0: left promiscuous mode [ 505.154779][T18262] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 505.162015][T18262] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.198675][T18262] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 505.223504][T18262] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 505.235342][T18262] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 505.269765][T18262] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 505.291917][T18325] lo speed is unknown, defaulting to 1000 [ 505.464345][ T6264] hsr_slave_0: left promiscuous mode [ 505.476701][T18345] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3585'. [ 505.495329][ T6264] hsr_slave_1: left promiscuous mode [ 505.513312][ T6264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 505.521045][T12680] batman_adv: batadv0: IGMP Querier appeared [ 505.521083][T12680] batman_adv: batadv0: MLD Querier appeared [ 505.533660][ T6264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 505.544259][ T6264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 505.551805][ T6264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 505.589252][ T6264] veth1_macvtap: left promiscuous mode [ 505.594876][ T6264] veth0_macvtap: left promiscuous mode [ 505.600714][ T6264] veth1_vlan: left promiscuous mode [ 505.606833][ T6264] veth0_vlan: left promiscuous mode [ 505.932638][ T5152] Bluetooth: hci7: command tx timeout [ 506.219278][ T6264] team0 (unregistering): Port device team_slave_1 removed [ 506.265306][ T6264] team0 (unregistering): Port device team_slave_0 removed [ 506.330494][ T5152] Bluetooth: hci1: command tx timeout [ 506.741835][ T5152] Bluetooth: hci3: command tx timeout [ 506.812249][T18262] hsr_slave_0: entered promiscuous mode [ 506.820215][T18262] hsr_slave_1: entered promiscuous mode [ 506.827316][T18262] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 506.834930][T18262] Cannot create hsr debugfs directory [ 506.848394][T18345] vlan4: entered promiscuous mode [ 506.853481][T18345] hsr0: entered promiscuous mode [ 507.071093][T18284] bridge0: port 1(bridge_slave_0) entered blocking state [ 507.078966][T18284] bridge0: port 1(bridge_slave_0) entered disabled state [ 507.093009][T18284] bridge_slave_0: entered allmulticast mode [ 507.103732][T18284] bridge_slave_0: entered promiscuous mode [ 507.161942][T18284] bridge0: port 2(bridge_slave_1) entered blocking state [ 507.169667][T18284] bridge0: port 2(bridge_slave_1) entered disabled state [ 507.178986][T18284] bridge_slave_1: entered allmulticast mode [ 507.187595][T18284] bridge_slave_1: entered promiscuous mode [ 507.303415][T18369] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3591'. [ 507.353553][T18284] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 507.377044][T18366] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3591'. [ 507.435184][T18284] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 507.578843][T18284] team0: Port device team_slave_0 added [ 507.665291][T18284] team0: Port device team_slave_1 added [ 507.823315][T18325] chnl_net:caif_netlink_parms(): no params data found [ 507.840238][T18284] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 507.847618][T18284] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.875702][T18284] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 507.941594][T18284] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 507.949102][T18284] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 507.984385][T18284] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 508.010980][ T5152] Bluetooth: hci7: command tx timeout [ 508.199448][ T6264] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.362993][T18284] hsr_slave_0: entered promiscuous mode [ 508.377399][T18284] hsr_slave_1: entered promiscuous mode [ 508.403837][T18284] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 508.418573][ T5152] Bluetooth: hci1: command tx timeout [ 508.424121][T18284] Cannot create hsr debugfs directory [ 508.458029][ T6264] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.628849][T18417] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3603'. [ 508.669345][T18325] bridge0: port 1(bridge_slave_0) entered blocking state [ 508.677074][T18325] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.684374][T18325] bridge_slave_0: entered allmulticast mode [ 508.692813][T18325] bridge_slave_0: entered promiscuous mode [ 508.729701][ T6264] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.748692][T18325] bridge0: port 2(bridge_slave_1) entered blocking state [ 508.751533][T18419] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3604'. [ 508.765684][T18325] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.773742][T18325] bridge_slave_1: entered allmulticast mode [ 508.782271][T18325] bridge_slave_1: entered promiscuous mode [ 508.816744][ T5152] Bluetooth: hci3: command tx timeout [ 509.024302][ T6264] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 509.111507][T18262] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 509.145682][T18325] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 509.172949][T18262] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 509.189241][T18325] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 509.198817][T18421] veth0: entered promiscuous mode [ 509.219937][T18262] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 509.255900][T18421] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3605'. [ 509.304980][T18262] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 509.344307][T18325] team0: Port device team_slave_0 added [ 509.354989][T18325] team0: Port device team_slave_1 added [ 509.420843][T18420] veth0: left promiscuous mode [ 509.501490][T18325] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 509.518101][T18424] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3606'. [ 509.526971][T18325] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.566514][T18325] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 509.620098][T18325] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 509.646164][T18325] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 509.675669][T18325] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 509.792418][ T6264] bridge_slave_1: left allmulticast mode [ 509.816589][ T6264] bridge_slave_1: left promiscuous mode [ 509.822521][ T6264] bridge0: port 2(bridge_slave_1) entered disabled state [ 509.849103][ T6264] bridge_slave_0: left allmulticast mode [ 509.854822][ T6264] bridge_slave_0: left promiscuous mode [ 509.875912][ T6264] bridge0: port 1(bridge_slave_0) entered disabled state [ 509.968015][T18437] xt_hashlimit: size too large, truncated to 1048576 [ 510.486603][ T5152] Bluetooth: hci1: command tx timeout [ 510.679431][ T6264] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 510.690767][ T6264] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 510.704454][ T6264] bond0 (unregistering): Released all slaves [ 510.839354][T18434] tipc: Started in network mode [ 510.844626][T18434] tipc: Node identity c213d63f4063, cluster identity 4711 [ 510.866406][T18434] tipc: Enabled bearer , priority 10 [ 510.888127][ T5152] Bluetooth: hci3: command tx timeout [ 510.941061][T18436] tipc: Resetting bearer [ 510.948492][T18439] C: renamed from lo [ 510.955301][T18439] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 511.043365][ T36] tipc: Resetting bearer [ 511.053508][T18430] tipc: Resetting bearer [ 511.899880][T13543] tipc: Node number set to 2188432959 [ 512.964914][T18430] tipc: Disabling bearer [ 512.966660][ T5152] Bluetooth: hci3: command tx timeout [ 513.099001][T18325] hsr_slave_0: entered promiscuous mode [ 513.105733][T18325] hsr_slave_1: entered promiscuous mode [ 513.114674][T18325] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 513.122543][T18325] Cannot create hsr debugfs directory [ 513.459099][ T6264] hsr_slave_0: left promiscuous mode [ 513.475900][ T6264] hsr_slave_1: left promiscuous mode [ 513.483033][ T6264] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 513.490805][ T6264] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 513.501991][ T6264] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 513.513544][ T6264] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 513.551268][ T6264] veth1_macvtap: left promiscuous mode [ 513.557063][ T6264] veth0_macvtap: left promiscuous mode [ 513.564043][ T6264] veth1_vlan: left promiscuous mode [ 513.570699][ T6264] veth0_vlan: left promiscuous mode [ 514.135712][ T6264] team0 (unregistering): Port device team_slave_1 removed [ 514.195387][ T6264] team0 (unregistering): Port device team_slave_0 removed [ 514.773102][T18464] netdevsim netdevsim6 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 514.792148][T18464] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 514.917720][T18469] netlink: zone id is out of range [ 514.922956][T18469] netlink: zone id is out of range [ 514.999674][T18464] netdevsim netdevsim6 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.016312][T18464] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.241953][T18464] netdevsim netdevsim6 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.252810][T18464] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.271541][T18284] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 515.301218][T18284] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 515.321323][T18284] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 515.382421][T18464] netdevsim netdevsim6 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 515.396307][T18464] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 515.467568][T18284] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 515.518964][T18262] 8021q: adding VLAN 0 to HW filter on device bond0 [ 515.627368][T18464] netdevsim netdevsim6 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.638467][T18464] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.683573][T18464] netdevsim netdevsim6 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.692771][T18464] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.716174][T18464] netdevsim netdevsim6 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.726801][T18464] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.739262][T18262] 8021q: adding VLAN 0 to HW filter on device team0 [ 515.748853][T18481] macvtap0: entered promiscuous mode [ 515.754204][T18481] macvtap0: entered allmulticast mode [ 515.775692][T18464] netdevsim netdevsim6 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 515.796819][T18464] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.834204][T12103] bridge0: port 1(bridge_slave_0) entered blocking state [ 515.841468][T12103] bridge0: port 1(bridge_slave_0) entered forwarding state [ 515.882662][T12103] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.890010][T12103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.158001][T18325] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 516.169032][T18489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3623'. [ 516.184539][T18325] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 516.211683][T18489] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3623'. [ 516.242140][T18325] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 516.280052][T18325] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 516.322404][T18284] 8021q: adding VLAN 0 to HW filter on device bond0 [ 516.382709][T18495] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3624'. [ 516.465589][T18284] 8021q: adding VLAN 0 to HW filter on device team0 [ 516.549298][T12107] bridge0: port 1(bridge_slave_0) entered blocking state [ 516.556546][T12107] bridge0: port 1(bridge_slave_0) entered forwarding state [ 516.639587][T12685] bridge0: port 2(bridge_slave_1) entered blocking state [ 516.646828][T12685] bridge0: port 2(bridge_slave_1) entered forwarding state [ 516.724628][T18495] lo speed is unknown, defaulting to 1000 [ 516.764165][T18504] C: entered allmulticast mode [ 516.789502][T18503] C: left allmulticast mode [ 516.833806][T18262] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.270295][T18325] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.348458][T18325] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.444127][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.451376][ T6264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.527866][ T6264] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.535107][ T6264] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.900870][T18284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 517.935829][T18262] veth0_vlan: entered promiscuous mode [ 517.992248][T18262] veth1_vlan: entered promiscuous mode [ 518.052101][T18529] mac80211_hwsim hwsim31 wlan1: entered allmulticast mode [ 518.072543][T18529] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 518.445541][T18262] veth0_macvtap: entered promiscuous mode [ 518.493692][T18538] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3630'. [ 518.520713][T18284] veth0_vlan: entered promiscuous mode [ 518.558766][T18262] veth1_macvtap: entered promiscuous mode [ 518.611219][T18535] wireguard0: entered promiscuous mode [ 518.632422][T18535] wireguard0: entered allmulticast mode [ 518.747299][T18284] veth1_vlan: entered promiscuous mode [ 518.825037][T18325] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.841466][T18548] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 518.855431][T18262] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 518.884952][T18262] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 518.934060][T18262] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.956342][T18262] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.965196][T18262] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 518.983351][T18262] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.036800][T18284] veth0_macvtap: entered promiscuous mode [ 