last executing test programs: 1m13.294243524s ago: executing program 4 (id=166): socket$kcm(0x10, 0x2, 0x0) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r3, 0x2, 0x0, 0x0, &(0x7f0000000280)=[0x0], 0x1, 0x0, &(0x7f00000014c0), 0x0, 0x0}, 0x40) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r0, 0x84, 0x6b, &(0x7f00000000c0)=[@in={0x2, 0x4e20, @local}], 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f0000000000), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000080)="3bfdd75fa5717852d59a9367444a2130e72cd4dabc8854532cca0c32a5b9f844a4610c7525650ce3d3b76b15026d93e6dee896115e9364066aa3d14e33ef732b4681335c576902153114bdb9c74b538a71115fb1d1a63d1b04129661b29aab89d0be999a6b7c9bea755adedbf305a79f70b71d3d4c98577b49db4963ce89b0def5e840f459659cb6f86d56b069a5de11d601d348ff88ca6e5e2cfe40176880b33e9e8dbc32ba2e6a99b1b50276dc4f06166000d7069a3cc76f", 0xb9}, {&(0x7f0000000180)="892950e2405ee8629d9384a91c16d1706a3e61f305119f95cac0f1927f4c205b971eb41147cb1f86883d6910e68ac3996551800b3ec64b77f8444b18345a2c8b178eeeba0cde7319a5a46bfe7f5770e019efd9d52069edcced33a758c4e657f3a792dc193a1911b4e82ea800ad7afe03c851a8", 0x73}, {&(0x7f0000000200)="a68cde0d56b170df7710b54f17d9a39c4f98f3547190", 0x20000216}, {&(0x7f0000000240)="45e04400f2b383517a08c397dd0a76e67ecfc8e74573c24dedd3a48fb62418c1412fdcd15e888cb0f5d02e77bfecefda6b064c0bb2b66a9a522e63873dde02330510255eec7dfa1af708cdab59fb71eca786a359a2c3b0cbad35144ec5b069c53f90e43339845dc7fd140c55b0149ab38eb27c140f374bcc2c95b0b121d1a9302f3a01b888243b3fc0d46f0de0", 0x8d}, {&(0x7f0000000300)="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", 0xcb3}], 0x5, &(0x7f0000001480)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @private, @multicast1}}}], 0x20}, 0x0) recvmsg$unix(r5, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001040)=[{&(0x7f00000015c0)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x2}, 0x40000300) recvmsg$unix(r5, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x30}, 0x181) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f00000025c0)=@filter={'filter\x00', 0xe, 0x4, 0x3b8, 0xffffffff, 0x1f0, 0x1f0, 0x1f0, 0xffffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, &(0x7f0000000080), {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 'wg2\x00', {0x8}}}}, {{@uncond, 0x0, 0xd8, 0x100, 0x0, {}, [@common=@frag={{0x30}, {[0x4, 0xff], 0x6, 0x10}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x5}}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@mh={{0x28}, {"a66f"}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001000)={&(0x7f0000000400)='virtio_transport_alloc_pkt\x00', r7}, 0x18) r8 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r8, &(0x7f0000000140)={0x28, 0x0, 0x2711, @host}, 0x10) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$inet(r9, &(0x7f0000000080)={0x0, 0x74, &(0x7f0000000100)=[{&(0x7f00000001c0)="5c00000012006bab9a3fe3d86e17aa0a046b876c1d0048007ea60864160af36504001a0038001d001931a0e69ee517d34460bc06000000a705251e6182949a3651f60a84c9f4d4938037e70e4509c5bb", 0x33fe0}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) r10 = socket$vsock_stream(0x28, 0x1, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="20000000030101040000e9000000000002000005040001800600124000040000"], 0x20}, 0x1, 0x0, 0x0, 0x4000000}, 0x14008044) bind$vsock_stream(r10, &(0x7f0000000440), 0x10) listen(r10, 0x0) 1m11.912171561s ago: executing program 4 (id=176): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100), 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x100000, @empty}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x3a, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000480)=@bpf_tracing={0x1a, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0xdf55, 0x0, 0x0, 0x0, 0x69}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x1}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0xda, &(0x7f0000000300)=""/218, 0x0, 0x0, '\x00', 0x0, 0x17, 0xffffffffffffffff, 0x8, &(0x7f0000000180)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000001c0)={0x3, 0x3, 0xffffffff, 0x200}, 0x10, 0x3f82, 0xffffffffffffffff, 0x2, &(0x7f0000000400)=[0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000440)=[{0x3, 0x1, 0x5, 0x4}, {0x3, 0x4, 0xa, 0x9}], 0x10, 0x5, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r6, 0x0, 0x8e, 0x53, &(0x7f0000000540)="3c38e666bc4942c76209503203429e4347091f8c562a6874bc033681b2d013ac7a4acd5115a94087f6812771182cf6b8d569380d3c19cb6e7b126724d7f68a85def6fe60c2c90b8c3ca1e94b6b5da70e622acfae5a5fcd85880b3377b565501487842d91735989b88b77d15f246eaff02adadbcb474754ea603f438fcdac324a3a0cbc6d89a9d4900cbbd894247d", &(0x7f0000000600)=""/83, 0x3, 0x0, 0xa8, 0x9a, &(0x7f0000000680)="ccc6d5bacbde06f813dc42351e01fe78104fd614f40f105c4dc82cf4cbb304020b737688b8534976f076d7a86bf985440e494fda0766aee7a1862916d3508d433a8079bc021140582ff5520e72d18106f179889987933bacd23b4d390d3ad98d95526a179bd6b1fc435fdb4fa7b121e9d851d6d988b38655255aade25160bb0b653de4170178d8bfd1dd88fd06ad9d71431674ae0aedf61ad75b619692fe5c4edbe304e897bb6e97", &(0x7f0000000740)="5c968a74a7ccb5cd0603402ede00a0699e4a29331034c23796abdb2c836d83ab856971949bbdd5404c01a05337baa0e8525c20731a6129fbf000c51b2a2a83a5ca5da3846d871e9a4d03d73340c39250b4eb59bdc4c6b6be2a3d75e6a4802a226d8988e255486a4218f61fc617340abd89b7de0365799805bc7959e69c22e6fcfe698bcb7bdde4d2a6824c3f8884f207d46308790bc132f39886", 0x7, 0x0, 0x8}, 0x50) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) listen(r4, 0x71e4) r8 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r8, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1m11.359865831s ago: executing program 4 (id=178): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x18) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="050000000000000061110c00000000008510000002000000850000000500000095000000000000009500a5050000000077d8f3b423cdac8d80000000000000002be16ad10a48b243ccc42606d25dfd73a015e0ca7fc2506a0f7535f7866907dc0200000000000000ae669e17fd6587d452d6453559c3421eed73d56615fe6c54c3b3ffe1b4ce25d7c983c044c03bf3a48dfe47ec9dd6c091c30b93bfae76d9ebacd3ed3e26e7a23129d6606fd28a69989d552af6bda9df2c3af36effff9af2551ce896165127cb3f011a7d06602e2fc40848228567ffb400000000003ed38ae89d24e1cebfba2f87925bfacba83109751fe6c05405d027edd68149ee99eef6a6992308a4fc0b7c70bc677d6dd4aed4af7500d7900a820b6347184e9a217b5614cd50cbe43a1ed2526814bc0000e9e086ce48e90defb6670c3df2624f56da648d28ad0a97aec7291c25447c106a99893e10db21901eb397b2f5fd71400fa7a050fbbef9e326ea27e513e96068fd1e8a43e89f9c85c822a961546ed5363c17ff1432d08806bc376e3e49ee52b59d13182e1f24ed200ada10eb1affb87ba55b2d72078e9f40b4ae7d01000000d11cd22c35d32940000088dde499000000fdffffff00000000000f000000ef0000000000000000000000000c52f4ebd2c893bb97a068bd10734a83584898eccb26f7b789cfc4cd995fa3e11a5c74c85404e2df3ad37b729ac83b0dcb4f48f3c3356b9997fc455a17690b6f7f9ccbe4b1701941b18aba6b16455a66c3b84b138efc20a546d3d5227e23b03f2a834391ade2ff3e93ee296c4082ee73e7c353312c9d75711ce1623e9c54bdff59d2a69dcb7d84c235b23a4480c2461b405cfd1a38992f295ad3adc94cd07c850d1ce6d0b2fea02c24e9280333152fb794e4ddea02017a6c139b50101caecaf2abc0847a1ff2f7fc3c2b99a96fc4275ad107274e2934a87a4ddcdb112754ca5bdec0ead14b6c0f19a43a2f05c7f0be31491eb8c9ff68236c8600040000000000000000000066e034c81c3cab64e4fc8dc55ce0ada18dcbf31c6e82893add3bee3e10fc873d1d922b0877cbcd95b839d3059d5140a1f742f6e75741e39e5cb6a193e06a1043375b0f61b5d4e17c81baa31b924d84f224baf1221c15fa12313ffbfa7c2730309f66705b71e6205e7cbf3643561eabb9a63fcd604d5cc27e1317ad94cf438d71873e540be16b6ca205081173bd03c4754fc4674812daab482fd390a1c903b5d28a1eb247b5837d7603b92495d5c569f6433c3fca5206cb0000003fdbbd3892c52c2e7612e05de32322e980a3d69931e2c9312dd517c96f2ee90362476ed853c4c9b7d4ebf13cbaa795860e92a3d7d004f2c491db38eb769f094d5d48b262cc35c40682138cf13a49aa9f27abec00002f01ba1251aaf2385416ca719300"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x34}, 0x10) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x25, 0x0, 0x0) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a98000000050a010200000000000000000200000408000540ffffffff08000a400000000308000540000000000900030073797a3000000000580008800c00024000000000000000010c000140000000007fffffff0c000240000000000000000f0c00024000000000000000440c00014000000000000000090c000240000000000000087f0c000240000000000000000308000540ffffffff30000000120a01030000000000000000000004011c00048008000140000000070800024000000001080001400000000558000000160a01030000000000000000000000070c00054000000000000000030c00054000000000000000050900020073797a310000000008000740000000030900010073797a30000000000900010073797a300000000014000000060a010300000000060000000500000abc000000180a000000000000000000000300000194000380080002400000000908000140000000000800024000000006680003801400010076657468305f746f5f7465616d000000140001000000000000000000000000000000000014000100766c616e300000000000000000000000140001006261746164765f736c6176655f3100001400010076657468315f6d616376746170000000080002400000000408000240000000060c00054000000000000000020800074000000000140000001100010000000000000000000000000a"], 0x218}, 0x1, 0x0, 0x0, 0x814}, 0x0) (async) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r8}, 0x10) (async) close(0x3) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r9) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="070626bd7000fcdbdf252d00000005002b00030000000afcffffff05002e000c0000000c0005000200aaaaaaaaaaaa00"/62], 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x80) 53.04646822s ago: executing program 4 (id=178): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x18) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x34}, 0x10) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x25, 0x0, 0x0) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x814}, 0x0) (async) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r8}, 0x10) (async) close(0x3) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r9) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="070626bd7000fcdbdf252d00000005002b00030000000afcffffff05002e000c0000000c0005000200aaaaaaaaaaaa00"/62], 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x80) 36.073190714s ago: executing program 4 (id=178): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x18) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x34}, 0x10) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x25, 0x0, 0x0) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x814}, 0x0) (async) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r8}, 0x10) (async) close(0x3) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r9) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="070626bd7000fcdbdf252d00000005002b00030000000afcffffff05002e000c0000000c0005000200aaaaaaaaaaaa00"/62], 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x80) 14.879872815s ago: executing program 4 (id=178): r0 = socket$packet(0x11, 0x2, 0x300) (async) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0a000000050000000200000007"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000400008500000001000000850000005000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='signal_generate\x00', r2}, 0x18) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}, 0x0) (async) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000140)={r4, 0x34}, 0x10) (async) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) r5 = socket$packet(0x11, 0x3, 0x300) (async) r6 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqsrc(r6, 0x0, 0x25, 0x0, 0x0) (async) setsockopt$packet_fanout(r5, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="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"], 0x218}, 0x1, 0x0, 0x0, 0x814}, 0x0) (async) sendmsg$NFT_MSG_GETOBJ(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="34000000150a03000000000000000000020000000900020073797a310000000008000340000000010900010073797a30"], 0x34}}, 0x0) (async) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r8}, 0x10) (async) close(0x3) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000000), r9) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="070626bd7000fcdbdf252d00000005002b00030000000afcffffff05002e000c0000000c0005000200aaaaaaaaaaaa00"/62], 0x44}, 0x1, 0x0, 0x0, 0x8801}, 0x80) 4.712625707s ago: executing program 3 (id=573): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x2) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x2, &(0x7f0000000000)=@raw=[@call={0x85, 0x0, 0x0, 0x8b}, @exit], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r1) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0xe, &(0x7f00000002c0)={0x0, 0x9, 0x9, 0x7, 0x7fff, 0x8001, 0x1ff, 0x2, {0x0, @in6={{0xa, 0x4e23, 0x5, @mcast1, 0x1}}, 0x3, 0x4, 0x84, 0xe, 0x35}}, &(0x7f0000000240)=0xb0) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000004c0)={r2, @in6={{0xa, 0x4e20, 0x1, @local, 0x2}}, 0x7ff, 0x7, 0x2, 0x0, 0x2a, 0x7, 0xfc}, &(0x7f0000000380)=0x9c) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r3, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r4 = socket$caif_stream(0x25, 0x1, 0x4) setsockopt$SO_BINDTODEVICE_wg(r4, 0x1, 0x19, &(0x7f0000000080)='wg2\x00', 0x4) connect$caif(r4, &(0x7f0000000a40)=@dbg={0x25, 0x8, 0x1}, 0x18) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=@newtfilter={0x30, 0x28, 0x575ac7824d421509, 0x70bd2d, 0x4, {0x0, 0x0, 0x0, r3, {0xa}, {0x6}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x4}}]}, 0x30}}, 0x40) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r1}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xa, 0x4, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000000000000000000001810bc000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_xfrm(0x10, 0x3, 0x6) 4.131531801s ago: executing program 3 (id=579): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000040), r0) sendmsg$NL802154_CMD_NEW_SEC_DEV(r0, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x5c, r1, 0x2, 0x70bd26, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_SEC_DEVICE={0x3c, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x8}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa3}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4008000}, 0x4004001) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000200), r0) sendmsg$NLBL_UNLABEL_C_ACCEPT(r0, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x1c, r3, 0x800, 0x70bd28, 0x25dfdbfc, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @rand_addr=0x64010102}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4841}, 0x4000) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000300)={'wpan0\x00'}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CCA_MODE(r0, &(0x7f0000000440)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x20480}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x1c, r1, 0x100, 0x70bd2b, 0x25dfdbfc, {}, [@NL802154_ATTR_CCA_MODE={0x8, 0xc, 0x6}]}, 0x1c}}, 0x40088d0) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000580)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x4c, 0x0, 0x300, 0x70bd2a, 0x25dfdbfe, {}, [@IEEE802154_ATTR_COORD_HW_ADDR={0xc, 0x9, {0xffffffffffff0103}}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x1}, @IEEE802154_ATTR_COORD_HW_ADDR={0xc}, @IEEE802154_ATTR_CAPABILITY={0x5, 0x11, 0x5}, @IEEE802154_ATTR_PAGE={0x5, 0x1d, 0x17}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000000) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000005c0)={'wlan0\x00'}) r6 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000640), r0) sendmsg$IEEE802154_SET_MACPARAMS(r0, &(0x7f0000000700)={&(0x7f0000000600)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x38, r6, 0x32ecceb650652996, 0x70bd28, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x4}, @IEEE802154_ATTR_CSMA_RETRIES={0x5, 0x25, 0x8}, @IEEE802154_ATTR_CSMA_MIN_BE={0x5, 0x26, 0x1}]}, 0x38}, 0x1, 0x0, 0x0, 0x60004010}, 0x4000) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x14, r2, 0x1, 0x70bd2d, 0x25dfdbff, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000900)={&(0x7f0000000840)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x5c, 0x5c, 0x7, [@int={0x7, 0x0, 0x0, 0x1, 0x0, 0x16, 0x0, 0x5, 0x5}, @ptr={0x5, 0x0, 0x0, 0x2, 0x1}, @var={0xd, 0x0, 0x0, 0xe, 0x4}, @restrict={0xf, 0x0, 0x0, 0xb, 0x5}, @fwd={0x3}, @enum64={0x3, 0x1, 0x0, 0x13, 0x1, 0x4, [{0x7, 0x4, 0x3}]}]}, {0x0, [0x0, 0x0, 0x61, 0x0, 0x61]}}, &(0x7f00000008c0)=""/2, 0x7b, 0x2, 0x0, 0x7, 0x0, @void, @value}, 0x28) sendmsg$IEEE802154_LLSEC_SETPARAMS(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a00)={&(0x7f0000000980)={0x48, r6, 0x212, 0x70bd2b, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r4}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}, @IEEE802154_ATTR_SHORT_ADDR={0x6, 0x4, 0xaaa2}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0xc9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x8}, @IEEE802154_ATTR_LLSEC_ENABLED={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x40000}, 0x4) r7 = socket$kcm(0x29, 0x5, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x2a, &(0x7f0000000a80)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7ff}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffb}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @func, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x3dc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='GPL\x00', 0x0, 0x73, &(0x7f0000000c40)=""/115, 0x41000, 0x7, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000cc0)={0x2, 0x1}, 0x8, 0x10, &(0x7f0000000d00)={0x1, 0x9, 0x2, 0x5}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000d40)=[0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000000d80)=[{0x4, 0x4, 0x2, 0x5}, {0x3, 0x1, 0x10, 0x6}, {0x1, 0x1, 0x8, 0x9}], 0x10, 0x2, @void, @value}, 0x94) ioctl$sock_kcm_SIOCKCMATTACH(r7, 0x89e0, &(0x7f0000000e80)={r5, r8}) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000ec0)={0x41, 0x4, 0x2}, 0x10) r9 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000f40), r0) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000001000)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f80)={0x38, r9, 0x10, 0x70bd25, 0x25dfdbff, {}, [@NLBL_MGMT_A_FAMILY={0x6, 0xb, 0x2b}, @NLBL_MGMT_A_IPV6MASK={0x14, 0x6, @loopback}, @NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @private=0xa010102}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20000040) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICREMOVE(r10, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000001100)={&(0x7f0000001080)={0x64, r3, 0x100, 0x70bd28, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @broadcast}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @ipv4={'\x00', '\xff\xff', @multicast1}}, @NLBL_UNLABEL_A_IPV4MASK={0x8, 0x5, @remote}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @initdev={0xac, 0x1e, 0x1, 0x0}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast1}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @local}, @NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @remote}]}, 0x64}, 0x1, 0x0, 0x0, 0x20000000}, 0x40000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_DEL_KEY(r11, &(0x7f0000001240)={&(0x7f0000001180)={0x10, 0x0, 0x0, 0x21}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, r6, 0x4, 0x70bd28, 0x25dfdbfb, {}, [@IEEE802154_ATTR_PAN_ID={0x6, 0x6, 0xffff}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x4000080) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r11, &(0x7f0000001380)={&(0x7f0000001280)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001340)={&(0x7f00000012c0)={0x44, r1, 0x8, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x44}, 0x1, 0x0, 0x0, 0x24000804}, 0x20004800) socket$key(0xf, 0x3, 0x2) sendmsg$SMC_PNETID_DEL(0xffffffffffffffff, &(0x7f0000001400)={&(0x7f00000013c0)={0x10, 0x0, 0x0, 0x2}, 0xc, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x240040c9}, 0x800) 3.519114603s ago: executing program 3 (id=584): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYRES64=r0], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x48, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x1c, 