Warning: Permanently added '10.128.0.101' (ED25519) to the list of known hosts. 2023/08/16 14:18:45 fuzzer started 2023/08/16 14:18:46 dialing manager at 10.128.0.169:30009 [ 55.297962][ T5024] cgroup: Unknown subsys name 'net' [ 55.404986][ T5024] cgroup: Unknown subsys name 'rlimit' 2023/08/16 14:18:47 syscalls: 1737 2023/08/16 14:18:47 code coverage: enabled 2023/08/16 14:18:47 comparison tracing: enabled 2023/08/16 14:18:47 extra coverage: enabled 2023/08/16 14:18:47 delay kcov mmap: enabled 2023/08/16 14:18:47 setuid sandbox: enabled 2023/08/16 14:18:47 namespace sandbox: enabled 2023/08/16 14:18:47 Android sandbox: /sys/fs/selinux/policy does not exist 2023/08/16 14:18:47 fault injection: enabled 2023/08/16 14:18:47 leak checking: CONFIG_DEBUG_KMEMLEAK is not enabled 2023/08/16 14:18:47 net packet injection: enabled 2023/08/16 14:18:47 net device setup: enabled 2023/08/16 14:18:47 concurrency sanitizer: /sys/kernel/debug/kcsan does not exist 2023/08/16 14:18:47 devlink PCI setup: PCI device 0000:00:10.0 is not available 2023/08/16 14:18:47 NIC VF setup: PCI device 0000:00:11.0 is not available 2023/08/16 14:18:47 USB emulation: enabled 2023/08/16 14:18:47 hci packet injection: enabled 2023/08/16 14:18:47 wifi device emulation: enabled 2023/08/16 14:18:47 802.15.4 emulation: enabled 2023/08/16 14:18:47 swap file: enabled 2023/08/16 14:18:47 fetching corpus: 0, signal 0/2000 (executing program) [ 56.771726][ T5024] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS 2023/08/16 14:18:47 fetching corpus: 50, signal 38686/42183 (executing program) 2023/08/16 14:18:48 fetching corpus: 100, signal 53905/58838 (executing program) 2023/08/16 14:18:48 fetching corpus: 150, signal 65733/71996 (executing program) 2023/08/16 14:18:48 fetching corpus: 200, signal 74567/82088 (executing program) 2023/08/16 14:18:48 fetching corpus: 250, signal 80312/89075 (executing program) 2023/08/16 14:18:48 fetching corpus: 300, signal 84979/95004 (executing program) 2023/08/16 14:18:48 fetching corpus: 350, signal 91769/102861 (executing program) 2023/08/16 14:18:48 fetching corpus: 400, signal 97239/109438 (executing program) 2023/08/16 14:18:48 fetching corpus: 448, signal 100782/114072 (executing program) 2023/08/16 14:18:49 fetching corpus: 497, signal 104538/118823 (executing program) 2023/08/16 14:18:49 fetching corpus: 547, signal 108701/123913 (executing program) 2023/08/16 14:18:49 fetching corpus: 597, signal 112561/128637 (executing program) 2023/08/16 14:18:49 fetching corpus: 647, signal 115547/132620 (executing program) 2023/08/16 14:18:49 fetching corpus: 697, signal 118061/136108 (executing program) 2023/08/16 14:18:49 fetching corpus: 747, signal 120898/139852 (executing program) 2023/08/16 14:18:49 fetching corpus: 796, signal 123201/143086 (executing program) 2023/08/16 14:18:50 fetching corpus: 846, signal 124898/145754 (executing program) 2023/08/16 14:18:50 fetching corpus: 896, signal 127486/149170 (executing program) 2023/08/16 14:18:50 fetching corpus: 946, signal 129445/152035 (executing program) 2023/08/16 14:18:50 fetching corpus: 996, signal 131933/155308 (executing program) 2023/08/16 14:18:50 fetching corpus: 1046, signal 134093/158213 (executing program) 2023/08/16 14:18:50 fetching corpus: 1096, signal 135928/160896 (executing program) 2023/08/16 14:18:50 fetching corpus: 1146, signal 137512/163334 (executing program) 2023/08/16 14:18:50 fetching corpus: 1195, signal 139689/166189 (executing program) 2023/08/16 14:18:51 fetching corpus: 1245, signal 141350/168600 (executing program) 2023/08/16 14:18:51 fetching corpus: 1295, signal 144393/172124 (executing program) 2023/08/16 14:18:51 fetching corpus: 1345, signal 146073/174513 (executing program) 2023/08/16 14:18:51 fetching corpus: 1394, signal 148698/177637 (executing program) 2023/08/16 14:18:51 fetching corpus: 1444, signal 150509/180153 (executing program) 2023/08/16 14:18:51 fetching corpus: 1494, signal 151862/182225 (executing program) 2023/08/16 14:18:51 fetching corpus: 1544, signal 153854/184787 (executing program) 2023/08/16 14:18:51 fetching corpus: 1594, signal 155124/186793 (executing program) 2023/08/16 14:18:52 fetching corpus: 1642, signal 156643/188905 (executing program) 2023/08/16 14:18:52 fetching corpus: 1692, signal 158868/191592 (executing program) 2023/08/16 14:18:52 fetching corpus: 1742, signal 160007/193406 (executing program) 2023/08/16 14:18:52 fetching corpus: 1792, signal 161334/195298 (executing program) 2023/08/16 14:18:52 fetching corpus: 1842, signal 163490/197786 (executing program) 2023/08/16 14:18:52 fetching corpus: 1892, signal 165118/199856 (executing program) 2023/08/16 14:18:52 fetching corpus: 1942, signal 166423/201675 (executing program) 2023/08/16 14:18:53 fetching corpus: 1992, signal 167274/203149 (executing program) 2023/08/16 14:18:53 fetching corpus: 2040, signal 168765/205095 (executing program) 2023/08/16 14:18:53 fetching corpus: 2090, signal 170005/206834 (executing program) 2023/08/16 14:18:53 fetching corpus: 2140, signal 171287/208583 (executing program) 2023/08/16 14:18:53 fetching corpus: 2190, signal 172567/210361 (executing program) 2023/08/16 14:18:53 fetching corpus: 2240, signal 173885/212141 (executing program) 2023/08/16 14:18:53 fetching corpus: 2289, signal 175565/214134 (executing program) 2023/08/16 14:18:54 fetching corpus: 2338, signal 176798/215783 (executing program) 2023/08/16 14:18:54 fetching corpus: 2387, signal 178063/217420 (executing program) 2023/08/16 14:18:54 fetching corpus: 2436, signal 179352/219098 (executing program) 2023/08/16 14:18:54 fetching corpus: 2485, signal 180265/220503 (executing program) 2023/08/16 14:18:54 fetching corpus: 2534, signal 181353/221982 (executing program) 2023/08/16 14:18:54 fetching corpus: 2584, signal 182182/223334 (executing program) 2023/08/16 14:18:54 fetching corpus: 2634, signal 183425/224931 (executing program) 2023/08/16 14:18:54 fetching corpus: 2684, signal 184242/226187 (executing program) 2023/08/16 14:18:55 fetching corpus: 2734, signal 184975/227408 (executing program) 2023/08/16 14:18:55 fetching corpus: 2783, signal 185630/228492 (executing program) 2023/08/16 14:18:55 fetching corpus: 2833, signal 186677/229878 (executing program) 2023/08/16 14:18:55 fetching corpus: 2883, signal 187651/231187 (executing program) 2023/08/16 14:18:55 fetching corpus: 2933, signal 188637/232528 (executing program) 2023/08/16 14:18:55 fetching corpus: 2983, signal 189859/234030 (executing program) 2023/08/16 14:18:55 fetching corpus: 3033, signal 190740/235231 (executing program) 2023/08/16 14:18:55 fetching corpus: 3083, signal 191411/236362 (executing program) 2023/08/16 14:18:55 fetching corpus: 3133, signal 192466/237719 (executing program) 2023/08/16 14:18:56 fetching corpus: 3183, signal 193444/238966 (executing program) 2023/08/16 14:18:56 fetching corpus: 3233, signal 194244/240082 (executing program) 2023/08/16 14:18:56 fetching corpus: 3283, signal 195040/241222 (executing program) 2023/08/16 14:18:56 fetching corpus: 3333, signal 196197/242548 (executing program) 2023/08/16 14:18:56 fetching corpus: 3383, signal 197281/243806 (executing program) 2023/08/16 14:18:56 fetching corpus: 3433, signal 198285/245037 (executing program) 2023/08/16 14:18:56 fetching corpus: 3483, signal 198822/245963 (executing program) 2023/08/16 14:18:57 fetching corpus: 3533, signal 199673/247064 (executing program) 2023/08/16 14:18:57 fetching corpus: 3583, signal 200287/247984 (executing program) 2023/08/16 14:18:57 fetching corpus: 3633, signal 201056/249050 (executing program) 2023/08/16 14:18:57 fetching corpus: 3683, signal 201651/249977 (executing program) 2023/08/16 14:18:57 fetching corpus: 3733, signal 202351/250946 (executing program) 2023/08/16 14:18:57 fetching corpus: 3783, signal 203031/251944 (executing program) 2023/08/16 14:18:57 fetching corpus: 3833, signal 203590/252912 (executing program) 2023/08/16 14:18:57 fetching corpus: 3883, signal 204803/254105 (executing program) 2023/08/16 14:18:58 fetching corpus: 3933, signal 205431/254992 (executing program) 2023/08/16 14:18:58 fetching corpus: 3983, signal 205928/255825 (executing program) 2023/08/16 14:18:58 fetching corpus: 4031, signal 206674/256746 (executing program) 2023/08/16 14:18:58 fetching corpus: 4080, signal 207452/257658 (executing program) 2023/08/16 14:18:58 fetching corpus: 4130, signal 208266/258611 (executing program) 2023/08/16 14:18:58 fetching corpus: 4180, signal 208995/259556 (executing program) 2023/08/16 14:18:58 fetching corpus: 4230, signal 209715/260421 (executing program) 2023/08/16 14:18:58 fetching corpus: 4279, signal 210281/261280 (executing program) 2023/08/16 14:18:59 fetching corpus: 4329, signal 211060/262216 (executing program) 2023/08/16 14:18:59 fetching corpus: 4379, signal 211873/263122 (executing program) 2023/08/16 14:18:59 fetching corpus: 4429, signal 212518/263953 (executing program) 2023/08/16 14:18:59 fetching corpus: 4479, signal 213035/264724 (executing program) 2023/08/16 14:18:59 fetching corpus: 4527, signal 213777/265594 (executing program) 2023/08/16 14:18:59 fetching corpus: 4577, signal 214472/266410 (executing program) 2023/08/16 14:18:59 fetching corpus: 4627, signal 215187/267260 (executing program) 2023/08/16 14:19:00 fetching corpus: 4677, signal 215797/268038 (executing program) 2023/08/16 14:19:00 fetching corpus: 4726, signal 216599/268882 (executing program) 2023/08/16 14:19:00 fetching corpus: 4776, signal 217593/269735 (executing program) 2023/08/16 14:19:00 fetching corpus: 4826, signal 218260/270537 (executing program) 2023/08/16 14:19:00 fetching corpus: 4876, signal 218906/271285 (executing program) 2023/08/16 14:19:00 fetching corpus: 4926, signal 219451/272030 (executing program) 2023/08/16 14:19:00 fetching corpus: 4976, signal 220087/272789 (executing program) 2023/08/16 14:19:00 fetching corpus: 5026, signal 220710/273523 (executing program) 2023/08/16 14:19:01 fetching corpus: 5076, signal 221278/274221 (executing program) 2023/08/16 14:19:01 fetching corpus: 5126, signal 221935/274967 (executing program) 2023/08/16 14:19:01 fetching corpus: 5176, signal 222634/275662 (executing program) 2023/08/16 14:19:01 fetching corpus: 5226, signal 223098/276332 (executing program) 2023/08/16 14:19:01 fetching corpus: 5276, signal 223634/276931 (executing program) 2023/08/16 14:19:01 fetching corpus: 5325, signal 224306/277643 (executing program) 2023/08/16 14:19:01 fetching corpus: 5375, signal 224851/278217 (executing program) 2023/08/16 14:19:02 fetching corpus: 5424, signal 225581/278918 (executing program) 2023/08/16 14:19:02 fetching corpus: 5474, signal 226220/279533 (executing program) 2023/08/16 14:19:02 fetching corpus: 5524, signal 227253/280280 (executing program) 2023/08/16 14:19:02 fetching corpus: 5574, signal 228054/280950 (executing program) 2023/08/16 14:19:02 fetching corpus: 5624, signal 228576/281525 (executing program) [ 71.692273][ T1234] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.699010][ T1234] ieee802154 phy1 wpan1: encryption failed: -22 2023/08/16 14:19:02 fetching corpus: 5674, signal 229081/282120 (executing program) 2023/08/16 14:19:02 fetching corpus: 5724, signal 229534/282674 (executing program) 2023/08/16 14:19:03 fetching corpus: 5774, signal 230166/283242 (executing program) 2023/08/16 14:19:03 fetching corpus: 5824, signal 230804/283806 (executing program) 2023/08/16 14:19:03 fetching corpus: 5873, signal 231639/284443 (executing program) 2023/08/16 14:19:03 fetching corpus: 5923, signal 232368/285042 (executing program) 2023/08/16 14:19:03 fetching corpus: 5973, signal 232816/285592 (executing program) 2023/08/16 14:19:03 fetching corpus: 6023, signal 233416/286109 (executing program) 2023/08/16 14:19:03 fetching corpus: 6073, signal 234006/286634 (executing program) 2023/08/16 14:19:03 fetching corpus: 6123, signal 234498/287124 (executing program) 2023/08/16 14:19:03 fetching corpus: 6173, signal 234849/287610 (executing program) 2023/08/16 14:19:04 fetching corpus: 6223, signal 235272/288080 (executing program) 2023/08/16 14:19:04 fetching corpus: 6273, signal 235945/288580 (executing program) 2023/08/16 14:19:04 fetching corpus: 6323, signal 236285/289056 (executing program) 2023/08/16 14:19:04 fetching corpus: 6373, signal 236726/289484 (executing program) 2023/08/16 14:19:04 fetching corpus: 6423, signal 237252/289959 (executing program) 2023/08/16 14:19:04 fetching corpus: 6473, signal 237572/290406 (executing program) 2023/08/16 14:19:04 fetching corpus: 6523, signal 238205/290894 (executing program) 2023/08/16 14:19:05 fetching corpus: 6573, signal 238671/291366 (executing program) 2023/08/16 14:19:05 fetching corpus: 6623, signal 239218/291793 (executing program) 2023/08/16 14:19:05 fetching corpus: 6673, signal 239779/292257 (executing program) 2023/08/16 14:19:05 fetching corpus: 6723, signal 240184/292672 (executing program) 2023/08/16 14:19:05 fetching corpus: 6773, signal 240569/293081 (executing program) 2023/08/16 14:19:05 fetching corpus: 6823, signal 241028/293471 (executing program) 2023/08/16 14:19:05 fetching corpus: 6873, signal 241476/293906 (executing program) 2023/08/16 14:19:06 fetching corpus: 6923, signal 242043/294296 (executing program) 2023/08/16 14:19:06 fetching corpus: 6973, signal 242598/294676 (executing program) 2023/08/16 14:19:06 fetching corpus: 7023, signal 243222/295058 (executing program) 2023/08/16 14:19:06 fetching corpus: 7073, signal 243618/295439 (executing program) 2023/08/16 14:19:06 fetching corpus: 7123, signal 244063/295843 (executing program) 2023/08/16 14:19:06 fetching corpus: 7173, signal 244522/296184 (executing program) 2023/08/16 14:19:07 fetching corpus: 7223, signal 244998/296523 (executing program) 2023/08/16 14:19:07 fetching corpus: 7273, signal 245502/296890 (executing program) 2023/08/16 14:19:07 fetching corpus: 7323, signal 245928/297249 (executing program) 2023/08/16 14:19:07 fetching corpus: 7373, signal 246341/297496 (executing program) 2023/08/16 14:19:07 fetching corpus: 7423, signal 246721/297496 (executing program) 2023/08/16 14:19:07 fetching corpus: 7473, signal 247282/297496 (executing program) 2023/08/16 14:19:07 fetching corpus: 7523, signal 247713/297496 (executing program) 2023/08/16 14:19:07 fetching corpus: 7572, signal 248225/297496 (executing program) 