last executing test programs: 22m34.349135719s ago: executing program 2 (id=3163): r0 = socket$unix(0x1, 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r2 = socket(0x400000000010, 0x3, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x2}}}]}, 0x38}}, 0x0) (async) r4 = socket(0x400000000010, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000840)=@newtfilter={0x60, 0x2c, 0xf3f, 0x70fc2c, 0x25dfdbbd, {0x0, 0x0, 0x0, r5, {0xc, 0xc}, {}, {0x7, 0x300}}, [@filter_kind_options=@f_basic={{0xa}, {0x30, 0x2, [@TCA_BASIC_EMATCHES={0x2c, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x2}}, @TCA_EMATCH_TREE_LIST={0x20, 0x2, 0x0, 0x1, [@TCF_EM_META={0x1c, 0x1, 0x0, 0x0, {{0x3, 0x4, 0x1}, [@TCA_EM_META_HDR={0xc, 0x1, {{0x0, 0x86, 0x1}, {0x5, 0x7}}}, @TCA_EM_META_RVALUE={0x4}]}}]}]}]}}]}, 0x60}, 0x1, 0x0, 0x0, 0x20041090}, 0x4880) (async) ioctl$XFS_IOC_FD_TO_HANDLE(0xffffffffffffffff, 0xc038586a, &(0x7f0000000140)={0xffffffffffffffff, &(0x7f0000000340)='6\v4;\x14e\xd1\xf7\xc2a\xcco$\xc3\x92\xa6\x0e\xaau\xb3b\xc1\xd9\x15\x89!\xba\xcaD\x15\x03\x8e|\xc0\xc1F#\xa6n\xbc-v\xbe*\x17\xdd\xd5)*kYGn\xa8\x8c\xae\x0f\x01\\#\xea#\xc3[\n', 0x111000, &(0x7f0000000080)={@_ha_fsid={[0xe9d6, 0x4]}, {0x8001, 0x8000, 0x4, 0x81}}, 0x7fff, &(0x7f00000000c0), &(0x7f0000000100)=0x6}) (async) r7 = socket$rxrpc(0x21, 0x2, 0xa) ioctl$sock_SIOCDELRT(r7, 0x890c, &(0x7f00000003c0)={0x0, @l2={0x1f, 0x10, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x1, 0x1}, @hci={0x1f, 0x1}, @hci={0x1f, 0x4, 0x1}, 0x81, 0x0, 0x0, 0x0, 0x800, &(0x7f0000000200)='macvlan0\x00', 0xffffffffffffff00, 0x6, 0x7}) ioctl$IOCTL_GET_NCIDEV_IDX(r6, 0x0, &(0x7f0000000180)) (async, rerun: 32) r8 = socket$kcm(0x10, 0x2, 0x4) (rerun: 32) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000280)="89000000120081ae08060cdc030000017f03e3f7000000006ee2ffca1b1f00ff0f00000000000050375ed08a56331dbf9ed78105001ad6e747033a0093b837dc6cc01e32efaec8c7a6ec00120c00030004080c00bdad01409bbc7a46e39a54cbbda812176679df069163ce955fed0009d78f0a947ee2b49e33538afaeb2713f450ebd010a20ff27fff", 0x89}], 0x1, 0x0, 0x0, 0x7}, 0x44040) 22m32.835105575s ago: executing program 2 (id=3170): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x405, 0xfffffffc, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, 0x45502, 0x4}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPVLAN_FLAGS={0x6, 0x2, 0x2}, @IFLA_IPVLAN_MODE={0x6, 0x1, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x54}, 0x1, 0x0, 0x0, 0x4001}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFDSTADDR(r4, 0x8918, &(0x7f0000000040)={'batadv_slave_0\x00', {0x2, 0x4e24, @local}}) sendmsg$IPSET_CMD_SWAP(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="7500000006000000000000000005000007000000"], 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x40) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a80000000060a0b0400000000000000000200fffe540004802800018007000100637400001c0002800800014000000002080002400000001305000300010000002800018007000100637400001c0002800800024000000011080004400000000c05000300010000000900010073797a30000000000900020073797a320000000014000000110001"], 0xa8}, 0x1, 0x0, 0x0, 0x840}, 0x2000c0c2) r5 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r5, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x0, 0x2, 0x65, 0x1, 0xbf0, 0x6, 0x6}, 0x1c) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000140)=ANY=[@ANYBLOB="1400000010f5010000000000000000000300000a50000000060a010400000000000000000a0000110900010073797a3133760882477fee6520000180070001006374000014000280080002400000001108000440000000000900020073797a3200000000140000001100010000000000000000000200000a"], 0x78}, 0x1, 0x0, 0x0, 0x4008091}, 0x0) 22m28.368944282s ago: executing program 0 (id=3186): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r0) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0x2b}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000d40)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000005fdb2971dfa2bff372df8cdbeb318ab2bec8fc36903c0ec359ca9daf3c914019395cc154010c693709800000000000000016a85adef34bf78c76e6222337923e1bea6ef682cc4375f594425d408ccc58187feb0e3d43347f989007a7c63f6dae682acb4af936461f34a8a32a50bbbb69ec85168947b86df9f2609bf93f7a1be259621818c3c75da30000bce645451b851111dd98ac4d8da9317c2c082020e0b2d6340809000000000000008e053645cc413790faf7e229c782845b5bb774f7f154263178151ea93ff2cac4b181332c9c9a1c7d85616c8100000000000000d8300d19d585000000fc005774b56a7142047326f940e95b8489e1c5650f5c61299a295f39c88456521cffdef93e29f10f4a11f0cfbfc0ff976b20fe"], &(0x7f0000000080)='GPL\x00', 0x0, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @fallback, r1, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0xf5010000}, 0x6d) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x48) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32, @ANYBLOB='\x00'/14], 0x22) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r4, &(0x7f0000000100)=ANY=[], 0x32600) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000000)={0x4000004}, 0x10) write(r7, &(0x7f0000000080)="240000001a007f0214f9f4070009040802000000000000050002000008000f40fe00000e", 0x24) sendmsg$netlink(r6, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000440)=ANY=[@ANYBLOB="140100001400210200000000fcdbdf25030100800c0002"], 0x114}], 0x1}, 0x0) sendto$inet6(r5, &(0x7f0000000180)="e7", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000340)={0x0, 0x2c, &(0x7f0000000240)=[@in={0x2, 0x4e24, @remote}, @in6={0xa, 0x4e24, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}}]}, &(0x7f0000000380)=0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r8 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r8, 0x1, r3, &(0x7f0000000300)={0x2}) epoll_ctl$EPOLL_CTL_MOD(r8, 0x3, r3, &(0x7f0000000100)={0x2}) r9 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r9, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) bind$inet6(r9, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2c}}}, 0x1c) 22m27.739010978s ago: executing program 4 (id=3190): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x44, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @range={{0xa}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x6c}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000002140)={'wg0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f00000000c0)={'syztnl0\x00', &(0x7f0000000000)={'syztnl0\x00', r2, 0x8, 0x8000, 0x8001, 0x7f, {{0x7, 0x4, 0x2, 0x5, 0x1c, 0x66, 0x0, 0x10, 0x4, 0x0, @private=0xa010100, @multicast1, {[@generic={0x83, 0x7, "7aceeb9342"}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@ipv6_newaddrlabel={0x7c, 0x48, 0x20, 0x70bd2a, 0xffff9c02, {0xa, 0x0, 0x0, 0x0, r3, 0xfffffff0}, [@IFAL_ADDRESS={0x14, 0x1, @remote}, @IFAL_LABEL={0x8, 0x2, 0x5}, @IFAL_LABEL={0x8, 0x2, 0x6}, @IFAL_ADDRESS={0x14, 0x1, @mcast2}, @IFAL_ADDRESS={0x14, 0x1, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}, @IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x7c}, 0x1, 0x0, 0x0, 0x4008081}, 0x20040084) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x7, 0x4, &(0x7f00000004c0)=ANY=[@ANYBLOB="180000000000010000000000000000007110b500000000009500000000000000a282cb8ecd0d254d03d44df656abed5011c51ed827438a464f0b0000ea8d4765d847ed7b45e44c2cf1d547595d12d986d5ad7f6f3399a109b3b8e3b287f14844d9231b179588f77bff8932de820630bb62e5f3d2293b3c1745ff4ef48ca55b608a4b303a0ea7e467acf15d3aa394b4d0a007ad46963de72c59651f5e4a34b44f95c9beacd193eac4640ecff86c3267b405d516b4293d20df01c27d9c081a8f04b101e57029ded08052df2ad551884d14b15a99cce8e2fa81f83a"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) (async) listen(r0, 0xf) 22m27.629901626s ago: executing program 3 (id=3191): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = socket$inet6(0xa, 0x1, 0x0) (async) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x73, &(0x7f0000000040)={r3, 0xe869, 0x30, 0x7fff, 0x1}, &(0x7f00000000c0)=0x18) (async) r4 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) (async) r5 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000), &(0x7f0000000100)=0x4) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001b80)={0x18, 