0x4, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xd}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x70}}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000600)=@bridge_newvlan={0x18, 0x70, 0x1}, 0x18}}, 0x0) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = socket$inet6(0xa, 0x80002, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r4, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r5}, 0x20) getsockname$packet(r2, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r7) syz_emit_ethernet(0x137, &(0x7f0000000280)=ANY=[], 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r8, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_int(r8, 0x11a, 0x3, &(0x7f00000001c0)=0xf3, 0x4) r9 = socket$inet(0x2, 0x2, 0x1) setsockopt$sock_int(r9, 0x1, 0x5, &(0x7f00000000c0)=0xabb3, 0x4) sendmsg$inet(r9, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x0, @empty}, 0x10, &(0x7f0000000280)=[{&(0x7f0000000200)="08001efbb07d586e", 0x8}], 0x1, 0x0, 0x0, 0x60000000}, 0x4000000) r10 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x10000, 0x0, r5, 0x5, '\x00', r6, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000640)={0x0, 0x0, 0x18}, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x19, &(0x7f0000000940)=ANY=[@ANYBLOB="18000000ffffff7f000000000101000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000020000008510009f18ffffff0cc2ff000610efa4a63d663db1050000000e63ff0009040000d9e6f8ff100000005003047fde608569e70b000004000000000000000000000018200000", @ANYRES32=r4, @ANYBLOB="00000000ff010000bf91000000000000b7020000020000008500000085000000b7000000000000009500000000000000"], &(0x7f0000000180)='syzkaller\x00', 0xa2b, 0x0, 0x0, 0x40f00, 0x63, '\x00', r6, 0x25, r0, 0x8, &(0x7f0000000380)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000680)=[r4, r10, r11], &(0x7f00000006c0)=[{0x1, 0x4, 0xe, 0x9}, {0x2, 0x3, 0x0, 0x5}, {0x2, 0x1, 0x7, 0x10}, {0x1, 0x3, 0xa, 0x1}, {0x3, 0x5, 0x3, 0x9}, {0x0, 0x4, 0x6, 0x1}, {0x1, 0x1, 0xf, 0x8}], 0x10, 0x5e7, @void, @value}, 0x94) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r6, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x4000800) socket$nl_generic(0x10, 0x3, 0x10) 3.18239735s ago: executing program 0 (id=587): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000004c0)=@newtaction={0x68, 0x30, 0xb, 0x0, 0x0, {}, [{0x54, 0x1, [@m_skbedit={0x50, 0x1, 0x0, 0x0, {{0xc}, {0x24, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_PRIORITY={0x8, 0x5}, @TCA_SKBEDIT_PARMS={0x18, 0x2, {0x2}}]}, {0x4}, {0xc}, {0xc, 0x9}}}]}]}, 0x68}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r3) r5 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="180000000206010200000000009b08007b10"], 0x18}}, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000004200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c0000005e00"], 0x1c}}, 0x880) recvmmsg(r3, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000005c40)=""/4100, 0x1004}, {&(0x7f0000000340)=""/196, 0xc4}], 0x3}, 0x7}, {{0x0, 0x0, 0x0}, 0x5}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000004c40)=""/4096, 0x1000}, {&(0x7f0000000540)=""/163, 0xa3}, {&(0x7f00000008c0)=""/229, 0xe5}, {&(0x7f0000000240)=""/105, 0x69}, {&(0x7f0000000480)=""/124, 0x7c}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f00000018c0)=""/147, 0x93}], 0x7}, 0x7ffffffe}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r6, &(0x7f0000000000)={0x1d, r1, 0x1}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x1d, 0x0, 0x0, {0x1, 0xf0, 0x4}, 0xff}, 0x18, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x8080}, 0x240088cb) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r0, 0x401054d5, 0x0) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r7, 0xc004743e, &(0x7f0000000040)=0x3) ioctl$PPPIOCSNPMODE(r7, 0x4008744b, &(0x7f0000000080)={0x281, 0x3}) socket$inet6_udplite(0xa, 0x2, 0x88) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)={{0x14}, [@NFT_MSG_NEWRULE={0x6c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x3c, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x2c, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_TYPE={0x5, 0x2, 0x94}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x6d}, @NFTA_EXTHDR_FLAGS={0x8, 0x6, 0x1, 0x0, 0x2}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0x13}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x94}}, 0x0) 1.985759123s ago: executing program 3 (id=590): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x5c, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0xd, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x2c, 0x2, [@TCA_CGROUP_EMATCHES={0x28, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_LIST={0x1c, 0x2, 0x0, 0x1, [@TCF_EM_CMP={0x18, 0x1, 0x0, 0x0, {{0xfffb, 0x1, 0xe}, {0x7ff, 0x4, 0x7, 0x6, 0x2}}}]}]}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x40010) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800000006"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000700000018", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r5, 0x0, 0x2}, 0x18) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="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"], 0x118}}, 0x0) r7 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r7, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r7, 0x29, 0x30, &(0x7f00000007c0)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000ffff00000000000000bd0000000000000000000000e4ec01000000004000000000fc00000000000000000000000000013da51fd47aa2e2f700000000000000000000000000000000000000000000000000000000000000060000000000000000050000000a004e200e8a34c38f36f0c7eb2700d609bcf41076d88144448ebe7994dd1b33d7c8787734cc315672f62261ceeede940774fd94d2767288cfb3a20882449d601ff878eedd3d57c9eb3a723b62102bd534c8a304a975d752e82cc8d5f969771c94a1d69cfd8694e29b9468fca5df65ece31ed7c209325604001fcd06adc3ac391f60a3523d6d0b4a8a"], 0x310) setsockopt$inet6_group_source_req(r7, 0x29, 0x2c, &(0x7f00000005c0)={0x1, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @empty}}}, 0x108) 1.846180546s ago: executing program 1 (id=591): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TEST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000040)={0x4c, 0xb, 0x6, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_ADT={0x38, 0x8, 0x0, 0x1, [{0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}}, {0x1c, 0x7, 0x0, 0x1, @IPSET_ATTR_IP2_TO={0x18, 0x16, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @loopback}}}, {0xc, 0x7, 0x0, 0x1, @IPSET_ATTR_MARKMASK={0x8, 0xb, 0x1, 0x0, 0x6}}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x11}, 0x8000) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000140)={'team0\x00', 0x0}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000180)={r0}) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r2, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xf5e5ea77727d469d}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x5c, 0x0, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}}, {{@pci={{0x8}, {0x11}}, {0x8}}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x880}, 0x40000) bind$xdp(r2, &(0x7f0000000300)={0x2c, 0x7, r1, 0x6, r2}, 0x10) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'veth0_virt_wifi\x00', 0x0}) syz_genetlink_get_family_id$batadv(&(0x7f0000000380), r2) bind$inet(r2, &(0x7f00000003c0)={0x2, 0x4e23, @broadcast}, 0x10) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) ioctl$FS_IOC_MEASURE_VERITY(r0, 0xc0046686, &(0x7f0000000400)={0x3, 0xed, "4c90254dbfb24a3789e6b826fe449efc4f16f448ee11d8193263c438dc1616288c69f2482fae722ae88b4b55f5682b5f2f9ea001ebd5a5a0a8cec7ecdad0ca7fce380435eea05ff5236905777cd2779767e3659d046df17e2cbad90f65fdada394bca3c2d4bab97ddd0573405cdcc00743ebda47d04bbd10f966de2329fb1269da386693d07fa40312bcd81449a5f23b05ce27e163d34536872a356bfe6eae6e97841ad6082508774ea30322cb7f125f58d41a3815a44ebc2a26496b21bc4f82d8e64bbe01a2905ab77611494c74554e1c098d4b5024adcac161ed09aff23ddd67936265df1fe0b7fb0c447ee2"}) recvfrom$unix(r2, &(0x7f0000000500)=""/61, 0x3d, 0x2000, &(0x7f0000000540)=@file={0x1, './file0\x00'}, 0x6e) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f00000005c0)={0x1, 'veth0_macvtap\x00', {}, 0x4}) setsockopt$MRT6_DEL_MIF(r2, 0x29, 0xcb, &(0x7f0000000600)={0x1, 0x1, 0x93, r3, 0x2}, 0xc) getpeername$unix(r2, &(0x7f0000000640), &(0x7f00000006c0)=0x6e) getsockopt$MRT6(r2, 0x29, 0xcf, &(0x7f0000000700), &(0x7f0000000740)=0x4) setsockopt$SO_J1939_PROMISC(r2, 0x6b, 0x2, &(0x7f0000000780), 0x4) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = accept4$bt_l2cap(r2, &(0x7f00000007c0)={0x1f, 0x0, @none}, &(0x7f0000000800)=0xe, 0x800) recvmmsg(r5, &(0x7f0000003300)=[{{&(0x7f0000000840)=@ieee802154, 0x80, &(0x7f0000000980)=[{&(0x7f00000008c0)=""/169, 0xa9}], 0x1}, 0x40000000}, {{&(0x7f00000009c0)=@ax25={{0x3, @netrom}, [@rose, @remote, @netrom, @default, @bcast, @null, @default, @netrom]}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000a40)=""/110, 0x6e}, {&(0x7f0000000ac0)=""/136, 0x88}], 0x2, &(0x7f0000000bc0)=""/83, 0x53}, 0xa}, {{&(0x7f0000000c40)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}}}, 0x80, &(0x7f0000000e00)=[{&(0x7f0000000cc0)=""/171, 0xab}, {&(0x7f0000000d80)=""/78, 0x4e}], 0x2, &(0x7f0000000e40)=""/235, 0xeb}, 0x2}, {{&(0x7f0000000f40)=@generic, 0x80, &(0x7f0000003180)=[{&(0x7f0000000fc0)=""/67, 0x43}, {&(0x7f0000001040)=""/14, 0xe}, {&(0x7f0000001080)=""/4096, 0x1000}, {&(0x7f0000002080)=""/139, 0x8b}, {&(0x7f0000002140)=""/57, 0x39}, {&(0x7f0000002180)=""/4096, 0x1000}], 0x6, &(0x7f0000003200)=""/202, 0xca}, 0x5}], 0x4, 0x1, &(0x7f0000003400)={0x77359400}) r6 = syz_init_net_socket$x25(0x9, 0x5, 0x0) unshare(0x16000680) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r2, 0x84, 0x74, &(0x7f0000003440)=""/18, &(0x7f0000003480)=0x12) r7 = accept$nfc_llcp(r2, &(0x7f00000034c0), &(0x7f0000003540)=0x60) clock_gettime(0x0, &(0x7f00000035c0)={0x0, 0x0}) ppoll(&(0x7f0000003580)=[{r0, 0x8000}, {r7, 0x10}, {r4, 0x2044}, {r6, 0x1c4}], 0x4, &(0x7f0000003600)={r8, r9+60000000}, &(0x7f0000003640)={[0x4000000000000000]}, 0x8) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000003680)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x8, '\x00', r1, 0xffffffffffffffff, 0x5, 0x3, 0x2, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000003780)={{0x1, 0xffffffffffffffff}, &(0x7f0000003700), &(0x7f0000003740)}, 0x20) r12 = openat$cgroup_ro(r4, &(0x7f00000039c0)='hugetlb.1GB.rsvd.usage_in_bytes\x00', 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000004040)={0xf, 0x26, &(0x7f00000037c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0xdd}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x0, 0x5, 0x0, 0xc}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xc, 0x7, 0x8, 0x4, 0x10}, @map_fd={0x18, 0x9, 0x1, 0x0, r10}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r11}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}, @map_idx_val={0x18, 0x6, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x7}, @cb_func={0x18, 0x6, 0x4, 0x0, 0x5}]}, &(0x7f0000003900)='syzkaller\x00', 0x7, 0x4a, &(0x7f0000003940)=""/74, 0x40f00, 0x40, '\x00', r3, @cgroup_device, r12, 0x8, 0x0, 0x0, 0x10, &(0x7f0000003a00)={0x1, 0x4, 0x401, 0x1000}, 0x10, 0x0, 0xffffffffffffffff, 0x2, &(0x7f0000003fc0)=[0xffffffffffffffff, r6, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff], &(0x7f0000004000)=[{0x5, 0x1, 0x8, 0x12}, {0x4, 0x5, 0x6, 0x7}], 0x10, 0x7, @void, @value}, 0x94) 1.779866095s ago: executing program 0 (id=593): r0 = getpid() r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='rxrpc_rx_discard_ack\x00', 0xffffffffffffffff, 0x0, 0x6}, 0x18) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f00000000c0)={r0, r1, 0x0, 0x1, &(0x7f0000000080)='\x00'}, 0x30) r2 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r2, 0x4008b100, &(0x7f0000000100)={0x18, 0x0, {0x0, @local, 'vlan0\x00'}}) r3 = socket(0x25, 0x4, 0x1) getsockopt$inet_sctp_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000140)={0x0, 0x64f0, 0x10, 0xa, 0x1}, &(0x7f0000000180)=0x18) getsockopt$inet_sctp_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f00000001c0)={r4, 0x5, 0x2, 0x1}, &(0x7f0000000200)=0x10) bind$inet(r3, &(0x7f0000000240)={0x2, 0x4e20, @broadcast}, 0x10) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000000280)={r4, 0x7, 0x30}, &(0x7f00000002c0)=0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r3, 0x84, 0x6b, &(0x7f0000000300)=[@in6={0xa, 0x4e24, 0xffffffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x7fffffff}], 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000340), 0x400, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000380)={'caif0\x00', 0x800}) socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r3, 0x84, 0x7c, &(0x7f00000003c0)={r4, 0x7, 0x8}, &(0x7f0000000400)=0x8) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), r3) sendmsg$NL80211_CMD_GET_MPP(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x44, r7, 0x100, 0x70bd28, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x44}, 0x1, 0x0, 0x0, 0x4004404}, 0x80) setsockopt$bt_BT_SNDMTU(r3, 0x112, 0xc, &(0x7f00000005c0)=0x1, 0x2) ioctl$sock_TIOCOUTQ(r2, 0x5411, &(0x7f0000000600)) setsockopt$inet_sctp6_SCTP_CONTEXT(r3, 0x84, 0x11, &(0x7f0000000640)={r5, 0x3}, 0x8) r8 = socket$caif_stream(0x25, 0x1, 0x5) ioctl$BTRFS_IOC_GET_SUBVOL_ROOTREF(r3, 0xd000943d, &(0x7f0000000680)={0x2, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0}], 0x1, "9e96ee6c365491"}) ioctl$BTRFS_IOC_INO_LOOKUP_USER(r8, 0xd000943e, &(0x7f0000001680)={r9, 0x0, "6360b797b7fdf0864cbd47cb2f26e7efc426c5ecea72ef956657e17266cda2c24df54a3835d142c8f246a6598b8440d10c48e3f3a9dabfb9acf100482d597b89b40812119667746b769831805af753106d4175c2eaa63a70ba36f22501424b2743a0a327e7eb4c907005c9a727dbc8f07d29b4bcced044fe75ab5d31cc0328ac9192703543ba7933de5587bea8f936a06375c1f5bb4dd34ca42bb76754fd90ddba06aaf4f3a0fffe0dbaf1b1a569c7ae0467f6e0a5b2f0daaa59f96f513a3a5fbd8df21792f4cc45a978b3489df25796dce2dd76edc9b9e5d2f62d36bad8abd5507a1dc3cf55923c4e6a97436dc790aa27490fe362e42094e0d37a68b8185a30", "f41d8ca0d7dccb7e1913814ba9c99091fd212402a4a5b48af5681adbe0a5133750e3bd703d8df4391e06926d15db0d44bfbeab63bb9345cc4adb0cc7889628ce949039728fc211bc17558e914cc800bf8c4edf21f5105272f9d267fc69374b2cc03cbe3a738bd0689ee8a5f968c235fc6e0cd1585c2bf53f988505e2ab86f20e3465eee6a20fd5dc3301a31c84ae70e835c17035a240ec7f30e182e908fb11adbae74bebfc47d260a3f99feec127df5efab633c6f31d54b41f18095988b1b183d283ae456fb422935ab8184f9e0655fbe80e0df76d410bd0de1a08aa3bd5432e072fe7442ae99137a57a7a73728db27f9485ca2a9226952d8281888edb4c848f184f60308b57a413f88dc492683b80ca382c296207ff27af6359151f3aed304c01413101842f56999c9b07548e6bdc9626ee7ba70ac3a6abb2530476ed83b5e86206bf2be30d9678ca944ce22b262d173bcbe5ca5b722129c9307247f4ad809777893e656db3571da21fb956c08ffd3716322b53a0cb6d43cf6b8a67465d0d6e32404f994ba2d14fcb1cc5d6eff469e5b80e25a792930f1e0a8d7c2dd08dc0827e9c35dcac3a716cd9273492574971d4986022bca53339f762e545c63161cb0746e603c436f8e6fbdcfbe0fad7b2656e52a3c8adba1a1153605de1c5e131778b3fa38841d6c3c9c978d750a80eb19738ea540234e956a0f98ba30b572e7937a7723484c9384c1846d3eb49369243436534cb403adbe450136432c7244ff52e985c2df96f0b80b3704c56b0acfb1ccaa739cafb16d37b5c8c547447dda40988a0657c80b8f6755ae91979e4ae9d3693984b4626530cb787fe31e3ef7d85a1242235c76bbda726f03b3c4a7c1b10853e7db99b8be30b223e4d85bcfb9afcd4c74d1bd4a368e195058b4a61d9a04353a2cd2ddda30a2d916f1c2bd7e44e6d18c2fe76f180b46aa4502673981ec9f5d04c4dd05ebd2bedfead6b3f41239ecaa3753110579a9648769cd8df07dfad88675e3a14173e5fef2c387f80e1dd8c80cac09ad341896abc90f7455503796573521aac4cb0d82a81c243f9aafac159a4205f5120353fff7bbcb743f22a92cd7f0dd7315da6fb78e68d01375edc45d1e843c716e9e310afeefd78aacc7d82662ba5f116a76a2567b01650918b5400ec823f4bd2d6210f260065b30207cfe7ba6a57881d252fa612df8ba2dc6ba207bffb22c6abe7ab77b2aab0ca7f8cf57657b8066c5d4f5f2a73bccfd55494526ab70941d140beeb9c101261bcdae88d108905d86aed3c967bad2c8741b7df4ed7c624f83c04d3ec088717c4093ab178b910749b2ffec95cbcdb278bcd1957e6e013767668c3d60fc42bdf451b4f8af897e42dc7db8b643caa3a61b5ba6b436a6f250b95d6907a63b18a02c17b039b46b7cc80eaaf78a9f8e91cfdccaf01d2d2304af334d49949828d8465f32f1c21df8d18a215f4f8b242f1e532b5b3192938f1c42e4b151d17606a3170cd88dd333fd71d844db21ab9b190cbca0051d908ae426397a23131b930abfc2b7ae0c868dcfd0f9e19773527d856f87ca05e3fa613271633a1fefb51aaf8df5ff8d275c8b4d89a033f87fa7628e65297fbc42eb2531ac64de69ec98a49ce35f4703f22aa45fe66d4d4e90b0aba026f8c6fee104f2f6ab4938e79d06abd4f722386715a31c3fd75fcb791874afa40143e9fc23a1ea0f53fb299bd65c63519630217c70a64d302f198b5f3215e62f2cf4d1d92a10b859294b8f515f65f07a58cd0664104cc1c0ab379ad62036e1e6ede1b72dea6da809525e443e8266a29ad53c04ef3239af19b261a3f81a5f707ad7a82125e6f5d457d58bc1747054f4cd8395cce8d932108e57a2b8d85293556c05a5ea84c09bf10cb57e744e7865b431b4d5cc145a7dc8113b6b5b14f7ee1925b2cbe6e748bc32a35a12ffd6b986a67d8d1b434e4516938e0a7230ad35ca14c22df6c602f30520e85c0deca5671de87d7d4500fa590ac34b9456b3efd4633b0b17f4c4402cb77ab3280a51fa6bf2d19e002d53f71f6e037e9d50b1bac9eff10d02efdc562dcfc3882f997c2627833c2aceac5091f4e3094f7ad451ef60dc4f0a9d632d86b5c5cce8b0b326af5b20dfb7305300af87a2f1b0f986c23e3528ddbb5d113111e2052a4e32eabb5b235ef76a586a224ac901f94900ac01442b1832605d4df8e684a097a04119c830258b5bb328cbf9e62e967f529ab2097a3ac42fa873aee1639d1fd912ef10f021e008ce6e1c31cdaace85076dd4c4197bd917e445f19190bc317790dcb07ea894a98006f16c020ee8b966a5143d7b724f51ddb5c4d0a87684d0d895bfc0ff23828ebbd0b7e92acf53e6270292b090e90e40f226f52a1d4a1e8ad3eee9750e89d6fb676deacdcf92d0d6ba774bad09a1d54ce9883125da3337e1809074d1d760916fd48f8f02f26cf3b2b90d5d385381fbdd9a1191443e58938d1a24a5a4494e4e7815692269d4672fb16a15b345fdf1c75ff6c0f6bff741f1a47aa9acfa227e5f34d0fdc4dd957846b4fe35019e0e53c3dfd2f2f8be425655fca3014d342a37e7a08e79c8908eca698cc1e0c6b9dc690a561baa78a80aa52406d6ff989e2a0368d03b4e88657a12f1a06ee0744a79f72058d1efbc5fc35fb818668e69cc29029bd27bb2c971f670c2f5e081533e6466b2f41a0aee999d37f5de8dbe8a9ffeefe2a4569b495a9d815fb6f166fd5289c78625e427d66dd3bf8fffd733c81124ef61640523ebcaf631a49c52f52a54d02381b5149d10b6b4b6eb8d095dc16eacd05b6bf367055c7918785e850e9ae71284a66b84a6bd75c8f56008e391695b1508e909c6078ee64538b1ae4065b90c583912a1a32071272e1493d72c1d3dcda7e86dba3184d11403ee615fb7e946fdbbed384f35edf0b4b9eba6068886549b1a348b570bfdc1a50ee44b48f5f28c218609a8b3ef89072bbe15802f59aa9179e07bb42b25c2dadbb8aa2cd6f897f92f60583881bde6ab99968bf506dabd236f05c51a8f503c4816821e28ba01af9f05cd7d2db404dc00076adcf5738d80d26d06a49c3e4fdd23ba9383568c5de0593ca9692ab6c3ff1ee84c012e6f9004461e52abb78ef44234182b7e8e150745189c3a90b879584b257d6ba2631c2d2fa598fd74dd11bc05f912b5ad6042322d8b3cd0ec322911b837adc2fde950f434df8a1a9503523c4c9fe8351cdb970b86520a441359eb20bb31ac3063c3958d39eac7963f348a0f8dee40b9fefb4e4e77ba476f7d35574262baab474bcfe1e02cbb1e6e5d5d1cdec4e0f321adae6f13d5beb81d061215789d31f00da261656dab96d56fc481ce2d11e2db92ddc6ea450cf08f7ba7dbbafc2c72d21daa5e9770a5921b9dcf9d098f72c43111ed40e33bdc5b21b2d994ed8258fa9a7cd80adbbb4ee3b94da51dbc2ddd7c9ed1d469c754544aaed600fab7e8b8752e5fc79a3d8be68e7340024956054c5498fb4db19d50145eb0057304896ea0a20777d386e4936101319ed673342c11cd1bfe3e9853ad806e1a0fa068f71c9aaf965aab8bfdf0cccd7a2cc39088c45b02d53f22b4eab7e1876951a0cae78a12aa6397c50cb2dad39776e9a5875f1f0c8627ddd500168ab78ebaeb17e459171034a2f7a58bf4ac0fd65717cad928be57cf23b3cf9a54f08b13cd9314b8d1b38c3aa9f891b682007d30c3c1060fd81cf7738738cf40a1cb16b7ff1e827624feae3910f036b4e2f772da9877e9621d4fcd4076b07f0a0670c7a34e08c60ec2e780377e2cc7f3c969906765564e3090db440e097eb82100ce477069c2f668fd3535093aa451f3b361e5ce2b2a9a3c207ac3842dd88c9e92c57505eedb7893f74ca0e5fb24f0448c4a73736485100264c5b6c72415a08d88942266ceaecc8a88103c2937f8f3a225d47ffd64be9bdea8c430454329b137d9de59f966e3478a5487d3335ed66d8244ff0dffda15092fbf39be2ac5e225da03f7e36fd217a21edfaa3489e1da40e12d4630407c2fb829905f1032fa4057e7ce22274cb74359e3fae0e6059211ad108e89d0053e62a666e52e53647fc6d428c208527774e71ae120835ea3a3fb0c54ddebb5de4e2e431c75b2eceef31feb74f36aa1ba3a15ad30b48ffa7897c28060fa332bd6019b65d2ed87d873592bcb3707af2858846b6853a93e1d440babd02d8ebc651ce03e44c4961f2800ac086b3c38c0626549d30645284cfd95a1d827141f386790a3be6882137a00d207e865d370689595263e19fd84bdc041340c208c48d777ebb473cc78b8558ccafb0c52baf67a2f2ec375b943b761396ea50ab3eeb3c06ccd49792cad8fa0ec7c3e9c87fae2694dbe055d19929e5febc5a2a9690a7d74f924fea88ae64af16740781062949ebdb44a401c88af363afeb69da5dc45e88aefa1698ae3e2a845f3bb34b4d687d870013956df2d9df0f7c8c70c44c3870395afc9612a7e79f03d19767188fb22df857a70c966029c2395f78fe698abe020f34108d1f4fed5ef0c4f1e2c575cd5517556f9791654479669c2726bead25d3784dffc198a6b4070a0a1948ccafc81e8a574542b62a479b334484900d2cd5e23bb9b0add23451384f58d744620d22d94d6dba59969cd3b7993a18f0edfdc3f4d10dffafb746ebad8d8bbc9bfec2d315a9047e1aeaaecc9bded6eb77f5cf0162cec485a496da1d9ce7af56737219946b438d65ba8c20d23fa2096e7912ee1043555dca233155f7e5845170fdb4326f1ae9febc7d3bb3312f6771aaf497bc298790eab1908ebfb3173768041d04eddb62432844684b105387a8b79429192472b76d67feb4e600edcd7bf228ea9221ed77ee6f581e113494e1434b6fb40c26a28691fd5e690818fa2fb43c8f1d03e806a02484ff85c3be8e9b6d501d13fd977eb5f218a855c2f8d3965f9de4239301394558a0c54e3347b9bd3cf44559f892fca6dae83c2727e7f2a3c90233b68fc47b0b8d575d5108a53f9937f6e1536d681cc50b0bced40ff4caac34206faaaca06e3ee7569546663c817e8e62cc7758009bbfdbfbd282ff37f72d8e5fe0acfea9938e68f51922d4fa2ca16bc00973f6e45a88f1bc97a0a1144109dfb02aecff702617cdafb02e05d12e43c28864b1c0bcf7fc9268b903b9033fb78834215abac36b912982d7e8eb23fb292bce5354c942d9176810fcdbfb16e94e956f7b7ef198d2984c494753867f29d2cb374c538123c9c4c680bf43a6bf9843f8b853f1bb36708d61d6a26032930c5edf9fa5697bc8478e4e1f9a983301e912faa9046960661506b606ad16479bd7e312eb0da970cb7272a05536d7f51ae7bc8ed45c5de8aac0f4fd81f5d28851aa2b0342009d404dc68b3f9ee57da1f5042f5d29d9a7c93bbe341a7aa35f3a536e3049"}) r10 = bpf$ITER_CREATE(0x21, &(0x7f0000002680), 0x8) getpeername$tipc(r10, &(0x7f00000026c0), &(0x7f0000002700)=0x10) ioctl$sock_inet6_udp_SIOCINQ(r10, 0x541b, &(0x7f0000002740)) r11 = socket$alg(0x26, 0x5, 0x0) accept4$alg(r11, 0x0, 0x0, 0x800) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r10, 0x84, 0x1b, &(0x7f0000002780)={r5, 0xae, "1ca5cdcb88fcce558c5804e88d6c02dc28f5176c79a97e65ad243c350186f03db3c283fefbf6d7ef00b5a2acebade4bd007713663020e6aa44c6e3bdaa57562b8bb69388e6a9878991ca8fd21e8dd21e826db5ba9416356952d53bd69fcb5e4360e2f873480b8afc2a08fe8968848a3151f25cebfdeb82805e689260048646eeeb0f3f24a83b2f9171807b3dd73e47f0b14cc3d065580deacdce2e7fda309117cc8751354c75a5d7817fcf01a32b"}, &(0x7f0000002840)=0xb6) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r10, 0x84, 0x1, &(0x7f0000002880)={r12, 0x5c, 0x5, 0x5, 0x7, 0x4}, &(0x7f00000028c0)=0x14) 1.678917923s ago: executing program 1 (id=594): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x1c, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2010000}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x15, 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="dbae00fe10010000711014000000000095"], &(0x7f0000000480)='syzkaller\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) 1.590448499s ago: executing program 2 (id=595): r0 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r0, &(0x7f0000000140)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x4e24, @local}}, 0x24) setsockopt$RXRPC_EXCLUSIVE_CONNECTION(r0, 0x110, 0x3) r1 = socket$nl_audit(0x10, 0x3, 0x9) shutdown(r1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f00000000c0)=ANY=[@ANYRESOCT=0x0], &(0x7f0000000380)='GPL\x00', 0x5, 0xc3, &(0x7f00000003c0)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000100)={0x0, 0xfffffffd}, 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r3) r4 = socket$netlink(0x10, 0x3, 0x2) getsockopt$sock_int(r4, 0x1, 0x1, 0x0, &(0x7f0000000280)) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r2, 0x6, 0x1d, &(0x7f0000000040)={0x9032, 0x4e1c, 0x0, 0x80, 0xca}, 0x14) 1.45906889s ago: executing program 0 (id=596): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket$igmp(0x2, 0x3, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000100)={'vxcan0\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r5, &(0x7f0000002540)={0x0, 0x0, &(0x7f0000002500)={&(0x7f0000000580)={0x48, r6, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_FEATURES_WANTED={0x1c, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8}, @ETHTOOL_A_BITSET_MASK={0x9, 0x5, "71b73a1ea0"}]}, @ETHTOOL_A_FEATURES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}]}, 0x48}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FRAME(r8, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000fc0)={0xb0, r4, 0x61b, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x1e, 0x33, @deauth={{{0x0, 0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x7}, @device_b, @device_b, @initial, {0x6, 0x5}}, 0x28, @void}}, @NL80211_ATTR_FRAME={0x6a, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x1, 0x1}, {}, @broadcast, @device_a, @from_mac=@broadcast, {0xe, 0x9}}, 0x31, @random=0x9, 0x0, @val={0x0, 0x6, @default_ibss_ssid}, @val={0x1, 0x3, [{0x5, 0x1}, {0x30}, {0x30, 0x1}]}, @void, @void, @void, @void, @val={0x25, 0x3, {0x0, 0xe, 0xf}}, @val={0x2a, 0x1, {0x1, 0x1}}, @void, @val={0x2d, 0x1a, {0x10, 0x2, 0x0, 0x0, {0xffff, 0x8, 0x0, 0x6, 0x0, 0x1, 0x1}, 0x8, 0x1, 0x4}}, @val={0x72, 0x6}, @val={0x71, 0x7, {0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x80, 0x8}}, @void}}, @NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}]}, 0xb0}}, 0x4000) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x14, r4, 0x1, 0x70bd29, 0x25dfdbfd, {}, ["", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000000) 1.436184241s ago: executing program 1 (id=597): r0 = socket(0x10, 0x80002, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) sendmsg$NFT_BATCH(r1, 0x0, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_extract_tcp_res$synack(&(0x7f00000000c0)={0x41424344}, 0x1, 0x0) write$tun(r5, &(0x7f0000000040)={@val={0x6f01, 0x88f7}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[{0x5}, {0xe2, 0x0, 0x1}], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, r7, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x56) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) socket(0x10, 0x80002, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, @void, @value}, 0x94) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r2}, 0x18) (async) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="10010000", @ANYRES16, @ANYBLOB="c88845e7e05ae52d00009300000008001317"], 0x1c}}, 0x0) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b28, &(0x7f0000000000)={'wlan1\x00'}) (async) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(r1, 0x0, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) socket$kcm(0x2, 0xa, 0x2) (async) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) syz_extract_tcp_res$synack(&(0x7f00000000c0), 0x1, 0x0) (async) write$tun(r5, &(0x7f0000000040)={@val={0x6f01, 0x88f7}, @val={0x1, 0x0, 0x0, 0x0, 0x14}, @mpls={[{0x5}, {0xe2, 0x0, 0x1}], @ipv4=@tcp={{0x5, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, r7, 0x41424344, 0x0, 0x5, 0xb, 0x0, 0x0, 0x0, 0x18, {[@window={0x9, 0x3}, @timestamp={0x5, 0xa}, @generic={0x0, 0x8, "d58838068b91"}]}}}}}}, 0x56) (async) sendmsg$nl_route_sched(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newtaction={0x14, 0x30, 0x53b, 0x0, 0x0, {0x9}}, 0x14}}, 0x0) (async) 1.330206481s ago: executing program 2 (id=598): r0 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_buf(r0, 0x1, 0x3b, &(0x7f0000000580)=""/169, &(0x7f0000000080)=0xa9) (async, rerun: 64) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) (rerun: 64) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r1, 0x1, 0x0, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0xffffffffffffff57, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000083850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffc7, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = socket$can_bcm(0x1d, 0x2, 0x2) (async) r4 = socket$phonet(0x23, 0x2, 0x1) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000d27000/0x4000)=nil, 0x4000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}, {0x0, 0xfff1}}, [@qdisc_kind_options=@q_cake={{0x9}, {0xc, 0x2, [@TCA_CAKE_RTT={0x8, 0x7, 0x800}]}}]}, 0x3c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'hsr0\x00', 0x0}) (async, rerun: 64) r9 = socket$netlink(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xe315}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvtap={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r8}, @IFLA_MASTER={0x8, 0xa, r8}]}, 0x44}}, 0x0) (async, rerun: 32) sendmsg$can_bcm(r3, &(0x7f00000001c0)={&(0x7f0000000440)={0x1d, r8}, 0x10, &(0x7f0000000180)={&(0x7f0000000800)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x11}, 0x20044041) (async, rerun: 32) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000240)={0x0, 0x6, 0x10}, 0xc) (async) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) (async) r10 = socket$rds(0x15, 0x5, 0x0) bind$rds(r10, &(0x7f0000000040)={0x2, 0x2, @loopback}, 0x10) sendmsg$rds(r10, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0, 0x2c}, &(0x7f00000006c0)=[{&(0x7f0000000100)=""/44, 0x410200}], 0x1}}], 0x48}, 0x0) (async) r11 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r11, 0x11b, 0x4, 0x0, 0x0) (async, rerun: 32) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r2}, 0x18) (async, rerun: 32) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmsg$IPVS_CMD_FLUSH(0xffffffffffffffff, 0x0, 0x4000) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async, rerun: 32) socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) 1.315876027s ago: executing program 3 (id=599): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={0x0}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0x2, 0x8, 0xd0eb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x4, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket$nl_xfrm(0x10, 0x3, 0x6) connect$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e21, 0x7, @loopback, 0xfcb}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) pipe(0x0) sendmsg$nl_route_sched(r0, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r1, 0x401054d5, &(0x7f00000000c0)={0x4, &(0x7f0000000000)=[{}, {}, {}, {0x6}]}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x8, 0xe, &(0x7f0000000880)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) getsockopt$inet_mreqn(r6, 0x0, 0x23, 0x0, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000030000000900010073797a30000000005c000000030a030000000000000000000300000009000b0073797a30000000000900010073797a300000000014000480080002400000000008000140000000001c0008800c00024000000000000000000c0001"], 0xcc}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0x4a, 0x0, &(0x7f0000000140)="d510faffffdb674c5ae4000b0094", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r8, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e20, 0x1, @loopback, 0x2}]}, &(0x7f00000002c0)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(0xffffffffffffffff, 0x84, 0x6, &(0x7f00000002c0)={0x0, @in6={{0xa, 0x4e23, 0x5, @private2, 0x6}}}, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000380)=[@in6={0xa, 0x4e21, 0x7, @mcast2, 0x7f}, @in={0x2, 0x4e20, @broadcast}, @in6={0xa, 0x4e23, 0xffff, @empty, 0x401}, @in={0x2, 0x4e23, @loopback}, @in6={0xa, 0x4e20, 0x4f0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}, 0x197}, @in6={0xa, 0x4e22, 0xe, @mcast2, 0x8dc}, @in6={0xa, 0x4e23, 0x8, @local}], 0xac) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x10, 0x1c, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x2}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {0x7, 0x0, 0x0, 0x9}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff1, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 938.010327ms ago: executing program 2 (id=600): r0 = socket$kcm(0x1e, 0x4, 0x0) setsockopt$sock_attach_bpf(r0, 0x10f, 0x87, &(0x7f00000008c0), 0x43) r1 = socket$kcm(0x1e, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), r2) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)={0x14, r3, 0x83625fc5352ba305}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x4020010) setsockopt$sock_attach_bpf(r1, 0x10f, 0x87, &(0x7f00000008c0), 0x43) close(r1) 822.270042ms ago: executing program 0 (id=601): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x1f, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000490000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x1, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xc, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000900)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f00000008c0)="89", 0x0}, 0x32) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000006c0)=ANY=[@ANYBLOB="9c0300002400010026bd7000fedbdf25810300800c0035000200000000000000910264808d009280d9b45c1c72ea0f6ec741f650e5d8f1c76e4d6e6f78dffc221296c2686a3b0e577e85e2d42ec6795d0f76e5ed0f31909e6bed6e29fb89f169f2f3f03481b87cf2a83e3bc132072ed4ee7ab77002f80ddf0b8c819b047e1a70ad821d12b62ac2e3a2ccd666b54ee507ea702cd16bf1df7c22f67f542e5f0d71bc806d38880800fa00", @ANYRES32=r0, @ANYBLOB="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", @ANYRES32=r0, @ANYRES16=r1], 0x39c}], 0x1}, 0x4000000) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000980)=@newqdisc={0x84, 0x10, 0x100, 0x0, 0x0, {0x6, 0x0, 0x8100, 0x0, {0xffe0, 0x10}, {0xd}, {0xe, 0x10}}, [@TCA_RATE={0x6}, @TCA_STAB={0x58, 0x8, 0x0, 0x1, [{{0x1c, 0x11, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd, 0x2}}, {0x8, 0x1b, [0x0, 0x0]}}, {{0x1c, 0x1, {0x9, 0xe, 0x7, 0x9, 0x0, 0x4, 0x1, 0x8}}, {0x14, 0x2, [0xf, 0x1, 0x2, 0x2, 0x2, 0xbb90, 0x0, 0x9]}}]}]}, 0x84}, 0x1, 0x0, 0x0, 0x400c800}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='net_prio.prioidx\x00', 0x275a, 0x0) mmap(&(0x7f0000ffa000/0x4000)=nil, 0x4000, 0x0, 0x12, r4, 0x0) mmap(&(0x7f0000691000/0x4000)=nil, 0x4000, 0x1000000, 0x28011, r4, 0x513e9000) setsockopt$TIPC_GROUP_JOIN(r4, 0x10f, 0x87, &(0x7f00000004c0)={0x40, 0x3, 0x3}, 0x10) sendmsg$ETHTOOL_MSG_LINKINFO_SET(0xffffffffffffffff, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16, @ANYBLOB="010024bd7000fddbaa2503000000180001801400020073797a5f74756e000000000000000000050002"], 0x3c}, 0x1, 0x0, 0x0, 0x20009005}, 0x2000c000) r5 = socket$inet6(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[], 0x2c}}, 0x0) sendto$inet6(r5, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x12, r4, 0x2000) r6 = socket$igmp(0x2, 0x3, 0x2) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PRIVFLAGS_GET(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000000000022000011000000180001801400020069705f76746930"], 0x2c}, 0x1, 0x0, 0x0, 0x11}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000300)={'hsr0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0500000004000000180000eb8e02000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000001a00"/28], 0x48) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="640000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="ffc30000000000003c0012800c0001006d6163766c616e002c0002800a000900ffffbfffffff00000a000400aaaaaaaaaabb00000600020001000000440003000000000008000500", @ANYRES32=r11], 0x64}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x22}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)=@delqdisc={0xffffffffffffff0d, 0x25, 0x100, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x6, 0x6}, {0xffff, 0x4}, {0xffe0, 0x7}}, [@TCA_RATE={0x6, 0x5, {0xc4, 0xe2}}, @TCA_RATE={0x0, 0x5, {0x74, 0x6}}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004000}, 0x4048005) sendmsg$ETHTOOL_MSG_COALESCE_GET(r4, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01002dbd7000fbdb70696d36726567300000000000000000080003000400edff080001000000000000000000000001000000", @ANYRES32=0x0, @ANYBLOB], 0x3c}, 0x1, 0x0, 0x0, 0x80}, 0x20000000) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'veth1_macvtap\x00'}) 730.571995ms ago: executing program 1 (id=602): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$vsock_stream(0x28, 0x1, 0x0) socket$kcm(0x2, 0x1000000000000002, 0x0) (async) r1 = socket$kcm(0x2, 0x1000000000000002, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) (async) connect$inet(r2, &(0x7f0000000080)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x4a, &(0x7f0000000000)={@link_local={0x3}, @multicast, @val={@void, {0x8100, 0x0, 0x0, 0x2}}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x7, 0x0, 0x1, 0x0, @empty, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, 0x0, 0x0) socket(0x40000000015, 0x5, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, 0x0, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r2, 0x0, 0x480, &(0x7f0000000200), &(0x7f0000000240)=0x40) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$sock_attach_bpf(r1, 0x88, 0x67, &(0x7f00000002c0)=r3, 0x4) bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x0, r0}, 0x18) (async) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x0, r0}, 0x18) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000100)="9dd56379c8278de314486c166626f3df35548603d5c14c71196ed90773fa3b35c6a4df97ca43cb3b03147a71c306f15086c02eac59cf693eba3356782bd402479f230dfacda3568f2af4ae10eaa60c7067a2eae630c0b287a90a9aacc3acf29abc11675f5de7dafa94c4aa5c79f5bdb5925f9056556fda3091d38f7368fbfcd4471be18aec3f3c930d658f484549594846f5cb1a5a1b6398d22020d088f97bea92a1a673fef949c86566fb396d35f73645ef9f4fb456c12ae17cf733c700d6bded991aa54bada740a3a652", &(0x7f00000003c0)=@buf="97ce02bb673e488ac58a0289d78ac55334775ba20abff3a8591d1611b564d5fd4f14a69b73fe0162ea3679da05d856ae8faa6af6498519aeb80099c731cbfc401acef7854e", 0x4}, 0x20) (async) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000300)={r4, &(0x7f0000000100)="9dd56379c8278de314486c166626f3df35548603d5c14c71196ed90773fa3b35c6a4df97ca43cb3b03147a71c306f15086c02eac59cf693eba3356782bd402479f230dfacda3568f2af4ae10eaa60c7067a2eae630c0b287a90a9aacc3acf29abc11675f5de7dafa94c4aa5c79f5bdb5925f9056556fda3091d38f7368fbfcd4471be18aec3f3c930d658f484549594846f5cb1a5a1b6398d22020d088f97bea92a1a673fef949c86566fb396d35f73645ef9f4fb456c12ae17cf733c700d6bded991aa54bada740a3a652", &(0x7f00000003c0)=@buf="97ce02bb673e488ac58a0289d78ac55334775ba20abff3a8591d1611b564d5fd4f14a69b73fe0162ea3679da05d856ae8faa6af6498519aeb80099c731cbfc401acef7854e", 0x4}, 0x20) sendmsg$inet(r1, &(0x7f0000000380)={&(0x7f0000000500)={0x2, 0x4e1d, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x2a}, @multicast1}}}], 0x20}, 0x0) socket$rxrpc(0x21, 0x2, 0x2) (async) r5 = socket$rxrpc(0x21, 0x2, 0x2) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) sendmsg$NL80211_CMD_CHANNEL_SWITCH(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, r6, 0x100, 0x70bd2c, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}, @NL80211_ATTR_CH_SWITCH_BLOCK_TX={0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x40000) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000040)='{\x00', 0xff65) (async) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000040)='{\x00', 0xff65) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x13, 0x4, &(0x7f0000000c00)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x2000000}, 0x8, 0x10, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x2}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 676.503544ms ago: executing program 2 (id=603): socketpair(0x26, 0x5, 0x0, &(0x7f0000000000)) r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) r2 = accept(r0, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r3, &(0x7f0000000300), &(0x7f00000002c0)=@tcp6=r2, 0x1}, 0x20) shutdown(r1, 0x1) ppoll(&(0x7f00000000c0)=[{}, {}], 0x20000000000000dc, 0x0, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="2800000010000be625bd7000004000000300000008000200070000000c00018008004f0004000000"], 0x28}}, 0x4040080) r5 