2023/08/16 14:19:08 fetching corpus: 7622, signal 248669/297496 (executing program) 2023/08/16 14:19:08 fetching corpus: 7672, signal 249270/297496 (executing program) 2023/08/16 14:19:08 fetching corpus: 7722, signal 250000/297496 (executing program) 2023/08/16 14:19:08 fetching corpus: 7772, signal 250511/297496 (executing program) 2023/08/16 14:19:08 fetching corpus: 7822, signal 250958/297496 (executing program) 2023/08/16 14:19:08 fetching corpus: 7872, signal 251407/297496 (executing program) 2023/08/16 14:19:08 fetching corpus: 7922, signal 251797/297496 (executing program) 2023/08/16 14:19:09 fetching corpus: 7972, signal 252058/297496 (executing program) 2023/08/16 14:19:09 fetching corpus: 8022, signal 252623/297496 (executing program) 2023/08/16 14:19:09 fetching corpus: 8072, signal 253017/297496 (executing program) 2023/08/16 14:19:09 fetching corpus: 8122, signal 253488/297496 (executing program) 2023/08/16 14:19:09 fetching corpus: 8172, signal 253952/297496 (executing program) 2023/08/16 14:19:09 fetching corpus: 8222, signal 254281/297496 (executing program) 2023/08/16 14:19:09 fetching corpus: 8272, signal 254577/297496 (executing program) 2023/08/16 14:19:10 fetching corpus: 8322, signal 254897/297496 (executing program) 2023/08/16 14:19:10 fetching corpus: 8372, signal 255294/297496 (executing program) 2023/08/16 14:19:10 fetching corpus: 8422, signal 255593/297496 (executing program) 2023/08/16 14:19:10 fetching corpus: 8472, signal 255937/297496 (executing program) 2023/08/16 14:19:10 fetching corpus: 8522, signal 256222/297496 (executing program) 2023/08/16 14:19:10 fetching corpus: 8572, signal 256575/297496 (executing program) 2023/08/16 14:19:10 fetching corpus: 8622, signal 257066/297496 (executing program) 2023/08/16 14:19:10 fetching corpus: 8672, signal 257381/297496 (executing program) 2023/08/16 14:19:11 fetching corpus: 8722, signal 257762/297496 (executing program) 2023/08/16 14:19:11 fetching corpus: 8772, signal 258187/297496 (executing program) 2023/08/16 14:19:11 fetching corpus: 8822, signal 258695/297496 (executing program) 2023/08/16 14:19:11 fetching corpus: 8872, signal 259053/297496 (executing program) 2023/08/16 14:19:11 fetching corpus: 8922, signal 259527/297496 (executing program) 2023/08/16 14:19:11 fetching corpus: 8972, signal 259921/297496 (executing program) 2023/08/16 14:19:11 fetching corpus: 9022, signal 260179/297496 (executing program) 2023/08/16 14:19:11 fetching corpus: 9072, signal 260481/297496 (executing program) 2023/08/16 14:19:12 fetching corpus: 9122, signal 260769/297496 (executing program) 2023/08/16 14:19:12 fetching corpus: 9172, signal 261160/297496 (executing program) 2023/08/16 14:19:12 fetching corpus: 9222, signal 261474/297496 (executing program) 2023/08/16 14:19:12 fetching corpus: 9272, signal 261861/297496 (executing program) 2023/08/16 14:19:12 fetching corpus: 9322, signal 262318/297496 (executing program) 2023/08/16 14:19:12 fetching corpus: 9372, signal 262575/297496 (executing program) 2023/08/16 14:19:12 fetching corpus: 9422, signal 262937/297496 (executing program) [ 81.930806][ T1133] cfg80211: failed to load regulatory.db 2023/08/16 14:19:13 fetching corpus: 9472, signal 263146/297496 (executing program) 2023/08/16 14:19:13 fetching corpus: 9522, signal 263565/297504 (executing program) 2023/08/16 14:19:13 fetching corpus: 9572, signal 263838/297504 (executing program) 2023/08/16 14:19:13 fetching corpus: 9622, signal 264260/297504 (executing program) 2023/08/16 14:19:13 fetching corpus: 9672, signal 264643/297504 (executing program) 2023/08/16 14:19:13 fetching corpus: 9722, signal 264953/297504 (executing program) 2023/08/16 14:19:13 fetching corpus: 9772, signal 265339/297504 (executing program) 2023/08/16 14:19:13 fetching corpus: 9822, signal 265681/297504 (executing program) 2023/08/16 14:19:13 fetching corpus: 9872, signal 265959/297504 (executing program) 2023/08/16 14:19:14 fetching corpus: 9922, signal 266342/297504 (executing program) 2023/08/16 14:19:14 fetching corpus: 9972, signal 266655/297504 (executing program) 2023/08/16 14:19:14 fetching corpus: 10022, signal 267446/297504 (executing program) 2023/08/16 14:19:14 fetching corpus: 10072, signal 267796/297504 (executing program) 2023/08/16 14:19:14 fetching corpus: 10122, signal 268092/297504 (executing program) 2023/08/16 14:19:14 fetching corpus: 10172, signal 268382/297504 (executing program) 2023/08/16 14:19:14 fetching corpus: 10222, signal 268819/297504 (executing program) 2023/08/16 14:19:15 fetching corpus: 10272, signal 269158/297504 (executing program) 2023/08/16 14:19:15 fetching corpus: 10322, signal 269561/297504 (executing program) 2023/08/16 14:19:15 fetching corpus: 10372, signal 270007/297504 (executing program) 2023/08/16 14:19:15 fetching corpus: 10422, signal 270323/297504 (executing program) 2023/08/16 14:19:15 fetching corpus: 10472, signal 270661/297504 (executing program) 2023/08/16 14:19:15 fetching corpus: 10522, signal 271025/297504 (executing program) 2023/08/16 14:19:15 fetching corpus: 10572, signal 271345/297504 (executing program) 2023/08/16 14:19:15 fetching corpus: 10622, signal 271698/297505 (executing program) 2023/08/16 14:19:16 fetching corpus: 10672, signal 271948/297505 (executing program) 2023/08/16 14:19:16 fetching corpus: 10722, signal 272308/297505 (executing program) 2023/08/16 14:19:16 fetching corpus: 10772, signal 272596/297507 (executing program) 2023/08/16 14:19:16 fetching corpus: 10822, signal 272833/297507 (executing program) 2023/08/16 14:19:16 fetching corpus: 10872, signal 273056/297507 (executing program) 2023/08/16 14:19:16 fetching corpus: 10922, signal 273375/297507 (executing program) 2023/08/16 14:19:16 fetching corpus: 10972, signal 273702/297507 (executing program) 2023/08/16 14:19:16 fetching corpus: 11022, signal 274122/297507 (executing program) 2023/08/16 14:19:17 fetching corpus: 11072, signal 274391/297507 (executing program) 2023/08/16 14:19:17 fetching corpus: 11122, signal 274636/297507 (executing program) 2023/08/16 14:19:17 fetching corpus: 11172, signal 274975/297507 (executing program) 2023/08/16 14:19:17 fetching corpus: 11222, signal 275250/297507 (executing program) 2023/08/16 14:19:17 fetching corpus: 11272, signal 275576/297507 (executing program) 2023/08/16 14:19:17 fetching corpus: 11322, signal 275942/297507 (executing program) 2023/08/16 14:19:17 fetching corpus: 11372, signal 276259/297507 (executing program) 2023/08/16 14:19:17 fetching corpus: 11422, signal 276681/297507 (executing program) 2023/08/16 14:19:18 fetching corpus: 11472, signal 277004/297507 (executing program) 2023/08/16 14:19:18 fetching corpus: 11522, signal 277495/297507 (executing program) 2023/08/16 14:19:18 fetching corpus: 11572, signal 277736/297508 (executing program) 2023/08/16 14:19:18 fetching corpus: 11622, signal 278072/297508 (executing program) 2023/08/16 14:19:18 fetching corpus: 11672, signal 278321/297508 (executing program) 2023/08/16 14:19:18 fetching corpus: 11722, signal 278615/297508 (executing program) 2023/08/16 14:19:18 fetching corpus: 11772, signal 278869/297508 (executing program) 2023/08/16 14:19:19 fetching corpus: 11822, signal 279146/297508 (executing program) 2023/08/16 14:19:19 fetching corpus: 11872, signal 279416/297508 (executing program) 2023/08/16 14:19:19 fetching corpus: 11922, signal 279686/297508 (executing program) 2023/08/16 14:19:19 fetching corpus: 11972, signal 279943/297508 (executing program) 2023/08/16 14:19:19 fetching corpus: 12022, signal 280151/297508 (executing program) 2023/08/16 14:19:19 fetching corpus: 12072, signal 280365/297508 (executing program) 2023/08/16 14:19:19 fetching corpus: 12122, signal 280732/297508 (executing program) 2023/08/16 14:19:19 fetching corpus: 12172, signal 280969/297508 (executing program) 2023/08/16 14:19:20 fetching corpus: 12222, signal 281340/297508 (executing program) 2023/08/16 14:19:20 fetching corpus: 12272, signal 281775/297508 (executing program) 2023/08/16 14:19:20 fetching corpus: 12322, signal 282030/297508 (executing program) 2023/08/16 14:19:20 fetching corpus: 12372, signal 282241/297508 (executing program) 2023/08/16 14:19:20 fetching corpus: 12422, signal 282542/297508 (executing program) 2023/08/16 14:19:20 fetching corpus: 12472, signal 282787/297508 (executing program) 2023/08/16 14:19:20 fetching corpus: 12522, signal 283048/297521 (executing program) 2023/08/16 14:19:20 fetching corpus: 12572, signal 283296/297521 (executing program) 2023/08/16 14:19:20 fetching corpus: 12622, signal 283471/297521 (executing program) 2023/08/16 14:19:21 fetching corpus: 12672, signal 283848/297521 (executing program) 2023/08/16 14:19:21 fetching corpus: 12722, signal 284237/297521 (executing program) 2023/08/16 14:19:21 fetching corpus: 12772, signal 284496/297521 (executing program) 2023/08/16 14:19:21 fetching corpus: 12822, signal 284784/297521 (executing program) 2023/08/16 14:19:21 fetching corpus: 12872, signal 285121/297521 (executing program) 2023/08/16 14:19:21 fetching corpus: 12922, signal 285483/297521 (executing program) 2023/08/16 14:19:21 fetching corpus: 12972, signal 285720/297521 (executing program) 2023/08/16 14:19:21 fetching corpus: 13022, signal 286008/297521 (executing program) 2023/08/16 14:19:21 fetching corpus: 13072, signal 286335/297521 (executing program) 2023/08/16 14:19:22 fetching corpus: 13122, signal 286561/297521 (executing program) 2023/08/16 14:19:22 fetching corpus: 13172, signal 286949/297535 (executing program) 2023/08/16 14:19:22 fetching corpus: 13222, signal 287248/297535 (executing program) 2023/08/16 14:19:22 fetching corpus: 13272, signal 287516/297535 (executing program) 2023/08/16 14:19:22 fetching corpus: 13322, signal 287939/297535 (executing program) 2023/08/16 14:19:22 fetching corpus: 13372, signal 288211/297535 (executing program) 2023/08/16 14:19:22 fetching corpus: 13422, signal 288493/297535 (executing program) 2023/08/16 14:19:23 fetching corpus: 13472, signal 288839/297535 (executing program) 2023/08/16 14:19:23 fetching corpus: 13522, signal 289192/297537 (executing program) 2023/08/16 14:19:23 fetching corpus: 13572, signal 289515/297537 (executing program) 2023/08/16 14:19:23 fetching corpus: 13622, signal 290015/297537 (executing program) 2023/08/16 14:19:23 fetching corpus: 13672, signal 290313/297545 (executing program) 2023/08/16 14:19:23 fetching corpus: 13722, signal 290727/297545 (executing program) 2023/08/16 14:19:23 fetching corpus: 13772, signal 290964/297545 (executing program) 2023/08/16 14:19:23 fetching corpus: 13822, signal 291178/297547 (executing program) 2023/08/16 14:19:23 fetching corpus: 13872, signal 291399/297555 (executing program) 2023/08/16 14:19:24 fetching corpus: 13922, signal 291808/297555 (executing program) 2023/08/16 14:19:24 fetching corpus: 13972, signal 292023/297555 (executing program) 2023/08/16 14:19:24 fetching corpus: 14022, signal 292313/297555 (executing program) 2023/08/16 14:19:24 fetching corpus: 14072, signal 292558/297555 (executing program) 2023/08/16 14:19:24 fetching corpus: 14122, signal 292928/297570 (executing program) 2023/08/16 14:19:24 fetching corpus: 14171, signal 293185/297570 (executing program) 2023/08/16 14:19:24 fetching corpus: 14221, signal 293400/297570 (executing program) 2023/08/16 14:19:25 fetching corpus: 14271, signal 293597/297570 (executing program) 2023/08/16 14:19:25 fetching corpus: 14321, signal 293926/297570 (executing program) 2023/08/16 14:19:25 fetching corpus: 14371, signal 294152/297570 (executing program) 2023/08/16 14:19:25 fetching corpus: 14421, signal 294357/297570 (executing program) 2023/08/16 14:19:25 fetching corpus: 14471, signal 294566/297570 (executing program) 2023/08/16 14:19:25 fetching corpus: 14521, signal 294785/297570 (executing program) 2023/08/16 14:19:25 fetching corpus: 14571, signal 295044/297570 (executing program) 2023/08/16 14:19:26 fetching corpus: 14621, signal 295352/297570 (executing program) 2023/08/16 14:19:26 fetching corpus: 14670, signal 295573/297570 (executing program) 2023/08/16 14:19:26 fetching corpus: 14670, signal 295573/297570 (executing program) 2023/08/16 14:19:28 starting 6 fuzzer processes 14:19:28 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x4, 0x0, &(0x7f0000000740)) 14:19:28 executing program 5: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r2, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800b00010062617461647600000400028008000a00", @ANYRES32=r5], 0x3c}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r7 = socket$netlink(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r8, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="200000001000250800170000000000000a000000", @ANYRES32=r9, @ANYBLOB="89"], 0x20}}, 0x0) sendmsg$nl_route(r3, &(0x7f00000002c0)={0x0, 0x7400, &(0x7f0000000280)={&(0x7f0000000080)=@newlink={0x20, 0x11, 0x455, 0x0, 0x0, {0x10, 0x0, 0x0, r6}}, 0x20}}, 0x0) 14:19:28 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b14, &(0x7f0000000000)={'wlan0\x00'}) 14:19:28 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001900)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0xff020000, 0x0}, 0xc020000}], 0x300, 0x20008855) 14:19:28 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180)=0x18870, 0x4) 14:19:28 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}}, 0x0) [ 97.501248][ T5023] memfd_create() without MFD_EXEC nor MFD_NOEXEC_SEAL, pid=5023 'syz-fuzzer' [ 98.061980][ T5054] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 98.074543][ T5057] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 98.085626][ T5064] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 98.093599][ T5064] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 98.097574][ T5065] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 98.102197][ T5064] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 98.108588][ T5065] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 98.115700][ T5064] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 98.130372][ T5065] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 98.131678][ T5064] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 98.138051][ T5065] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 98.145398][ T5064] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 98.151869][ T5065] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 98.159200][ T5064] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 98.166295][ T5065] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 98.172871][ T5064] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 98.179876][ T5065] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 98.186590][ T5064] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 98.196192][ T5065] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 98.201014][ T5064] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 98.207206][ T5065] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 98.215052][ T5064] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 98.222763][ T5065] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 98.228373][ T5064] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 98.235388][ T5065] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 98.251261][ T5066] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 98.253829][ T5065] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 98.258710][ T5066] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 98.266010][ T5065] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 98.275333][ T5068] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 98.280583][ T5065] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 98.294252][ T5065] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 98.297121][ T5069] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 98.302442][ T5065] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 98.319358][ T5069] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 98.358953][ T5050] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 98.878336][ T5048] chnl_net:caif_netlink_parms(): no params data found [ 98.914323][ T5049] chnl_net:caif_netlink_parms(): no params data found [ 98.973462][ T5047] chnl_net:caif_netlink_parms(): no params data found [ 98.984655][ T5059] chnl_net:caif_netlink_parms(): no params data found [ 99.015730][ T5058] chnl_net:caif_netlink_parms(): no params data found [ 99.038266][ T5055] chnl_net:caif_netlink_parms(): no params data found [ 99.098796][ T5048] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.107039][ T5048] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.115008][ T5048] bridge_slave_0: entered allmulticast mode [ 99.122481][ T5048] bridge_slave_0: entered promiscuous mode [ 99.135592][ T5048] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.142751][ T5048] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.150520][ T5048] bridge_slave_1: entered allmulticast mode [ 99.157048][ T5048] bridge_slave_1: entered promiscuous mode [ 99.200983][ T5059] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.208084][ T5059] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.215623][ T5059] bridge_slave_0: entered allmulticast mode [ 99.222435][ T5059] bridge_slave_0: entered promiscuous mode [ 99.271239][ T5048] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.280472][ T5059] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.287516][ T5059] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.295431][ T5059] bridge_slave_1: entered allmulticast mode [ 99.302322][ T5059] bridge_slave_1: entered promiscuous mode [ 99.334801][ T5048] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.371098][ T5059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.416442][ T5059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.425831][ T5049] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.433236][ T5049] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.442918][ T5049] bridge_slave_0: entered allmulticast mode [ 99.450156][ T5049] bridge_slave_0: entered promiscuous mode [ 99.457111][ T5047] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.466729][ T5047] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.476426][ T5047] bridge_slave_0: entered allmulticast mode [ 99.485330][ T5047] bridge_slave_0: entered promiscuous mode [ 99.507785][ T5048] team0: Port device team_slave_0 added [ 99.549077][ T5049] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.556180][ T5049] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.567397][ T5049] bridge_slave_1: entered allmulticast mode [ 99.574132][ T5049] bridge_slave_1: entered promiscuous mode [ 99.581007][ T5047] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.588057][ T5047] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.595507][ T5047] bridge_slave_1: entered allmulticast mode [ 99.602466][ T5047] bridge_slave_1: entered promiscuous mode [ 99.610333][ T5048] team0: Port device team_slave_1 added [ 99.631485][ T5059] team0: Port device team_slave_0 added [ 99.660239][ T5058] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.667311][ T5058] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.674757][ T5058] bridge_slave_0: entered allmulticast mode [ 99.682135][ T5058] bridge_slave_0: entered promiscuous mode [ 99.690365][ T5055] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.697482][ T5055] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.704797][ T5055] bridge_slave_0: entered allmulticast mode [ 99.715635][ T5055] bridge_slave_0: entered promiscuous mode [ 99.723777][ T5059] team0: Port device team_slave_1 added [ 99.756927][ T5058] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.764463][ T5058] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.772044][ T5058] bridge_slave_1: entered allmulticast mode [ 99.778629][ T5058] bridge_slave_1: entered promiscuous mode [ 99.796707][ T5055] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.804018][ T5055] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.811726][ T5055] bridge_slave_1: entered allmulticast mode [ 99.818324][ T5055] bridge_slave_1: entered promiscuous mode [ 99.834543][ T5049] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.844622][ T5048] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.851741][ T5048] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.879147][ T5048] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.893093][ T5047] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.921187][ T5059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.928183][ T5059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.954223][ T5059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.967805][ T5049] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.977560][ T5048] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.984619][ T5048] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.017580][ T5048] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.037148][ T5047] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.048099][ T5058] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.073198][ T5059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.080777][ T5059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.107832][ T5059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.135841][ T5058] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.147028][ T5055] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 100.166102][ T5055] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 100.213318][ T5049] team0: Port device team_slave_0 added [ 100.243788][ T5048] hsr_slave_0: entered promiscuous mode [ 100.250338][ T5048] hsr_slave_1: entered promiscuous mode [ 100.259958][ T5047] team0: Port device team_slave_0 added [ 100.274368][ T5049] team0: Port device team_slave_1 added [ 100.289424][ T5055] team0: Port device team_slave_0 added [ 100.304490][ T5047] team0: Port device team_slave_1 added [ 100.312596][ T5058] team0: Port device team_slave_0 added [ 100.330135][ T5050] Bluetooth: hci2: command 0x0409 tx timeout [ 100.340994][ T5055] team0: Port device team_slave_1 added [ 100.356887][ T5058] team0: Port device team_slave_1 added [ 100.374603][ T5059] hsr_slave_0: entered promiscuous mode [ 100.381879][ T5059] hsr_slave_1: entered promiscuous mode [ 100.387949][ T5059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 100.396436][ T5059] Cannot create hsr debugfs directory [ 100.409279][ T5050] Bluetooth: hci5: command 0x0409 tx timeout [ 100.413845][ T5062] Bluetooth: hci4: command 0x0409 tx timeout [ 100.416161][ T5054] Bluetooth: hci3: command 0x0409 tx timeout [ 100.421877][ T5065] Bluetooth: hci1: command 0x0409 tx timeout [ 100.428043][ T49] Bluetooth: hci0: command 0x0409 tx timeout [ 100.465562][ T5049] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.472881][ T5049] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.499178][ T5049] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.512009][ T5049] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.519431][ T5049] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.545887][ T5049] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.573400][ T5055] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.580565][ T5055] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.606765][ T5055] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.620561][ T5047] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.627617][ T5047] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.655191][ T5047] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.695246][ T5055] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.702357][ T5055] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.728453][ T5055] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.740727][ T5047] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.747688][ T5047] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.773967][ T5047] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.785493][ T5058] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 100.792523][ T5058] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.819949][ T5058] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 100.855307][ T5058] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 100.862390][ T5058] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 100.888607][ T5058] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 100.989655][ T5049] hsr_slave_0: entered promiscuous mode [ 100.995835][ T5049] hsr_slave_1: entered promiscuous mode [ 101.002415][ T5049] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.010529][ T5049] Cannot create hsr debugfs directory [ 101.044873][ T5047] hsr_slave_0: entered promiscuous mode [ 101.054881][ T5047] hsr_slave_1: entered promiscuous mode [ 101.062120][ T5047] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.069909][ T5047] Cannot create hsr debugfs directory [ 101.083312][ T5055] hsr_slave_0: entered promiscuous mode [ 101.090065][ T5055] hsr_slave_1: entered promiscuous mode [ 101.096288][ T5055] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.104211][ T5055] Cannot create hsr debugfs directory [ 101.124690][ T5058] hsr_slave_0: entered promiscuous mode [ 101.131880][ T5058] hsr_slave_1: entered promiscuous mode [ 101.137971][ T5058] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 101.146590][ T5058] Cannot create hsr debugfs directory [ 101.375905][ T5048] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 101.389355][ T5048] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 101.425632][ T5048] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 101.478592][ T5048] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 101.629613][ T5059] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.665533][ T5059] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.676627][ T5059] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.708542][ T5059] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.777968][ T5049] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 101.786947][ T5049] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 101.809560][ T5049] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 101.818346][ T5049] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 101.938406][ T5048] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.957982][ T5055] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 101.973396][ T5055] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 101.985744][ T5055] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 101.998138][ T5055] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 102.046441][ T5048] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.117963][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.125595][ T5113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.145705][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.153045][ T5113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.220773][ T5047] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 102.231133][ T5047] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 102.247401][ T5049] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.283615][ T5047] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 102.293630][ T5047] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 102.318691][ T5059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.347081][ T5049] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.409594][ T49] Bluetooth: hci2: command 0x041b tx timeout [ 102.418630][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.425885][ T5117] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.472699][ T5058] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 102.485246][ T5059] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.492151][ T49] Bluetooth: hci0: command 0x041b tx timeout [ 102.492167][ T5054] Bluetooth: hci3: command 0x041b tx timeout [ 102.498687][ T49] Bluetooth: hci5: command 0x041b tx timeout [ 102.504814][ T5050] Bluetooth: hci1: command 0x041b tx timeout [ 102.512356][ T5065] Bluetooth: hci4: command 0x041b tx timeout [ 102.550312][ T5058] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 102.578373][ T5113] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.585552][ T5113] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.597334][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.604501][ T5113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.639764][ T5055] 8021q: adding VLAN 0 to HW filter on device bond0 [ 102.648108][ T5058] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 102.663565][ T5058] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 102.682857][ T5113] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.690018][ T5113] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.732139][ T5055] 8021q: adding VLAN 0 to HW filter on device team0 [ 102.804163][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 102.811332][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 102.844479][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 102.852157][ T5112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 102.932554][ T5048] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.972954][ T5047] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.018483][ T5047] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.100413][ T7] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.107595][ T7] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.133113][ T7] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.140366][ T7] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.244333][ T5048] veth0_vlan: entered promiscuous mode [ 103.281407][ T5058] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.310337][ T5059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.333502][ T5048] veth1_vlan: entered promiscuous mode [ 103.392110][ T5058] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.446977][ T5048] veth0_macvtap: entered promiscuous mode [ 103.484815][ T917] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.492115][ T917] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.548968][ T5048] veth1_macvtap: entered promiscuous mode [ 103.567780][ T5049] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.582780][ T3793] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.589945][ T3793] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.633195][ T5059] veth0_vlan: entered promiscuous mode [ 103.684146][ T5059] veth1_vlan: entered promiscuous mode [ 103.717070][ T5048] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 103.740558][ T5055] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 103.752863][ T5058] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 103.785570][ T5048] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 103.814858][ T5049] veth0_vlan: entered promiscuous mode [ 103.846293][ T5048] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.887590][ T5048] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.901469][ T5048] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.927433][ T5048] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.955080][ T5049] veth1_vlan: entered promiscuous mode [ 103.995809][ T5059] veth0_macvtap: entered promiscuous mode [ 104.013699][ T5047] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.064856][ T5059] veth1_macvtap: entered promiscuous mode [ 104.127489][ T5049] veth0_macvtap: entered promiscuous mode [ 104.200895][ T5049] veth1_macvtap: entered promiscuous mode [ 104.224461][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.236591][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.261281][ T5059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.285822][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.298255][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.308593][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 104.324058][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.337149][ T5049] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 104.378203][ T5059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.390856][ T5059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.403040][ T5059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.414374][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.433693][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.447513][ T5049] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 104.467639][ T5049] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 104.487615][ T5049] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 104.498761][ T5049] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.508386][ T49] Bluetooth: hci2: command 0x040f tx timeout [ 104.511383][ T5049] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.524429][ T5049] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.536168][ T5049] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.565486][ T5059] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.571750][ T5065] Bluetooth: hci1: command 0x040f tx timeout [ 104.577522][ T5059] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.580478][ T49] Bluetooth: hci3: command 0x040f tx timeout [ 104.589905][ T5062] Bluetooth: hci0: command 0x040f tx timeout [ 104.595293][ T5054] Bluetooth: hci5: command 0x040f tx timeout [ 104.601216][ T5062] Bluetooth: hci4: command 0x040f tx timeout [ 104.614968][ T5059] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.624025][ T5059] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 104.639829][ T26] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.661864][ T26] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.692538][ T5058] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 104.804573][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 104.822062][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 104.882969][ T5055] veth0_vlan: entered promiscuous mode [ 104.933520][ T5055] veth1_vlan: entered promiscuous mode [ 104.961008][ T5047] veth0_vlan: entered promiscuous mode [ 104.987946][ T5058] veth0_vlan: entered promiscuous mode [ 105.037632][ T5047] veth1_vlan: entered promiscuous mode [ 105.075701][ T5114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 14:19:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b14, &(0x7f0000000000)={'wlan0\x00'}) [ 105.088186][ T5114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.092248][ T5157] warning: `syz-executor.1' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 105.115974][ T5058] veth1_vlan: entered promiscuous mode [ 105.151125][ T5055] veth0_macvtap: entered promiscuous mode [ 105.167530][ T5047] veth0_macvtap: entered promiscuous mode [ 105.241277][ T5114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.248334][ T1133] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.250094][ T5047] veth1_macvtap: entered promiscuous mode [ 105.257102][ T1133] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.274786][ T5114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.283941][ T5055] veth1_macvtap: entered promiscuous mode 14:19:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b14, &(0x7f0000000000)={'wlan0\x00'}) [ 105.326443][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.344625][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.355895][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.374089][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.384885][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.397349][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.413659][ T5047] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 105.449755][ T5058] veth0_macvtap: entered promiscuous mode 14:19:36 executing program 1: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r1}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b14, &(0x7f0000000000)={'wlan0\x00'}) [ 105.495047][ T5058] veth1_macvtap: entered promiscuous mode [ 105.520867][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.552232][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.563152][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.575361][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.586000][ T5047] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 105.598112][ T5047] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.610091][ T5047] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 105.629405][ T5047] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.638147][ T5047] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 14:19:36 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000001c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@val, @val={0x2, 0x1, 0x7ff}, @ipv4=@tipc={{0x5, 0x4, 0x0, 0x0, 0x42, 0x66, 0x0, 0x8, 0x6, 0x0, @dev, @rand_addr=0x64010100}, @payload_named={{{{{0x2e, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, 0x2, 0x6, 0x0, 0x1, 0x0, 0x1, 0x2, 0x2, 0x8000, 0x0, 0x4e21, 0x4e20}, 0x3}, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}, 0x50) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f00000000c0)={@void, @val={0x0, 0x80}, @x25}, 0xd) [ 105.647712][ T5047] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.657091][ T5047] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.668754][ T5114] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.687401][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.710623][ T5114] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.727244][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.747394][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.758468][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.768598][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.781603][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.791718][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.809538][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.811510][ T5171] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 105.828233][ T5055] batman_adv: batadv0: Interface activated: batadv_slave_0 14:19:36 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001900)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0xff020000, 0x0}, 0xc020000}], 0x300, 0x20008855) [ 105.854716][ T5058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.872377][ T5058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.902699][ T5058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.928742][ T5058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.945404][ T5058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 105.957847][ T5058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 105.982448][ T5058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.003012][ T5058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.016006][ T5058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 106.027531][ T5058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.042640][ T5058] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 106.074387][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.097736][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.108433][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.124243][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.134441][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.145172][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.155445][ T5055] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 14:19:37 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001900)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0xff020000, 0x0}, 0xc020000}], 0x300, 0x20008855) [ 106.166107][ T5055] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.184862][ T5055] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.236665][ T5171] syzkaller1: entered promiscuous mode [ 106.242528][ T5171] syzkaller1: entered allmulticast mode [ 106.268264][ T5058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.279553][ T5058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.289458][ T5058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.299989][ T5058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.311935][ T5058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.325006][ T5058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.335231][ T5058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.346506][ T5058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.356421][ T5058] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 106.367046][ T5058] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 106.378489][ T5058] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 106.392074][ T5055] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.401736][ T5055] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.410853][ T5055] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 14:19:37 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x4, 0x0, &(0x7f0000000740)) [ 106.441422][ T5055] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.472274][ T5058] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.506421][ T5058] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.532486][ T5058] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.549722][ T5058] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 106.569339][ T5062] Bluetooth: hci2: command 0x0419 tx timeout [ 106.649575][ T5062] Bluetooth: hci5: command 0x0419 tx timeout [ 106.655627][ T5062] Bluetooth: hci4: command 0x0419 tx timeout [ 106.659248][ T5054] Bluetooth: hci3: command 0x0419 tx timeout [ 106.661853][ T5062] Bluetooth: hci1: command 0x0419 tx timeout [ 106.667585][ T5054] Bluetooth: hci0: command 0x0419 tx timeout [ 106.774286][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.800441][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.858941][ T917] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.867974][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.872697][ T917] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.883759][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.948350][ T7] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.964670][ T7] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 106.989702][ T5160] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 106.997570][ T5160] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.065456][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 107.079836][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 107.116729][ T5192] netlink: 'syz-executor.5': attribute type 1 has an invalid length. 