519.063787][T18284] veth1_macvtap: entered promiscuous mode [ 519.193902][T18284] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.202505][T18552] syzkaller0: create flow: hash 203196074 index 1 [ 519.294843][T18551] syzkaller0: delete flow: hash 203196074 index 1 [ 521.140721][T18325] veth0_vlan: entered promiscuous mode [ 521.164156][T18562] syz.4.3636: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 521.183290][T18562] CPU: 0 UID: 0 PID: 18562 Comm: syz.4.3636 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 521.183321][T18562] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 521.183335][T18562] Call Trace: [ 521.183344][T18562] [ 521.183353][T18562] dump_stack_lvl+0x189/0x250 [ 521.183400][T18562] ? __pfx_dump_stack_lvl+0x10/0x10 [ 521.183436][T18562] ? __pfx__printk+0x10/0x10 [ 521.183460][T18562] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 521.183496][T18562] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 521.183533][T18562] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 521.183572][T18562] warn_alloc+0x214/0x310 [ 521.183602][T18562] ? __pfx_warn_alloc+0x10/0x10 [ 521.183634][T18562] ? __get_vm_area_node+0x28f/0x300 [ 521.183678][T18562] ? xp_create_and_assign_umem+0x184/0xce0 [ 521.183712][T18562] __vmalloc_node_range_noprof+0x67e/0x1340 [ 521.183784][T18562] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 521.183818][T18562] ? __kasan_kmalloc_large+0x1c/0xa0 [ 521.183853][T18562] ? rcu_is_watching+0x15/0xb0 [ 521.183885][T18562] ? xp_create_and_assign_umem+0x184/0xce0 [ 521.183914][T18562] ? xp_create_and_assign_umem+0x184/0xce0 [ 521.183941][T18562] __kvmalloc_node_noprof+0x3bf/0x600 [ 521.183974][T18562] ? xp_create_and_assign_umem+0x184/0xce0 [ 521.184002][T18562] ? xp_create_and_assign_umem+0xa4/0xce0 [ 521.184039][T18562] xp_create_and_assign_umem+0x184/0xce0 [ 521.184080][T18562] ? dev_get_by_index+0x22/0x2e0 [ 521.184104][T18562] ? dev_get_by_index+0x22/0x2e0 [ 521.184138][T18562] xsk_bind+0x42d/0xf90 [ 521.184173][T18562] __sys_bind+0x2c6/0x3e0 [ 521.184206][T18562] ? __pfx___sys_bind+0x10/0x10 [ 521.184253][T18562] ? rcu_is_watching+0x15/0xb0 [ 521.184293][T18562] __x64_sys_bind+0x7a/0x90 [ 521.184324][T18562] do_syscall_64+0xfa/0x3b0 [ 521.184351][T18562] ? lockdep_hardirqs_on+0x9c/0x150 [ 521.184376][T18562] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.184398][T18562] ? clear_bhb_loop+0x60/0xb0 [ 521.184425][T18562] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 521.184446][T18562] RIP: 0033:0x7fa4b1f8e969 [ 521.184467][T18562] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 521.184486][T18562] RSP: 002b:00007fa4b2e7a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 521.184510][T18562] RAX: ffffffffffffffda RBX: 00007fa4b21b6160 RCX: 00007fa4b1f8e969 [ 521.184525][T18562] RDX: 0000000000000010 RSI: 0000200000000100 RDI: 000000000000000b [ 521.184538][T18562] RBP: 00007fa4b2010ab1 R08: 0000000000000000 R09: 0000000000000000 [ 521.184552][T18562] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 521.184565][T18562] R13: 0000000000000000 R14: 00007fa4b21b6160 R15: 00007ffd998a6258 [ 521.184601][T18562] [ 521.184621][T18562] Mem-Info: [ 521.487018][T18562] active_anon:5161 inactive_anon:0 isolated_anon:0 [ 521.487018][T18562] active_file:1861 inactive_file:40042 isolated_file:0 [ 521.487018][T18562] unevictable:768 dirty:74 writeback:0 [ 521.487018][T18562] slab_reclaimable:11623 slab_unreclaimable:133795 [ 521.487018][T18562] mapped:45694 shmem:1371 pagetables:714 [ 521.487018][T18562] sec_pagetables:0 bounce:0 [ 521.487018][T18562] kernel_misc_reclaimable:0 [ 521.487018][T18562] free:1264302 free_pcp:851 free_cma:0 [ 521.534368][T18562] Node 0 active_anon:20644kB inactive_anon:0kB active_file:7444kB inactive_file:159968kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:182776kB dirty:292kB writeback:0kB shmem:3948kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12748kB pagetables:2856kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 521.575126][T18562] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 521.608178][T18562] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 521.639232][T18562] lowmem_reserve[]: 0 2501 2503 2503 2503 [ 521.645293][T18562] Node 0 DMA32 free:1122712kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB active_anon:20600kB inactive_anon:0kB active_file:7444kB inactive_file:158124kB unevictable:1536kB writepending:288kB present:3129332kB managed:2561256kB mlocked:0kB bounce:0kB free_pcp:3556kB local_pcp:1032kB free_cma:0kB [ 521.683333][T18562] lowmem_reserve[]: 0 0 1 1 1 [ 521.688353][T18562] Node 0 Normal free:4kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB active_anon:44kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 521.716286][T18562] lowmem_reserve[]: 0 0 0 0 0 [ 521.721122][T18562] Node 1 Normal free:3919980kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 521.750182][T18562] lowmem_reserve[]: 0 0 0 0 0 [ 521.754954][T18562] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 521.769069][T18562] Node 0 DMA32: 2*4kB (ME) 205*8kB (ME) 184*16kB (UME) 184*32kB (UME) 64*64kB (UME) 25*128kB (UME) 18*256kB (ME) 10*512kB (M) 5*1024kB (ME) 2*2048kB (M) 265*4096kB (M) = 1122160kB [ 521.787641][T18562] Node 0 Normal: 1*4kB (M) 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 4kB [ 521.799821][T18562] Node 1 Normal: 149*4kB (UME) 51*8kB (UME) 40*16kB (UME) 218*32kB (UME) 89*64kB (UME) 31*128kB (UME) 13*256kB (UME) 4*512kB (UM) 3*1024kB (UME) 1*2048kB (E) 950*4096kB (M) = 3919980kB [ 521.818470][T18562] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.828274][T18562] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 521.837661][T18562] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.847577][T18562] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 521.856967][T18562] 43273 total pagecache pages [ 521.861687][T18562] 0 pages in swap cache [ 521.866968][T18562] Free swap = 124996kB [ 521.871241][T18562] Total swap = 124996kB [ 521.875396][T18562] 2097051 pages RAM [ 521.879431][T18562] 0 pages HighMem/MovableOnly [ 521.884125][T18562] 424631 pages reserved [ 521.888492][T18562] 0 pages cma reserved [ 521.972522][T18284] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 521.992132][T18325] veth1_vlan: entered promiscuous mode [ 522.014742][ T6264] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.036437][T18284] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.045415][T18284] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.054927][ T6264] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.063268][T18284] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.078501][T18284] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.244572][ T6247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.264372][ T6247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.366924][T18325] veth0_macvtap: entered promiscuous mode [ 522.465614][T18325] veth1_macvtap: entered promiscuous mode [ 522.545026][T12685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.581951][T12685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.629439][T18325] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 522.671859][T12685] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 522.688104][T18325] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 522.695472][T12685] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 522.729733][T18325] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.758193][T18325] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.778551][T18325] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 522.795126][T18325] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 523.179192][T18596] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3646'. [ 523.199415][T12685] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.231454][T12685] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.249614][T18595] netlink: 'syz.4.3647': attribute type 1 has an invalid length. [ 523.267305][T18595] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3647'. [ 523.346795][T12103] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.511662][T12103] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.545457][T12680] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 523.596930][T12680] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 523.649982][T12103] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 523.784194][T12103] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 524.156454][T12103] bridge_slave_1: left allmulticast mode [ 524.162178][T12103] bridge_slave_1: left promiscuous mode [ 524.177226][T12103] bridge0: port 2(bridge_slave_1) entered disabled state [ 524.195106][T12103] bridge_slave_0: left allmulticast mode [ 524.201568][T12103] bridge_slave_0: left promiscuous mode [ 524.207879][T12103] bridge0: port 1(bridge_slave_0) entered disabled state [ 524.768531][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 524.779096][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 524.806749][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 524.830683][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 524.841480][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 524.929956][T12103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 524.948057][T12103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 524.962682][T12103] bond0 (unregistering): Released all slaves [ 525.015749][T18605] lo speed is unknown, defaulting to 1000 [ 525.533746][T18622] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3652'. [ 525.667984][T18624] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.696330][T18624] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.734076][T18624] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.777222][T18624] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 525.806683][T18624] geneve2: entered allmulticast mode [ 525.965141][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 525.975795][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 525.995280][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 526.028827][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 526.041624][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 526.041680][T12103] hsr_slave_0: left promiscuous mode [ 526.110657][T12103] hsr_slave_1: left promiscuous mode [ 526.128150][T12103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 526.135659][T12103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 526.162189][T12103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 526.171764][T12103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 526.210681][T12103] veth1_macvtap: left promiscuous mode [ 526.216597][T12103] veth0_macvtap: left promiscuous mode [ 526.222851][T12103] veth1_vlan: left promiscuous mode [ 526.228415][T12103] veth0_vlan: left promiscuous mode [ 526.234650][T18642] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3658'. [ 526.306722][T18645] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3658'. [ 526.482260][T18650] netlink: 24 bytes leftover after parsing attributes in process `syz.7.3659'. [ 526.886418][ T5152] Bluetooth: hci1: command tx timeout [ 526.984896][T12103] team0 (unregistering): Port device team_slave_1 removed [ 527.032849][T12103] team0 (unregistering): Port device team_slave_0 removed [ 527.607713][T18639] lo: entered allmulticast mode [ 527.612683][T18639] lo: left allmulticast mode [ 527.827631][T18632] lo speed is unknown, defaulting to 1000 [ 527.917243][T18605] chnl_net:caif_netlink_parms(): no params data found [ 527.979520][T18665] netlink: 'syz.6.3662': attribute type 21 has an invalid length. [ 528.015151][T18665] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3662'. [ 528.178175][ T5152] Bluetooth: hci3: command tx timeout [ 528.347189][T18685] xt_nat: multiple ranges no longer supported [ 528.419925][T18605] bridge0: port 1(bridge_slave_0) entered blocking state [ 528.456541][T18605] bridge0: port 1(bridge_slave_0) entered disabled state [ 528.478468][T18605] bridge_slave_0: entered allmulticast mode [ 528.504860][T18605] bridge_slave_0: entered promiscuous mode [ 528.536701][T18605] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.543922][T18605] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.559106][T18605] bridge_slave_1: entered allmulticast mode [ 528.578194][T18605] bridge_slave_1: entered promiscuous mode [ 528.714614][T12103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 528.897605][T18680] syzkaller0: entered allmulticast mode [ 528.908174][T18700] syzkaller0: entered promiscuous mode [ 528.960270][T18706] netlink: 7 bytes leftover after parsing attributes in process `syz.7.3670'. [ 528.967370][ T5152] Bluetooth: hci1: command tx timeout [ 529.009529][T12103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.051257][T18605] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 529.066583][T18708] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3671'. [ 529.249583][T12103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.271975][T18605] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 529.285692][T18679] syzkaller0: left promiscuous mode [ 529.292034][T18679] syzkaller0: left allmulticast mode [ 529.512960][T12103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 529.572407][T18605] team0: Port device team_slave_0 added [ 529.620123][T18605] team0: Port device team_slave_1 added [ 529.654550][T18632] chnl_net:caif_netlink_parms(): no params data found [ 529.752592][T18605] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 529.770374][T18605] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.845334][T18605] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 529.950218][T18605] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 529.964461][T18605] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 529.999951][T18605] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 530.246432][ T5152] Bluetooth: hci3: command tx timeout [ 530.526529][T18605] hsr_slave_0: entered promiscuous mode [ 530.543320][T18605] hsr_slave_1: entered promiscuous mode [ 530.554305][T18605] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 530.568198][T18605] Cannot create hsr debugfs directory [ 530.750973][T18632] bridge0: port 1(bridge_slave_0) entered blocking state [ 530.758499][T18632] bridge0: port 1(bridge_slave_0) entered disabled state [ 530.766544][T18632] bridge_slave_0: entered allmulticast mode [ 530.777550][T18632] bridge_slave_0: entered promiscuous mode [ 530.802758][T12103] bridge_slave_1: left allmulticast mode [ 530.826221][T12103] bridge_slave_1: left promiscuous mode [ 530.832059][T12103] bridge0: port 2(bridge_slave_1) entered disabled state [ 530.848339][T12103] bridge_slave_0: left allmulticast mode [ 530.854216][T12103] bridge_slave_0: left promiscuous mode [ 530.860517][T12103] bridge0: port 1(bridge_slave_0) entered disabled state [ 531.049998][ T5152] Bluetooth: hci1: command tx timeout [ 531.342567][T12103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 531.356302][T12103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 531.367370][T12103] bond0 (unregistering): Released all slaves [ 531.383934][T18632] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.392425][T18632] bridge0: port 2(bridge_slave_1) entered disabled state [ 531.400148][T18632] bridge_slave_1: entered allmulticast mode [ 531.418307][T18632] bridge_slave_1: entered promiscuous mode [ 531.739510][T18632] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 531.793258][T18632] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 531.835952][T18751] netlink: 'syz.6.3684': attribute type 21 has an invalid length. [ 531.862611][T18752] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3685'. [ 531.926936][T18751] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3684'. [ 531.973872][T18753] dummy0: entered promiscuous mode [ 531.980620][T18753] vlan3: entered promiscuous mode [ 532.044203][T18632] team0: Port device team_slave_0 added [ 532.054451][T18632] team0: Port device team_slave_1 added [ 532.124686][T12103] hsr_slave_0: left promiscuous mode [ 532.133814][T12103] hsr_slave_1: left promiscuous mode [ 532.140602][T12103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 532.149395][T12103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 532.158756][T12103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 532.170162][T12103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 532.196542][T12103] veth1_macvtap: left promiscuous mode [ 532.202299][T12103] veth0_macvtap: left promiscuous mode [ 532.209322][T12103] veth1_vlan: left promiscuous mode [ 532.214758][T12103] veth0_vlan: left promiscuous mode [ 532.330974][ T5152] Bluetooth: hci3: command tx timeout [ 532.789430][T12103] team0 (unregistering): Port device team_slave_1 removed [ 532.852257][T12103] team0 (unregistering): Port device team_slave_0 removed [ 533.131336][ T5152] Bluetooth: hci1: command tx timeout [ 533.416233][T18760] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3687'. [ 533.471468][T18632] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 533.496489][T18632] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.544439][T18632] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 533.599966][T18632] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 533.609186][T18632] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 533.637545][T18632] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 533.854221][T18632] hsr_slave_0: entered promiscuous mode [ 533.861658][T18632] hsr_slave_1: entered promiscuous mode [ 533.868624][T18632] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 533.885690][T18632] Cannot create hsr debugfs directory [ 534.032032][T18771] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3691'. [ 534.232159][T18605] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 534.244139][T18605] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 534.287819][T18605] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 534.306930][T18605] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 534.373891][T18773] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3692'. [ 534.406525][ T5152] Bluetooth: hci3: command tx timeout [ 534.415651][T18773] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.424389][T18773] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.433472][T18773] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.442083][T18773] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 534.475374][T18773] netdevsim netdevsim4 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.484229][T18773] netdevsim netdevsim4 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.493152][T18773] netdevsim netdevsim4 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.501804][T18773] netdevsim netdevsim4 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 534.585151][T18779] xt_connbytes: Forcing CT accounting to be enabled [ 534.613005][T18779] xt_bpf: check failed: parse error [ 534.689289][T18605] 8021q: adding VLAN 0 to HW filter on device bond0 [ 534.733974][T18605] 8021q: adding VLAN 0 to HW filter on device team0 [ 534.758916][ T6247] bridge0: port 1(bridge_slave_0) entered blocking state [ 534.766152][ T6247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 534.809894][T12107] bridge0: port 2(bridge_slave_1) entered blocking state [ 534.817167][T12107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.034615][ T5891] IPVS: starting estimator thread 0... [ 535.041508][T18790] netlink: 'syz.6.3698': attribute type 10 has an invalid length. [ 535.079811][T18793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3699'. [ 535.089529][T18793] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3699'. [ 535.089853][T18790] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 535.136252][T18791] IPVS: using max 27 ests per chain, 64800 per kthread [ 535.163302][T18795] netlink: 'syz.4.3699': attribute type 1 has an invalid length. [ 535.164822][T18632] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 535.203924][T18632] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 535.228480][T18632] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 535.244297][T18632] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 535.495170][T18632] 8021q: adding VLAN 0 to HW filter on device bond0 [ 535.535389][T18632] 8021q: adding VLAN 0 to HW filter on device team0 [ 535.563721][T12680] bridge0: port 1(bridge_slave_0) entered blocking state [ 535.571067][T12680] bridge0: port 1(bridge_slave_0) entered forwarding state [ 535.611202][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state [ 535.618474][ T6247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 535.645254][T18605] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 535.685569][T18805] netlink: 20 bytes leftover after parsing attributes in process `syz.6.3702'. [ 535.825643][T18605] veth0_vlan: entered promiscuous mode [ 535.865255][T18605] veth1_vlan: entered promiscuous mode [ 535.947142][T18814] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3703'. [ 536.001114][T18605] veth0_macvtap: entered promiscuous mode [ 536.058959][T18605] veth1_macvtap: entered promiscuous mode [ 536.132399][T18605] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 536.177773][T18605] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 536.218699][T18605] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.240081][T18605] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.251371][T18605] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.261179][T18605] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 536.433765][T18632] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 536.588472][T12688] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.601960][T12688] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.728040][T12688] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 536.739283][T12688] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 536.785646][T18632] veth0_vlan: entered promiscuous mode [ 536.830007][T18632] veth1_vlan: entered promiscuous mode [ 537.143051][T18632] veth0_macvtap: entered promiscuous mode [ 537.177676][T18632] veth1_macvtap: entered promiscuous mode [ 537.432202][T18844] netlink: 201392 bytes leftover after parsing attributes in process `syz.4.3713'. [ 537.454114][T18844] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 537.469119][T12103] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.488201][T18844] openvswitch: netlink: Message has 8454 unknown bytes. [ 537.503202][T18846] netlink: 48 bytes leftover after parsing attributes in process `syz.6.3714'. [ 537.536975][T18632] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 537.544665][T18846] netlink: 56 bytes leftover after parsing attributes in process `syz.6.3714'. [ 537.653099][T12103] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.720173][T18632] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 537.775931][T18632] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.785510][T18632] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.794874][T18632] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.803878][T18632] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 537.904584][T12103] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 537.969987][T12680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 537.982817][T12680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.024111][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 538.035145][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 538.115830][T12103] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 538.295236][T12103] bridge_slave_1: left allmulticast mode [ 538.301261][T12103] bridge_slave_1: left promiscuous mode [ 538.307252][T12103] bridge0: port 2(bridge_slave_1) entered disabled state [ 538.317200][T12103] bridge_slave_0: left allmulticast mode [ 538.322887][T12103] bridge_slave_0: left promiscuous mode [ 538.331137][T12103] bridge0: port 1(bridge_slave_0) entered disabled state [ 538.932632][T12103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 538.957188][T12103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 538.990310][T12103] bond0 (unregistering): Released all slaves [ 539.281076][T18871] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 539.293993][T18871] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 539.302724][T18871] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 539.311708][T18868] netlink: del zone limit has 4 unknown bytes [ 539.331425][T18871] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 539.341112][T18871] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 539.370697][T18863] syzkaller1: entered promiscuous mode [ 539.382543][T18863] syzkaller1: entered allmulticast mode [ 539.406194][T18868] macvtap0: left promiscuous mode [ 539.411305][T18868] macvtap0: left allmulticast mode [ 539.417380][T18868] mac80211_hwsim hwsim31 wlan1: left allmulticast mode [ 539.425598][T18868] netdevsim netdevsim4 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.435740][T18868] netdevsim netdevsim4 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.445093][T18868] netdevsim netdevsim4 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.454026][T18868] netdevsim netdevsim4 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 539.462883][T18868] geneve2: left allmulticast mode [ 539.626085][T12103] hsr_slave_0: left promiscuous mode [ 539.638927][T12103] hsr_slave_1: left promiscuous mode [ 539.645208][T12103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 539.660226][T12103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 539.672156][T12103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 539.684664][T12103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 539.692013][T18871] Bluetooth: hci3: command 0x0405 tx timeout [ 539.780749][T12103] veth1_macvtap: left promiscuous mode [ 539.796125][T12103] veth0_macvtap: left promiscuous mode [ 539.801784][T12103] veth1_vlan: left promiscuous mode [ 539.822814][T12103] veth0_vlan: left promiscuous mode [ 540.426665][T12103] team0 (unregistering): Port device team_slave_1 removed [ 540.480401][T12103] team0 (unregistering): Port device team_slave_0 removed [ 541.061606][T18869] lo speed is unknown, defaulting to 1000 [ 541.366932][ T5152] Bluetooth: hci1: command tx timeout [ 541.593572][T12103] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.619786][T18869] chnl_net:caif_netlink_parms(): no params data found [ 541.704877][T12103] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.749430][T18869] bridge0: port 1(bridge_slave_0) entered blocking state [ 541.756958][T18869] bridge0: port 1(bridge_slave_0) entered disabled state [ 541.764371][T18869] bridge_slave_0: entered allmulticast mode [ 541.772272][T18869] bridge_slave_0: entered promiscuous mode [ 541.802714][T12103] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.818404][T18869] bridge0: port 2(bridge_slave_1) entered blocking state [ 541.825643][T18869] bridge0: port 2(bridge_slave_1) entered disabled state [ 541.833812][T18869] bridge_slave_1: entered allmulticast mode [ 541.842286][T18869] bridge_slave_1: entered promiscuous mode [ 541.900916][T12103] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 541.918130][T18869] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 541.932141][T18869] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 541.979492][T18869] team0: Port device team_slave_0 added [ 541.988983][T18869] team0: Port device team_slave_1 added [ 542.027168][T18869] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 542.034218][T18869] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.061079][T18869] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 542.074273][T18869] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 