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_mreq(r5, 0x0, 0x20, &(0x7f0000001540)={@initdev={0xac, 0x1e, 0x1, 0x0}, @empty}, 0x8) connect$inet(r5, &(0x7f0000000080)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10) 422.459505ms ago: executing program 1 (id=604): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000980)={'sit0\x00', &(0x7f0000000940)={@dev={0xfe, 0x80, '\x00', 0x1e}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x101, 0xb}}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001540)=@newlink={0x48, 0x10, 0xffffff1f, 0x70bd2b, 0x0, {0x0, 0x6, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_OFLAGS={0x6, 0x3, 0x6}, @IFLA_GRE_ENCAP_TYPE={0x6}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x48}}, 0x0) 333.239512ms ago: executing program 2 (id=605): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$can_raw(0x1d, 0x3, 0x1) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r1, 0x8bf20000) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1407, 0x917, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x40081) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x1000000, 0x10, r1, 0x8bf20000) (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r2, &(0x7f0000000100)={&(0x7f0000000040), 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x18, 0x1407, 0x917, 0x70bd25, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x18}, 0x1, 0x0, 0x0, 0x40040}, 0x40081) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0xa0}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) 287.452352ms ago: executing program 0 (id=606): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0xc, 0x1c, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000001509010000000000b500f8ffffff000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000000a36c00850000001700000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000082000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=@newqdisc={0x24, 0x29, 0xa19702d202eff97b, 0x4001, 0xfffffdf8, {0x0, 0x0, 0x0, r2, {0x0, 0x8100}, {0xfff3, 0xffff}, {0x6, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x4005c}, 0x4000080) 83.376323ms ago: executing program 0 (id=607): bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x12, 0x4, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000000000000000000000711235000000000095"], &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x2c, '\x00', 0x0, @cgroup_sock_addr=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000600)={'macvlan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000200)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @hsr={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_HSR_SLAVE1={0x8, 0x1, r2}, @IFLA_HSR_SLAVE2={0x8, 0x2, r3}]}}}]}, 0x40}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wg2\x00', 0x0}) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000000000000000000000008500000061000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000800)={r6, 0x18000000000002a0, 0x4f, 0x0, &(0x7f0000000880)="b9ff030768441a8cb89e14f008008632e7429800", 0x0, 0x4, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) getpeername$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000180)=0x14) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000240)={0x1, 0x58, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r9 = socket(0xa, 0x3, 0x3a) r10 = socket(0x2a, 0x2, 0x0) getsockname$packet(r10, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x63) setsockopt$MRT6_ADD_MIF(r9, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x0, 0x4, r11}, 0xc) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000280)=0x0, &(0x7f00000002c0)=0x4) r13 = socket(0x10, 0x3, 0x0) r14 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r14, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=@newnexthop={0x2c, 0x68, 0x1, 0x100003, 0x7ffffffd, {}, [@NHA_GROUP={0xc, 0x2, [{0x1, 0x15}]}, @NHA_GROUP_TYPE={0x6, 0x3, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4008018}, 0x4000080) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000013c0)=@newqdisc={0x94, 0x24, 0xf0b, 0x70bd2b, 0xfffffffd, {0x0, 0x0, 0x0, r15, {0x0, 0x5}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x64, 0x2, {{0x7fff, 0x7f, 0x192, 0xf, 0x7fff, 0x205}, [@TCA_NETEM_LOSS={0x1c, 0x5, 0x0, 0x1, [@NETEM_LOSS_GI={0x18, 0x1, {0x8, 0x5, 0x1, 0x3, 0xfd}}]}, @TCA_NETEM_SLOT={0x2c, 0xc, {0x5, 0x1, 0xfffffffd, 0x0, 0x1bb, 0x4}}]}}}]}, 0x94}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'batadv0\x00', 0x0}) sendmsg$ETHTOOL_MSG_COALESCE_GET(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20c28300}, 0xc, &(0x7f0000000380)={&(0x7f0000000640)={0x18c, r0, 0x400, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'rose0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'team0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvlan1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @HEADER={0x58, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dvmrp1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'batadv_slave_1\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6gretap0\x00'}]}, @HEADER={0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'caif0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wlan0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}]}, @HEADER={0x48, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_virt_wifi\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r12}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r16}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r17}]}]}, 0x18c}, 0x1, 0x0, 0x0, 0x20000080}, 0x404c081) 2.259049ms ago: executing program 3 (id=608): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@ipv6_newaddr={0x48, 0x14, 0x1, 0xfffffffc, 0x0, {0xa, 0x0, 0x0, 0x0, r5}, [@IFA_ADDRESS={0x14, 0x1, @mcast2}, @IFA_FLAGS={0x8, 0x8, 0x402}, @IFA_CACHEINFO={0x14, 0x6, {0x5, 0x7, 0x77eb488a, 0x5}}]}, 0x48}}, 0x0) socket$kcm(0x2, 0x3, 0x2) socket$kcm(0x2, 0x3, 0x2) r6 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000001c0)="4c000000150097f07059ae08060c040002ff0f0300000000000001870182fa73a69d35a2cca8a308f7abca1b4e7d06a6bd7c493872f7d0375ed08a56041f000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, 0x0, &(0x7f0000000040)) sendmsg$SMC_PNETID_GET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="400000001000370400"/20, @ANYRESHEX=r1, @ANYBLOB="8b040400000000002000128008000100736974001400028008000100", @ANYBLOB='\b'], 0x40}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmmsg$inet(r0, &(0x7f0000002940)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @remote}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @empty, @empty}}}], 0x20}}], 0x1, 0x0) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', r8, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18020000fcffffff00000000000000008500000041000000850000000800000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x0, 0xe, 0x0, &(0x7f0000000a00)="2cbd805c88d340ee699d2e7150f6", 0x0, 0xf7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0xf, 0x8, &(0x7f0000000040)=ANY=[@ANYBLOB="1806000002000000000000000000000018120000", @ANYRES32=r9, @ANYBLOB="0000000000000000b70300000000000085000000bb000000b7000200000000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.729804ms ago: executing program 1 (id=609): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000000900000044000380080001000200000014"], 0x58}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0b0000001f0000000200000022bf000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000010000700000000b712d10000000000006cc15a469dde050038f20100"/42], 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000000)='sched_switch\x00', r0, 0x0, 0x1}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000300), &(0x7f0000000400), 0x401, r1, 0x0, 0xa002a0}, 0x38) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r3, 0x301, 0x0, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x40006) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x2c, r3, 0x301, 0x0, 0x25dfdbfb, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond0\x00'}]}]}, 0x2c}}, 0x40006) openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8080, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x8080, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'bond_slave_0\x00', 0x7bc14964777cf22e}) (async) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000240)={'bond_slave_0\x00', 0x7bc14964777cf22e}) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={&(0x7f0000000080), &(0x7f0000000140)=""/184, &(0x7f0000000200), &(0x7f0000001540), 0x1, r1}, 0x38) 0s ago: executing program 2 (id=610): unshare(0x20400) r0 = socket$inet_icmp(0x2, 0x2, 0x1) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e22, @multicast1}, 0x10) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000600)=@raw={'raw\x00', 0x8, 0x3, 0x4c0, 0x0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x3f0, 0xffffffff, 0xffffffff, 0x3f0, 0xffffffff, 0xb, 0x0, {[{{@uncond, 0x0, 0x1a0, 0x1c0, 0x60030000, {0x0, 0xff000000}, [@common=@inet=@recent0={{0xf8}, {0x81, 0x0, 0x24, 0x0, 'syz1\x00'}}]}, @unspec=@TRACE={0x20}}, {{@uncond, 0x0, 0x1c8, 0x230, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x1, 0x0, 'syz0\x00'}}, @common=@inet=@set2={{0x28}, {{0x0, 0x40}}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x520) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r2, @ANYRES16=r0], 0x21c}, 0x1, 0x0, 0x0, 0x800}, 0x0) r4 = socket(0xa, 0x3, 0x3a) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0xa, 0x8, &(0x7f0000002ac0)=ANY=[@ANYRES8], &(0x7f0000000280)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f00000004c0)={0x20}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) write$cgroup_freezer_state(0xffffffffffffffff, 0x0, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x15, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="850000002e00000016000000000000002a00000000000000"], 0x0, 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @sk_reuseport=0x28, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0xfffffffc, @void, @value}, 0x94) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, &(0x7f0000000240)={0x2, 0x8000}, 0x4) sendmsg$NL80211_CMD_START_AP(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="05000000af2b0f32b338a5c511fcdc00"/29, @ANYRES32=r8, @ANYBLOB="0c009900ff0f000064000000"], 0x28}}, 0x0) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000340)={0x2, &(0x7f0000000300)=[{0x7ff, 0x3, 0xf, 0x7}, {0x2, 0x1, 0xac, 0x8d}]}, 0x10) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x1}, 0xc) r9 = socket$alg(0x26, 0x5, 0x0) bind$alg(r9, &(0x7f00000018c0)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64\x00'}, 0x58) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000380)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, 0x0, 0x0) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000100)="7d1068a421f05f384340d34be65ac0bbe72925ab1a8aa3", 0x17) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)=ANY=[@ANYBLOB="14000000100001000000271d52b200000000000a20000000000a01030000000000000000010000000900010073797a310000000040000000030a01020000000000000000010000000900030073797a32c06e0181e30000000014000480080002400000000008000140000000050900010073797a31000000002c000000050a01020000000000000000010020000c00024000000000000000010900010073797a3100000000140000001100010000000021000000000000000a"], 0xb4}}, 0x200000d4) accept4$rose(r4, &(0x7f0000000040)=@short={0xb, @dev, @rose, 0x1, @netrom}, &(0x7f0000000140)=0x1c, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.177' (ED25519) to the list of known hosts. [ 84.725233][ T5818] cgroup: Unknown subsys name 'net' [ 84.920156][ T5818] cgroup: Unknown subsys name 'cpuset' [ 84.929447][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 86.608543][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 89.441237][ T5832] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 89.450333][ T5832] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.458473][ T5832] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 89.467102][ T5832] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.475083][ T5832] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.483671][ T5832] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 89.492291][ T5832] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.500448][ T5832] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.508808][ T5832] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.510068][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 89.517732][ T5832] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 89.531149][ T5832] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.539526][ T5832] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 89.547777][ T5846] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.549618][ T5832] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 89.556181][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.563803][ T5832] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.576168][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 89.592062][ T5832] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.606545][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 89.615999][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.625419][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.632881][ T5847] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.642997][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.665757][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 90.213539][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 90.344812][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 90.421993][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 90.562188][ T5838] chnl_net:caif_netlink_parms(): no params data found [ 90.710189][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.717529][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.724964][ T5835] bridge_slave_0: entered allmulticast mode [ 90.732709][ T5835] bridge_slave_0: entered promiscuous mode [ 90.744021][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.751359][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.758666][ T5835] bridge_slave_1: entered allmulticast mode [ 90.766651][ T5835] bridge_slave_1: entered promiscuous mode [ 90.847922][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 90.880618][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.888190][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.895714][ T5828] bridge_slave_0: entered allmulticast mode [ 90.903002][ T5828] bridge_slave_0: entered promiscuous mode [ 90.910618][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.917943][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.925173][ T5834] bridge_slave_0: entered allmulticast mode [ 90.933047][ T5834] bridge_slave_0: entered promiscuous mode [ 90.940945][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.948673][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.956837][ T5834] bridge_slave_1: entered allmulticast mode [ 90.964031][ T5834] bridge_slave_1: entered promiscuous mode [ 90.980678][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.997736][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.004928][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.013604][ T5828] bridge_slave_1: entered allmulticast mode [ 91.021986][ T5828] bridge_slave_1: entered promiscuous mode [ 91.082664][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.131459][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.144596][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.197265][ T5838] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.204474][ T5838] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.211968][ T5838] bridge_slave_0: entered allmulticast mode [ 91.220177][ T5838] bridge_slave_0: entered promiscuous mode [ 91.230389][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.279646][ T5835] team0: Port device team_slave_0 added [ 91.286009][ T5838] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.293403][ T5838] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.300725][ T5838] bridge_slave_1: entered allmulticast mode [ 91.308664][ T5838] bridge_slave_1: entered promiscuous mode [ 91.318603][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.344814][ T5834] team0: Port device team_slave_0 added [ 91.358813][ T5835] team0: Port device team_slave_1 added [ 91.394442][ T5834] team0: Port device team_slave_1 added [ 91.518168][ T5838] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.530606][ T5828] team0: Port device team_slave_0 added [ 91.540297][ T5828] team0: Port device team_slave_1 added [ 91.560126][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.567507][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.574782][ T5829] bridge_slave_0: entered allmulticast mode [ 91.584369][ T5829] bridge_slave_0: entered promiscuous mode [ 91.593964][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.601158][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.628735][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.644573][ T5838] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.654301][ T55] Bluetooth: hci0: command tx timeout [ 91.656102][ T55] Bluetooth: hci4: command tx timeout [ 91.665746][ T5840] Bluetooth: hci3: command tx timeout [ 91.705066][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.712485][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.739438][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.750866][ T55] Bluetooth: hci2: command tx timeout [ 91.752732][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.763794][ T5840] Bluetooth: hci1: command tx timeout [ 91.764762][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.796172][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.808575][ T1215] cfg80211: failed to load regulatory.db [ 91.819076][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.826451][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.833701][ T5829] bridge_slave_1: entered allmulticast mode [ 91.842291][ T5829] bridge_slave_1: entered promiscuous mode [ 91.866394][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.873369][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.899881][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.925827][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.932818][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.958970][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.971201][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.978342][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.004420][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.052355][ T5838] team0: Port device team_slave_0 added [ 92.062175][ T5838] team0: Port device team_slave_1 added [ 92.104735][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 92.199569][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 92.225000][ T5835] hsr_slave_0: entered promiscuous mode [ 92.231470][ T5835] hsr_slave_1: entered promiscuous mode [ 92.239762][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.247590][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.274098][ T5838] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.287546][ T5838] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.294516][ T5838] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.320642][ T5838] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.337774][ T5834] hsr_slave_0: entered promiscuous mode [ 92.344185][ T5834] hsr_slave_1: entered promiscuous mode [ 92.350543][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.358501][ T5834] Cannot create hsr debugfs directory [ 92.370038][ T5828] hsr_slave_0: entered promiscuous mode [ 92.377233][ T5828] hsr_slave_1: entered promiscuous mode [ 92.383375][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.391091][ T5828] Cannot create hsr debugfs directory [ 92.476094][ T5829] team0: Port device team_slave_0 added [ 92.537287][ T5829] team0: Port device team_slave_1 added [ 92.570291][ T5838] hsr_slave_0: entered promiscuous mode [ 92.576799][ T5838] hsr_slave_1: entered promiscuous mode [ 92.582869][ T5838] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.590771][ T5838] Cannot create hsr debugfs directory [ 92.741087][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 92.748430][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.775027][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 92.789471][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 92.796619][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.822847][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 93.058667][ T5829] hsr_slave_0: entered promiscuous mode [ 93.065129][ T5829] hsr_slave_1: entered promiscuous mode [ 93.071678][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 93.079370][ T5829] Cannot create hsr debugfs directory [ 93.274191][ T5834] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 93.287398][ T5834] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 93.312832][ T5834] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 93.339931][ T5834] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 93.446890][ T5835] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 93.471028][ T5835] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 93.482012][ T5835] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 93.504055][ T5835] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 93.550078][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.563468][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.584807][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.609828][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.708050][ T5838] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 93.725063][ T5838] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 93.735922][ T55] Bluetooth: hci4: command tx timeout [ 93.737436][ T5840] Bluetooth: hci3: command tx timeout [ 93.741386][ T55] Bluetooth: hci0: command tx timeout [ 93.767708][ T5838] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 93.806096][ T55] Bluetooth: hci2: command tx timeout [ 93.809337][ T5838] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 93.811559][ T55] Bluetooth: hci1: command tx timeout [ 93.842122][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.904793][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.950323][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.957626][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.969645][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.976818][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.994605][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 94.022845][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 94.034801][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 94.047054][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 94.131166][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.156841][ T5834] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.206422][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.251130][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.258383][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.270443][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.277721][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.343263][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.425241][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.454249][ T5838] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.492303][ T1150] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.499572][ T1150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.542028][ T1150] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.549256][ T1150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.631175][ T5838] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.653823][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.671955][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.683496][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.691260][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.761492][ T3020] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.768783][ T3020] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.821670][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.894443][ T3020] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.901728][ T3020] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.943390][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.950635][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 95.014264][ T5838] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 95.029502][ T5838] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.141174][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.198736][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 95.390827][ T5835] veth0_vlan: entered promiscuous mode [ 95.457678][ T5835] veth1_vlan: entered promiscuous mode [ 95.570030][ T5834] veth0_vlan: entered promiscuous mode [ 95.600208][ T5835] veth0_macvtap: entered promiscuous mode [ 95.636833][ T5834] veth1_vlan: entered promiscuous mode [ 95.672612][ T5835] veth1_macvtap: entered promiscuous mode [ 95.699015][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.741693][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.769363][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.793700][ T5835] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.802777][ T5835] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.805989][ T55] Bluetooth: hci0: command tx timeout [ 95.812403][ T5840] Bluetooth: hci4: command tx timeout [ 95.823670][ T5847] Bluetooth: hci3: command tx timeout [ 95.829645][ T5835] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.839912][ T5835] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.853732][ T5834] veth0_macvtap: entered promiscuous mode [ 95.867467][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.887121][ T5847] Bluetooth: hci1: command tx timeout [ 95.892606][ T5847] Bluetooth: hci2: command tx timeout [ 95.920568][ T5838] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.930527][ T5834] veth1_macvtap: entered promiscuous mode [ 95.960305][ T5828] veth0_vlan: entered promiscuous mode [ 95.974633][ T5828] veth1_vlan: entered promiscuous mode [ 96.061787][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.074542][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.084033][ T5828] veth0_macvtap: entered promiscuous mode [ 96.123350][ T5834] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.132547][ T5834] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.141833][ T5834] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.151198][ T5834] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.179265][ T1150] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.192850][ T1150] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.201354][ T5828] veth1_macvtap: entered promiscuous mode [ 96.222676][ T5829] veth0_vlan: entered promiscuous mode [ 96.289292][ T5829] veth1_vlan: entered promiscuous mode [ 96.296936][ T1150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.312469][ T1150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.333640][ T5838] veth0_vlan: entered promiscuous mode [ 96.353567][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.409775][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.438991][ T5829] veth0_macvtap: entered promiscuous mode [ 96.454766][ T5838] veth1_vlan: entered promiscuous mode [ 96.456549][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 96.483505][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.496667][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.505996][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.514794][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.537163][ T5829] veth1_macvtap: entered promiscuous mode [ 96.609364][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.624507][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.653769][ T5838] veth0_macvtap: entered promiscuous mode [ 96.707214][ T5838] veth1_macvtap: entered promiscuous mode [ 96.721121][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.763721][ T3020] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.780763][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.789308][ T3020] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.859828][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.881493][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.893319][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.905894][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.914656][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.932577][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.947667][ T5838] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.964254][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.018964][ T5838] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.029217][ T5838] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.039483][ T5838] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.049054][ T5838] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.124978][ T5930] syz.2.7 uses obsolete (PF_INET,SOCK_PACKET) [ 97.161363][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.196871][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.201772][ T5933] Zero length message leads to an empty skb [ 97.453635][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.501117][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.571865][ T3020] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.589638][ T3020] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.723820][ T5946] netlink: 264 bytes leftover after parsing attributes in process `syz.2.8'. [ 97.737366][ T5946] IPv6: Can't replace route, no match found [ 97.860329][ T1341] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.886704][ T5847] Bluetooth: hci3: command tx timeout [ 97.892179][ T5847] Bluetooth: hci4: command tx timeout [ 97.895942][ T5840] Bluetooth: hci0: command tx timeout [ 97.905542][ T1341] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.965948][ T55] Bluetooth: hci1: command tx timeout [ 97.966202][ T5847] Bluetooth: hci2: command tx timeout [ 98.050674][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.096405][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.129662][ T5995] sch_tbf: burst 0 is lower than device veth1_virt_wifi mtu (1514) ! [ 99.383770][ T6014] netlink: 20 bytes leftover after parsing attributes in process `syz.3.12'. [ 99.637697][ T6017] netlink: 37 bytes leftover after parsing attributes in process `syz.2.14'. [ 99.725655][ T6021] nbd: must specify a size in bytes for the device [ 99.915008][ T6020] erspan1: entered allmulticast mode [ 100.182072][ T5831] udevd[5831]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 100.293367][ T5836] udevd[5836]: inotify_add_watch(7, /dev/nbd64, 10) failed: No such file or directory [ 100.315134][ T6039] !: renamed from dummy0 (while UP) [ 100.496534][ T6042] netlink: 'syz.0.21': attribute type 1 has an invalid length. [ 100.520982][ T6044] netlink: 40 bytes leftover after parsing attributes in process `syz.4.19'. [ 100.696796][ T6057] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 100.743459][ T6051] warning: `syz.4.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.028188][ T6044] netlink: 'syz.4.19': attribute type 3 has an invalid length. [ 101.063745][ C0] Unknown status report in ack skb [ 101.144809][ T6068] batadv1: entered promiscuous mode [ 101.616126][ T6085] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 101.725338][ T6093] RDS: rds_bind could not find a transport for ::c003:0:20:0, load rds_tcp or rds_rdma? [ 101.996980][ T6102] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 102.126443][ T6108] netlink: 8 bytes leftover after parsing attributes in process `syz.3.32'. [ 102.135208][ T6108] netlink: 4 bytes leftover after parsing attributes in process `syz.3.32'. [ 102.624539][ T6128] netlink: 8 bytes leftover after parsing attributes in process `syz.4.33'. [ 102.647912][ T6127] bond0: entered promiscuous mode [ 102.663108][ T6127] bond_slave_0: entered promiscuous mode [ 102.680060][ T6127] bond_slave_1: entered promiscuous mode [ 102.724373][ T6127] batadv0: entered promiscuous mode [ 102.763378][ T6137] sctp: [Deprecated]: syz.0.38 (pid 6137) Use of int in max_burst socket option. [ 102.763378][ T6137] Use struct sctp_assoc_value instead [ 102.781351][ T6127] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 102.853805][ T6127] bond0: left promiscuous mode [ 102.876044][ T6127] bond_slave_0: left promiscuous mode [ 102.890945][ T6127] bond_slave_1: left promiscuous mode [ 102.965566][ T6127] batadv0: left promiscuous mode [ 103.048317][ T6146] netlink: 'syz.2.37': attribute type 303 has an invalid length. [ 103.071321][ T6146] netlink: 8 bytes leftover after parsing attributes in process `syz.2.37'. [ 103.464129][ T6151] netlink: 'syz.4.39': attribute type 2 has an invalid length. [ 103.492960][ T6146] syz.2.37 (6146) used greatest stack depth: 18168 bytes left [ 103.567822][ T6157] netlink: 'syz.3.42': attribute type 1 has an invalid length. [ 103.629078][ T6157] NCSI netlink: No device for ifindex 0 [ 103.808653][ T6162] syzkaller1: entered promiscuous mode [ 103.820803][ T6164] IPVS: set_ctl: invalid protocol: 0 172.20.20.20:20003 [ 103.841986][ T6162] syzkaller1: entered allmulticast mode [ 104.489187][ T6171] delete_channel: no stack [ 104.855965][ T6190] syzkaller1: entered promiscuous mode [ 104.885838][ T6190] syzkaller1: entered allmulticast mode [ 104.902342][ T6190] netlink: 12 bytes leftover after parsing attributes in process `syz.4.49'. [ 104.966048][ T6195] syzkaller1: left promiscuous mode [ 104.971328][ T6195] syzkaller1: left allmulticast mode [ 105.024487][ T6195] netlink: 68 bytes leftover after parsing attributes in process `syz.4.49'. [ 105.617795][ T6210] xt_CT: No such helper "pptp" [ 106.553763][ T6251] netlink: 4 bytes leftover after parsing attributes in process `syz.1.68'. [ 106.586572][ T6258] batadv_slave_1: entered promiscuous mode [ 106.593185][ T6258] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 106.610202][ T6258] macvlan2: entered promiscuous mode [ 106.631692][ T6258] macvlan2: entered allmulticast mode [ 106.642162][ T6258] erspan0: entered allmulticast mode [ 106.695138][ T6261] netlink: 'syz.1.71': attribute type 1 has an invalid length. [ 106.733478][ T6257] batadv_slave_1: left promiscuous mode [ 106.739756][ T6261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.141577][ T6280] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 107.590800][ T6295] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^–>º>ùMv^µâ侦¸ÑKc'A¥»– [ 107.859297][ T6303] vlan2: entered allmulticast mode [ 107.864519][ T6303] macvtap0: entered allmulticast mode [ 107.913273][ T6303] veth0_macvtap: entered allmulticast mode [ 108.614844][ T6319] bridge0: port 2(bridge_slave_1) entered learning state [ 108.657382][ T6334] veth1_macvtap: entered allmulticast mode [ 108.683149][ T6341] pimreg: entered allmulticast mode [ 108.701772][ T6342] 8021q: VLANs not supported on pimreg [ 108.969462][ T6333] veth1_macvtap: left allmulticast mode [ 109.138127][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.0.96'. [ 109.399946][ T6368] tipc: Started in network mode [ 109.413490][ T6368] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 109.422619][ T6368] tipc: Enabled bearer , priority 14 [ 109.492570][ T6377] netlink: 'syz.3.99': attribute type 10 has an invalid length. [ 109.599143][ T6377] team0: Port device syz_tun added [ 109.730091][ C0] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.933846][ T6397] netlink: 100 bytes leftover after parsing attributes in process `syz.1.103'. [ 110.139623][ T6404] sctp: [Deprecated]: syz.2.105 (pid 6404) Use of int in max_burst socket option deprecated. [ 110.139623][ T6404] Use struct sctp_assoc_value instead [ 110.382100][ T6418] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.429448][ T6418] ieee802154 phy0 wpan0: encryption failed: -22 [ 110.511312][ T6425] netlink: 12 bytes leftover after parsing attributes in process `syz.3.109'. [ 110.536754][ T9] tipc: Node number set to 10136234 [ 110.826201][ T6435] netlink: 12 bytes leftover after parsing attributes in process `syz.4.111'. [ 111.108316][ T6455] netlink: 'syz.2.116': attribute type 10 has an invalid length. [ 111.116310][ T6452] netlink: 'syz.2.116': attribute type 10 has an invalid length. [ 111.145510][ T6455] netlink: 40 bytes leftover after parsing attributes in process `syz.2.116'. [ 111.173907][ T6452] netlink: 40 bytes leftover after parsing attributes in process `syz.2.116'. [ 111.268251][ T6455] batadv0: entered promiscuous mode [ 111.280030][ T6455] batadv0: entered allmulticast mode [ 111.306494][ T6455] bridge0: port 3(batadv0) entered blocking state [ 111.313159][ T6455] bridge0: port 3(batadv0) entered disabled state [ 111.342454][ T6455] bridge0: port 3(batadv0) entered blocking state [ 111.349104][ T6455] bridge0: port 3(batadv0) entered forwarding state [ 111.605291][ T5993] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 111.614933][ T5993] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 111.717827][ T6474] Illegal XDP return value 4291489792 on prog (id 33) dev N/A, expect packet loss! [ 111.756668][ T6474] netlink: 'syz.3.120': attribute type 32 has an invalid length. [ 111.824841][ T6479] netlink: 8 bytes leftover after parsing attributes in process `syz.3.120'. [ 111.836641][ T6479] netlink: 24 bytes leftover after parsing attributes in process `syz.3.120'. [ 112.268501][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.2.123'. [ 112.553322][ T6500] netlink: 8 bytes leftover after parsing attributes in process `syz.1.127'. [ 112.734126][ T6503] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 112.767150][ T6511] Cannot find del_set index 1 as target [ 113.235604][ T6532] openvswitch: netlink: IP tunnel TTL not specified. [ 113.236362][ T6533] netlink: 'syz.2.135': attribute type 6 has an invalid length. [ 113.493960][ T6548] netlink: 'syz.2.138': attribute type 18 has an invalid length. [ 113.578879][ T6549] netlink: 'syz.2.138': attribute type 18 has an invalid length. [ 114.097535][ T6570] ipvlan2: entered promiscuous mode [ 114.121019][ T6570] bridge0: port 4(ipvlan2) entered blocking state [ 114.153489][ T6570] bridge0: port 4(ipvlan2) entered disabled state [ 114.164105][ T6575] __nla_validate_parse: 9 callbacks suppressed [ 114.164124][ T6575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.145'. [ 114.171766][ T6570] ipvlan2: entered allmulticast mode [ 114.196735][ T6575] netlink: 28 bytes leftover after parsing attributes in process `syz.0.145'. [ 114.215185][ T6570] bridge0: entered allmulticast mode [ 114.244907][ T6570] ipvlan2: left allmulticast mode [ 114.255202][ T6570] bridge0: left allmulticast mode [ 114.306822][ T6580] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 114.324545][ T6580] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 114.333412][ T6580] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 114.360951][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 114.402252][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 114.443036][ T6583] netlink: 8 bytes leftover after parsing attributes in process `syz.4.147'. [ 114.859012][ T6602] netlink: 8 bytes leftover after parsing attributes in process `syz.0.152'. [ 115.072934][ T6610] can: request_module (can-proto-0) failed. [ 115.346546][ T6632] xt_hashlimit: size too large, truncated