14:19:38 executing program 5: socketpair(0x28, 0x5, 0x0, &(0x7f00000004c0)) 14:19:38 executing program 2: r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) connect$inet(r0, &(0x7f00000000c0)={0x2, 0x0, @dev}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000001900)=0x1, 0x4) sendmmsg$inet(r0, &(0x7f0000000bc0)=[{{0x0, 0xff020000, 0x0}, 0xc020000}], 0x300, 0x20008855) 14:19:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x4, 0x0, &(0x7f0000000740)) 14:19:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000001c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@val, @val={0x2, 0x1, 0x7ff}, @ipv4=@tipc={{0x5, 0x4, 0x0, 0x0, 0x42, 0x66, 0x0, 0x8, 0x6, 0x0, @dev, @rand_addr=0x64010100}, @payload_named={{{{{0x2e, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, 0x2, 0x6, 0x0, 0x1, 0x0, 0x1, 0x2, 0x2, 0x8000, 0x0, 0x4e21, 0x4e20}, 0x3}, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}, 0x50) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f00000000c0)={@void, @val={0x0, 0x80}, @x25}, 0xd) 14:19:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}}, 0x0) 14:19:38 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180)=0x18870, 0x4) 14:19:38 executing program 5: socketpair(0x28, 0x5, 0x0, &(0x7f00000004c0)) 14:19:38 executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x4, 0x0, &(0x7f0000000740)) 14:19:38 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180)=0x18870, 0x4) 14:19:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}}, 0x0) 14:19:38 executing program 5: socketpair(0x28, 0x5, 0x0, &(0x7f00000004c0)) 14:19:38 executing program 3: r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000180)=0x18870, 0x4) 14:19:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:19:38 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) [ 107.487797][ T5205] syzkaller1: entered promiscuous mode 14:19:38 executing program 4: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x16}]}, @NFT_MSG_NEWSETELEM={0x40, 0xc, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x14, 0x3, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x4}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xcc}}, 0x0) [ 107.546629][ T5205] syzkaller1: entered allmulticast mode [ 107.786828][ T5205] syzkaller1: create flow: hash 3667604371 index 1 [ 107.797912][ T5200] syzkaller1: delete flow: hash 3667604371 index 1 14:19:38 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000001c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@val, @val={0x2, 0x1, 0x7ff}, @ipv4=@tipc={{0x5, 0x4, 0x0, 0x0, 0x42, 0x66, 0x0, 0x8, 0x6, 0x0, @dev, @rand_addr=0x64010100}, @payload_named={{{{{0x2e, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, 0x2, 0x6, 0x0, 0x1, 0x0, 0x1, 0x2, 0x2, 0x8000, 0x0, 0x4e21, 0x4e20}, 0x3}, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}, 0x50) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f00000000c0)={@void, @val={0x0, 0x80}, @x25}, 0xd) 14:19:38 executing program 5: socketpair(0x28, 0x5, 0x0, &(0x7f00000004c0)) 14:19:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:19:38 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_buf(r0, 0x10d, 0x6, &(0x7f00000000c0)="7e49164e", 0x4) 14:19:38 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 14:19:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f00000000c0)) 14:19:38 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f00000000c0)) 14:19:38 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 14:19:38 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:19:38 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_buf(r0, 0x10d, 0x6, &(0x7f00000000c0)="7e49164e", 0x4) 14:19:38 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) accept4(r1, &(0x7f00000005c0)=@pptp, 0x0, 0x0) 14:19:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f00000000c0)) [ 108.269324][ T5243] syzkaller1: entered promiscuous mode [ 108.302347][ T5243] syzkaller1: entered allmulticast mode [ 108.377588][ T5243] syzkaller1: create flow: hash 3667604371 index 1 [ 108.386278][ T5241] syzkaller1: delete flow: hash 3667604371 index 1 14:19:39 executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x111}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @broadcast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETDEBUG(r0, 0x400454c9, &(0x7f00000001c0)) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='net_prio.prioidx\x00', 0x275a, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000200)={@val, @val={0x2, 0x1, 0x7ff}, @ipv4=@tipc={{0x5, 0x4, 0x0, 0x0, 0x42, 0x66, 0x0, 0x8, 0x6, 0x0, @dev, @rand_addr=0x64010100}, @payload_named={{{{{0x2e, 0x0, 0x0, 0x0, 0x0, 0xa, 0x1, 0x2, 0x6, 0x0, 0x1, 0x0, 0x1, 0x2, 0x2, 0x8000, 0x0, 0x4e21, 0x4e20}, 0x3}, 0x4}}, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}}, 0x50) write$binfmt_script(r3, &(0x7f0000000000)=ANY=[], 0x6db6e571) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x11, r3, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'vlan0\x00'}) write$tun(r2, &(0x7f00000000c0)={@void, @val={0x0, 0x80}, @x25}, 0xd) 14:19:39 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0xc) listen(r0, 0x0) ioctl$sock_TIOCINQ(r0, 0x541b, 0x0) 14:19:39 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) accept4(r1, &(0x7f00000005c0)=@pptp, 0x0, 0x0) 14:19:39 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_buf(r0, 0x10d, 0x6, &(0x7f00000000c0)="7e49164e", 0x4) 14:19:39 executing program 4: r0 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$inet6_buf(r0, 0x29, 0x6, 0x0, &(0x7f00000000c0)) 14:19:39 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$team(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)={0x14, r1, 0x1}, 0x14}}, 0x0) 14:19:39 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="85", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @loopback}, 0x1c) 14:19:39 executing program 3: r0 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$inet_buf(r0, 0x10d, 0x6, &(0x7f00000000c0)="7e49164e", 0x4) 14:19:39 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) accept4(r1, &(0x7f00000005c0)=@pptp, 0x0, 0x0) 14:19:39 executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000000)={@val, @void, @eth={@broadcast, @broadcast, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev}, {0x0, 0x6558, 0x64, 0x0, @wg=@response={0x2, 0x0, 0xffffdd86, "2a81be1232811931fa99c9934b27df63263e20b69e2333636be2b8078af79652", "59ef9bd945912d9c00d5307c7c9286ba", {"e1e103a9720c50eaba20a1151787e551", "d3f3433970143c6f609f1a6d2b9e337a"}}}}}}}}, 0x8e) 14:19:39 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$alg(r3, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-arm\x00'}, 0x58) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x100000, 0x0) sendfile(r6, r4, 0x0, 0x10000a006) sendmmsg$inet6(r4, &(0x7f00000001c0), 0x0, 0x800) sendmmsg$inet6(r2, &(0x7f0000001700)=[{{0x0, 0x1000fec0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x10380fe}], 0x40000000000035c, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 14:19:39 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="100000000000000000000060070000001c00000000000000d22bff0f0248e923704bf955ec1a7a021114c0367a2d9df970ad8a1b7bda44bc0d4a2353a9c1dcb88b809ad6c50e1f0ed0e75fb255fa2522e0589c809c3d1e362f2aca03d05ad30204443124f92f77d62f438a81b18ef0a3b31c3ecc9e9d61ff085bab", @ANYRES32=0x0, @ANYBLOB="8c6400004053ff5910c61526770364740ffc7cadb6"], 0x30}}], 0x300, 0x0) [ 108.815004][ T5269] syzkaller1: entered promiscuous mode [ 108.882385][ T5269] syzkaller1: entered allmulticast mode [ 109.038488][ T5269] syzkaller1: create flow: hash 3667604371 index 1 [ 109.087280][ T5268] syzkaller1: delete flow: hash 3667604371 index 1 14:19:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="85", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @loopback}, 0x1c) 14:19:40 executing program 5: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=@framed, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000001500)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) accept4(r1, &(0x7f00000005c0)=@pptp, 0x0, 0x0) 14:19:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$alg(r3, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-arm\x00'}, 0x58) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x100000, 0x0) sendfile(r6, r4, 0x0, 0x10000a006) sendmmsg$inet6(r4, &(0x7f00000001c0), 0x0, 0x800) sendmmsg$inet6(r2, &(0x7f0000001700)=[{{0x0, 0x1000fec0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x10380fe}], 0x40000000000035c, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 14:19:40 executing program 0: r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x0, 0x0, 0x0) 14:19:40 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="100000000000000000000060070000001c00000000000000d22bff0f0248e923704bf955ec1a7a021114c0367a2d9df970ad8a1b7bda44bc0d4a2353a9c1dcb88b809ad6c50e1f0ed0e75fb255fa2522e0589c809c3d1e362f2aca03d05ad30204443124f92f77d62f438a81b18ef0a3b31c3ecc9e9d61ff085bab", @ANYRES32=0x0, @ANYBLOB="8c6400004053ff5910c61526770364740ffc7cadb6"], 0x30}}], 0x300, 0x0) 14:19:40 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="7f0a000300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback=0x7f000002}, "0000b50800000000"}}}}}, 0x0) 14:19:40 executing program 0: socketpair(0x2b, 0x1, 0x0, &(0x7f0000000040)) 14:19:40 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x4000000}}}]}, 0x78}}, 0x0) 14:19:40 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="7f0a000300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback=0x7f000002}, "0000b50800000000"}}}}}, 0x0) 14:19:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="85", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @loopback}, 0x1c) 14:19:40 executing program 0: r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000002b00)=ANY=[@ANYBLOB="8800000024000b5109ea58000000000060007609", @ANYRES32=r2, @ANYBLOB="00000000ffffffff000000000a0001006e6574656d000000580002"], 0x88}}, 0x0) 14:19:40 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x4000000}}}]}, 0x78}}, 0x0) 14:19:40 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="7f0a000300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback=0x7f000002}, "0000b50800000000"}}}}}, 0x0) 14:19:40 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, r1, 0x309}, 0x14}}, 0x0) 14:19:40 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$alg(r3, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-arm\x00'}, 0x58) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x100000, 0x0) sendfile(r6, r4, 0x0, 0x10000a006) sendmmsg$inet6(r4, &(0x7f00000001c0), 0x0, 0x800) sendmmsg$inet6(r2, &(0x7f0000001700)=[{{0x0, 0x1000fec0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x10380fe}], 0x40000000000035c, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 14:19:40 executing program 4: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet6_int(r0, 0x29, 0x46, 0x0, 0x0) sendto$inet6(r0, &(0x7f0000000080)="85", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x3, @loopback}, 0x1c) 14:19:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="100000000000000000000060070000001c00000000000000d22bff0f0248e923704bf955ec1a7a021114c0367a2d9df970ad8a1b7bda44bc0d4a2353a9c1dcb88b809ad6c50e1f0ed0e75fb255fa2522e0589c809c3d1e362f2aca03d05ad30204443124f92f77d62f438a81b18ef0a3b31c3ecc9e9d61ff085bab", @ANYRES32=0x0, @ANYBLOB="8c6400004053ff5910c61526770364740ffc7cadb6"], 0x30}}], 0x300, 0x0) 14:19:41 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x4000000}}}]}, 0x78}}, 0x0) 14:19:41 executing program 1: syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @random="7f0a000300", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @loopback, @loopback=0x7f000002}, "0000b50800000000"}}}}}, 0x0) 14:19:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, r1, 0x309}, 0x14}}, 0x0) 14:19:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000100)=0xdf6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d24ea7e31155a1c55ea24ebf36c699ba1aa35827a92d2e6e0d6c82e21b595cb2551bb69ec837f521", 0xfffffdef}], 0x1, &(0x7f00000003c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) 14:19:41 executing program 5: r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x78, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x0, 0x0, 0x0, 0x4000000}}}]}, 0x78}}, 0x0) 14:19:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, r1, 0x309}, 0x14}}, 0x0) 14:19:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000100)=0xdf6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d24ea7e31155a1c55ea24ebf36c699ba1aa35827a92d2e6e0d6c82e21b595cb2551bb69ec837f521", 0xfffffdef}], 0x1, &(0x7f00000003c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) 14:19:41 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="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", 0x411}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x800, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab09a6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 14:19:41 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x2}]}, 0x18}}, 0x0) 14:19:41 executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = socket$inet6(0xa, 0x3, 0x103) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty}, 0x1c) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) bind$alg(r3, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xchacha20-arm\x00'}, 0x58) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f00000002c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) r6 = accept$alg(0xffffffffffffffff, 0x0, 0x0) recvmmsg(r6, &(0x7f00000005c0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001800)=""/4096, 0x7ffff000}], 0x1, 0x0, 0x40000, 0x7000000}}], 0xa900, 0x100000, 0x0) sendfile(r6, r4, 0x0, 0x10000a006) sendmmsg$inet6(r4, &(0x7f00000001c0), 0x0, 0x800) sendmmsg$inet6(r2, &(0x7f0000001700)=[{{0x0, 0x1000fec0, 0x0, 0x0, 0x0, 0x0, 0xfc}, 0x10380fe}], 0x40000000000035c, 0x40000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000a, 0x13, r0, 0x0) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 14:19:41 executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000140)=0x32, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) sendmmsg$inet(r0, &(0x7f0000002080)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="100000000000000000000060070000001c00000000000000d22bff0f0248e923704bf955ec1a7a021114c0367a2d9df970ad8a1b7bda44bc0d4a2353a9c1dcb88b809ad6c50e1f0ed0e75fb255fa2522e0589c809c3d1e362f2aca03d05ad30204443124f92f77d62f438a81b18ef0a3b31c3ecc9e9d61ff085bab", @ANYRES32=0x0, @ANYBLOB="8c6400004053ff5910c61526770364740ffc7cadb6"], 0x30}}], 0x300, 0x0) 14:19:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000100)=0xdf6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d24ea7e31155a1c55ea24ebf36c699ba1aa35827a92d2e6e0d6c82e21b595cb2551bb69ec837f521", 0xfffffdef}], 0x1, &(0x7f00000003c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) 