0xe, &(0x7f0000001c40)=ANY=[@ANYBLOB="1808000000000001000001000000000000800000", @ANYRES32=r4, @ANYBLOB="000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000009500000000000000"], &(0x7f0000001dc0)='syzkaller\x00'}, 0x90) 22m27.349355341s ago: executing program 4 (id=3192): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000003c0)={0x6, 0x9, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x7, 0x0, 0x0, 0x41100, 0x0, '\x00', r1, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x805}, 0x94) 22m27.051645044s ago: executing program 4 (id=3193): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0x0, 0x80, &(0x7f0000000340)=@nat={'nat\x00', 0x19, 0x5, 0x90, [0x200000004bc0, 0x0, 0x0, 0x200000004dbe, 0x200000005172], 0x0, 0x0, &(0x7f0000004bc0)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x1, 0xffffffffffffffff}, {0x0, '\x00', 0x3, 0xfffffffffffffffe}]}, 0x108) setsockopt$MRT_TABLE(r0, 0x0, 0xcf, &(0x7f0000000000)=0xfe, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206050000000000000000000000000005000400000000000900020073797a32000005000500010007000000050005000a000000140007800800114000000000050015000500000011000300686173683a69702c6d610ff39219ee84"], 0x60}}, 0x840) 22m26.718369113s ago: executing program 0 (id=3194): bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000580)={&(0x7f0000000000)="1b576f71c1b78249291566d922bbed48485c730ce9489d1ea80927cc88e4ff382198732540f73ff5fdda4e5f30766c5103bd10de3c", &(0x7f0000000080)=""/134, &(0x7f0000000380)="630f9e39921c1c5ea96378150608eccc43bd157489f188ac7dc001ca93ab390d8f46df754aa4cf9b2eb491d38ac9ee1ca7a24bd0a1d3e23d023617fa9d715f50d580c5cc3aab34d8e9a2ae917fade4f004bea603a1fc28e80659fa60dc5d78a5f8c08a79200bfbf97ae5628da0371b2f362428572fa35771dea89bd1ab0459b2f47f3563ae18b2454374d0f89ed205d2a2b3d56f24d7a91d406096564ece06d34efee1dbd4b7ba21590af85f6fed7abff21298c10619156b5deedd319c61dfe2f526c0ddb0f2519a6620a54b09c5c9e8a80f87f775cbefaea329a1b7a1371e57542b9a3a34f23ff3a4f07377312600ef75a5", &(0x7f0000000480)="c8054073f24421c7d86d396895aa0906bf8b5fff84a5a8a2f9cdfb5fc4a85198a7ca015c0b663bcfa7a1d895997af0eef3f2ab6c1a29c9c5a53b7a207070bf3e7e65f166247e0c4ed514dbd9df0979efeeaa17e8ed704cd06d7d273a7021301870374a5d34ee0c63600e93e96c6fe8b58c3c17e35bcd0c522d9ed097d81b03dd212ba758474476f6257651da569b282be03715fbe76e35ed52f1b3df75a11240feed3084efc1eca17b229259590793e0fde6bf732f4f2c6e61944430adb8e56a2276cf8e70cced4324243e78c2bff35304b090535657174358f7d1a3deff24cbe32a71a1537af8fa67a60e9030dd19", 0x101}, 0x38) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000740)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000700)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_DELSET={0xf4, 0xb, 0xa, 0x301, 0x0, 0x0, {0x0, 0x0, 0x9}, [@NFTA_SET_DESC={0xe0, 0x9, 0x0, 0x1, [@NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xffff021d}, @NFTA_SET_DESC_CONCAT={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}]}]}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x400}]}]}, @NFTA_SET_DESC_CONCAT={0x18, 0x2, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7a}, @NFTA_SET_FIELD_LEN={0x8}]}]}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_DESC_SIZE={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_SET_DESC_CONCAT={0x58, 0x2, 0x0, 0x1, [{0x4}, {0x44, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x2a44}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0xb87}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x7}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8}]}, {0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x6}]}]}, @NFTA_SET_DESC_CONCAT={0x2c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000}]}, {0x1c, 0x1, 0x0, 0x1, [@NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x8000000}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_SET_FIELD_LEN={0x8, 0x1, 0x1, 0x0, 0x9}]}]}]}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x11c}}, 