to 1048576 [ 115.547638][ T6641] netlink: 'syz.0.162': attribute type 12 has an invalid length. [ 115.606874][ T6637] netlink: 27 bytes leftover after parsing attributes in process `syz.1.161'. [ 116.678206][ T6655] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 116.868025][ T6673] netlink: 'syz.4.166': attribute type 29 has an invalid length. [ 117.019421][ T6655] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.288796][ T6655] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.500078][ T6655] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 117.948937][ T6655] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.953929][ T6709] netlink: 4 bytes leftover after parsing attributes in process `syz.2.177'. [ 117.972008][ T6655] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.204069][ T6655] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.264890][ T6655] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.383339][ T5989] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.602993][ T5989] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 118.707186][ T6727] netlink: 12 bytes leftover after parsing attributes in process `syz.0.180'. [ 118.952245][ T6735] netlink: 8 bytes leftover after parsing attributes in process `syz.1.184'. [ 118.959172][ T5989] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.368262][ T5989] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 119.574721][ T6752] netlink: 'syz.2.192': attribute type 1 has an invalid length. [ 119.608612][ T6752] netlink: 'syz.2.192': attribute type 1 has an invalid length. [ 119.640062][ T6752] netlink: 'syz.2.192': attribute type 2 has an invalid length. [ 119.824764][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 119.837238][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 119.859470][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 119.869238][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 119.877866][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 119.938349][ T6762] netlink: 20 bytes leftover after parsing attributes in process `syz.3.195'. [ 119.998030][ T6770] netlink: 24 bytes leftover after parsing attributes in process `syz.2.196'. [ 120.012312][ T5989] bridge_slave_1: left allmulticast mode [ 120.047990][ T5989] bridge_slave_1: left promiscuous mode [ 120.071467][ T6773] netlink: 24 bytes leftover after parsing attributes in process `syz.3.195'. [ 120.089190][ T5989] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.158413][ T5989] bridge_slave_0: left allmulticast mode [ 120.169287][ T5989] bridge_slave_0: left promiscuous mode [ 120.216901][ T5989] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.921885][ T6804] netlink: 'syz.0.201': attribute type 1 has an invalid length. [ 121.014967][ T5989] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 121.041980][ T5989] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 121.065115][ T5989] bond0 (unregistering): Released all slaves [ 121.320548][ T6804] 8021q: adding VLAN 0 to HW filter on device bond1 [ 121.339651][ T6807] ip6erspan0: entered promiscuous mode [ 121.702687][ T6830] IPVS: sync thread started: state = MASTER, mcast_ifn = bridge_slave_0, syncid = 2, id = 0 [ 121.720654][ T6828] Bluetooth: MGMT ver 1.23 [ 121.861597][ T5897] IPVS: starting estimator thread 0... [ 121.912343][ T6835] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 121.966323][ T5847] Bluetooth: hci2: command tx timeout [ 121.976304][ T6839] IPVS: using max 27 ests per chain, 64800 per kthread [ 122.137793][ T5989] hsr_slave_0: left promiscuous mode [ 122.146209][ T5989] hsr_slave_1: left promiscuous mode [ 122.152384][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 122.165202][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 122.184294][ T5989] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 122.219626][ T5989] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 122.290134][ T5989] veth1_macvtap: left promiscuous mode [ 122.305029][ T5989] veth0_macvtap: left promiscuous mode [ 122.312840][ T5989] veth1_vlan: left promiscuous mode [ 122.318967][ T5989] veth0_vlan: left promiscuous mode [ 122.387518][ T6847] netlink: 2 bytes leftover after parsing attributes in process `syz.1.209'. [ 122.459152][ T6847] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.569401][ T5989] team0 (unregistering): Port device team_slave_1 removed [ 123.623820][ T5989] team0 (unregistering): Port device team_slave_0 removed [ 124.045557][ T5847] Bluetooth: hci2: command tx timeout [ 124.214116][ T6854] !: renamed from dummy0 (while UP) [ 124.219438][ T6869] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge0, syncid = 0, id = 0 [ 124.248199][ T6855] netlink: 12 bytes leftover after parsing attributes in process `syz.3.211'. [ 124.311309][ T6872] netlink: 8 bytes leftover after parsing attributes in process `syz.2.212'. [ 124.893459][ T6757] chnl_net:caif_netlink_parms(): no params data found [ 125.633667][ T6757] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.642287][ T6757] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.654096][ T6757] bridge_slave_0: entered allmulticast mode [ 125.663363][ T6757] bridge_slave_0: entered promiscuous mode [ 125.675932][ T6757] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.683333][ T6757] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.690718][ T6757] bridge_slave_1: entered allmulticast mode [ 125.698923][ T6757] bridge_slave_1: entered promiscuous mode [ 125.814979][ T6757] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 125.835401][ T6757] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 126.007839][ T6757] team0: Port device team_slave_0 added [ 126.022026][ T6757] team0: Port device team_slave_1 added [ 126.024096][ T6923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.219'. [ 126.131753][ T5847] Bluetooth: hci2: command tx timeout [ 126.232764][ T6757] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 126.266010][ T6757] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.369210][ T6757] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 126.418428][ T6935] (unnamed net_device) (uninitialized): option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 126.457294][ T6757] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 126.473719][ T6757] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 126.555071][ T6757] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 126.762916][ T6946] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 127.004121][ T6757] hsr_slave_0: entered promiscuous mode [ 127.024231][ T6757] hsr_slave_1: entered promiscuous mode [ 127.033318][ T6757] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 127.055404][ T6757] Cannot create hsr debugfs directory [ 127.078733][ T6959] xfrm1: entered promiscuous mode [ 127.084351][ T6959] xfrm1: entered allmulticast mode [ 127.374461][ T6971] netlink: 4 bytes leftover after parsing attributes in process `syz.1.229'. [ 127.840934][ T6994] netlink: 'syz.1.236': attribute type 2 has an invalid length. [ 127.892023][ T6994] netlink: 'syz.1.236': attribute type 2 has an invalid length. [ 128.130605][ T7006] netlink: 32 bytes leftover after parsing attributes in process `syz.3.238'. [ 128.181298][ T7010] veth1_macvtap: left promiscuous mode [ 128.206529][ T5847] Bluetooth: hci2: command tx timeout [ 128.222302][ T7010] macsec0: entered allmulticast mode [ 128.375247][ T7010] veth1_macvtap: entered promiscuous mode [ 128.395751][ T7010] veth1_macvtap: entered allmulticast mode [ 128.421354][ T7022] netlink: 28 bytes leftover after parsing attributes in process `syz.0.242'. [ 128.436170][ T7019] vcan0: tx drop: invalid da for name 0xfffffffffffffffe [ 128.455677][ T7010] macsec0: left allmulticast mode [ 128.463446][ T7010] veth1_macvtap: left allmulticast mode [ 128.779251][ T7030] netlink: 104 bytes leftover after parsing attributes in process `syz.2.243'. [ 129.135183][ T7036] netlink: 36 bytes leftover after parsing attributes in process `syz.0.245'. [ 129.196140][ T7043] netlink: 'syz.3.244': attribute type 4 has an invalid length. [ 129.759701][ T7062] netlink: 24 bytes leftover after parsing attributes in process `syz.3.250'. [ 129.918682][ T6757] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.037314][ T7074] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 130.046000][ T6757] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.237611][ T6757] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.272799][ T7086] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 130.285353][ T6757] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.371388][ T7086] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 130.411859][ T7098] raw_sendmsg: syz.2.258 forgot to set AF_INET. Fix it! [ 130.435714][ T7102] netlink: 4 bytes leftover after parsing attributes in process `syz.1.257'. [ 130.562163][ T7108] netlink: 4 bytes leftover after parsing attributes in process `syz.0.259'. [ 131.104239][ T7124] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 131.557436][ T6757] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.621323][ T6757] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.672588][ T6006] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.679924][ T6006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.732168][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.739408][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 132.161725][ T7174] netlink: 'syz.3.268': attribute type 29 has an invalid length. [ 132.298345][ T7179] netlink: 'syz.0.271': attribute type 4 has an invalid length. [ 132.371878][ T7183] netlink: 'syz.1.272': attribute type 1 has an invalid length. [ 132.380718][ T7183] netlink: 'syz.1.272': attribute type 2 has an invalid length. [ 132.615416][ T6757] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.647387][ T7191] netlink: 'syz.0.273': attribute type 3 has an invalid length. [ 132.769578][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.778202][ T1300] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.505759][ T6757] veth0_vlan: entered promiscuous mode [ 133.538406][ T6757] veth1_vlan: entered promiscuous mode [ 133.681556][ T6757] veth0_macvtap: entered promiscuous mode [ 133.716765][ T6757] veth1_macvtap: entered promiscuous mode [ 133.972938][ T6757] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 134.074540][ T6757] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 134.151459][ T6757] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.184033][ T6757] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.244286][ T6757] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.275907][ T6757] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 134.490037][ T7249] netlink: 8 bytes leftover after parsing attributes in process `syz.1.284'. [ 134.514736][ T7247] pimreg: entered allmulticast mode [ 134.537940][ T7246] 8021q: VLANs not supported on pimreg [ 134.555196][ T7246] netlink: 'syz.2.283': attribute type 1 has an invalid length. [ 134.564009][ T7246] netlink: 12 bytes leftover after parsing attributes in process `syz.2.283'. [ 134.639047][ T7247] pimreg: left allmulticast mode [ 134.972298][ T5993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 134.993702][ T5993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 135.228389][ T7272] netlink: 24 bytes leftover after parsing attributes in process `syz.2.288'. [ 135.244859][ T6006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 135.280056][ T6006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 136.150039][ T7290] netlink: 'syz.2.290': attribute type 5 has an invalid length. [ 136.927814][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.221274][ T7322] netlink: 'syz.2.295': attribute type 32 has an invalid length. [ 137.239744][ T7322] netlink: 8 bytes leftover after parsing attributes in process `syz.2.295'. [ 137.255363][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.305270][ T7329] netlink: 32 bytes leftover after parsing attributes in process `syz.1.294'. [ 137.335736][ T7329] netlink: 'syz.1.294': attribute type 32 has an invalid length. [ 137.363316][ T7322] (unnamed net_device) (uninitialized): option coupled_control: invalid value (192) [ 137.415535][ T7329] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 137.524304][ T7336] Cannot find add_set index 0 as target [ 137.560430][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.583935][ T7336] netlink: 4 bytes leftover after parsing attributes in process `syz.0.297'. [ 138.012477][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.138633][ T55] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 138.153591][ T55] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 138.176781][ T55] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 138.212905][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 138.227368][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 138.549822][ T7373] netlink: 248 bytes leftover after parsing attributes in process `syz.3.302'. [ 138.552157][ T7369] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.568626][ T7369] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.578020][ T7369] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.586909][ T7369] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 138.722305][ T7383] xt_TCPMSS: Only works on TCP SYN packets [ 139.104929][ T7392] veth0_to_bond: entered promiscuous mode [ 139.126264][ T13] bridge_slave_1: left allmulticast mode [ 139.131981][ T13] bridge_slave_1: left promiscuous mode [ 139.138395][ T7392] netlink: 4 bytes leftover after parsing attributes in process `syz.2.308'. [ 139.178036][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.214082][ T13] bridge_slave_0: left allmulticast mode [ 139.232463][ T13] bridge_slave_0: left promiscuous mode [ 139.242691][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.838677][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.853217][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.864478][ T13] bond0 (unregistering): Released all slaves [ 140.227167][ T7392] bond0: (slave bond_slave_0): Releasing backup interface [ 140.285737][ T55] Bluetooth: hci2: command tx timeout [ 140.753578][ T7454] netlink: 'syz.2.316': attribute type 3 has an invalid length. [ 140.780778][ T7454] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 140.853168][ T7461] netlink: 'syz.0.317': attribute type 39 has an invalid length. [ 140.948281][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'. [ 140.964220][ T7460] netlink: 4 bytes leftover after parsing attributes in process `syz.3.318'. [ 140.964947][ T7356] chnl_net:caif_netlink_parms(): no params data found [ 141.016327][ T7458] netlink: 4 bytes leftover after parsing attributes in process `syz.2.316'. [ 141.034918][ T13] hsr_slave_0: left promiscuous mode [ 141.044641][ T13] hsr_slave_1: left promiscuous mode [ 141.055189][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.069195][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.087374][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.102965][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.189381][ T13] veth1_macvtap: left promiscuous mode [ 141.195010][ T13] veth0_macvtap: left promiscuous mode [ 141.201920][ T13] veth1_vlan: left promiscuous mode [ 141.211269][ T13] veth0_vlan: left promiscuous mode [ 141.748123][ T13] team0 (unregistering): Port device team_slave_1 removed [ 141.783924][ T13] team0 (unregistering): Port device team_slave_0 removed [ 142.140521][ T7460] bridge1: entered allmulticast mode [ 142.265386][ T7458] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 142.291793][ T7458] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 142.323766][ T7478] netlink: 'syz.3.320': attribute type 5 has an invalid length. [ 142.332578][ T7475] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 142.365802][ T55] Bluetooth: hci2: command tx timeout [ 142.381242][ T7478] netlink: 44 bytes leftover after parsing attributes in process `syz.3.320'. [ 142.543139][ T7487] Dead loop on virtual device ip6_vti0, fix it urgently! [ 142.570607][ T7487] Dead loop on virtual device ip6_vti0, fix it urgently! [ 142.591431][ T7487] Dead loop on virtual device ip6_vti0, fix it urgently! [ 142.611664][ T7487] Dead loop on virtual device ip6_vti0, fix it urgently! [ 142.631695][ T7487] Dead loop on virtual device ip6_vti0, fix it urgently! [ 142.649496][ T7487] Dead loop on virtual device ip6_vti0, fix it urgently! [ 143.126531][ T7356] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.133754][ T7356] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.164530][ T7356] bridge_slave_0: entered allmulticast mode [ 143.213231][ T7356] bridge_slave_0: entered promiscuous mode [ 143.267563][ T7356] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.311043][ T7356] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.335837][ T7356] bridge_slave_1: entered allmulticast mode [ 143.343783][ T7356] bridge_slave_1: entered promiscuous mode [ 143.494604][ T7516] netlink: 4 bytes leftover after parsing attributes in process `syz.3.328'. [ 143.532816][ T7518] syzkaller1: entered promiscuous mode [ 143.540539][ T7518] syzkaller1: entered allmulticast mode [ 143.574841][ T7356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 143.614624][ T7356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 143.801208][ T7523] netlink: 'syz.3.330': attribute type 1 has an invalid length. [ 143.834206][ T7523] netlink: 228 bytes leftover after parsing attributes in process `syz.3.330'. [ 143.850029][ T7526] IPVS: length: 4096 != 8 [ 143.978724][ T7356] team0: Port device team_slave_0 added [ 144.024392][ T7356] team0: Port device team_slave_1 added [ 144.172069][ T7356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 144.184100][ T7356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.226322][ T7356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 144.327232][ T7356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 144.334421][ T7356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 144.361338][ T7356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 144.384672][ T7543] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 144.424341][ T7540] lo speed is unknown, defaulting to 1000 [ 144.433584][ T7540] lo speed is unknown, defaulting to 1000 [ 144.458527][ T55] Bluetooth: hci2: command tx timeout [ 144.481022][ T7547] openvswitch: netlink: Message has 2 unknown bytes. [ 144.488169][ T7547] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 144.572720][ T7356] hsr_slave_0: entered promiscuous mode [ 144.592108][ T7356] hsr_slave_1: entered promiscuous mode [ 144.605419][ T7356] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 144.615354][ T7356] Cannot create hsr debugfs directory [ 144.629790][ T7540] lo speed is unknown, defaulting to 1000 [ 144.655108][ T7540] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.716114][ T7540] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 144.766907][ T5993] wlan1: Trigger new scan to find an IBSS to join [ 144.893020][ T7540] lo speed is unknown, defaulting to 1000 [ 144.979871][ T7540] lo speed is unknown, defaulting to 1000 [ 145.013954][ T7569] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 145.202689][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.342'. [ 145.227038][ T7540] lo speed is unknown, defaulting to 1000 [ 145.269422][ T7569] bridge0: port 3(batadv0) entered disabled state [ 145.300455][ T7569] bridge_slave_1: left promiscuous mode [ 145.307750][ T7569] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.333327][ T7569] bridge_slave_0: left allmulticast mode [ 145.344437][ T7569] bridge_slave_0: left promiscuous mode [ 145.351319][ T7569] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.515163][ T7540] lo speed is