14:19:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)={0x14, r1, 0x309}, 0x14}}, 0x0) 14:19:41 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x2}]}, 0x18}}, 0x0) 14:19:41 executing program 4: r0 = socket$inet6(0xa, 0x3, 0x5) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f00000000c0)={@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x800, 0x0, 0x3, 0x9}, 0x20) setsockopt$inet6_int(r0, 0x29, 0x24, &(0x7f0000000100)=0xdf6, 0x4) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f0000000180)=0xffffffc1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x380000, @empty}, 0x1c) sendmmsg$inet(r0, &(0x7f0000000780)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000180)="d24ea7e31155a1c55ea24ebf36c699ba1aa35827a92d2e6e0d6c82e21b595cb2551bb69ec837f521", 0xfffffdef}], 0x1, &(0x7f00000003c0)=[@ip_retopts={{0x10}}], 0x10}}], 0x1, 0x0) 14:19:41 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}}, 0x0) 14:19:41 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x2}]}, 0x18}}, 0x0) 14:19:41 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r3, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7fffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df97ab5ecf16b9b76e3b84a5b50a5bea8319f02429bce9", @ANYRES64, @ANYRESDEC, @ANYRES32=r4, @ANYBLOB, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=r8, @ANYBLOB="1af846a1ffd0859abb3396589e91c45168050462805bf79717ba0f5a1c7098a5fc3890c8f17abb2c8b1217bc0050bc57c1fbebe38217c4b46e498660f33ca7d6602707b904be744bb9962310c35d34b7f0b277837e080ac3948e91842e5c4a25e8a5dff3a7d5b8d8e2adeb118c80c6a7b549684b2c2e9f9d23f4c9896e6ffbf1b3d52c0eb2dd4d5c05e33eae9569cde059b7e548d609c59c90377bb1f2de7ef449f6dbb46033e0baa42b79c71f49622ae2c87b6e4e0651b85c85a1fabb76023247195a298e89aab1f5de20ae38"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYRES64=r5, @ANYRES32=r10, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529cb7671b50928f928cbfe3a97db859810c1a96f7e09642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707c", @ANYRESDEC=r7], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000040)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004003}, 0x4000010) 14:19:41 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="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", 0x411}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x800, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab09a6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 14:19:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}}, 0x0) 14:19:42 executing program 5: r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x2, 0xc, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, [@sadb_key={0x2}]}, 0x18}}, 0x0) 14:19:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}}, 0x0) 14:19:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}}, 0x0) 14:19:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 14:19:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="45f9e8e5af9f7e488a1619ea0cd4902570249f1e29b175dfa0d3ae9be1933b972b835f966d432045a33e064403006bdb8ef95b90e76baae34f74778049ff8fa4a59adf7623aaddb922b32dbbfda740b88a07e87eb2cd97c0393db1036a1ec8a376c919cdd0b40dbb899c07f1349c7a1113f57495c795bc7e38166a7bdef463457189549f4b13279fffd050bdfea3477a62d3edea8321a2e98c65330fe7199ca6bee7202aa5a5d56c4ed4c22dbb28cebcaec033c75eb78820ad1d8ceb6f90b569e165002e702e1a206666d3c9d903ce78c73f778eae82d58317c634016a3e01ae29607f7b5ff253c607e4f60c0aa49021205073cdd574a3d4c25fbf79cc8ac99ff149ae54aa56286204e628dc2dfe4384ef74c8dac04ace6c5762d03f9e19942e4b6bbbb41fefc569cc23b3319d4ebc55551fecf8f936221e9787e744f2e1422baaa25b2f5bf59205190b7fe52f0641f149c5e00b764c493afadeaa04324783c268f48772b1c532d52d211865704db5fbafc3193385adc9855a1ad9ea0c05479329efd6c08ed22c5656eab2ea050f53bf441a9dfb4157d14b99214fa59b8b0e53200795762145a63d61c5c526edb03429e1e14072e1d7dff102fdb9801234bbbb8e0274a861dd60f3a21f129326b2f6fee61f690fa3967cdc5f6f9519282c48e28d6aa7d1b0ed07bdd72ebf1dd97b46f24ffde352095f4bffd6fdd0b9f0d60f16746f1c1ec46656cf94ae2237540c558c1863fb2ffd4619e5ee5b7aa5757e252b821e003fcef57f33cd70f19ec0b5f8098c030741147e8e4319109892fd56b22d261800b7107a393b9a7d835383e3504f5f2794f30914c4f8145ed446a06e3787eb32ab90abf595d45013c8b6d9c26cf4e60812b02427a4d2a8dcbdfaf8ace4e17f0f598676a5f26dc3615eddea77e1d68c857fbe2b39b67ccacd6afcea94b4f9592490c1a51e11f4ffc6dd4d4cdc44995b09864743b906e07a12c93045b654abf2faaf1127ee92698e09efee1d8d45ceb103973c3d1d5c98090d9af08789f867873bbeb522cb367bacaf2d94bc6fa7aab57b542af353d693230a3da636762204d96f2889f7decc9ad3992a8be2be92bdd6a7367bd64c8604ec219a92c80a7536f218926b5d18677f4bc22454a843f7ec6bfaadaec1a47896f902725cddc264226a0c7f673468459528101da2368d77d37d9ae6d52cb44efb9b5af74fdd4c8341980d7b3f4a3176c8de3c3a0144e3f327fcb30c6bda7a62ec37215367d06ef1b85fa2bc329fe99071f65b0d5a48b50139016b0753bc99c389f4aba551bf2da38b78e7b4dbb3be3ecf8749b39a022c86febf3a30070def590bd2a9cb0f95d09eac8de27c370d758e340193773a7dfbb2046e0b2e34bef073ed8368f4fbf464206fbe88c3260f6974b383bcf8a000db483d822536000df416d09dfc55c920cbc3c8b24af1757099903759e9312b576b9f04e6", 0x411}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x800, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab09a6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 14:19:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}}, 0x0) 14:19:42 executing program 2: r0 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'veth0_to_bridge\x00', &(0x7f00000000c0)=@ethtool_per_queue_op={0x4b, 0xf}}) 14:19:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)={0x1c, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}}, 0x0) 14:19:42 executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}}, 0x0) 14:19:42 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r3, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7fffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df97ab5ecf16b9b76e3b84a5b50a5bea8319f02429bce9", @ANYRES64, @ANYRESDEC, @ANYRES32=r4, @ANYBLOB, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=r8, @ANYBLOB="1af846a1ffd0859abb3396589e91c45168050462805bf79717ba0f5a1c7098a5fc3890c8f17abb2c8b1217bc0050bc57c1fbebe38217c4b46e498660f33ca7d6602707b904be744bb9962310c35d34b7f0b277837e080ac3948e91842e5c4a25e8a5dff3a7d5b8d8e2adeb118c80c6a7b549684b2c2e9f9d23f4c9896e6ffbf1b3d52c0eb2dd4d5c05e33eae9569cde059b7e548d609c59c90377bb1f2de7ef449f6dbb46033e0baa42b79c71f49622ae2c87b6e4e0651b85c85a1fabb76023247195a298e89aab1f5de20ae38"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYRES64=r5, @ANYRES32=r10, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529cb7671b50928f928cbfe3a97db859810c1a96f7e09642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707c", @ANYRESDEC=r7], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000040)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004003}, 0x4000010) 14:19:42 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 14:19:42 executing program 5: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000580), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000005c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000600)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_TDLS_OPERATION={0x5}]}, 0x24}}, 0x0) 14:19:42 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)={0x1c, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}}, 0x0) 14:19:42 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)={0x1c, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}}, 0x0) 14:19:42 executing program 1: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x2000000000000074, 0x25d) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000480)={0x1, &(0x7f0000000400)=[{0x6, 0x0, 0x0, 0xe8}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f00000002c0)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f0000001340)="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", 0x411}], 0x1}}], 0x1, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0x800, 0x4) sendto$inet(r0, &(0x7f00000012c0)="09268a927f1f6588b967481241ba7860fcfaf65ac618ded8974895abeaf4b4834ff922b3f1e0b02bd67aa03059bcecc7a95425a3a07e758044ab09a6f7ae55d88fecf90b1a7511bf746bec66ba", 0xfe6a, 0x11, 0x0, 0x27) 14:19:43 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r3, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7fffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df97ab5ecf16b9b76e3b84a5b50a5bea8319f02429bce9", @ANYRES64, @ANYRESDEC, @ANYRES32=r4, @ANYBLOB, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=r8, @ANYBLOB="1af846a1ffd0859abb3396589e91c45168050462805bf79717ba0f5a1c7098a5fc3890c8f17abb2c8b1217bc0050bc57c1fbebe38217c4b46e498660f33ca7d6602707b904be744bb9962310c35d34b7f0b277837e080ac3948e91842e5c4a25e8a5dff3a7d5b8d8e2adeb118c80c6a7b549684b2c2e9f9d23f4c9896e6ffbf1b3d52c0eb2dd4d5c05e33eae9569cde059b7e548d609c59c90377bb1f2de7ef449f6dbb46033e0baa42b79c71f49622ae2c87b6e4e0651b85c85a1fabb76023247195a298e89aab1f5de20ae38"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYRES64=r5, @ANYRES32=r10, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529cb7671b50928f928cbfe3a97db859810c1a96f7e09642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707c", @ANYRESDEC=r7], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000040)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004003}, 0x4000010) 14:19:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)={0x1c, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}}, 0x0) 14:19:43 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 14:19:43 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)={0x1c, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}}, 0x0) 14:19:43 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r3, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7fffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df97ab5ecf16b9b76e3b84a5b50a5bea8319f02429bce9", @ANYRES64, @ANYRESDEC, @ANYRES32=r4, @ANYBLOB, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=r8, @ANYBLOB="1af846a1ffd0859abb3396589e91c45168050462805bf79717ba0f5a1c7098a5fc3890c8f17abb2c8b1217bc0050bc57c1fbebe38217c4b46e498660f33ca7d6602707b904be744bb9962310c35d34b7f0b277837e080ac3948e91842e5c4a25e8a5dff3a7d5b8d8e2adeb118c80c6a7b549684b2c2e9f9d23f4c9896e6ffbf1b3d52c0eb2dd4d5c05e33eae9569cde059b7e548d609c59c90377bb1f2de7ef449f6dbb46033e0baa42b79c71f49622ae2c87b6e4e0651b85c85a1fabb76023247195a298e89aab1f5de20ae38"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYRES64=r5, @ANYRES32=r10, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529cb7671b50928f928cbfe3a97db859810c1a96f7e09642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707c", @ANYRESDEC=r7], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000040)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004003}, 0x4000010) 14:19:43 executing program 0: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)={0x1c, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}}, 0x0) 14:19:44 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r3, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7fffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df97ab5ecf16b9b76e3b84a5b50a5bea8319f02429bce9", @ANYRES64, @ANYRESDEC, @ANYRES32=r4, @ANYBLOB, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=r8, @ANYBLOB="1af846a1ffd0859abb3396589e91c45168050462805bf79717ba0f5a1c7098a5fc3890c8f17abb2c8b1217bc0050bc57c1fbebe38217c4b46e498660f33ca7d6602707b904be744bb9962310c35d34b7f0b277837e080ac3948e91842e5c4a25e8a5dff3a7d5b8d8e2adeb118c80c6a7b549684b2c2e9f9d23f4c9896e6ffbf1b3d52c0eb2dd4d5c05e33eae9569cde059b7e548d609c59c90377bb1f2de7ef449f6dbb46033e0baa42b79c71f49622ae2c87b6e4e0651b85c85a1fabb76023247195a298e89aab1f5de20ae38"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYRES64=r5, @ANYRES32=r10, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529cb7671b50928f928cbfe3a97db859810c1a96f7e09642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707c", @ANYRESDEC=r7], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000040)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004003}, 0x4000010) 14:19:44 executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 14:19:44 executing program 2: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000140), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000600)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000480)={0x1c, r1, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r3}]}, 0x1c}}, 0x0) 14:19:44 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r3, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7fffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df97ab5ecf16b9b76e3b84a5b50a5bea8319f02429bce9", @ANYRES64, @ANYRESDEC, @ANYRES32=r4, @ANYBLOB, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=r8, @ANYBLOB="1af846a1ffd0859abb3396589e91c45168050462805bf79717ba0f5a1c7098a5fc3890c8f17abb2c8b1217bc0050bc57c1fbebe38217c4b46e498660f33ca7d6602707b904be744bb9962310c35d34b7f0b277837e080ac3948e91842e5c4a25e8a5dff3a7d5b8d8e2adeb118c80c6a7b549684b2c2e9f9d23f4c9896e6ffbf1b3d52c0eb2dd4d5c05e33eae9569cde059b7e548d609c59c90377bb1f2de7ef449f6dbb46033e0baa42b79c71f49622ae2c87b6e4e0651b85c85a1fabb76023247195a298e89aab1f5de20ae38"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYRES64=r5, @ANYRES32=r10, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529cb7671b50928f928cbfe3a97db859810c1a96f7e09642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707c", @ANYRESDEC=r7], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000040)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004003}, 0x4000010) 14:19:44 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r3, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7fffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df97ab5ecf16b9b76e3b84a5b50a5bea8319f02429bce9", @ANYRES64, @ANYRESDEC, @ANYRES32=r4, @ANYBLOB, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=r8, @ANYBLOB="1af846a1ffd0859abb3396589e91c45168050462805bf79717ba0f5a1c7098a5fc3890c8f17abb2c8b1217bc0050bc57c1fbebe38217c4b46e498660f33ca7d6602707b904be744bb9962310c35d34b7f0b277837e080ac3948e91842e5c4a25e8a5dff3a7d5b8d8e2adeb118c80c6a7b549684b2c2e9f9d23f4c9896e6ffbf1b3d52c0eb2dd4d5c05e33eae9569cde059b7e548d609c59c90377bb1f2de7ef449f6dbb46033e0baa42b79c71f49622ae2c87b6e4e0651b85c85a1fabb76023247195a298e89aab1f5de20ae38"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYRES64=r5, @ANYRES32=r10, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529cb7671b50928f928cbfe3a97db859810c1a96f7e09642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707c", @ANYRESDEC=r7], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000040)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004003}, 