0x880) sendmsg$NFT_BATCH(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @last={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r0, &(0x7f0000000880)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000840)={&(0x7f0000000780)={0xbc, 0x0, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x7}, [@CTA_HELP={0x10, 0x5, 0x0, 0x1, {0xa, 0x1, 'H.245\x00'}}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x1}, @CTA_TUPLE_ORIG={0x90, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x8, 0x2, @multicast2}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, {0x14, 0x4, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x42}}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x1) ioctl$NILFS_IOCTL_SET_ALLOC_RANGE(r0, 0x40106e8c, &(0x7f0000000180)=[0x5, 0x7]) 22m26.68605478s ago: executing program 4 (id=3196): bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000014007910480000000000690036000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0xa3}, 0x21) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x5, 0xf, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {0x85, 0x0, 0x0, 0x19}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000700)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), r1) sendmsg$DEVLINK_CMD_PORT_SPLIT(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0), 0xc, &(0x7f00000004c0)={&(0x7f0000000440)={0x44, r3, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0x9, 0x6}}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040004}, 0x20000001) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xe8, r2, 0x100, 0x70bd25, 0x25dfdbfb, {}, [@ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0x3}, @ETHTOOL_A_COALESCE_PKT_RATE_LOW={0x8, 0xd, 0x300}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5}, @ETHTOOL_A_COALESCE_RX_USECS_LOW={0x8, 0xe, 0x7}, @ETHTOOL_A_COALESCE_RX_MAX_FRAMES_LOW={0x8, 0xf, 0xfffffffc}, @ETHTOOL_A_COALESCE_HEADER={0x9c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'geneve0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x2}, @ETHTOOL_A_COALESCE_TX_USECS_LOW={0x8, 0x10, 0x9}]}, 0xe8}, 0x1, 0x0, 0x0, 0x40004}, 0x20000000) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f00000002c0)={'syztnl0\x00', &(0x7f0000000240)={'syztnl2\x00', 0x0, 0x29, 0x3, 0xe, 0x6, 0x2c, @remote, @mcast1, 0x8700, 0x7800, 0x3, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r4, 0x89f3, &(0x7f0000000380)={'syztnl0\x00', &(0x7f0000000300)={'syztnl2\x00', r5, 0x4, 0x14, 0x7, 0x80000001, 0x20, @ipv4={'\x00', '\xff\xff', @private=0xa010102}, @empty, 0x8000, 0x7, 0x8, 0x8f}}) 22m26.38855074s ago: executing program 3 (id=3197): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xb, 0x4) connect$inet6(r0, &(0x7f0000000300)={0xa, 0x4e24, 0x6bb, @ipv4={'\x00', '\xff\xff', @local}, 0x5}, 0x1c) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r1, 0x84, 0x74, &(0x7f00000000c0)={0x0, 0x0, 0x10, 0x6, 0xb1aa}, &(0x7f0000000040)=0x18) write(r0, 0x0, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0x1, 0x4) socket$inet(0x2, 0x2, 0x73) shutdown(0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000000906010200000000000000000200ffff200007800c00018008000140e000000208000a400000000205000300020000000900020073797a310000008005000100070000"], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 22m26.306064532s ago: executing program 0 (id=3198): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000280)="ca", &(0x7f0000000000)=""/3, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000240)={r0, &(0x7f0000000140), &(0x7f0000000000)=""/6, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000000c0)={r0, &(0x7f0000000100), &(0x7f0000000000), 0x2}, 0x20) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000100)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_ringparam={0x33, 0x10000, 0x2e, 0x100, 0x7, 0x3, 0x0, 0x0, 0x401}}) 22m25.17570615s ago: executing program 4 (id=3201): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r1, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x4e20, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r5 