542.081325][T18869] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 542.107630][T18869] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 542.209713][T18869] hsr_slave_0: entered promiscuous mode [ 542.216750][T18869] hsr_slave_1: entered promiscuous mode [ 542.223581][T18869] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.231820][T18869] Cannot create hsr debugfs directory [ 542.237760][T12103] bridge_slave_1: left allmulticast mode [ 542.245238][T12103] bridge_slave_1: left promiscuous mode [ 542.255577][T12103] bridge0: port 2(bridge_slave_1) entered disabled state [ 542.265521][T12103] bridge_slave_0: left allmulticast mode [ 542.275424][T12103] bridge_slave_0: left promiscuous mode [ 542.282434][T12103] bridge0: port 1(bridge_slave_0) entered disabled state [ 542.874557][T18871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 542.895580][T18871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 542.918048][T18871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 542.950922][T18871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 542.969570][T18871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 543.024665][T12103] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 543.039677][T12103] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 543.051502][T12103] bond0 (unregistering): Released all slaves [ 543.359083][T18903] lo speed is unknown, defaulting to 1000 [ 543.387524][T18912] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3727'. [ 543.446838][ T5152] Bluetooth: hci1: command tx timeout [ 543.727126][T18917] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3729'. [ 543.935356][T12103] hsr_slave_0: left promiscuous mode [ 543.946954][T12103] hsr_slave_1: left promiscuous mode [ 543.953148][T12103] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 543.960848][T12103] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 543.969151][T12103] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 543.977423][T12103] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 544.016510][T12103] veth1_macvtap: left promiscuous mode [ 544.022139][T12103] veth0_macvtap: left promiscuous mode [ 544.030394][T12103] veth1_vlan: left promiscuous mode [ 544.035785][T12103] veth0_vlan: left promiscuous mode [ 544.673421][T18928] netlink: 'syz.6.3730': attribute type 1 has an invalid length. [ 544.876996][T12103] team0 (unregistering): Port device team_slave_1 removed [ 544.967323][T12103] team0 (unregistering): Port device team_slave_0 removed [ 545.050876][ T5152] Bluetooth: hci3: command tx timeout [ 545.198201][T18871] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 545.232285][T18871] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 545.241377][T18871] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 545.251916][T18871] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 545.274271][T18871] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 545.532528][T18871] Bluetooth: hci1: command tx timeout [ 545.715932][T18928] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 545.880364][T18934] lo speed is unknown, defaulting to 1000 [ 546.055823][T18941] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3734'. [ 546.297964][T18903] chnl_net:caif_netlink_parms(): no params data found [ 546.452184][T18959] netlink: 884 bytes leftover after parsing attributes in process `syz.6.3737'. [ 546.550465][T18959] netlink: 40 bytes leftover after parsing attributes in process `syz.6.3737'. [ 546.628370][T18903] bridge0: port 1(bridge_slave_0) entered blocking state [ 546.645850][T18903] bridge0: port 1(bridge_slave_0) entered disabled state [ 546.653724][T18903] bridge_slave_0: entered allmulticast mode [ 546.668154][T18903] bridge_slave_0: entered promiscuous mode [ 546.683838][T18903] bridge0: port 2(bridge_slave_1) entered blocking state [ 546.696786][T18903] bridge0: port 2(bridge_slave_1) entered disabled state [ 546.714344][T18903] bridge_slave_1: entered allmulticast mode [ 546.726711][T18903] bridge_slave_1: entered promiscuous mode [ 546.813097][T18964] lo speed is unknown, defaulting to 1000 [ 547.009360][T18903] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.045550][T18903] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 547.058854][T18976] netlink: 2 bytes leftover after parsing attributes in process `syz.6.3742'. [ 547.099685][T18934] chnl_net:caif_netlink_parms(): no params data found [ 547.114244][T18976] batadv_slave_1: entered promiscuous mode [ 547.126216][T18871] Bluetooth: hci3: command tx timeout [ 547.166275][T18903] team0: Port device team_slave_0 added [ 547.219279][T18869] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 547.256798][T18903] team0: Port device team_slave_1 added [ 547.279938][T18869] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 547.345350][T18869] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 547.364537][T18903] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 547.377843][T18871] Bluetooth: hci8: command tx timeout [ 547.383554][T18903] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.426168][T18903] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 547.452579][T18903] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 547.460570][T18903] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 547.487793][T18903] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 547.508117][T18869] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 547.606286][T18871] Bluetooth: hci1: command tx timeout [ 547.695596][T18934] bridge0: port 1(bridge_slave_0) entered blocking state [ 547.704013][T18934] bridge0: port 1(bridge_slave_0) entered disabled state [ 547.720372][T18934] bridge_slave_0: entered allmulticast mode [ 547.732942][T18934] bridge_slave_0: entered promiscuous mode [ 547.765093][T18934] bridge0: port 2(bridge_slave_1) entered blocking state [ 547.773410][T18934] bridge0: port 2(bridge_slave_1) entered disabled state [ 547.780889][T18934] bridge_slave_1: entered allmulticast mode [ 547.789044][T18934] bridge_slave_1: entered promiscuous mode [ 547.817300][T18903] hsr_slave_0: entered promiscuous mode [ 547.821129][T18988] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3745'. [ 547.824248][T18903] hsr_slave_1: entered promiscuous mode [ 547.838999][T18903] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 547.840524][T18988] netlink: 24 bytes leftover after parsing attributes in process `syz.6.3745'. [ 547.853565][T18903] Cannot create hsr debugfs directory [ 547.930532][T18934] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 547.996867][T18934] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 548.122210][T18934] team0: Port device team_slave_0 added [ 548.178149][T18934] team0: Port device team_slave_1 added [ 548.327095][T18934] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 548.335858][T18934] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.362593][T18934] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 548.395338][T18934] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 548.411425][T18934] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 548.446618][T18934] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 548.607169][T18934] hsr_slave_0: entered promiscuous mode [ 548.614181][T18934] hsr_slave_1: entered promiscuous mode [ 548.621415][T18934] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 548.630316][T18934] Cannot create hsr debugfs directory [ 548.684398][T18997] sctp: [Deprecated]: syz.4.3749 (pid 18997) Use of struct sctp_assoc_value in delayed_ack socket option. [ 548.684398][T18997] Use struct sctp_sack_info instead [ 548.706319][T18998] sctp: [Deprecated]: syz.4.3749 (pid 18998) Use of struct sctp_assoc_value in delayed_ack socket option. [ 548.706319][T18998] Use struct sctp_sack_info instead [ 548.950785][T19004] tipc: New replicast peer: 255.255.255.255 [ 548.960530][T19004] tipc: Enabled bearer , priority 10 [ 548.988885][T18869] 8021q: adding VLAN 0 to HW filter on device bond0 [ 549.068707][T19005] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3750'. [ 549.108406][T19005] tipc: Disabling bearer [ 549.214816][T18871] Bluetooth: hci3: command tx timeout [ 549.374431][T18869] 8021q: adding VLAN 0 to HW filter on device team0 [ 549.449170][T18871] Bluetooth: hci8: command tx timeout [ 549.459533][T12688] bridge0: port 1(bridge_slave_0) entered blocking state [ 549.466761][T12688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 549.577261][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 549.584467][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 549.677862][T19022] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3757'. [ 549.757352][T18903] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 549.790102][T18903] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 549.888359][T18903] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 549.949015][T18903] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 549.989344][T19028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3758'. [ 550.020098][T19028] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3758'. [ 550.262070][T18934] netdevsim netdevsim8 netdevsim0: renamed from eth0 [ 550.308788][T18934] netdevsim netdevsim8 netdevsim1: renamed from eth1 [ 550.365154][T18934] netdevsim netdevsim8 netdevsim2: renamed from eth2 [ 550.405128][T18934] netdevsim netdevsim8 netdevsim3: renamed from eth3 [ 550.738290][T18903] 8021q: adding VLAN 0 to HW filter on device bond0 [ 550.781079][T18903] 8021q: adding VLAN 0 to HW filter on device team0 [ 550.848199][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 550.855414][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 550.912263][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 550.919539][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 550.973954][T18934] 8021q: adding VLAN 0 to HW filter on device bond0 [ 551.002916][T18869] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.056734][T18934] 8021q: adding VLAN 0 to HW filter on device team0 [ 551.087650][ T6247] bridge0: port 1(bridge_slave_0) entered blocking state [ 551.094866][ T6247] bridge0: port 1(bridge_slave_0) entered forwarding state [ 551.122449][ T6247] bridge0: port 2(bridge_slave_1) entered blocking state [ 551.129673][ T6247] bridge0: port 2(bridge_slave_1) entered forwarding state [ 551.287196][T18871] Bluetooth: hci3: command tx timeout [ 551.300352][T18869] veth0_vlan: entered promiscuous mode [ 551.365542][T18934] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 551.440539][T18869] veth1_vlan: entered promiscuous mode [ 551.528166][T18871] Bluetooth: hci8: command tx timeout [ 551.570001][T19057] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3764'. [ 551.629963][T18869] veth0_macvtap: entered promiscuous mode [ 551.687785][T19057] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3764'. [ 551.687868][T18869] veth1_macvtap: entered promiscuous mode [ 551.701699][T19057] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 551.815731][T18903] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 551.891076][T18869] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 551.949350][T18869] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 551.965772][T19073] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3766'. [ 551.980668][T19074] bridge0: port 1(batadv0) entered disabled state [ 552.018049][T19074] bond0: (slave wlan1): Releasing backup interface [ 552.082230][T18869] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.105821][T18869] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.123469][T18869] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.156084][T18869] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 552.229844][T18934] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 552.282119][T18903] veth0_vlan: entered promiscuous mode [ 552.335357][T19083] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3768'. [ 552.411520][T19086] netlink: 'syz.6.3770': attribute type 13 has an invalid length. [ 552.448456][T18903] veth1_vlan: entered promiscuous mode [ 552.947996][T19086] netdevsim netdevsim6 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.957177][T19086] netdevsim netdevsim6 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.965536][T19086] netdevsim netdevsim6 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 552.974678][T19086] netdevsim netdevsim6 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 553.005402][T19086] netdevsim netdevsim6 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.014184][T19086] netdevsim netdevsim6 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.022778][T19086] netdevsim netdevsim6 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.031251][T19086] netdevsim netdevsim6 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 553.325457][T12680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.364114][T12680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.464157][T18903] veth0_macvtap: entered promiscuous mode [ 553.506553][T18903] veth1_macvtap: entered promiscuous mode [ 553.515104][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 553.523944][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 553.599703][T18903] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 553.608201][T18871] Bluetooth: hci8: command tx timeout [ 553.623906][T18903] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 553.664144][T18903] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.674294][T18903] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.683987][T18903] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.699648][T18903] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 553.905298][T18934] veth0_vlan: entered promiscuous mode [ 553.953335][T18934] veth1_vlan: entered promiscuous mode [ 