0x4000010) 14:19:44 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r3, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7fffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df97ab5ecf16b9b76e3b84a5b50a5bea8319f02429bce9", @ANYRES64, @ANYRESDEC, @ANYRES32=r4, @ANYBLOB, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=r8, @ANYBLOB="1af846a1ffd0859abb3396589e91c45168050462805bf79717ba0f5a1c7098a5fc3890c8f17abb2c8b1217bc0050bc57c1fbebe38217c4b46e498660f33ca7d6602707b904be744bb9962310c35d34b7f0b277837e080ac3948e91842e5c4a25e8a5dff3a7d5b8d8e2adeb118c80c6a7b549684b2c2e9f9d23f4c9896e6ffbf1b3d52c0eb2dd4d5c05e33eae9569cde059b7e548d609c59c90377bb1f2de7ef449f6dbb46033e0baa42b79c71f49622ae2c87b6e4e0651b85c85a1fabb76023247195a298e89aab1f5de20ae38"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYRES64=r5, @ANYRES32=r10, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529cb7671b50928f928cbfe3a97db859810c1a96f7e09642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707c", @ANYRESDEC=r7], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000040)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004003}, 0x4000010) 14:19:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) 14:19:44 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000080000000000000002000", @ANYRES32=r4, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r4], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, r4}}, 0x20}, 0x1, 0x20000000}, 0x0) socket(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, 0x0, 0x0) 14:19:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) [ 113.349579][ T5428] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:19:44 executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in=@local, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}}}, 0xb8}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@flushpolicy={0x10, 0x1d, 0x1}, 0x10}}, 0x0) [ 113.567047][ T5428] bond0: (slave bond_slave_1): Releasing backup interface 14:19:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}]}, 0x48}}, 0x0) 14:19:44 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}]}, 0x48}}, 0x0) 14:19:45 executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r3, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7fffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df97ab5ecf16b9b76e3b84a5b50a5bea8319f02429bce9", @ANYRES64, @ANYRESDEC, @ANYRES32=r4, @ANYBLOB, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=r8, @ANYBLOB="1af846a1ffd0859abb3396589e91c45168050462805bf79717ba0f5a1c7098a5fc3890c8f17abb2c8b1217bc0050bc57c1fbebe38217c4b46e498660f33ca7d6602707b904be744bb9962310c35d34b7f0b277837e080ac3948e91842e5c4a25e8a5dff3a7d5b8d8e2adeb118c80c6a7b549684b2c2e9f9d23f4c9896e6ffbf1b3d52c0eb2dd4d5c05e33eae9569cde059b7e548d609c59c90377bb1f2de7ef449f6dbb46033e0baa42b79c71f49622ae2c87b6e4e0651b85c85a1fabb76023247195a298e89aab1f5de20ae38"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYRES64=r5, @ANYRES32=r10, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529cb7671b50928f928cbfe3a97db859810c1a96f7e09642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707c", @ANYRESDEC=r7], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000040)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004003}, 0x4000010) 14:19:45 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000080000000000000002000", @ANYRES32=r4, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r4], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, r4}}, 0x20}, 0x1, 0x20000000}, 0x0) socket(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, 0x0, 0x0) 14:19:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}]}, 0x48}}, 0x0) 14:19:45 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r3, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7fffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df97ab5ecf16b9b76e3b84a5b50a5bea8319f02429bce9", @ANYRES64, @ANYRESDEC, @ANYRES32=r4, @ANYBLOB, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=r8, @ANYBLOB="1af846a1ffd0859abb3396589e91c45168050462805bf79717ba0f5a1c7098a5fc3890c8f17abb2c8b1217bc0050bc57c1fbebe38217c4b46e498660f33ca7d6602707b904be744bb9962310c35d34b7f0b277837e080ac3948e91842e5c4a25e8a5dff3a7d5b8d8e2adeb118c80c6a7b549684b2c2e9f9d23f4c9896e6ffbf1b3d52c0eb2dd4d5c05e33eae9569cde059b7e548d609c59c90377bb1f2de7ef449f6dbb46033e0baa42b79c71f49622ae2c87b6e4e0651b85c85a1fabb76023247195a298e89aab1f5de20ae38"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYRES64=r5, @ANYRES32=r10, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529cb7671b50928f928cbfe3a97db859810c1a96f7e09642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707c", @ANYRESDEC=r7], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000040)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004003}, 0x4000010) 14:19:45 executing program 5: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r3, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7fffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df97ab5ecf16b9b76e3b84a5b50a5bea8319f02429bce9", @ANYRES64, @ANYRESDEC, @ANYRES32=r4, @ANYBLOB, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=r8, @ANYBLOB="1af846a1ffd0859abb3396589e91c45168050462805bf79717ba0f5a1c7098a5fc3890c8f17abb2c8b1217bc0050bc57c1fbebe38217c4b46e498660f33ca7d6602707b904be744bb9962310c35d34b7f0b277837e080ac3948e91842e5c4a25e8a5dff3a7d5b8d8e2adeb118c80c6a7b549684b2c2e9f9d23f4c9896e6ffbf1b3d52c0eb2dd4d5c05e33eae9569cde059b7e548d609c59c90377bb1f2de7ef449f6dbb46033e0baa42b79c71f49622ae2c87b6e4e0651b85c85a1fabb76023247195a298e89aab1f5de20ae38"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYRES64=r5, @ANYRES32=r10, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529cb7671b50928f928cbfe3a97db859810c1a96f7e09642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707c", @ANYRESDEC=r7], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000040)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004003}, 0x4000010) 14:19:45 executing program 1: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r3, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7fffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df97ab5ecf16b9b76e3b84a5b50a5bea8319f02429bce9", @ANYRES64, @ANYRESDEC, @ANYRES32=r4, @ANYBLOB, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=r8, @ANYBLOB="1af846a1ffd0859abb3396589e91c45168050462805bf79717ba0f5a1c7098a5fc3890c8f17abb2c8b1217bc0050bc57c1fbebe38217c4b46e498660f33ca7d6602707b904be744bb9962310c35d34b7f0b277837e080ac3948e91842e5c4a25e8a5dff3a7d5b8d8e2adeb118c80c6a7b549684b2c2e9f9d23f4c9896e6ffbf1b3d52c0eb2dd4d5c05e33eae9569cde059b7e548d609c59c90377bb1f2de7ef449f6dbb46033e0baa42b79c71f49622ae2c87b6e4e0651b85c85a1fabb76023247195a298e89aab1f5de20ae38"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYRES64=r5, @ANYRES32=r10, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529cb7671b50928f928cbfe3a97db859810c1a96f7e09642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707c", @ANYRESDEC=r7], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000040)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004003}, 0x4000010) [ 114.561610][ T5458] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:19:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_ID={0x8, 0x1, 0x1}]}}}]}, 0x48}}, 0x0) [ 114.712979][ T5458] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 114.969955][ T5458] batman_adv: batadv0: Removing interface: batadv_slave_0 14:19:45 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000080000000000000002000", @ANYRES32=r4, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r4], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, r4}}, 0x20}, 0x1, 0x20000000}, 0x0) socket(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, 0x0, 0x0) [ 115.155939][ T5489] netlink: 'syz-executor.2': attribute type 1 has an invalid length. 14:19:46 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000080000000000000002000", @ANYRES32=r4, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r4], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, r4}}, 0x20}, 0x1, 0x20000000}, 0x0) socket(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, 0x0, 0x0) 14:19:46 executing program 0: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r2, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000440)={0x14, r3, 0x1, 0x0, 0x0, {0x3}}, 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r4, 0x0, 0x0) write$binfmt_script(r4, &(0x7f0000000300)=ANY=[], 0x7b9c0b) ioctl$BTRFS_IOC_START_SYNC(r4, 0x80089418, &(0x7f0000000540)=0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8b1a, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)={0x24, r9, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$NL80211_CMD_LEAVE_MESH(r6, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x7fffffff}, 0xc, &(0x7f0000000100)={&(0x7f0000000f40)=ANY=[@ANYBLOB="1227055da84a93d3f7509547f8ac7fa5516a47015a5e2af3d13553b23b4a9f91a7a0eacbc9a8007155e84fb6d5a962404e9eb7f633bc53b0f4e093a897d1b924109bc61fa2f0226d8d2a73b3f905bf8927460a9bdd0719959a8e93fe63453ae53205a7644bf4e7e665ca8cd1cfcf4e544fd7f3f5e493fa6b88a3c06ef140d671d0749a5bc17042ce5e5a6c901f25d4501c0c6196362c39746508df97ab5ecf16b9b76e3b84a5b50a5bea8319f02429bce9", @ANYRES64, @ANYRESDEC, @ANYRES32=r4, @ANYBLOB, @ANYRESHEX, @ANYRESDEC, @ANYRESDEC=r8, @ANYBLOB="1af846a1ffd0859abb3396589e91c45168050462805bf79717ba0f5a1c7098a5fc3890c8f17abb2c8b1217bc0050bc57c1fbebe38217c4b46e498660f33ca7d6602707b904be744bb9962310c35d34b7f0b277837e080ac3948e91842e5c4a25e8a5dff3a7d5b8d8e2adeb118c80c6a7b549684b2c2e9f9d23f4c9896e6ffbf1b3d52c0eb2dd4d5c05e33eae9569cde059b7e548d609c59c90377bb1f2de7ef449f6dbb46033e0baa42b79c71f49622ae2c87b6e4e0651b85c85a1fabb76023247195a298e89aab1f5de20ae38"], 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x1) sendmsg$NL80211_CMD_GET_SURVEY(r4, &(0x7f0000000440)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x1e5a70fae9757eaa}, 0xc, &(0x7f0000000200)={&(0x7f0000000e00)=ANY=[@ANYRES64=r5, @ANYRES32=r10, @ANYBLOB="68537bc399289cd977a03091fbb0dd5529cb7671b50928f928cbfe3a97db859810c1a96f7e09642aa6a8d40e8ff9eebd0ec96d1861347d1f28cd59dcc80321064918f42fab7488ffcdf6a36a3d2dc729cf5cc52aa1e2678ebc21372b85b10764a5c84c51db246c60a0c8b20ba676d35b0e0a5c3b749914d4aabd5b59bcf28882f251a5b36d0cc97e39d70f69fb6348129d8b59d14d4eefd0b9560fa269bb4808dad38d54533532d5f72e53ed1dd7a54ff453a0b5367511ba7f65044ee0707c", @ANYRESDEC=r7], 0x1c}, 0x1, 0x0, 0x0, 0x2000c0d0}, 0x8040) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname(0xffffffffffffffff, &(0x7f0000000280)=@xdp={0x2c, 0x0, 0x0}, &(0x7f0000000040)=0x80) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newlink={0x34, 0x10, 0x581, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=@bridge_newvlan={0x24, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r11}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x0, 0x1}}}]}, 0x24}, 0x1, 0x5502000000000000}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000900)={'batadv_slave_0\x00'}) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r2, &(0x7f0000000180)={&(0x7f0000000080), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x70, r1, 0x1, 0x70bd25, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x77}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x57}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x22}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x2e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x51}]}, 0x70}, 0x1, 0x0, 0x0, 0x4004003}, 0x4000010) 14:19:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x3, 0x201}, 0x14}}, 0x0) [ 115.649923][ T5497] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:19:46 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e26e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00100000", @ANYRES16=r5, @ANYBLOB="010700000000000000002000000008000300", @ANYRES32=r4], 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:19:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x3, 0x201}, 0x14}}, 0x0) 14:19:46 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xe, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 14:19:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x3, 0x201}, 0x14}}, 0x0) 14:19:46 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000080000000000000002000", @ANYRES32=r4, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r4], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, r4}}, 0x20}, 0x1, 0x20000000}, 0x0) socket(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, 0x0, 0x0) [ 115.938652][ T5500] hsr_slave_0 (unregistering): left promiscuous mode 14:19:46 executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x2, 0x3, 0x101, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_VERDICT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x14, 0x3, 0x3, 0x201}, 0x14}}, 0x0) [ 116.100211][ T5520] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 116.136572][ T27] audit: type=1804 audit(1692195587.055:2): pid=5516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1832715955/syzkaller.Ap8RrR/23/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 116.172221][ T5516] netlink: 4068 bytes leftover after parsing attributes in process `syz-executor.5'. 14:19:47 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e297) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001300f5a1a3621a7c678e0000ffff01ff00130000001fff004000000000000000000000000000ffffffff00"/56, @ANYRES32=0x0, @ANYBLOB="0000004900000000c72569ba29f64a9b080003000601"], 0x54}}, 0x0) sendfile(r2, r1, 0x0, 0x21fd1ee9) 14:19:47 executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000080000000000000002000", @ANYRES32=r4, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r4], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, r4}}, 0x20}, 0x1, 0x20000000}, 0x0) socket(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, 0x0, 0x0) 14:19:47 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xe, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) [ 116.478233][ T27] audit: type=1804 audit(1692195587.395:3): pid=5534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2142826382/syzkaller.yEl3ue/23/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 116.522813][ T5533] netlink: 'syz-executor.3': attribute type 1 has an invalid length. 