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f0000000000)={r6, @in={{0x2, 0x0, @empty}}, 0x27c0}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={r6, @in={{0x2, 0x4e21, @private=0xa010100}}, 0x4}, 0x90) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f0000000040)=@assoc_value={r6, 0x6}, 0x8) r7 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f00000003c0), r2) sendmsg$NLBL_CALIPSO_C_REMOVE(r2, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000000280)=ANY=[@ANYBLOB="f514000000", @ANYRESDEC=r7, @ANYBLOB="010023bd7000fcdbdf2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4014000}, 0x810) r8 = syz_init_net_socket$x25(0x9, 0x5, 0x0) r9 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r9, 0x10f, 0x87, &(0x7f0000000000)={0x41, 0x1, 0x2}, 0x10) r10 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r10, 0x10f, 0x87, &(0x7f0000000580)={0x41, 0x0, 0x1}, 0x10) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x30, r12, 0x300, 0x0, 0x25dfdbff, {{}, {}, {0x14, 0x19, {0x1, 0x1fe4, 0x0, 0x1}}}}, 0x30}}, 0x0) setsockopt$X25_QBITINCL(r8, 0x106, 0x1, &(0x7f0000001380)=0x1, 0x4) recvfrom$inet6(r3, &(0x7f0000000300)=""/104, 0x68, 0x10100, &(0x7f0000000380)={0xa, 0x4e22, 0x10001, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000000)={0x9, 0x4, 0x6, 0x5, 0x5, 0x3, 0x9, 0xee, 0x7, 0xf4, 0x64, 0x8, 0xfb, 0x10}, 0xe) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f00000001c0)={r4, 0x10, &(0x7f0000000080)=[@in={0x2, 0x4e22, @remote}]}, &(0x7f0000000180)=0x10) setsockopt$inet_sctp6_SCTP_RTOINFO(r1, 0x84, 0x0, &(0x7f00000002c0)={r13, 0x2, 0x4, 0x3}, 0x10) r14 = socket(0x0, 0xa, 0x0) ioctl$PPPOEIOCDFWD(r14, 0xb101, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[], 0x30}, 0x1, 0x0, 0x0, 0x48815}, 0xc000) 22m25.175297221s ago: executing program 3 (id=3202): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x29, 0x3, 0x0) (async) syz_emit_ethernet(0x36, &(0x7f0000000400)={@link_local={0xd}, @empty, @val={@void}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x73, 0x0, @private, @empty}, {0xfffc, 0x0, 0x10, 0x0, @gue={{0x2}}}}}}}, 0x0) (async) r2 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001740)={&(0x7f0000000380)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x30, 0x30, 0x7, [@func={0xc, 0x0, 0x0, 0xc, 0x5}, @fwd={0xd}, @float={0xb}, @ptr={0x0, 0x0, 0x0, 0x2, 0x8}]}, {0x0, [0x2e, 0x61, 0x61, 0x2e, 0x2e]}}, &(0x7f0000000740)=""/4096, 0x4f, 0x1000}, 0x28) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x11, &(0x7f0000000400)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0xf5eb}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@map_idx={0x18, 0x2, 0x5, 0x0, 0x7}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000004c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x0, r2, 0x8, &(0x7f0000000500)={0x2, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0xb, 0x2, 0x22}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x1, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x37, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r3}, 0x94) r4 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(0xffffffffffffffff, &(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r1, 0x0, 0x48800) (async) ioctl$INCFS_IOC_GET_FILLED_BLOCKS(r4, 0x80286722, &(0x7f0000000340)={&(0x7f00000002c0)=""/64, 0xffffffffffffff4d, 0xb35, 0x9}) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) setsockopt$MRT6_ADD_MFC(0xffffffffffffffff, 0x29, 0x22, 0x0, 0x0) bind$inet(r1, &(0x7f0000000100)={0x2, 0x4e20, @empty}, 0x10) r5 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'vlan0\x00', 0x0}) r7 = gettid() r8 = socket(0x10, 0x803, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) sendmsg$nl_route(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@newlink={0x3c, 0x10, 0x403, 0xfffffff9, 0x25dfdbfe, {0x0, 0x0, 0x74, r6, 0x59808, 0x55007}, [@IFLA_NET_NS_PID={0x8, 0x13, r7}, @IFLA_IFNAME={0x14, 0x3, 'veth1_macvtap\x00'}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4802}, 0x4000010) 