554.090651][T12688] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.198549][T12680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.231427][T12680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.306456][T12688] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.381538][T18934] veth0_macvtap: entered promiscuous mode [ 554.414589][ T6247] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 554.437602][ T6247] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 554.449790][T12688] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.472763][T18934] veth1_macvtap: entered promiscuous mode [ 554.575193][T12688] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 554.601622][T18934] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 554.667741][T18934] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 554.681985][T18934] netdevsim netdevsim8 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.692326][T18934] netdevsim netdevsim8 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.701708][T18934] netdevsim netdevsim8 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.711657][T18934] netdevsim netdevsim8 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 554.925694][T12688] bridge_slave_1: left allmulticast mode [ 554.939804][T12688] bridge_slave_1: left promiscuous mode [ 554.945672][T12688] bridge0: port 2(bridge_slave_1) entered disabled state [ 554.962741][T12688] bridge_slave_0: left allmulticast mode [ 554.972499][T12688] bridge_slave_0: left promiscuous mode [ 554.982741][T12688] bridge0: port 1(bridge_slave_0) entered disabled state [ 555.489675][ T5152] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 555.499828][ T5152] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 555.513069][ T5152] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 555.522792][ T5152] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 555.540080][ T5152] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 555.701038][T12688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 555.712647][T12688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 555.724523][T12688] bond0 (unregistering): Released all slaves [ 555.787336][T12103] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.795213][T12103] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 555.837374][T19116] lo speed is unknown, defaulting to 1000 [ 555.904164][T12107] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 555.915569][T12107] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 556.155682][T19126] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3776'. [ 556.177003][T19125] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3731'. [ 556.203018][T12688] hsr_slave_0: left promiscuous mode [ 556.214633][T12688] hsr_slave_1: left promiscuous mode [ 556.229634][T19127] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3731'. [ 556.246823][T12688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 556.258946][T12688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 556.278936][T12688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 556.294111][T12688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 556.369056][T12688] veth1_macvtap: left promiscuous mode [ 556.375429][T12688] veth0_macvtap: left promiscuous mode [ 556.396233][T12688] veth1_vlan: left promiscuous mode [ 556.401644][T12688] veth0_vlan: left promiscuous mode [ 556.497259][ T5152] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 556.505473][ T5152] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 556.519337][ T5152] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 556.535534][ T5152] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 556.545545][ T5152] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 557.060109][T12688] team0 (unregistering): Port device team_slave_1 removed [ 557.109519][T12688] team0 (unregistering): Port device team_slave_0 removed [ 557.604358][T19122] bridge5: the hash_elasticity option has been deprecated and is always 16 [ 557.621676][T18871] Bluetooth: hci1: command tx timeout [ 558.194953][T19131] lo speed is unknown, defaulting to 1000 [ 558.414803][T19155] netlink: 504 bytes leftover after parsing attributes in process `syz.4.3782'. [ 558.454952][T19155] netlink: 'syz.4.3782': attribute type 4 has an invalid length. [ 558.465650][T19116] chnl_net:caif_netlink_parms(): no params data found [ 558.576542][ T5840] Bluetooth: hci3: command tx timeout [ 558.879579][T12688] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.066406][T19131] chnl_net:caif_netlink_parms(): no params data found [ 559.125153][T12688] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.152494][T19116] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.160288][T19116] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.170158][T19168] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3785'. [ 559.184368][T19116] bridge_slave_0: entered allmulticast mode [ 559.194759][T19116] bridge_slave_0: entered promiscuous mode [ 559.363323][T12688] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.430647][T19116] bridge0: port 2(bridge_slave_1) entered blocking state [ 559.438777][T19116] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.448157][T19116] bridge_slave_1: entered allmulticast mode [ 559.459296][T19116] bridge_slave_1: entered promiscuous mode [ 559.514074][T19178] bridge_slave_0: left allmulticast mode [ 559.521577][T19178] bridge_slave_0: left promiscuous mode [ 559.531906][T19178] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.550680][T19178] bridge_slave_1: left allmulticast mode [ 559.556494][T19178] bridge_slave_1: left promiscuous mode [ 559.562302][T19178] bridge0: port 2(bridge_slave_1) entered disabled state [ 559.579723][T19178] bond0: (slave bond_slave_0): Releasing backup interface [ 559.590558][T19185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3790'. [ 559.600689][T19178] bond0: (slave bond_slave_1): Releasing backup interface [ 559.627574][T19178] team0: Port device team_slave_0 removed [ 559.643561][T19186] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3790'. [ 559.654214][T19178] team0: Port device team_slave_1 removed [ 559.663904][T19178] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 559.671506][T19178] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 559.681081][T19178] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 559.688686][ T5840] Bluetooth: hci1: command tx timeout [ 559.694758][T19178] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 559.843164][T12688] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.867570][T19190] netlink: 'syz.6.3791': attribute type 11 has an invalid length. [ 560.009081][ T5840] Bluetooth: hci0: command 0x0406 tx timeout [ 560.024463][T19116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.124855][T19116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 560.259988][T19203] netlink: 104 bytes leftover after parsing attributes in process `syz.6.3794'. [ 560.289262][T19116] team0: Port device team_slave_0 added [ 560.302902][T19116] team0: Port device team_slave_1 added [ 560.413612][T19131] bridge0: port 1(bridge_slave_0) entered blocking state [ 560.438215][T19131] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.445578][T19131] bridge_slave_0: entered allmulticast mode [ 560.466305][T19131] bridge_slave_0: entered promiscuous mode [ 560.558183][T19216] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3792'. [ 560.650918][T18871] Bluetooth: hci3: command tx timeout [ 560.691729][T19116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 560.709578][T19116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.756795][T19116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 560.794430][T19131] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.812972][T19131] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.828913][T19131] bridge_slave_1: entered allmulticast mode [ 560.838258][T19131] bridge_slave_1: entered promiscuous mode [ 560.891242][T19216] lo speed is unknown, defaulting to 1000 [ 560.927182][T19116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 560.947300][T19116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 560.989110][T19116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 561.109422][T19131] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 561.155355][T19131] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 561.224995][T19219] netdevsim netdevsim6 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.237098][T19219] netdevsim netdevsim6 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.256327][T19219] netdevsim netdevsim6 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.264742][T19219] netdevsim netdevsim6 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 561.288832][T19217] lo speed is unknown, defaulting to 1000 [ 561.339595][T19131] team0: Port device team_slave_0 added [ 561.439694][T19131] team0: Port device team_slave_1 added [ 561.447946][T12688] bridge_slave_1: left allmulticast mode [ 561.453635][T12688] bridge_slave_1: left promiscuous mode [ 561.459611][T12688] bridge0: port 2(bridge_slave_1) entered disabled state [ 561.470842][T12688] bridge_slave_0: left allmulticast mode [ 561.477213][T12688] bridge_slave_0: left promiscuous mode [ 561.483008][T12688] bridge0: port 1(bridge_slave_0) entered disabled state [ 561.778122][T18871] Bluetooth: hci1: command tx timeout [ 561.935155][T12688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.948660][T12688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.960827][T12688] bond0 (unregistering): Released all slaves [ 561.986761][T19116] hsr_slave_0: entered promiscuous mode [ 561.993282][T19116] hsr_slave_1: entered promiscuous mode [ 562.000609][T19116] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 562.011781][T19116] Cannot create hsr debugfs directory [ 562.193842][T19131] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 562.201796][T19131] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.229703][T19131] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 562.294930][T19131] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 562.302733][T19131] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 562.330298][T19131] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 562.361724][T19234] lo speed is unknown, defaulting to 1000 [ 562.616969][T12688] hsr_slave_0: left promiscuous mode [ 562.639369][T12688] hsr_slave_1: left promiscuous mode [ 562.646032][T12688] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.665185][T12688] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.674816][T12688] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.690603][T12688] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.691935][T19244] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3805'. [ 562.726380][T18871] Bluetooth: hci3: command tx timeout [ 562.734964][T12688] veth1_macvtap: left promiscuous mode [ 562.740768][T12688] veth0_macvtap: left promiscuous mode [ 562.746779][T12688] veth1_vlan: left promiscuous mode [ 562.752290][T12688] veth0_vlan: left promiscuous mode [ 562.760309][T19245] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3805'. [ 563.062358][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 563.379875][T12688] team0 (unregistering): Port device team_slave_1 removed [ 563.431832][T12688] team0 (unregistering): Port device team_slave_0 removed [ 563.847324][T18871] Bluetooth: hci1: command tx timeout [ 564.023495][T19131] hsr_slave_0: entered promiscuous mode [ 564.033114][T19131] hsr_slave_1: entered promiscuous mode [ 564.047638][T19131] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 564.057222][T19131] Cannot create hsr debugfs directory [ 564.715370][T19263] netlink: 8 bytes leftover after parsing attributes in process `syz.8.3810'. [ 564.806824][T18871] Bluetooth: hci3: command tx timeout [ 565.120614][T19116] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 565.154192][T19116] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 565.182845][T19116] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 565.243417][T19116] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 565.371592][T19131] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 565.406438][T19131] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 565.427876][T19284] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3816'. [ 565.438515][T19131] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 565.460291][T19131] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 565.460478][T19284] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3816'. [ 565.652168][T19116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 565.685738][T19116] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.765098][ T6264] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.772347][ T6264] bridge0: port 1(bridge_slave_0) entered forwarding state [ 565.788454][T19287] netlink: 36 bytes leftover after parsing attributes in process `syz.8.3818'. [ 565.803530][T19288] openvswitch: netlink: Key 18 has unexpected len 4 expected 2 [ 565.814422][T19293] netlink: 32 bytes leftover after parsing attributes in process `syz.8.3818'. [ 565.863873][T12103] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.871135][T12103] bridge0: port 2(bridge_slave_1) entered forwarding state [ 565.915063][T19131] 8021q: adding VLAN 0 to HW filter on device bond0 [ 566.040003][T19131] 8021q: adding VLAN 0 to HW filter on device team0 [ 566.104176][T12685] bridge0: port 1(bridge_slave_0) entered blocking state [ 566.111409][T12685] bridge0: port 1(bridge_slave_0) entered forwarding state [ 566.174521][T12680] bridge0: port 2(bridge_slave_1) entered blocking state [ 566.181825][T12680] bridge0: port 2(bridge_slave_1) entered forwarding state [ 566.391946][T19301] netlink: 68 bytes leftover after parsing attributes in process `syz.4.3821'. [ 566.532924][T19301] team0: Mode "" not found [ 566.613320][T19307] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3821'. [ 