14:19:47 executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c00000010008506000080000000000000002000", @ANYRES32=r4, @ANYBLOB="5977f29225186fb21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB="4000000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00", @ANYRES32=r4], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x60, 0x0, 0x0, r4}}, 0x20}, 0x1, 0x20000000}, 0x0) socket(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x0, 0x0, 0x0) sendmsg$BATADV_CMD_GET_MESH(r5, 0x0, 0x0) 14:19:47 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xe, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 14:19:47 executing program 5: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e26e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00100000", @ANYRES16=r5, @ANYBLOB="010700000000000000002000000008000300", @ANYRES32=r4], 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:19:47 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e26e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00100000", @ANYRES16=r5, @ANYBLOB="010700000000000000002000000008000300", @ANYRES32=r4], 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) 14:19:47 executing program 4: bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@ldst={0x6, 0x0, 0x2}]}, &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xe, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) [ 117.174550][ T27] audit: type=1804 audit(1692195588.095:4): pid=5555 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.5" name="/root/syzkaller-testdir1832715955/syzkaller.Ap8RrR/24/cgroup.controllers" dev="sda1" ino=1969 res=1 errno=0 14:19:48 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e297) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001300f5a1a3621a7c678e0000ffff01ff00130000001fff004000000000000000000000000000ffffffff00"/56, @ANYRES32=0x0, @ANYBLOB="0000004900000000c72569ba29f64a9b080003000601"], 0x54}}, 0x0) sendfile(r2, r1, 0x0, 0x21fd1ee9) [ 117.220588][ T5555] netlink: 4068 bytes leftover after parsing attributes in process `syz-executor.5'. 14:19:48 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e297) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001300f5a1a3621a7c678e0000ffff01ff00130000001fff004000000000000000000000000000ffffffff00"/56, @ANYRES32=0x0, @ANYBLOB="0000004900000000c72569ba29f64a9b080003000601"], 0x54}}, 0x0) sendfile(r2, r1, 0x0, 0x21fd1ee9) [ 117.372584][ T5533] ------------[ cut here ]------------ [ 117.378157][ T5533] WARNING: CPU: 0 PID: 5533 at net/core/dev.c:10961 unregister_netdevice_many_notify+0x1554/0x1a20 [ 117.389864][ T5533] Modules linked in: [ 117.393782][ T5533] CPU: 0 PID: 5533 Comm: syz-executor.3 Not tainted 6.5.0-rc5-syzkaller-01605-g950fe35831af #0 [ 117.404225][ T5533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 117.414399][ T5533] RIP: 0010:unregister_netdevice_many_notify+0x1554/0x1a20 [ 117.421701][ T5533] Code: f4 1a 00 00 48 c7 c6 60 69 81 8b 48 c7 c7 a0 69 81 8b c6 05 30 af 6a 06 01 e8 f8 13 21 f9 0f 0b e9 1c f7 ff ff e8 ac 51 5a f9 <0f> 0b e9 f3 f6 ff ff e8 80 36 af f9 e9 80 ec ff ff 4c 89 e7 e8 d3 [ 117.441585][ T5533] RSP: 0018:ffffc90006a3f158 EFLAGS: 00010246 [ 117.447687][ T5533] RAX: 0000000000040000 RBX: 0000000021e5d501 RCX: ffffc9000b1c1000 [ 117.455893][ T5533] RDX: 0000000000040000 RSI: ffffffff882bcee4 RDI: 0000000000000001 [ 117.463978][ T5533] RBP: ffff888049600000 R08: 0000000000000001 R09: 0000000000000000 [ 117.472466][ T5533] R10: 0000000000000001 R11: 0000000000094000 R12: ffff888146e46180 [ 117.480666][ T5533] R13: 0000000000000000 R14: 0000000000000002 R15: ffff888146e46180 [ 117.488699][ T5533] FS: 00007efef012b6c0(0000) GS:ffff8880b9800000(0000) knlGS:0000000000000000 [ 117.497816][ T5533] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 117.504539][ T5533] CR2: 00007f7e9397a1f8 CR3: 0000000029ac2000 CR4: 00000000003506f0 [ 117.512712][ T5533] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 117.521007][ T5533] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 117.529371][ T5533] Call Trace: [ 117.532676][ T5533] [ 117.535714][ T5533] ? __warn+0xe6/0x380 [ 117.540085][ T5533] ? unregister_netdevice_many_notify+0x1554/0x1a20 [ 117.546734][ T5533] ? report_bug+0x3bc/0x580 [ 117.551442][ T5533] ? handle_bug+0x3c/0x70 [ 117.555827][ T5533] ? exc_invalid_op+0x17/0x40 [ 117.560754][ T5533] ? asm_exc_invalid_op+0x1a/0x20 [ 117.565839][ T5533] ? unregister_netdevice_many_notify+0x1554/0x1a20 [ 117.572545][ T5533] ? unregister_netdevice_many_notify+0x1554/0x1a20 [ 117.579695][ T5533] ? unregister_netdevice_many_notify+0x1554/0x1a20 [ 117.586442][ T5533] ? unregister_netdevice_queue+0x21a/0x3c0 [ 117.592551][ T5533] ? netdev_freemem+0x60/0x60 [ 117.597291][ T5533] ? veth_fix_features+0x190/0x190 [ 117.602521][ T5533] rtnl_dellink+0x3c1/0xae0 [ 117.607076][ T5533] ? rtnl_dellinkprop+0x50/0x50 [ 117.612143][ T5533] ? __mutex_lock+0x25b/0x1340 [ 117.616942][ T5533] ? slab_free_freelist_hook+0x10b/0x1e0 [ 117.622694][ T5533] ? rtnetlink_rcv_msg+0x3e2/0xd30 [ 117.627857][ T5533] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 117.633556][ T5533] ? rtnetlink_rcv_msg+0x3b2/0xd30 [ 117.638733][ T5533] ? rtnl_dellinkprop+0x50/0x50 [ 117.643799][ T5533] rtnetlink_rcv_msg+0x439/0xd30 [ 117.648785][ T5533] ? rtnl_getlink+0xb40/0xb40 [ 117.653603][ T5533] netlink_rcv_skb+0x16b/0x440 [ 117.654397][ T27] audit: type=1804 audit(1692195588.505:5): pid=5564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1381652182/syzkaller.zoCNKF/24/cgroup.controllers" dev="sda1" ino=1950 res=1 errno=0 [ 117.658378][ T5533] ? rtnl_getlink+0xb40/0xb40 [ 117.689848][ T5533] ? netlink_ack+0x1370/0x1370 [ 117.694753][ T5533] ? netlink_deliver_tap+0x1b1/0xd10 [ 117.700156][ T5533] netlink_unicast+0x536/0x810 [ 117.704969][ T5533] ? netlink_attachskb+0x870/0x870 [ 117.710198][ T5533] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 117.716138][ T5533] ? __phys_addr_symbol+0x30/0x70 [ 117.721364][ T5533] ? __check_object_size+0x323/0x740 [ 117.726695][ T5533] netlink_sendmsg+0x93c/0xe40 [ 117.731569][ T5533] ? netlink_unicast+0x810/0x810 [ 117.736548][ T5533] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 117.738136][ T27] audit: type=1804 audit(1692195588.655:6): pid=5562 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2142826382/syzkaller.yEl3ue/24/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 117.741887][ T5533] ? netlink_unicast+0x810/0x810 [ 117.741921][ T5533] sock_sendmsg+0xd9/0x180 [ 117.741957][ T5533] ____sys_sendmsg+0x6ac/0x940 [ 117.741989][ T5533] ? copy_msghdr_from_user+0x10b/0x160 [ 117.742015][ T5533] ? kernel_sendmsg+0x50/0x50 [ 117.742049][ T5533] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 117.742089][ T5533] ___sys_sendmsg+0x135/0x1d0 [ 117.742117][ T5533] ? do_recvmmsg+0x740/0x740 [ 117.815075][ T5533] ? __fget_light+0xe6/0x260 [ 117.819817][ T5533] __sys_sendmsg+0x117/0x1e0 [ 117.824445][ T5533] ? __sys_sendmsg_sock+0x30/0x30 [ 117.829684][ T5533] ? xfd_validate_state+0x5d/0x180 [ 117.835038][ T5533] ? syscall_enter_from_user_mode+0x26/0x80 [ 117.841074][ T5533] do_syscall_64+0x38/0xb0 [ 117.845540][ T5533] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 117.851550][ T5533] RIP: 0033:0x7efeef47cae9 [ 117.855994][ T5533] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 14:19:48 executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000480)=ANY=[], 0x208e26e) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$igmp(0x2, 0x3, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000240)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)=ANY=[@ANYBLOB="00100000", @ANYRES16=r5, @ANYBLOB="010700000000000000002000000008000300", @ANYRES32=r4], 0x1c}}, 0x0) sendfile(r2, r1, 0x0, 0x100000002) [ 117.875766][ T5533] RSP: 002b:00007efef012b0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 117.884648][ T5533] RAX: ffffffffffffffda RBX: 00007efeef59bf80 RCX: 00007efeef47cae9 [ 117.892792][ T5533] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 117.900861][ T5533] RBP: 00007efeef4c847a R08: 0000000000000000 R09: 0000000000000000 [ 117.908886][ T5533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 117.917012][ T5533] R13: 000000000000000b R14: 00007efeef59bf80 R15: 00007ffcf902a788 [ 117.925709][ T5533] [ 117.928756][ T5533] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 117.938774][ T5533] CPU: 0 PID: 5533 Comm: syz-executor.3 Not tainted 6.5.0-rc5-syzkaller-01605-g950fe35831af #0 [ 117.949135][ T5533] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/26/2023 [ 117.959219][ T5533] Call Trace: [ 117.962522][ T5533] [ 117.965484][ T5533] dump_stack_lvl+0xd9/0x1b0 [ 117.970124][ T5533] panic+0x6a4/0x750 [ 117.974067][ T5533] ? panic_smp_self_stop+0xa0/0xa0 [ 117.979221][ T5533] ? show_trace_log_lvl+0x29d/0x3c0 [ 117.984486][ T5533] ? unregister_netdevice_many_notify+0x1554/0x1a20 [ 117.991141][ T5533] check_panic_on_warn+0xab/0xb0 [ 117.996129][ T5533] __warn+0xf2/0x380 [ 118.000065][ T5533] ? unregister_netdevice_many_notify+0x1554/0x1a20 [ 118.006707][ T5533] report_bug+0x3bc/0x580 [ 118.011102][ T5533] handle_bug+0x3c/0x70 [ 118.015346][ T5533] exc_invalid_op+0x17/0x40 [ 118.019900][ T5533] asm_exc_invalid_op+0x1a/0x20 [ 118.024800][ T5533] RIP: 0010:unregister_netdevice_many_notify+0x1554/0x1a20 [ 118.032399][ T5533] Code: f4 1a 00 00 48 c7 c6 60 69 81 8b 48 c7 c7 a0 69 81 8b c6 05 30 af 6a 06 01 e8 f8 13 21 f9 0f 0b e9 1c f7 ff ff e8 ac 51 5a f9 <0f> 0b e9 f3 f6 ff ff e8 80 36 af f9 e9 80 ec ff ff 4c 89 e7 e8 d3 [ 118.052097][ T5533] RSP: 0018:ffffc90006a3f158 EFLAGS: 00010246 [ 118.058195][ T5533] RAX: 0000000000040000 RBX: 0000000021e5d501 RCX: ffffc9000b1c1000 [ 118.066198][ T5533] RDX: 0000000000040000 RSI: ffffffff882bcee4 RDI: 0000000000000001 [ 118.074199][ T5533] RBP: ffff888049600000 R08: 0000000000000001 R09: 0000000000000000 [ 118.082201][ T5533] R10: 0000000000000001 R11: 0000000000094000 R12: ffff888146e46180 [ 118.090201][ T5533] R13: 0000000000000000 R14: 0000000000000002 R15: ffff888146e46180 [ 118.098214][ T5533] ? unregister_netdevice_many_notify+0x1554/0x1a20 [ 118.104864][ T5533] ? unregister_netdevice_many_notify+0x1554/0x1a20 [ 118.111540][ T5533] ? unregister_netdevice_queue+0x21a/0x3c0 [ 118.117488][ T5533] ? netdev_freemem+0x60/0x60 [ 118.122220][ T5533] ? veth_fix_features+0x190/0x190 [ 118.127383][ T5533] rtnl_dellink+0x3c1/0xae0 [ 118.131955][ T5533] ? rtnl_dellinkprop+0x50/0x50 [ 118.136921][ T5533] ? __mutex_lock+0x25b/0x1340 [ 118.141815][ T5533] ? slab_free_freelist_hook+0x10b/0x1e0 [ 118.147504][ T5533] ? rtnetlink_rcv_msg+0x3e2/0xd30 [ 118.152691][ T5533] ? mutex_lock_io_nested+0x11a0/0x11a0 [ 118.158284][ T5533] ? rtnetlink_rcv_msg+0x3b2/0xd30 [ 118.163453][ T5533] ? rtnl_dellinkprop+0x50/0x50 [ 118.164159][ T27] audit: type=1804 audit(1692195589.085:7): pid=5571 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2235842973/syzkaller.OYMa0x/27/cgroup.controllers" dev="sda1" ino=1974 res=1 errno=0 [ 118.194393][ T5533] rtnetlink_rcv_msg+0x439/0xd30 [ 118.198540][ T5571] netlink: 4068 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.208930][ T5533] ? rtnl_getlink+0xb40/0xb40 [ 118.213759][ T5533] netlink_rcv_skb+0x16b/0x440 [ 118.218564][ T5533] ? rtnl_getlink+0xb40/0xb40 [ 118.223397][ T5533] ? netlink_ack+0x1370/0x1370 [ 118.228221][ T5533] ? netlink_deliver_tap+0x1b1/0xd10 [ 118.233555][ T5533] netlink_unicast+0x536/0x810 [ 118.238378][ T5533] ? netlink_attachskb+0x870/0x870 [ 118.243531][ T5533] ? __sanitizer_cov_trace_switch+0x54/0x90 [ 118.249483][ T5533] ? __phys_addr_symbol+0x30/0x70 [ 118.254609][ T5533] ? __check_object_size+0x323/0x740 [ 118.260027][ T5533] netlink_sendmsg+0x93c/0xe40 [ 118.264838][ T5533] ? netlink_unicast+0x810/0x810 [ 118.269825][ T5533] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 118.275154][ T5533] ? netlink_unicast+0x810/0x810 [ 118.280132][ T5533] sock_sendmsg+0xd9/0x180 [ 118.284597][ T5533] ____sys_sendmsg+0x6ac/0x940 [ 118.289412][ T5533] ? copy_msghdr_from_user+0x10b/0x160 [ 118.294907][ T5533] ? kernel_sendmsg+0x50/0x50 [ 118.299736][ T5533] ? lockdep_hardirqs_on_prepare+0x410/0x410 [ 118.305783][ T5533] ___sys_sendmsg+0x135/0x1d0 [ 118.310518][ T5533] ? do_recvmmsg+0x740/0x740 [ 118.315195][ T5533] ? __fget_light+0xe6/0x260 [ 118.319842][ T5533] __sys_sendmsg+0x117/0x1e0 [ 118.324470][ T5533] ? __sys_sendmsg_sock+0x30/0x30 14:19:49 executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e297) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001300f5a1a3621a7c678e0000ffff01ff00130000001fff004000000000000000000000000000ffffffff00"/56, @ANYRES32=0x0, @ANYBLOB="0000004900000000c72569ba29f64a9b080003000601"], 0x54}}, 0x0) sendfile(r2, r1, 0x0, 0x21fd1ee9) 14:19:49 executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000180)=ANY=[], 0x208e297) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r2 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$DCCPDIAG_GETSOCK(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001300f5a1a3621a7c678e0000ffff01ff00130000001fff004000000000000000000000000000ffffffff00"/56, @ANYRES32=0x0, @ANYBLOB="0000004900000000c72569ba29f64a9b080003000601"], 0x54}}, 0x0) sendfile(r2, r1, 0x0, 0x21fd1ee9) [ 118.329529][ T5533] ? xfd_validate_state+0x5d/0x180 [ 118.334711][ T5533] ? syscall_enter_from_user_mode+0x26/0x80 [ 118.340651][ T5533] do_syscall_64+0x38/0xb0 [ 118.345118][ T5533] entry_SYSCALL_64_after_hwframe+0x63/0xcd [ 118.351080][ T5533] RIP: 0033:0x7efeef47cae9 [ 118.355525][ T5533] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 118.375166][ T5533] RSP: 002b:00007efef012b0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 118.383610][ T5533] RAX: ffffffffffffffda RBX: 00007efeef59bf80 RCX: 00007efeef47cae9 [ 118.391609][ T5533] RDX: 0000000000000000 RSI: 0000000020000180 RDI: 0000000000000003 [ 118.399607][ T5533] RBP: 00007efeef4c847a R08: 0000000000000000 R09: 0000000000000000 [ 118.407609][ T5533] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 118.415611][ T5533] R13: 000000000000000b R14: 00007efeef59bf80 R15: 00007ffcf902a788 [ 118.423634][ T5533] [ 118.426888][ T5533] Kernel Offset: disabled [ 118.431221][ T5533] Rebooting in 86400 seconds..