22m24.85646328s ago: executing program 0 (id=3204): r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=@ipv6_getaddrlabel={0x30, 0x4a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_ADDRESS={0x14, 0x1, @loopback}]}, 0x30}}, 0x0) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000340)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @loopback}}}, 0x108) (async) setsockopt$inet_group_source_req(r0, 0x0, 0x2e, &(0x7f0000000480)={0x3, {{0x2, 0x0, @multicast1}}, {{0x2, 0x0, @multicast2}}}, 0x108) (async) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00, 0x0, 0x2219, 0x20904}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_IPTABLES={0x5, 0x24, 0x1}]}}}]}, 0x3c}}, 0x0) 22m24.539170754s ago: executing program 3 (id=3206): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="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"/2574], &(0x7f0000000140)='GPL\x00'}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000500)=@newqdisc={0x2c, 0x24, 0xd0f, 0xfffffffd, 0xffffffff, {0x60, 0x0, 0x0, 0x0, {0xffe0, 0x2}, {0xfff2, 0x10}, {0xd, 0x1a}}, [@TCA_RATE={0x6, 0x5, {0xb0}}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000844}, 0x2000c8d1) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000004b40)=[{{&(0x7f0000001140)={0xa, 0x4e23, 0x10, @private2, 0x8}, 0x1c, &(0x7f00000013c0)=[{&(0x7f00000016c0)="99", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x9b5d, @private2={0xfc, 0x2, '\x00', 0x1}, 0x80}, 0x1c, &(0x7f00000015c0)=[{&(0x7f0000001700)="92", 0x1}], 0x1}}], 0x2, 0x4000090) shutdown(r1, 0x1) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000000)={0x0, 0x0, 0x0, &(0x7f0000010040), 0xfffffffe, 0xffffffffffffffff, 0x4}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x10, &(0x7f0000000540)=ANY=[@ANYRES32=r0, @ANYRES32, @ANYBLOB="00000100000000000700000000ca51f3be43ef4af3bcda82151225be7d6323aa9a9641a4f268e931c5921130c0b4f424397fbd497f07b347ce2c225b5a63b304da54ed9ee6f608c0a2a5981aec05d5dbad3b68b8a4baf019b9c6fe850df475c5a7fc98752b43de8ad8a15248c63e85736f8adcbb3cb38389d5e464777965de9c18b9bbe035635145fc4158d58bc665189119715670b70bf0c7bc5cf4bb65ed5088ed659043c022e42875860a0d9e5e270d706003c46261dc33"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000}, 0x94) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) getsockopt$sock_linger(0xffffffffffffffff, 0x1, 0xd, &(0x7f0000000200), &(0x7f0000000280)=0x8) socket(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r3 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r3, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20008811) r4 = socket$kcm(0x29, 0x2, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r3, r5}) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, 0xffffffffffffffff, 0x26}, 0x10) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000280)={0x3}, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x20, 0x12, 0xa01, 0x0, 0x0, {0x80}}, 0x26}}, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r4, 0x89e0, &(0x7f0000000040)={r3, r0}) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000700)=ANY=[@ANYBLOB="440100001000010001000000fdfddf25fe880000000000000000000000000001e0000002000000000000000000000000000107144e230005000000803c000000a463876e68db2feabfadec65c7ba8309198a12fb46c06bd6f0e252f8b02e0efff6c798ff66ce8295dcb38d5feae84bc175d7ac1f4aadae1257648e60828d6bb4d826f8b614a93b613e00f5e78cb63f", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="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"], 0x144}, 0x1, 0x0, 0x0, 0x8801}, 0x0) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r8, &(0x7f0000000480)={0x2, 0x22, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r8, 0x0, 0x11, &(0x7f00000002c0)={{{@in6=@dev={0xfe, 0x80, '\x00', 0x4}, @in6=@mcast1, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffa}, {}, 0x3, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x32}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xfffffffe, 0xfffffffe}}, 0xe8) sendmmsg(r8, &(0x7f0000007fc0), 0x800001d, 0x1c) 22m24.483910185s ago: executing program 4 (id=3207): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000080001050600030080"], 0x22e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000063000000000000009500740079be9edf"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x1, 0x7}}}}, @TCA_RATE={0x6, 0x5, {0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) 22m21.940980885s ago: executing program 3 (id=3208): setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x13, &(0x7f0000000000)=0x4, 0x4) r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000040)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @local}, &(0x7f0000000080)=0x10, 0xc00) recvfrom$llc(r0, &(0x7f00000000c0)=""/49, 0x31, 0x10043, &(0x7f0000000100)={0x1a, 0x206, 0x7, 0x81, 0x0, 0x4}, 0x10) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000140)={r0, 0xfffffffffffffeff, 0xa, 0x8}) getsockopt$inet_sctp_SCTP_EVENTS(r1, 0x84, 0xb, &(0x7f0000000180), &(0x7f00000001c0)=0xe) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), r1) writev(r0, &(0x7f0000001440)=[{&(0x7f0000000240)="d79c140ccf2849cf71c52972fc86c19ce783adcc89043f3e3e8b6fa4fe6c0f089345f0df7884eff3d88e7550ac18a8bcc2ca743e08b67794f03e5b277c54f4cca3", 0x41}, {&(0x7f00000002c0)="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", 0x1000}, {&(0x7f00000012c0)="eb9f1b295721418dfdef57b08cbfbf1afa57558be4267b36f53fbfec60944243e4fdc23c41156369ae5b6f3ddf6c5a714fb021b45ce80198613a7290fff6696c4d65b4e8df34a8f9ee831d6645811ce8d40b1e9eaab443cd38e873840a4b5ce7032709a4c96b24c6dc82ce384db84767d3d0614432e16eba9747d8b2d4f873cc341589cf764281d2b2d54c0b76fd73cb91068a85021b5a888aabf21781c40b12a588f0ff530a7a35aa5a35db555c6fc53940edbb8630850bbc280405ab690cb5ee53067e2b9cf8c8e24842", 0xcb}, {&(0x7f00000013c0)="b290b54870d185e87c43b37b710767d66fcc384e6a7981d65ffe62659dad6f4410fce7ebc17f6979d01e2bad54716cb7666dc2b84d8e7b9590d27fe2aeb541ea6893fc6e31c012fc1039162fcd94e38f0d0fdc6243daac2f104e8b8b95a7c0920870856e4f079805", 0x68}], 0x4) ioctl$BTRFS_IOC_SUBVOL_CREATE_V2(r0, 0x50009418, &(0x7f0000001500)={{r0}, 0x0, 0x1d, @inherit={0x58, &(0x7f0000001480)={0x0, 0x2, 0x8000000000000000, 0x9, {0x22, 0x37, 0x1, 0x3, 0x10}, [0x1, 0x200]}}, @subvolid=0x9}) getpeername$llc(r0, &(0x7f0000002500)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @dev}, &(0x7f0000002540)=0x10) ioctl$sock_inet_SIOCSARP(r1, 0x8955, &(0x7f0000002580)={{0x2, 0x4e24, @local}, {0x306, @remote}, 0x30, {0x2, 0x4e20, @broadcast}, 'macsec0\x00'}) setsockopt$inet_tcp_buf(r1, 0x6, 0x21, &(0x7f0000002600)="b54d0791516d8f10941c38c6cb8211ffd6ea1a835f6eaa86d30857fc2478610717e7633036ffc7954c09010b656bc32657b24a6df4e02446f5def522872b42b845bdbc0a986caa9450db92130221e76de63ad56c171ae464201a9d755d2f8c9847402fbcc2979474e56f4ec449fbc1444bbb1ce05ceb6ad597b07b1518b04db2b67e64be13b4df3edda8d10a0addacfa", 0x90) r2 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000026c0)={0x0, 0x80000000, 0x8}, 0xc) ioctl$OCFS2_IOC_RESVSP64(r2, 0x4030582a, &(0x7f0000002700)={0x2, 0x0, 0x8000, 0xe, 0x81, 0x2}) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000002740)={0x0, 0x80000001, 0x10}, &(0x7f0000002780)=0xc) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f00000027c0)={r3, @in6={{0xa, 0x4e22, 0x57ce8c35, @remote, 0x8}}, 0xb, 0x7f33, 0x3, 0x100, 0x80, 0x10, 0x6}, &(0x7f0000002880)=0x9c) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f00000028c0)={0x10000008}) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000002900)={0xe, 0x8, 0x10001, 0x3, 0x2, 0x800}) sendmsg$RDMA_NLDEV_CMD_RES_CQ_GET(r1, &(0x7f0000002a00)={&(0x7f0000002940)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000029c0)={&(0x7f0000002980)={0x18, 0x140c, 0x400, 0x70bd29, 0x25dfdbfd, "", [@RDMA_NLDEV_ATTR_RES_CQN={0x8, 0x3d, 0x2}]}, 0x18}, 0x1, 0x0, 0x0, 0x4000}, 0x40004004) ioctl$XFS_IOC_FSGROWFSLOG(r2, 0x4008586f, &(0x7f0000002a40)={0x41f0e31, 0x2}) ioctl$sock_TIOCOUTQ(r1, 0x5411, &(0x7f0000002a80)) ioctl$BTRFS_IOC_BALANCE(r1, 0x5000940c, 0x0) r5 = socket$igmp(0x2, 0x3, 0x2) connect$inet(r5, &(0x7f0000002ac0)={0x2, 