566.735946][T19116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 566.894579][T19324] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3825'. [ 566.967620][T19116] veth0_vlan: entered promiscuous mode [ 567.012407][T19116] veth1_vlan: entered promiscuous mode [ 567.042569][T19131] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 567.178047][T19116] veth0_macvtap: entered promiscuous mode [ 567.232330][T19116] veth1_macvtap: entered promiscuous mode [ 567.317188][T19131] veth0_vlan: entered promiscuous mode [ 567.374384][T19116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 567.413783][T19131] veth1_vlan: entered promiscuous mode [ 567.495274][T19116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 567.550906][T19116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.568421][T19116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.597600][T19116] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 567.616222][T19116] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.062723][T19131] veth0_macvtap: entered promiscuous mode [ 568.164042][T19131] veth1_macvtap: entered promiscuous mode [ 568.258738][T19364] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3834'. [ 568.278512][ T6247] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.286781][ T6247] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.311520][T19131] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 568.324364][T19131] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 568.360945][T19363] netlink: 'syz.8.3835': attribute type 93 has an invalid length. [ 568.429020][T19131] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.444346][T19131] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.464222][T19131] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.473383][T19131] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.497785][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.505713][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.602103][T19374] ip6t_rpfilter: unknown options [ 568.805758][T12680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.827028][T12680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 568.888123][T19378] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3841'. [ 568.918339][T19381] netlink: 256 bytes leftover after parsing attributes in process `syz.8.3841'. [ 568.983797][T12103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 568.997795][T19383] netlink: 28 bytes leftover after parsing attributes in process `syz.4.3842'. [ 569.009136][T12103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 569.046877][T19383] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3842'. [ 569.110427][T12680] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.365787][T12680] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.455406][T12680] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.531928][T12680] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 569.748002][T12680] bridge_slave_1: left allmulticast mode [ 569.753715][T12680] bridge_slave_1: left promiscuous mode [ 569.760154][T12680] bridge0: port 2(bridge_slave_1) entered disabled state [ 569.782971][T12680] bridge_slave_0: left allmulticast mode [ 569.790403][T12680] bridge_slave_0: left promiscuous mode [ 569.796366][T12680] bridge0: port 1(bridge_slave_0) entered disabled state [ 570.295475][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 570.308140][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 570.316665][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 570.325651][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 570.337576][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 570.453441][T12680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 570.464805][T12680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 570.479727][T12680] bond0 (unregistering): Released all slaves [ 570.531269][T19394] lo speed is unknown, defaulting to 1000 [ 570.854909][T12680] hsr_slave_0: left promiscuous mode [ 570.895427][T12680] hsr_slave_1: left promiscuous mode [ 570.925182][T12680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 570.942421][T12680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 570.977879][T12680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 570.992582][T12680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 571.103024][T12680] veth1_macvtap: left promiscuous mode [ 571.140242][T12680] veth0_macvtap: left promiscuous mode [ 571.156220][T12680] veth1_vlan: left promiscuous mode [ 571.161663][T12680] veth0_vlan: left promiscuous mode [ 571.421008][T19418] IPv6: addrconf: prefix option has invalid lifetime [ 571.561236][T18871] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 571.571658][T18871] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 571.582515][T18871] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 571.591392][T18871] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 571.599483][T18871] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 572.021751][T12680] team0 (unregistering): Port device team_slave_1 removed [ 572.073974][T12680] team0 (unregistering): Port device team_slave_0 removed [ 572.413021][T18871] Bluetooth: hci1: command tx timeout [ 572.639256][T19394] chnl_net:caif_netlink_parms(): no params data found [ 572.884069][T19421] lo speed is unknown, defaulting to 1000 [ 573.037407][T19440] netlink: 24 bytes leftover after parsing attributes in process `syz.8.3858'. [ 573.078293][T19394] bridge0: port 1(bridge_slave_0) entered blocking state [ 573.085452][T19394] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.147399][T19394] bridge_slave_0: entered allmulticast mode [ 573.159667][T19394] bridge_slave_0: entered promiscuous mode [ 573.192824][T19394] bridge0: port 2(bridge_slave_1) entered blocking state [ 573.206217][T19394] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.213706][T19394] bridge_slave_1: entered allmulticast mode [ 573.239996][T19394] bridge_slave_1: entered promiscuous mode [ 573.560534][T19394] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 573.578161][T19453] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3862'. [ 573.596201][T19453] netlink: 16 bytes leftover after parsing attributes in process `syz.6.3862'. [ 573.619895][T19394] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 573.686351][T18871] Bluetooth: hci3: command tx timeout [ 573.732489][T19394] team0: Port device team_slave_0 added [ 573.788657][T19394] team0: Port device team_slave_1 added [ 574.022679][T12680] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.133932][T19394] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 574.152617][T19394] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.209699][T19394] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 574.239151][T19467] bond0: (slave team0): Releasing backup interface [ 574.321148][T12680] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.357580][T19394] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 574.376996][T19394] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 574.438621][T19394] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 574.492812][T18871] Bluetooth: hci1: command tx timeout [ 574.538443][T19421] chnl_net:caif_netlink_parms(): no params data found [ 574.678638][T19481] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 574.726540][T19482] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 574.767906][T12680] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 574.858354][T19480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 574.875546][T19485] bridge0: port 1(batadv0) entered blocking state [ 574.896656][T19485] bridge0: port 1(batadv0) entered disabled state [ 574.907785][T19485] batadv0: entered allmulticast mode [ 574.915302][T19485] batadv0: entered promiscuous mode [ 575.062306][T12680] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 575.100785][T19394] hsr_slave_0: entered promiscuous mode [ 575.133176][T19394] hsr_slave_1: entered promiscuous mode [ 575.140004][T19394] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 575.153363][T19394] Cannot create hsr debugfs directory [ 575.242776][T19489] ieee802154 phy1 wpan1: encryption failed: -22 [ 575.380152][T12688] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 575.389798][T12688] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 575.421427][T19421] bridge0: port 1(bridge_slave_0) entered blocking state [ 575.436854][T19421] bridge0: port 1(bridge_slave_0) entered disabled state [ 575.444486][T19421] bridge_slave_0: entered allmulticast mode [ 575.461979][T19421] bridge_slave_0: entered promiscuous mode [ 575.495884][T19421] bridge0: port 2(bridge_slave_1) entered blocking state [ 575.513348][T19421] bridge0: port 2(bridge_slave_1) entered disabled state [ 575.524430][T19421] bridge_slave_1: entered allmulticast mode [ 575.533841][T19421] bridge_slave_1: entered promiscuous mode [ 575.629810][T19421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 575.679573][T19421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 575.766214][T18871] Bluetooth: hci3: command tx timeout [ 575.926589][T19421] team0: Port device team_slave_0 added [ 575.998694][T19421] team0: Port device team_slave_1 added [ 576.171248][T19421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 576.196116][T19421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.248588][T19421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 576.272651][T12680] bridge_slave_1: left allmulticast mode [ 576.281872][T12680] bridge_slave_1: left promiscuous mode [ 576.294506][T12680] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.327538][T12680] bridge_slave_0: left allmulticast mode [ 576.333270][T12680] bridge_slave_0: left promiscuous mode [ 576.346529][T12680] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.475154][T19509] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3878'. [ 576.497849][T19509] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3878'. [ 576.572658][T18871] Bluetooth: hci1: command tx timeout [ 577.173091][T12680] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 577.201707][T12680] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 577.222527][T12680] bond0 (unregistering): Released all slaves [ 577.280477][T19421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 577.316161][T19421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 577.351659][T19421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 577.430778][T19509] macsec1: entered allmulticast mode [ 577.436453][T19509] gretap0: entered allmulticast mode [ 577.622780][T19512] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3879'. [ 577.846554][T18871] Bluetooth: hci3: command tx timeout [ 578.223634][T19421] hsr_slave_0: entered promiscuous mode [ 578.232292][T19515] netlink: 12 bytes leftover after parsing attributes in process `syz.6.3880'. [ 578.276852][T19421] hsr_slave_1: entered promiscuous mode [ 578.283435][T19421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 578.308760][T19421] Cannot create hsr debugfs directory [ 578.395286][T19515] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3880'. [ 578.455280][T12680] hsr_slave_0: left promiscuous mode [ 578.478451][T12680] hsr_slave_1: left promiscuous mode [ 578.484836][T12680] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 578.506192][T12680] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 578.527169][T12680] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 578.534752][T12680] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 578.630314][T12680] veth1_macvtap: left promiscuous mode [ 578.635946][T12680] veth0_macvtap: left promiscuous mode [ 578.656086][T18871] Bluetooth: hci1: command tx timeout [ 578.676452][T12680] veth1_vlan: left promiscuous mode [ 578.681958][T12680] veth0_vlan: left promiscuous mode [ 579.725761][T12680] team0 (unregistering): Port device team_slave_1 removed [ 579.796771][T12680] team0 (unregistering): Port device team_slave_0 removed [ 579.933839][T18871] Bluetooth: hci3: command tx timeout [ 580.669452][T19515] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 580.697996][T19515] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 580.731338][T19520] bond2 (unregistering): (slave batadv1): Releasing backup interface [ 580.759028][T19520] bond2 (unregistering): Released all slaves [ 581.104197][T19533] netlink: 'syz.4.3883': attribute type 26 has an invalid length. [ 581.190550][T19535] ieee802154 phy1 wpan1: encryption failed: -22 [ 581.302240][T19394] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 581.357456][T19394] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 581.441671][T19394] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 581.541921][T19394] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 581.850598][T19547] xt_time: unknown flags 0x4 [ 581.925741][T19394] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.140333][T19394] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.161148][T19421] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 582.194922][T19421] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 582.233744][T12688] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.240974][T12688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.258804][T19558] netlink: 732 bytes leftover after parsing attributes in process `syz.8.3891'. [ 582.272097][T19421] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 582.282679][T19558] netlink: 732 bytes leftover after parsing attributes in process `syz.8.3891'. [ 582.297377][T19421] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 582.319112][T12688] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.326332][T12688] bridge0: port 2(bridge_slave_1) entered forwarding state [ 582.629299][T19564] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3893'. [ 582.689918][T19421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 582.750836][T19421] 8021q: adding