unknown, defaulting to 1000 [ 145.633690][ T7540] lo speed is unknown, defaulting to 1000 [ 145.919279][ T7605] __nla_validate_parse: 2 callbacks suppressed [ 145.919300][ T7605] netlink: 312 bytes leftover after parsing attributes in process `syz.0.346'. [ 145.972187][ T9] hid-generic 0005:10CF:0009.0001: unknown main item tag 0x0 [ 145.978938][ T7606] netlink: 312 bytes leftover after parsing attributes in process `syz.0.346'. [ 145.995334][ T7605] netlink: 'syz.0.346': attribute type 1 has an invalid length. [ 146.003220][ T7605] netlink: 4 bytes leftover after parsing attributes in process `syz.0.346'. [ 146.082288][ T9] hid-generic 0005:10CF:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 146.111198][ T7605] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.262703][ T7605] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.372022][ T7622] netlink: 'syz.2.350': attribute type 5 has an invalid length. [ 146.385960][ T7622] netlink: 8 bytes leftover after parsing attributes in process `syz.2.350'. [ 146.417988][ T7622] netlink: 20 bytes leftover after parsing attributes in process `syz.2.350'. [ 146.472474][ T7605] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.535705][ T55] Bluetooth: hci2: command tx timeout [ 146.553357][ T7605] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.973724][ T7605] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.018514][ T7605] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.052554][ T7605] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.081395][ T7635] netlink: 4 bytes leftover after parsing attributes in process `syz.3.354'. [ 147.109595][ T7605] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 147.212084][ T7356] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 147.254343][ T7356] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 147.278421][ T7356] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 147.303866][ T7356] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 147.335060][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.0.355'. [ 147.395023][ T7640] netlink: 20 bytes leftover after parsing attributes in process `syz.0.355'. [ 147.420450][ T7640] nbd: must specify at least one socket [ 147.695346][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.0.357'. [ 147.720252][ T7657] netlink: 6 bytes leftover after parsing attributes in process `syz.0.357'. [ 147.743253][ T7356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.807971][ T5993] wlan1: Trigger new scan to find an IBSS to join [ 147.856582][ T7356] 8021q: adding VLAN 0 to HW filter on device team0 [ 148.038633][ T5986] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.045886][ T5986] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.112901][ T5986] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.120994][ T5986] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.532848][ T7678] lo speed is unknown, defaulting to 1000 [ 149.466157][ T7356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.877149][ T7678] Bluetooth: MGMT ver 1.23 [ 150.286443][ T7724] lo speed is unknown, defaulting to 1000 [ 150.777621][ T53] wlan1: Creating new IBSS network, BSSID 8e:8b:94:64:44:64 [ 151.079883][ T7356] veth0_vlan: entered promiscuous mode [ 151.150218][ T7356] veth1_vlan: entered promiscuous mode [ 151.218511][ T7768] __nla_validate_parse: 4 callbacks suppressed [ 151.218530][ T7768] netlink: 36 bytes leftover after parsing attributes in process `syz.2.379'. [ 151.244909][ T7356] veth0_macvtap: entered promiscuous mode [ 151.245547][ T7730] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20001 [ 151.258369][ T7356] veth1_macvtap: entered promiscuous mode [ 151.283642][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.322584][ T7356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.364622][ T7356] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.415744][ T7356] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.424506][ T7356] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.468571][ T7356] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.518455][ T7772] netlink: 16 bytes leftover after parsing attributes in process `syz.1.381'. [ 151.727274][ T7777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.380'. [ 151.800396][ T7777] geneve1: entered promiscuous mode [ 151.822130][ T7777] netlink: 16 bytes leftover after parsing attributes in process `syz.2.380'. [ 152.057548][ T6003] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.095942][ T6003] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.270042][ T6003] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 152.296452][ T6003] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 152.500334][ T7806] 8021q: adding VLAN 0 to HW filter on device bond1 [ 152.502308][ T7811] netlink: 'syz.1.385': attribute type 2 has an invalid length. [ 152.585616][ T7817] netlink: 12 bytes leftover after parsing attributes in process `syz.3.388'. [ 152.888702][ T7806] bond1 (unregistering): Released all slaves [ 153.104477][ T7829] IPVS: sync thread started: state = MASTER, mcast_ifn = macvlan1, syncid = 4, id = 0 [ 153.218914][ T7819] syzkaller0: entered promiscuous mode [ 153.224533][ T7819] syzkaller0: entered allmulticast mode [ 153.432692][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.002240][ T7850] netlink: 4 bytes leftover after parsing attributes in process `syz.0.392'. [ 154.426236][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 154.437149][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 154.444889][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 154.453998][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 154.462716][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 156.099605][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.145981][ T7850] team_slave_0: entered promiscuous mode [ 156.151888][ T7850] team_slave_1: entered promiscuous mode [ 156.167859][ T7850] team_slave_0: left promiscuous mode [ 156.173399][ T7850] team_slave_1: left promiscuous mode [ 156.294808][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.391499][ T7865] netlink: 12 bytes leftover after parsing attributes in process `syz.2.399'. [ 156.423007][ T7863] netlink: 60 bytes leftover after parsing attributes in process `syz.0.398'. [ 156.436065][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.399'. [ 156.474948][ T7852] lo speed is unknown, defaulting to 1000 [ 156.509807][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.526095][ T55] Bluetooth: hci2: command tx timeout [ 156.531750][ T7854] lo speed is unknown, defaulting to 1000 [ 156.762772][ T7874] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 156.947725][ T7886] bond_slave_0: entered promiscuous mode [ 156.962817][ T7886] bond_slave_1: entered promiscuous mode [ 156.984185][ T7886] vlan2: entered promiscuous mode [ 156.997293][ T7886] bond0: entered promiscuous mode [ 157.655030][ T13] bridge_slave_1: left allmulticast mode [ 157.676747][ T13] bridge_slave_1: left promiscuous mode [ 157.703747][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 157.799552][ T13] bridge_slave_0: left allmulticast mode [ 157.805273][ T13] bridge_slave_0: left promiscuous mode [ 157.844766][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 158.207723][ T7938] netlink: 28 bytes leftover after parsing attributes in process `syz.1.414'. [ 158.265813][ T7939] netlink: 40 bytes leftover after parsing attributes in process `syz.1.414'. [ 158.593418][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 158.604916][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 158.615823][ T55] Bluetooth: hci2: command tx timeout [ 158.616516][ T13] bond0 (unregistering): Released all slaves [ 158.703339][ T7854] chnl_net:caif_netlink_parms(): no params data found [ 159.035996][ T7954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.055096][ T7957] netlink: 20 bytes leftover after parsing attributes in process `syz.0.422'. [ 159.075046][ T7954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.103190][ T7954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.148127][ T7954] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.410900][ T7854] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.419658][ T7967] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input6 [ 159.445793][ T7854] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.478197][ T7854] bridge_slave_0: entered allmulticast mode [ 159.503760][ T7854] bridge_slave_0: entered promiscuous mode [ 159.532032][ T7854] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.564924][ T7854] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.593650][ T7854] bridge_slave_1: entered allmulticast mode [ 159.610435][ T7854] bridge_slave_1: entered promiscuous mode [ 159.672127][ T13] hsr_slave_0: left promiscuous mode [ 159.714985][ T13] hsr_slave_1: left promiscuous mode [ 159.741794][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.771922][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.804287][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 159.842664][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 159.971838][ T13] veth1_macvtap: left promiscuous mode [ 160.015688][ T13] veth0_macvtap: left promiscuous mode [ 160.031727][ T13] veth1_vlan: left promiscuous mode [ 160.054833][ T13] veth0_vlan: left promiscuous mode [ 160.312853][ T7997] netlink: 144 bytes leftover after parsing attributes in process `syz.3.429'. [ 160.695743][ T55] Bluetooth: hci2: command tx timeout [ 161.303936][ T13] team0 (unregistering): Port device team_slave_1 removed [ 161.342759][ T13] team0 (unregistering): Port device team_slave_0 removed [ 161.761575][ T7988] netlink: 'syz.1.426': attribute type 3 has an invalid length. [ 161.776549][ T7988] netlink: 3 bytes leftover after parsing attributes in process `syz.1.426'. [ 161.863605][ T7854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.007856][ T7854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.035993][ T8008] netlink: 48 bytes leftover after parsing attributes in process `syz.0.431'. [ 162.338867][ T7854] team0: Port device team_slave_0 added [ 162.352872][ T7854] team0: Port device team_slave_1 added [ 162.474149][ T8029] netlink: 'syz.0.436': attribute type 39 has an invalid length. [ 162.683885][ T7854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.690624][ T8035] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 162.718777][ T8038] netlink: 8 bytes leftover after parsing attributes in process `syz.1.439'. [ 162.728429][ T7854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.773294][ T55] Bluetooth: hci2: command tx timeout [ 162.795729][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.1.439'. [ 162.841528][ T7854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.905849][ T7854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.935916][ T8046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.441'. [ 162.972088][ T7854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.068165][ T7854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.454656][ T7854] hsr_slave_0: entered promiscuous mode [ 163.485352][ T7854] hsr_slave_1: entered promiscuous mode [ 163.544365][ T7854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.605675][ T7854] Cannot create hsr debugfs directory [ 163.866606][ T8081] netlink: 24 bytes leftover after parsing attributes in process `syz.3.447'. [ 164.326566][ T8090] lo speed is unknown, defaulting to 1000 [ 164.499830][ T8102] netlink: 240 bytes leftover after parsing attributes in process `syz.3.451'. [ 164.655051][ T8100] netlink: 60 bytes leftover after parsing attributes in process `syz.3.451'. [ 165.009217][ T8113] netlink: 40 bytes leftover after parsing attributes in process `syz.2.452'. [ 165.849741][ T7854] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.889938][ T8136] xt_hashlimit: size too large, truncated to 1048576 [ 165.905215][ T7854] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.946253][ T8135] lo speed is unknown, defaulting to 1000 [ 166.113911][ T7854] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 166.155654][ T7854] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 166.631801][ T8150] bridge_slave_1: left allmulticast mode [ 166.654785][ T8150] bridge_slave_1: left promiscuous mode [ 166.664737][ T8150] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.679656][ T8150] bridge_slave_0: left allmulticast mode [ 166.686850][ T8150] bridge_slave_0: left promiscuous mode [ 166.692850][ T8150] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.891408][ T8150] __nla_validate_parse: 3 callbacks suppressed [ 166.891429][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.464'. [ 166.938221][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.464'. [ 166.985779][ T8150] netlink: 4 bytes leftover after parsing attributes in process `syz.1.464'. [ 167.044566][ T8177] netlink: 280 bytes leftover after parsing attributes in process `syz.0.467'. [ 167.237992][ T8177] lo speed is unknown, defaulting to 1000 [ 167.256381][ T8186] netlink: 'syz.2.468': attribute type 13 has an invalid length. [ 167.357371][ T8190] x_tables: ip_tables: ah match: only valid for protocol 51 [ 168.083274][ T8186] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.343752][ T8186] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.364676][ T8186] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.385115][ T8186] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.405234][ T8186] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.719901][ T7854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.111182][ T8230] netlink: 4 bytes leftover after parsing attributes in process `syz.2.475'. [ 169.133255][ T7854] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.299081][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.306331][ T5989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.442300][ T6006] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.449581][ T6006] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.601902][ T8245] IPVS: stopping backup sync thread 6869 ... [ 169.670214][ T8245] vlan2: entered promiscuous mode [ 169.690332][ T8245] bridge0: entered promiscuous mode [ 169.703634][ T8245] vlan2: entered allmulticast mode [ 169.715875][ T8245] bridge0: entered allmulticast mode [ 169.873272][ T8251] netlink: 44 bytes leftover after parsing attributes in process `syz.1.479'. [ 169.909529][ T8251] x_tables: duplicate underflow at hook 1 [ 169.953311][ T8255] IPVS: sync thread started: state = BACKUP, mcast_ifn = lo, syncid = 3, id = 0 [ 170.300632][ T8261] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.308473][ T8261] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.669887][ T8261] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 170.694746][ T8261] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 170.861673][ T8261] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.873243][ T8261] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.890175][ T8261] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.901030][ T8261] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.009224][ T8261] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.018445][ T8261] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.027666][ T8261] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.037086][ T8261] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 171.053513][ T8261] bridge1: left allmulticast mode [ 171.181188][ T8266] wireguard0: entered promiscuous mode [ 171.193178][ T8266] wireguard0: entered allmulticast mode [ 171.351489][ T7854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.275797][ T8335] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 172.283108][ T8335] IPv6: NLM_F_CREATE should be set when creating new route [ 172.367654][ T8338] netlink: 36 bytes leftover after parsing attributes in process `syz.1.496'. [ 172.372369][ T8339] netlink: 60 bytes leftover after parsing attributes in process `syz.3.497'. [ 172.412956][ T8339] netlink: 12 bytes leftover after parsing attributes in process `syz.3.497'. [ 172.451797][ T8339] netlink: 60 bytes leftover after parsing attributes in process `syz.3.497'. [ 172.551839][ T8345] netlink: 3 bytes leftover after parsing attributes in process `syz.0.498'. [ 172.618013][ T8343] dvmrp8: entered allmulticast mode [ 172.635322][ T8343] dvmrp8: left allmulticast mode [ 172.780791][ T7854] veth0_vlan: entered promiscuous mode [ 172.901615][ T7854] veth1_vlan: entered promiscuous mode [ 173.059999][ T7854] veth0_macvtap: entered promiscuous mode [ 173.119538][ T7854] veth1_macvtap: entered promiscuous mode [ 173.240502][ T7854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.290065][ T7854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.326446][ T7854] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.352342][ T7854] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.371443][ T7854] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.407851][ T7854] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.524585][ T8386] xt_hashlimit: max too large, truncated to 1048576 [ 173.554106][ T8377] lo speed is unknown, defaulting to 1000 [ 173.581858][ T8388] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 173.614918][ T5993] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.650495][ T5993] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.806845][ T6006] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.814735][ T6006] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.092323][ T8399] netlink: 140 bytes leftover after parsing attributes in process `syz.2.511'. [ 174.293670][ T8377] netlink: 24 bytes leftover after parsing attributes in process `syz.1.506'. [ 174.439820][ T8414] netlink: 68 bytes leftover after parsing attributes in process `syz.2.514'. [ 174.474565][ T8417] netlink: 36 bytes leftover after parsing attributes in process `syz.0.515'. [ 174.778454][ T8414] netlink: 168 bytes leftover after parsing attributes in process `syz.2.514'. [ 175.253583][ T5986] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.503330][ T5986] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.582324][ T5986] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.642713][ T5986] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 176.005772][ T5986] bridge_slave_1: left allmulticast mode [ 176.011485][ T5986] bridge_slave_1: left promiscuous mode [ 176.057023][ T5986] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.070320][ T8452] netlink: 'syz.1.521': attribute type 7 has an invalid length. [ 176.121860][ T8456] netlink: 'syz.1.521': attribute type 1 has an invalid length. [ 176.146402][ T5986] bridge_slave_0: left allmulticast mode [ 176.163934][ T5986] bridge_slave_0: left promiscuous mode [ 176.177946][ T5986] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.440864][ T5847] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 176.450672][ T5847] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 176.459116][ T5847] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 176.468517][ T5847] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 176.481455][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 176.720125][ T5986] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.731820][ T5986] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.742911][ T5986] bond0 (unregistering): Released all slaves [ 176.872256][ T8464] lo speed is unknown, defaulting to 1000 [ 177.863496][ T8464] chnl_net:caif_netlink_parms(): no params data found [ 177.907381][ T8497] ipvlan2: entered allmulticast mode [ 177.912868][ T8497] macsec0: entered allmulticast mode [ 178.409557][ T8519] __nla_validate_parse: 1 callbacks suppressed [ 178.409578][ T8519] netlink: 60 bytes leftover after parsing