VLAN 0 to HW filter on device team0 [ 582.798700][T12688] bridge0: port 1(bridge_slave_0) entered blocking state [ 582.806024][T12688] bridge0: port 1(bridge_slave_0) entered forwarding state [ 582.837507][T12107] bridge0: port 2(bridge_slave_1) entered blocking state [ 582.844849][T12107] bridge0: port 2(bridge_slave_1) entered forwarding state [ 583.153153][T19394] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 583.313234][T19394] veth0_vlan: entered promiscuous mode [ 583.327810][T19394] veth1_vlan: entered promiscuous mode [ 583.437477][T19394] veth0_macvtap: entered promiscuous mode [ 583.474850][T19394] veth1_macvtap: entered promiscuous mode [ 583.553784][T19394] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 583.619085][T19394] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 583.663672][T19394] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.683361][T19394] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.702860][T19394] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.722826][T19394] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 583.770167][T19421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 584.045512][T12680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.071059][T12680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.197899][ T996] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.210371][T19421] veth0_vlan: entered promiscuous mode [ 584.216706][ T996] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 584.242280][T19421] veth1_vlan: entered promiscuous mode [ 584.350528][T19421] veth0_macvtap: entered promiscuous mode [ 584.379547][T19421] veth1_macvtap: entered promiscuous mode [ 584.402173][T19421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 584.415265][T19421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 584.525132][T19421] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.558666][T19421] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.587014][T19421] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.606416][T19421] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 584.722902][T19597] lo speed is unknown, defaulting to 1000 [ 584.881985][T12680] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 584.900691][T12680] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.156984][T12107] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.307759][T12103] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 585.326690][T12103] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 585.501703][T12107] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.857352][T12107] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 585.958869][T12107] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 586.160933][T12107] bridge_slave_1: left allmulticast mode [ 586.176909][T12107] bridge_slave_1: left promiscuous mode [ 586.182756][T12107] bridge0: port 2(bridge_slave_1) entered disabled state [ 586.193360][T12107] bridge_slave_0: left allmulticast mode [ 586.199662][T12107] bridge_slave_0: left promiscuous mode [ 586.205492][T12107] bridge0: port 1(bridge_slave_0) entered disabled state [ 586.749714][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 586.759389][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 586.769641][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 586.787489][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 586.795258][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 586.964858][T12107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 586.980740][T12107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 586.994408][T12107] bond0 (unregistering): Released all slaves [ 587.045412][T19603] lo speed is unknown, defaulting to 1000 [ 587.376269][T12107] hsr_slave_0: left promiscuous mode [ 587.416094][T12107] hsr_slave_1: left promiscuous mode [ 587.422168][T12107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 587.431276][T19611] netlink: 4 bytes leftover after parsing attributes in process `syz.8.3901'. [ 587.456349][T12107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 587.458611][T19612] netlink: 4 bytes leftover after parsing attributes in process `syz.6.3902'. [ 587.474199][T12107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 587.487895][T19613] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3901'. [ 587.497154][T12107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 587.553635][T12107] veth1_macvtap: left promiscuous mode [ 587.560195][T12107] veth0_macvtap: left promiscuous mode [ 587.565917][T12107] veth1_vlan: left promiscuous mode [ 587.571518][T12107] veth0_vlan: left promiscuous mode [ 587.815406][ T5840] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 587.824661][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 587.833458][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 587.844714][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 587.852761][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 588.448376][T12107] team0 (unregistering): Port device team_slave_1 removed [ 588.505256][T12107] team0 (unregistering): Port device team_slave_0 removed [ 588.901563][ T5840] Bluetooth: hci1: command tx timeout [ 589.124849][T19603] chnl_net:caif_netlink_parms(): no params data found [ 589.289357][T19619] lo speed is unknown, defaulting to 1000 [ 589.536726][T19603] bridge0: port 1(bridge_slave_0) entered blocking state [ 589.544024][T19603] bridge0: port 1(bridge_slave_0) entered disabled state [ 589.566502][T19603] bridge_slave_0: entered allmulticast mode [ 589.578267][T19603] bridge_slave_0: entered promiscuous mode [ 589.599638][T19603] bridge0: port 2(bridge_slave_1) entered blocking state [ 589.616122][T19603] bridge0: port 2(bridge_slave_1) entered disabled state [ 589.624150][T19603] bridge_slave_1: entered allmulticast mode [ 589.632918][T19603] bridge_slave_1: entered promiscuous mode [ 589.713230][T19603] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 589.729480][T19603] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 589.837968][T19603] team0: Port device team_slave_0 added [ 589.874247][T19603] team0: Port device team_slave_1 added [ 589.926833][ T5840] Bluetooth: hci3: command tx timeout [ 590.138395][T19603] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.145416][T19603] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.196423][T19603] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.209951][T19603] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.217017][T19603] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.401939][T19603] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.533568][T19644] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 590.552792][T12107] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.650141][T19619] chnl_net:caif_netlink_parms(): no params data found [ 590.713266][T19603] hsr_slave_0: entered promiscuous mode [ 590.726183][ T5840] Bluetooth: hci6: command 0x0406 tx timeout [ 590.739358][T19603] hsr_slave_1: entered promiscuous mode [ 590.745796][T19603] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 590.802426][T19603] Cannot create hsr debugfs directory [ 590.849392][T12107] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 590.977501][T18871] Bluetooth: hci1: command tx timeout [ 591.173044][T19661] netlink: 1041 bytes leftover after parsing attributes in process `syz.8.3911'. [ 591.508342][T12107] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.653361][T12107] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.765259][T19671] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3914'. [ 591.888508][T19619] bridge0: port 1(bridge_slave_0) entered blocking state [ 591.895816][T19619] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.904911][T19619] bridge_slave_0: entered allmulticast mode [ 591.913133][T19619] bridge_slave_0: entered promiscuous mode [ 591.939452][T19619] bridge0: port 2(bridge_slave_1) entered blocking state [ 591.947297][T19619] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.954653][T19619] bridge_slave_1: entered allmulticast mode [ 591.963349][T19619] bridge_slave_1: entered promiscuous mode [ 592.007602][T18871] Bluetooth: hci3: command tx timeout [ 592.132428][T19619] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 592.179940][T19619] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 592.191594][T19682] netlink: 12 bytes leftover after parsing attributes in process `syz.8.3919'. [ 592.254123][T19619] team0: Port device team_slave_0 added [ 592.260883][T19681] netlink: 8 bytes leftover after parsing attributes in process `syz.6.3918'. [ 592.261832][T19682] netlink: 20 bytes leftover after parsing attributes in process `syz.8.3919'. [ 592.292346][T19682] A link change request failed with some changes committed already. Interface veth0_macvtap may have been left with an inconsistent configuration, please check. [ 592.378584][T19619] team0: Port device team_slave_1 added [ 592.468462][T12107] bridge_slave_1: left allmulticast mode [ 592.474172][T12107] bridge_slave_1: left promiscuous mode [ 592.491555][T12107] bridge0: port 2(bridge_slave_1) entered disabled state [ 592.533498][T12107] bridge_slave_0: left allmulticast mode [ 592.547077][T12107] bridge_slave_0: left promiscuous mode [ 592.552991][T12107] bridge0: port 1(bridge_slave_0) entered disabled state [ 592.720401][T12107] batman_adv: batadv0: Removing interface: ip6gretap1 [ 592.908152][T12107] erspan0 (unregistering): left promiscuous mode [ 593.039763][T12107] dvmrp1 (unregistering): left allmulticast mode [ 593.046842][T18871] Bluetooth: hci1: command tx timeout [ 593.444654][T12107] bond1 (unregistering): Released all slaves [ 593.462955][T12107] bond2 (unregistering): Released all slaves [ 593.480125][T12107] bond0 (unregistering): Released all slaves [ 593.494786][T12107] bond3 (unregistering): Released all slaves [ 593.873881][T12107] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 593.885436][T12107] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 593.896165][T12107] bond0 (unregistering): Released all slaves [ 594.093848][T18871] Bluetooth: hci3: command tx timeout [ 594.183052][T19619] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 594.201479][T19619] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.279940][T19619] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 594.316227][T19619] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 594.323241][T19619] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 594.350374][T19619] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 594.375157][T12107] tipc: Left network mode [ 594.375222][T19708] netlink: 132 bytes leftover after parsing attributes in process `syz.6.3926'. [ 594.721179][T19619] hsr_slave_0: entered promiscuous mode [ 594.728974][T19619] hsr_slave_1: entered promiscuous mode [ 594.735453][T19619] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 594.743353][T19619] Cannot create hsr debugfs directory [ 595.031934][T19722] netlink: 'syz.8.3931': attribute type 10 has an invalid length. [ 595.040960][T19718] syz_tun: entered allmulticast mode [ 595.054592][T19720] bridge0: entered promiscuous mode [ 595.057642][T19722] netlink: 40 bytes leftover after parsing attributes in process `syz.8.3931'. [ 595.075733][T19720] macvlan4: entered promiscuous mode [ 595.083716][T19720] bridge0: port 1(macvlan4) entered blocking state [ 595.091456][T19720] bridge0: port 1(macvlan4) entered disabled state [ 595.098404][T19720] macvlan4: entered allmulticast mode [ 595.103905][T19720] bridge0: entered allmulticast mode [ 595.112508][T19720] macvlan4: left allmulticast mode [ 595.117944][T19720] bridge0: left allmulticast mode [ 595.124489][T19720] bridge0: left promiscuous mode [ 595.126528][T18871] Bluetooth: hci1: command tx timeout [ 595.159520][T19603] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 595.171524][T19603] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 595.200086][T19722] batadv0: entered promiscuous mode [ 595.205558][T19722] batadv0: entered allmulticast mode [ 595.212430][T19722] bridge0: port 1(batadv0) entered blocking state [ 595.219533][T19722] bridge0: port 1(batadv0) entered disabled state [ 595.229952][T19722] bridge0: port 1(batadv0) entered blocking state [ 595.236557][T19722] bridge0: port 1(batadv0) entered forwarding state [ 595.249527][T19603] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 595.305801][T19603] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 595.322405][T19717] syz_tun: left allmulticast mode [ 595.339098][ T6264] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 595.348561][ T6264] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 595.605694][T12107] batadv_slave_1: left promiscuous mode [ 595.627130][T12107] hsr_slave_0: left promiscuous mode [ 595.642129][T12107] hsr_slave_1: left promiscuous mode [ 595.674130][T12107] hsr_slave_0: left promiscuous mode [ 595.680737][T12107] hsr_slave_1: left promiscuous mode [ 595.689226][T12107] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 595.700053][T12107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 595.709786][T12107] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 595.717988][T12107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 595.752920][T12107] veth1_macvtap: left promiscuous mode [ 595.758997][T12107] veth0_macvtap: left promiscuous mode [ 595.764622][T12107] veth1_vlan: left promiscuous mode [ 595.770100][T12107] veth0_vlan: left promiscuous mode [ 596.182404][T18871] Bluetooth: hci3: command tx timeout [ 596.318799][T19726] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 596.398016][T19738] netlink: 'syz.8.3935': attribute type 4 has an invalid length. [ 596.919813][ T5840] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 596.931826][ T5840] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 596.941195][ T5840] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 596.952812][ T5840] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 596.966477][ T31] INFO: task syz.0.3351:17400 blocked for more than 143 seconds. [ 596.974293][ T31] Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 [ 596.983373][ T5840] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 596.986106][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 596.999663][ T31] task:syz.0.3351 state:D stack:27400 pid:17400 tgid:17399 ppid:16352 task_flags:0x400140 flags:0x00004004 [ 597.012018][ T31] Call Trace: [ 597.015488][ T31] SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 597.019272][ T31] __schedule+0x16f5/0x4d00 [ 597.025376][ T31] ? __lock_acquire+0xab9/0xd20 [ 597.030556][ T31] ? schedule+0x165/0x360 [ 597.035048][ T31] ? __pfx___schedule+0x10/0x10 [ 597.040127][ T31] ? schedule+0x91/0x360 [ 597.044413][ T31] schedule+0x165/0x360 [ 597.056248][ T31] schedule_preempt_disabled+0x13/0x30 [ 597.061779][ T31] __mutex_lock+0x724/0xe80 [ 597.066751][ T31] ? __mutex_lock+0x51b/0xe80 [ 597.071491][ T31] ? nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 597.077422][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 597.082502][ T31] ? __nlmsg_put+0xef/0x1b0 [ 597.087179][ T31] ? genlmsg_put+0x137/0x2e0 [ 597.091895][ T31] nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 597.106067][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 597.122443][ T31] ? is_bpf_text_address+0x26/0x2b0 [ 597.136010][ T31] ? kernel_text_address+0xa5/0xe0 [ 597.141209][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 597.158336][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 597.164583][ T31] genl_rcv_msg+0x60e/0x790 [ 597.173148][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 597.178298][ T31] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 597.184531][ T31] netlink_rcv_skb+0x205/0x470 [ 597.216045][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 597.221256][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 597.242465][ T31] ? down_read+0x1ad/0x2e0 [ 597.247161][ T31] genl_rcv+0x28/0x40 [ 597.251187][ T31] netlink_unicast+0x758/0x8d0 [ 597.256558][ T31] netlink_sendmsg+0x805/0xb30 [ 597.261407][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.267005][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 597.271983][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 597.277356][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 597.282667][ T31] __sock_sendmsg+0x219/0x270 [ 597.287522][ T31] ____sys_sendmsg+0x505/0x830 [ 597.292321][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 597.297684][ T31] ? import_iovec+0x74/0xa0 [ 597.302225][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 597.307036][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 597.312287][ T31] ? __fget_files+0x2a/0x420 [ 597.316957][ T31] ? __fget_files+0x3a0/0x420 [ 597.321688][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 597.326742][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 597.332966][ T31] ? rcu_is_watching+0x15/0xb0 [ 597.337831][ T31] ? do_syscall_64+0xbe/0x3b0 [ 597.342560][ T31] do_syscall_64+0xfa/0x3b0 [ 597.347188][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.352418][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.358616][ T31] ? clear_bhb_loop+0x60/0xb0 [ 597.363321][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 597.369425][ T31] RIP: 0033:0x7f569178e969 [ 597.374013][ T31] RSP: 002b:00007f5692524038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 597.382706][ T31] RAX: ffffffffffffffda RBX: 00007f56919b5fa0 RCX: 00007f569178e969 [ 597.390789][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000004 [ 597.398900][ T31] RBP: 00007f5691810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 597.406997][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 597.415007][ T31] R13: 0000000000000000 R14: 00007f56919b5fa0 R15: 00007ffe93640998 [ 597.423081][ T31] [ 597.432888][ T31] [ 597.432888][ T31] Showing all locks held in the system: [ 597.444835][ T31] 1 lock held by khungtaskd/31: [ 597.458716][ T31] #0: ffffffff8e13ccc0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 597.469057][ T31] 2 locks held by getty/5593: [ 597.473771][ T31] #0: ffff8880353220a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 597.486575][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 597.496829][ T31] 3 locks held by kworker/u8:12/6247: [ 597.502202][ T31] #0: ffff88814bfd7948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 597.513927][ T31] #1: ffffc9000bf97bc0 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 597.528001][ T31] #2: ffffffff8f50a808 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 597.538674][ T31] 2 locks held by kworker/u8:23/6264: [ 597.544089][ T31] 5 locks held by kworker/u8:32/12107: [ 597.549661][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 597.560810][ T31] #1: ffffc9000c317bc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 597.571459][ T31] #2: ffffffff8f4fdc10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x8a0 [ 597.581008][ T31] #3: ffffffff8f50a808 (rtnl_mutex){+.+.}-{4:4}, at: default_device_exit_batch+0xdc/0x890 [ 597.591257][ T31] #4: ffffffff8e1427f8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x2f4/0x730 [ 597.602577][ T31] 3 locks held by kworker/u8:33/12680: [ 597.608288][T18871] Bluetooth: hci0: command 0x0406 tx timeout [ 597.614715][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 597.626608][ T31] #1: ffffc9000e10fbc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 597.637829][ T31] #2: ffffffff8f50a808 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 597.647978][ T31] 2 locks held by syz.3.1949/12953: [ 597.653200][ T31] #0: ffffffff8f570970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 597.661477][ T31] #1: ffffffff8e41b528 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 597.671885][ T31] 2 locks held by syz.0.3351/17400: [ 597.677336][ T31] #0: ffffffff8f570970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 597.685579][ T31] #1: ffffffff8e41b528 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_threads_get_doit+0x1b6/0x6f0 [ 597.695802][ T31] 2 locks held by syz.5.3510/18038: [ 597.703091][ T31] #0: ffffffff8f570970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 597.711772][ T31] #1: ffffffff8e41b528 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 597.722257][ T31] 2 locks held by syz.7.3673/18716: [ 597.727541][ T31] #0: ffffffff8f570970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 597.735873][ T31] #1: ffffffff8e41b528 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 597.746871][ T31] 2 locks held by syz.4.3883/19533: [ 597.752117][ T31] #0: ffffffff8f570970 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 597.760462][ T31] #1: ffffffff8e41b528 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 597.771027][ T31] 1 lock held by syz-executor/19603: [ 597.776400][ T31] #0: ffffffff8f50a808 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x5b7/0xd20 [ 597.785908][ T31] 2 locks held by syz-executor/19619: [ 597.791400][ T31] #0: ffffffff8fa0f458 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 597.801102][ T31] #1: ffffffff8f50a808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 597.812263][ T31] 1 lock held by syz.8.3935/19738: [ 597.818831][ T31] #0: ffffffff8f50a808 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_setlink+0x4ea/0x900 [ 597.828302][ T31] 1 lock held by syz.6.3937/19741: [ 597.833443][ T31] #0: ffffffff8f50a808 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x37a/0x1df0 [ 597.843743][ T31] 1 lock held by syz.6.3937/19742: [ 597.849005][ T31] #0: ffffffff8f50a808 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x71c/0xb70 [ 597.858535][ T31] 1 lock held by syz-executor/19744: [ 597.863838][ T31] #0: ffffffff8f50a808 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x3b0/0x18b0 [ 597.873400][ T31] [ 597.875798][ T31] ============================================= [ 597.875798][ T31] [ 597.885200][ T31] NMI backtrace for cpu 0 [ 597.885224][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 597.885247][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 597.885260][ T31] Call Trace: [ 597.885269][ T31] [ 597.885280][ T31] dump_stack_lvl+0x189/0x250 [ 597.885314][ T31] ? __wake_up_klogd+0xd9/0x110 [ 597.885339][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 597.885372][ T31] ? __pfx__printk+0x10/0x10 [ 597.885407][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 597.885431][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 597.885450][ T31] ? _printk+0xcf/0x120 [ 597.885476][ T31] ? __pfx__printk+0x10/0x10 [ 597.885501][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 597.885532][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 597.885557][ T31] watchdog+0xfee/0x1030 [ 597.885586][ T31] ? watchdog+0x1de/0x1030 [ 597.885621][ T31] kthread+0x70e/0x8a0 [ 597.885647][ T31] ? __pfx_watchdog+0x10/0x10 [ 597.885671][ T31] ? __pfx_kthread+0x10/0x10 [ 597.885696][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 597.885720][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 597.885744][ T31] ? __pfx_kthread+0x10/0x10 [ 597.885767][ T31] ret_from_fork+0x3fc/0x770 [ 597.885799][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 597.885842][ T31] ? __switch_to_asm+0x39/0x70 [ 597.885862][ T31] ? __switch_to_asm+0x33/0x70 [ 597.885882][ T31] ? __pfx_kthread+0x10/0x10 [ 597.885906][ T31] ret_from_fork_asm+0x1a/0x30 [ 597.885946][ T31] [ 598.038059][ T31] Sending NMI from CPU 0 to CPUs 1: [ 598.043337][ C1] NMI backtrace for cpu 1 [ 598.043357][ C1] CPU: 1 UID: 0 PID: 36 Comm: kworker/u8:2 Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 598.043380][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 598.043394][ C1] Workqueue: bat_events batadv_nc_worker [ 598.043420][ C1] RIP: 0010:validate_chain+0x1/0x2140 [ 598.043450][ C1] Code: 89 e6 4c 89 ff 29 f5 0f 82 91 fe ff ff eb b3 66 2e 0f 1f 84 00 00 00 00 00 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 55 <41> 57 41 56 41 55 41 54 53 48 81 ec e0 00 00 00 49 89 cf 65 48 8b [ 598.043467][ C1] RSP: 0018:ffffc90000ac78e0 EFLAGS: 00000086 [ 598.043483][ C1] RAX: ffffffff934468e8 RBX: 0000000000000002 RCX: ce32a8a213784637 [ 598.043497][ C1] RDX: 0000000000000000 RSI: ffff888143aea940 RDI: ffff888143ae9e00 [ 598.043510][ C1] RBP: 0000000000000000 R08: 0000000000000000 R09: ffffffff8b315602 [ 598.043522][ C1] R10: dffffc0000000000 R11: ffffffff8b315530 R12: 0000000032373960 [ 598.043536][ C1] R13: ffff888143aea8f0 R14: ffff888143aea940 R15: ce32a8a213784637 [ 598.043551][ C1] FS: 0000000000000000(0000) GS:ffff888125d66000(0000) knlGS:0000000000000000 [ 598.043565][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 598.043578][ C1] CR2: 000056109efbefb0 CR3: 000000000df36000 CR4: 00000000003526f0 [ 598.043594][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 598.043604][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 598.043616][ C1] Call Trace: [ 598.043624][ C1] [ 598.043633][ C1] __lock_acquire+0xab9/0xd20 [ 598.043660][ C1] ? batadv_nc_worker+0xd2/0x610 [ 598.043678][ C1] lock_acquire+0x120/0x360 [ 598.043699][ C1] ? batadv_nc_worker+0xd2/0x610 [ 598.043722][ C1] ? batadv_nc_worker+0xd2/0x610 [ 598.043740][ C1] ? batadv_nc_worker+0xd2/0x610 [ 598.043759][ C1] batadv_nc_worker+0xef/0x610 [ 598.043786][ C1] ? batadv_nc_worker+0xd2/0x610 [ 598.043806][ C1] ? process_scheduled_works+0x9ef/0x17b0 [ 598.043833][ C1] process_scheduled_works+0xae1/0x17b0 [ 598.043873][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 598.043907][ C1] worker_thread+0x8a0/0xda0 [ 598.043934][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 598.043960][ C1] ? __kthread_parkme+0x7b/0x200 [ 598.043992][ C1] kthread+0x70e/0x8a0 [ 598.044012][ C1] ? __pfx_worker_thread+0x10/0x10 [ 598.044039][ C1] ? __pfx_kthread+0x10/0x10 [ 598.044058][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 598.044076][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 598.044097][ C1] ? __pfx_kthread+0x10/0x10 [ 598.044116][ C1] ret_from_fork+0x3fc/0x770 [ 598.044141][ C1] ? __pfx_ret_from_fork+0x10/0x10 [ 598.044167][ C1] ? __switch_to_asm+0x39/0x70 [ 598.044187][ C1] ? __switch_to_asm+0x33/0x70 [ 598.044204][ C1] ? __pfx_kthread+0x10/0x10 [ 598.044223][ C1] ret_from_fork_asm+0x1a/0x30 [ 598.044249][ C1] [ 598.045559][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 598.332946][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-syzkaller-07774-g90b83efa6701 #0 PREEMPT(full) [ 598.344415][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 598.354482][ T31] Call Trace: [ 598.357779][ T31] [ 598.360725][ T31] dump_stack_lvl+0x99/0x250 [ 598.365337][ T31] ? __asan_memcpy+0x40/0x70 [ 598.369943][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 598.375161][ T31] ? __pfx__printk+0x10/0x10 [ 598.379772][ T31] panic+0x2db/0x790 [ 598.383689][ T31] ? __pfx_panic+0x10/0x10 [ 598.388124][ T31] ? tick_nohz_tick_stopped+0x86/0xb0 [ 598.393522][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 598.398910][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 598.405111][ T31] watchdog+0x102d/0x1030 [ 598.409465][ T31] ? watchdog+0x1de/0x1030 [ 598.413900][ T31] kthread+0x70e/0x8a0 [ 598.417988][ T31] ? __pfx_watchdog+0x10/0x10 [ 598.422678][ T31] ? __pfx_kthread+0x10/0x10 [ 598.427376][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 598.432588][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 598.437802][ T31] ? __pfx_kthread+0x10/0x10 [ 598.442407][ T31] ret_from_fork+0x3fc/0x770 [ 598.447015][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 598.452149][ T31] ? __switch_to_asm+0x39/0x70 [ 598.456923][ T31] ? __switch_to_asm+0x33/0x70 [ 598.461703][ T31] ? __pfx_kthread+0x10/0x10 [ 598.466320][ T31] ret_from_fork_asm+0x1a/0x30 [ 598.471122][ T31] [ 598.474539][ T31] Kernel Offset: disabled [ 598.478867][ T31] Rebooting in 86400 seconds..