attributes in process `syz.3.537'. [ 178.452120][ T8527] netlink: 'syz.1.539': attribute type 2 has an invalid length. [ 178.504151][ T8530] IPVS: sync thread started: state = BACKUP, mcast_ifn = team0, syncid = 1, id = 0 [ 178.536656][ T55] Bluetooth: hci2: command tx timeout [ 178.590171][ T5986] hsr_slave_0: left promiscuous mode [ 178.604738][ T5986] hsr_slave_1: left promiscuous mode [ 178.616808][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 178.624556][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 178.634304][ T5986] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 178.636963][ T8539] netlink: 60 bytes leftover after parsing attributes in process `syz.2.540'. [ 178.643426][ T5986] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 178.673790][ T5986] veth1_macvtap: left promiscuous mode [ 178.680455][ T5986] veth0_macvtap: left promiscuous mode [ 178.688144][ T8542] netlink: 'syz.3.542': attribute type 2 has an invalid length. [ 178.696992][ T5986] veth1_vlan: left promiscuous mode [ 178.702599][ T5986] veth0_vlan: left promiscuous mode [ 178.938088][ T55] Bluetooth: hci0: command 0x0401 tx timeout [ 178.944271][ T5847] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 179.341156][ T5986] team0 (unregistering): Port device team_slave_1 removed [ 179.383350][ T5986] team0 (unregistering): Port device team_slave_0 removed [ 179.839711][ T8537] netlink: 20 bytes leftover after parsing attributes in process `syz.3.542'. [ 179.852844][ T8537] sch_tbf: peakrate 2 is lower than or equals to rate 6 ! [ 179.907242][ T8542] þ: entered promiscuous mode [ 179.916960][ T8464] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.925325][ T8464] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.934020][ T8464] bridge_slave_0: entered allmulticast mode [ 179.942792][ T8464] bridge_slave_0: entered promiscuous mode [ 179.953082][ T8464] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.961032][ T8464] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.968645][ T8464] bridge_slave_1: entered allmulticast mode [ 179.979457][ T8464] bridge_slave_1: entered promiscuous mode [ 180.207649][ T5878] IPVS: starting estimator thread 0... [ 180.231047][ T8464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 180.259233][ T8464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 180.330865][ T8564] IPVS: using max 31 ests per chain, 74400 per kthread [ 180.450688][ T8573] netlink: 'syz.1.550': attribute type 309 has an invalid length. [ 180.497466][ T8573] netlink: 'syz.1.550': attribute type 16 has an invalid length. [ 180.514098][ T8573] netlink: 'syz.1.550': attribute type 17 has an invalid length. [ 180.536940][ T8575] netlink: 24 bytes leftover after parsing attributes in process `syz.2.548'. [ 180.574935][ T8578] netlink: 'syz.1.550': attribute type 9 has an invalid length. [ 180.589661][ T8575] tipc: Failed to remove unknown binding: 66,1,1/10136234:2531812546/2531812548 [ 180.600751][ T8575] tipc: Failed to remove unknown binding: 66,1,1/10136234:2531812546/2531812548 [ 180.617609][ T5847] Bluetooth: hci2: command tx timeout [ 180.623154][ T8575] tipc: Failed to remove unknown binding: 66,1,1/10136234:2531812546/2531812548 [ 180.637474][ T8578] netlink: 8 bytes leftover after parsing attributes in process `syz.1.550'. [ 180.692366][ T8581] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input7 [ 180.787021][ T8583] netlink: 211808 bytes leftover after parsing attributes in process `syz.1.550'. [ 180.796844][ T8583] openvswitch: netlink: Message has 5 unknown bytes. [ 181.240947][ T8573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.323369][ T8573] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.608334][ T8573] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.635541][ T8573] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.665252][ T8573] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.695494][ T8573] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.927902][ T8464] team0: Port device team_slave_0 added [ 181.936659][ T8204] lo speed is unknown, defaulting to 1000 [ 181.942615][ T8204] s›z0: Port: 1 Link DOWN [ 181.992646][ T8578] macvlan2: entered promiscuous mode [ 182.008272][ T8578] hsr0: entered promiscuous mode [ 182.025888][ T8578] macvlan2: entered allmulticast mode [ 182.031331][ T8578] hsr0: entered allmulticast mode [ 182.066112][ T8578] hsr_slave_0: entered allmulticast mode [ 182.072557][ T8578] hsr_slave_1: entered allmulticast mode [ 182.146826][ T8577] lo speed is unknown, defaulting to 1000 [ 182.151913][ T8464] team0: Port device team_slave_1 added [ 182.329959][ T8632] openvswitch: netlink: IP tunnel dst address not specified [ 182.477264][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.484284][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.519790][ T8464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.591336][ T8464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.632666][ T8464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.665266][ T8464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.691595][ T5847] Bluetooth: hci2: command tx timeout [ 182.806149][ T8630] lo speed is unknown, defaulting to 1000 [ 183.120092][ T8464] hsr_slave_0: entered promiscuous mode [ 183.154297][ T8464] hsr_slave_1: entered promiscuous mode [ 183.171555][ T8464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 183.205027][ T8464] Cannot create hsr debugfs directory [ 183.291872][ T8644] macsec0: entered promiscuous mode [ 183.305650][ T8644] veth0_to_bridge: entered promiscuous mode [ 183.322200][ T8644] macsec0: entered allmulticast mode [ 183.337913][ T8644] veth0_to_bridge: entered allmulticast mode [ 183.349725][ T5986] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 183.417959][ T8644] veth0_to_bridge: left allmulticast mode [ 183.423761][ T8644] veth0_to_bridge: left promiscuous mode [ 183.815970][ T8667] netlink: 60 bytes leftover after parsing attributes in process `syz.0.565'. [ 184.765578][ T5847] Bluetooth: hci2: command tx timeout [ 184.811192][ T8697] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 184.826164][ T8698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.573'. [ 185.528386][ T8724] netem: incorrect ge model size [ 185.550303][ T8724] netem: change failed [ 185.579214][ T8722] tipc: Started in network mode [ 185.589818][ T8722] tipc: Node identity 16a12b96f9ff, cluster identity 4711 [ 185.599266][ T8722] tipc: Enabled bearer , priority 0 [ 185.722024][ T8723] syzkaller0: entered promiscuous mode [ 185.729089][ T8723] syzkaller0: entered allmulticast mode [ 185.751778][ T8723] tipc: Resetting bearer [ 185.759460][ T8727] tipc: Enabling of bearer rejected, already enabled [ 185.853760][ T8739] netlink: 16 bytes leftover after parsing attributes in process `syz.0.583'. [ 185.903343][ T5989] tipc: Resetting bearer [ 185.914827][ T8738] netlink: 'syz.0.583': attribute type 2 has an invalid length. [ 185.923439][ T8727] tipc: Resetting bearer [ 185.968983][ T8743] netlink: 24 bytes leftover after parsing attributes in process `syz.3.584'. [ 186.626057][ T8584] tipc: Node number set to 4015926166 [ 187.218313][ T8727] tipc: Disabling bearer [ 187.398324][ T8464] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 187.436275][ T8464] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 187.503274][ T8464] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 187.602682][ T8464] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 188.100276][ T8464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.220499][ T8464] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.385255][ T5989] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.392573][ T5989] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.413762][ T8808] netlink: 'syz.3.599': attribute type 11 has an invalid length. [ 188.603637][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.611239][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.637563][ T8820] netlink: 'syz.0.601': attribute type 53 has an invalid length. [ 188.675522][ T8820] netlink: 232 bytes leftover after parsing attributes in process `syz.0.601'. [ 188.743290][ T8820] netlink: 'syz.0.601': attribute type 9 has an invalid length. [ 188.751285][ T8820] netlink: 8 bytes leftover after parsing attributes in process `syz.0.601'. [ 188.816768][ T8820] hsr0: entered promiscuous mode [ 188.831870][ T8820] macvlan0: entered promiscuous mode [ 188.839026][ T8828] netlink: 'syz.2.603': attribute type 1 has an invalid length. [ 188.848526][ T8820] macvlan0: entered allmulticast mode [ 188.853956][ T8820] hsr0: entered allmulticast mode [ 188.875790][ T8820] hsr_slave_0: entered allmulticast mode [ 188.891848][ T8820] hsr_slave_1: entered allmulticast mode [ 189.192769][ T8833] gretap1: entered promiscuous mode [ 189.201027][ T8836] netlink: 16 bytes leftover after parsing attributes in process `syz.2.605'. [ 189.221134][ T8833] gretap1: entered allmulticast mode [ 189.231229][ T8836] netlink: 16 bytes leftover after parsing attributes in process `syz.2.605'. [ 189.548082][ T8848] Cannot find set identified by id 0 to match [ 189.550883][ T8845] batadv0: entered promiscuous mode [ 189.589982][ T8855] netlink: 32 bytes leftover after parsing attributes in process `syz.3.608'. [ 189.641286][ T8848] pim6reg: entered allmulticast mode [ 189.662633][ T8854] lo: entered allmulticast mode [ 189.706023][ T10] [ 189.708414][ T10] ============================================ [ 189.714587][ T10] WARNING: possible recursive locking detected [ 189.720780][ T10] 6.15.0-rc6-syzkaller-01204-gb8fa067c4a76 #0 Not tainted [ 189.727909][ T10] -------------------------------------------- [ 189.734082][ T10] kworker/0:1/10 is trying to acquire lock: [ 189.739993][ T10] ffff88807b2a4f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 189.749133][ T10] [ 189.749133][ T10] but task is already holding lock: [ 189.756536][ T10] ffff888057c90f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 189.765647][ T10] [ 189.765647][ T10] other info that might help us debug this: [ 189.773729][ T10] Possible unsafe locking scenario: [ 189.773729][ T10] [ 189.781227][ T10] CPU0 [ 189.784514][ T10] ---- [ 189.787804][ T10] lock(&hsr->seqnr_lock); [ 189.792344][ T10] lock(&hsr->seqnr_lock); [ 189.796858][ T10] [ 189.796858][ T10] *** DEADLOCK *** [ 189.796858][ T10] [ 189.804998][ T10] May be due to missing lock nesting notation [ 189.804998][ T10] [ 189.813319][ T10] 10 locks held by kworker/0:1/10: [ 189.818441][ T10] #0: ffff88802fcd3548 ((wq_completion)mld){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 189.829161][ T10] #1: ffffc900000f7c60 ((work_completion)(&(&idev->mc_ifc_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 189.842403][ T10] #2: ffff88807cf46538 (&idev->mc_lock){+.+.}-{4:4}, at: mld_ifc_work+0x2d/0xde0 [ 189.851652][ T10] #3: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: mld_sendpack+0x1de/0xd80 [ 189.860917][ T10] #4: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: ip6_finish_output2+0x701/0x16a0 [ 189.870767][ T10] #5: ffffffff8df3dd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 189.880713][ T10] #6: ffff888057c90f30 (&hsr->seqnr_lock){+.-.}-{3:3}, at: hsr_dev_xmit+0x19a/0x220 [ 189.890238][ T10] #7: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: hsr_forward_skb+0x9e/0x2860 [ 189.899726][ T10] #8: ffffffff8df3dd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 189.909662][ T10] #9: ffffffff8df3dd40 (rcu_read_lock_bh){....}-{1:3}, at: __dev_queue_xmit+0x27e/0x3a70 [ 189.919599][ T10] [ 189.919599][ T10] stack backtrace: [ 189.925509][ T10] CPU: 0 UID: 0 PID: 10 Comm: kworker/0:1 Not tainted 6.15.0-rc6-syzkaller-01204-gb8fa067c4a76 #0 PREEMPT(full) [ 189.925535][ T10] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 189.925552][ T10] Workqueue: mld mld_ifc_work [ 189.925584][ T10] Call Trace: [ 189.925598][ T10] [ 189.925607][ T10] dump_stack_lvl+0x189/0x250 [ 189.925635][ T10] ? __pfx_dump_stack_lvl+0x10/0x10 [ 189.925659][ T10] ? __pfx__printk+0x10/0x10 [ 189.925676][ T10] ? print_lock_name+0xde/0x100 [ 189.925692][ T10] print_deadlock_bug+0x28b/0x2a0 [ 189.925710][ T10] validate_chain+0x1a3f/0x2140 [ 189.925728][ T10] ? rcu_is_watching+0x15/0xb0 [ 189.925744][ T10] ? enqueue_to_backlog+0xa45/0xfa0 [ 189.925761][ T10] ? mld_ifc_work+0x835/0xde0 [ 189.925783][ T10] ? ret_from_fork+0x4b/0x80 [ 189.925802][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 189.925819][ T10] __lock_acquire+0xaac/0xd20 [ 189.925845][ T10] ? hsr_dev_xmit+0x19a/0x220 [ 189.925868][ T10] lock_acquire+0x120/0x360 [ 189.925891][ T10] ? hsr_dev_xmit+0x19a/0x220 [ 189.925919][ T10] ? hsr_dev_xmit+0x19a/0x220 [ 189.925942][ T10] _raw_spin_lock_bh+0x36/0x50 [ 189.925957][ T10] ? hsr_dev_xmit+0x19a/0x220 [ 189.925980][ T10] hsr_dev_xmit+0x19a/0x220 [ 189.926005][ T10] dev_hard_start_xmit+0x2d7/0x830 [ 189.926037][ T10] __dev_queue_xmit+0x1adf/0x3a70 [ 189.926054][ T10] ? unwind_next_frame+0xa5/0x2390 [ 189.926076][ T10] ? __dev_queue_xmit+0x27e/0x3a70 [ 189.926095][ T10] ? unwind_next_frame+0xa5/0x2390 [ 189.926114][ T10] ? unwind_next_frame+0x19ae/0x2390 [ 189.926141][ T10] ? __pfx___dev_queue_xmit+0x10/0x10 [ 189.926156][ T10] ? unwind_next_frame+0xa5/0x2390 [ 189.926176][ T10] ? ret_from_fork_asm+0x1a/0x30 [ 189.926193][ T10] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 189.926211][ T10] ? arch_stack_walk+0x11c/0x150 [ 189.926240][ T10] ? __pfx_skb_network_protocol+0x10/0x10 [ 189.926265][ T10] ? stack_trace_save+0x9c/0xe0 [ 189.926284][ T10] macvlan_start_xmit+0x46d/0x6e0 [ 189.926304][ T10] ? __pfx_macvlan_start_xmit+0x10/0x10 [ 189.926326][ T10] dev_hard_start_xmit+0x2d7/0x830 [ 189.926358][ T10] __dev_queue_xmit+0x1adf/0x3a70 [ 189.926377][ T10] ? __dev_queue_xmit+0x27e/0x3a70 [ 189.926394][ T10] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 189.926415][ T10] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 189.926438][ T10] ? __pfx___dev_queue_xmit+0x10/0x10 [ 189.926452][ T10] ? __copy_skb_header+0xa7/0x550 [ 189.926477][ T10] ? __asan_memcpy+0x40/0x70 [ 189.926493][ T10] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 189.926508][ T10] ? __asan_memcpy+0x40/0x70 [ 189.926524][ T10] ? __pskb_copy_fclone+0x9b5/0xfb0 [ 189.926550][ T10] ? hsr_addr_subst_dest+0x307/0xac0 [ 189.926578][ T10] hsr_forward_skb+0x158b/0x2860 [ 189.926600][ T10] ? hsr_forward_skb+0x9e/0x2860 [ 189.926617][ T10] ? __pfx_hsr_forward_skb+0x10/0x10 [ 189.926632][ T10] ? do_raw_spin_lock+0x121/0x290 [ 189.926652][ T10] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 189.926673][ T10] ? hsr_dev_xmit+0x19a/0x220 [ 189.926698][ T10] hsr_dev_xmit+0x1a5/0x220 [ 189.926722][ T10] dev_hard_start_xmit+0x2d7/0x830 [ 189.926754][ T10] __dev_queue_xmit+0x1adf/0x3a70 [ 189.926773][ T10] ? __dev_queue_xmit+0x27e/0x3a70 [ 189.926795][ T10] ? __pfx___dev_queue_xmit+0x10/0x10 [ 189.926811][ T10] ? read_seqbegin+0x122/0x250 [ 189.926829][ T10] ? neigh_connected_output+0x1ea/0x460 [ 189.926848][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.926865][ T10] ? read_seqbegin+0x1ac/0x250 [ 189.926883][ T10] ? __pfx_read_seqbegin+0x10/0x10 [ 189.926901][ T10] ? eth_header+0x11b/0x200 [ 189.926927][ T10] ? __asan_memcpy+0x40/0x70 [ 189.926954][ T10] ip6_finish_output2+0x11fb/0x16a0 [ 189.926970][ T10] ? ip6_finish_output2+0x701/0x16a0 [ 189.926988][ T10] ? __pfx_ip6_finish_output2+0x10/0x10 [ 189.927003][ T10] ? ip6_mtu+0x7d/0x3f0 [ 189.927026][ T10] ? ip6_mtu+0x7d/0x3f0 [ 189.927049][ T10] ip6_finish_output+0x234/0x7d0 [ 189.927074][ T10] NF_HOOK+0x9e/0x380 [ 189.927097][ T10] ? NF_HOOK+0x101/0x380 [ 189.927120][ T10] ? __pfx_NF_HOOK+0x10/0x10 [ 189.927144][ T10] ? __pfx_dst_output+0x10/0x10 [ 189.927167][ T10] ? icmp6_dst_alloc+0x3a5/0x420 [ 189.927191][ T10] ? icmp6_dst_alloc+0x3a5/0x420 [ 189.927215][ T10] mld_sendpack+0x800/0xd80 [ 189.927245][ T10] ? mld_sendpack+0x1de/0xd80 [ 189.927269][ T10] ? __pfx_mld_sendpack+0x10/0x10 [ 189.927301][ T10] mld_ifc_work+0x835/0xde0 [ 189.927325][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 189.927339][ T10] ? process_scheduled_works+0x9ec/0x17a0 [ 189.927355][ T10] process_scheduled_works+0xade/0x17a0 [ 189.927382][ T10] ? __pfx_process_scheduled_works+0x10/0x10 [ 189.927408][ T10] worker_thread+0x8a0/0xda0 [ 189.927433][ T10] kthread+0x711/0x8a0 [ 189.927452][ T10] ? __pfx_worker_thread+0x10/0x10 [ 189.927466][ T10] ? __pfx_kthread+0x10/0x10 [ 189.927497][ T10] ? __pfx_kthread+0x10/0x10 [ 189.927514][ T10] ? _raw_spin_unlock_irq+0x23/0x50 [ 189.927527][ T10] ? lockdep_hardirqs_on+0x9c/0x150 [ 189.927547][ T10] ? __pfx_kthread+0x10/0x10 [ 189.927564][ T10] ret_from_fork+0x4b/0x80 [ 189.927578][ T10] ? __pfx_kthread+0x10/0x10 [ 189.927596][ T10] ret_from_fork_asm+0x1a/0x30 [ 189.927615][ T10] [ 190.434766][ T8859] netlink: 32 bytes leftover after parsing attributes in process `syz.2.610'. [ 190.556639][ T8464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 190.827784][ T8464] veth0_vlan: entered promiscuous mode [ 190.844110][ T8464] veth1_vlan: entered promiscuous mode [ 190.871652][ T8464] veth0_macvtap: entered promiscuous mode [ 190.883883][ T8464] veth1_macvtap: entered promiscuous mode [ 190.900060][ T8464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 190.913981][ T8464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 190.925213][ T8464] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.934114][ T8464] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.942919][ T8464] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.951748][ T8464] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 190.981092][ T8464] ieee80211 phy22: Selected rate control algorithm 'minstrel_ht' [ 191.008949][ T8464] ieee80211 phy23: Selected rate control algorithm 'minstrel_ht' [ 191.017766][ T5989] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.025782][ T5989] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.051210][ T5991] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.061903][ T5991] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 192.531528][ T3020] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.990640][ T3020] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.180695][ T3020] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.231765][ T3020] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.323756][ T3020] bridge_slave_1: left allmulticast mode [ 193.334033][ T3020] bridge_slave_1: left promiscuous mode [ 193.343335][ T3020] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.353578][ T3020] bridge_slave_0: left allmulticast mode [ 193.362053][ T3020] bridge_slave_0: left promiscuous mode [ 193.368729][ T3020] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.504215][ T3020] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.517774][ T3020] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.528350][ T3020] bond0 (unregistering): Released all slaves [ 193.783181][ T3020] hsr_slave_0: left promiscuous mode [ 193.792051][ T3020] hsr_slave_1: left promiscuous mode [ 193.800083][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 193.815271][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 193.825514][ T3020] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 193.832959][ T3020] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 193.844835][ T3020] veth1_macvtap: left promiscuous mode [ 193.850852][ T3020] veth0_macvtap: left promiscuous mode [ 193.856565][ T3020] veth1_vlan: left promiscuous mode [ 193.861888][ T3020] veth0_vlan: left promiscuous mode [ 194.141326][ T3020] team0 (unregistering): Port device team_slave_1 removed [ 194.170072][ T3020] team0 (unregistering): Port device team_slave_0 removed [ 194.207696][ T1300] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.214046][ T1300] ieee802154 phy1 wpan1: encryption failed: -22