0x4e20, @multicast2}, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002b40), r1) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000002b80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r1, &(0x7f0000002c40)={&(0x7f0000002b00)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000002c00)={&(0x7f0000002bc0)={0x1c, r6, 0x400, 0x70bd27, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r7}, @void}}, ["", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x810) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r0, 0x4058587a, &(0x7f0000002e40)={{r5, &(0x7f0000002c80)='#^\x00', 0x195401, &(0x7f0000002cc0)={@align=0x9, {0xff7f, 0xfffd, 0x4, 0x7}}, 0xfc, &(0x7f0000002d00)={@_ha_fsid}, &(0x7f0000002d40)=0x5}, {[0x8001, 0x401, 0x4, 0x8]}, 0x8, 0xb9, &(0x7f0000002d80)=""/185}) getsockopt$inet_sctp_SCTP_MAX_BURST(r8, 0x84, 0x14, &(0x7f0000002ec0), &(0x7f0000002f00)=0x4) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f0000002f40)={r4, 0xec, "6dffefe837a244ec1d989fff3e2f878bf77e703dd6bebbdfaa767250b1e43367a37763920765003bf29002c5b4d603a25b9505a457b360d795d723cbb88ae29b1e6fe22a12433d3f5cadddb2e324811293a37ae02ebd839d07545890e2d4d02e900a810a5e3898b8d901732eb8e1f898890d1b10f29f9b165ac5e3ad9ed7d31868ffb05b43b9db7e97a3c483e15d170ba963044a739e34d5423481ddc440228c7e4203c46491c9b84bcbf8b80718719a86693d7c2182b87370302c9254fe34b575bff468793f1d23f3f24630cb22b26da524d976eed353d479a60751c15cf9fd792b02770b823972f5d29e2b"}, &(0x7f0000003040)=0xf4) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000003080)={r9, 0x8000, 0xfffc, 0x6, 0x4, 0xfffffffb}, &(0x7f00000030c0)=0x14) 22m21.138359822s ago: executing program 1 (id=3209): r0 = socket(0x11, 0x3, 0x0) (async) bpf$MAP_CREATE(0xe4ffffff00000000, &(0x7f0000000400)=ANY=[@ANYBLOB="1400000004000000040000000700000004000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="02abdfa8a800"/28], 0x50) (async) close(0x3) r1 = socket$xdp(0x2c, 0x3, 0x0) (async) r2 = socket(0x2a, 0x2, 0x0) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async) setsockopt$XDP_UMEM_REG(r2, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/74, 0x23000, 0x1000, 0x0, 0x3}, 0xfffffffffffffe39) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000080)=0x1, 0x4) setsockopt$XDP_RX_RING(r1, 0x11b, 0x2, &(0x7f0000001980)=0x100, 0x4) (async) r3 = socket$kcm(0x2a, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00', 0x0}) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x1, 0x4) (async) r5 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r5, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x3}, 0x20) (async) bind$xdp(r1, &(0x7f0000000180)={0x2c, 0xb, r4}, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000100), 0xffffffffffffff97, 0x10, &(0x7f00000000c0)={0x0, 0x3}, 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x1a}, 0x48) sendmsg$netlink(r0, &(0x7f0000002ac0)={0x0, 0x0, 0x0}, 0x20040051) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000100)={0x0, 0x20, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="bc1400002e00090027bd70000000000004000000a51411804b8a9f750c996372b5b14b3a91a3ff88cca5dd0d428ddfdd02a37c0b93bcdade6c5307b79c2d122f"], 0x14bc}, 0x1, 0x0, 0x0, 0x42804}, 0x10) 22m18.382805351s ago: executing program 0 (id=3210): socket(0x10, 0x3, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="18007e97f978ce66b21f000072009fb3000000000089777ea0b3a821376c56c750fe633bee58efe71f6f15a1f0e2ed4f6d63df4877df129cb89078681792535d4502f57d96b82ba7943232e61eeee2279f94093495bb613837ddaa16e1904c399127dea56966c2f64560f41d624990d992c4384c41d6001050ffde1c0cf26111c4729fa00a762fd9"], 0x18}}, 0x0) 22m17.413547283s ago: executing program 0 (id=3211): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000090000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r1 = socket(0x27, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r3, r4, 0x8f5, 0x100000000000000) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000140)='wg0\x00', 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000100)={0x0, 0x0, 0x7, r5, 0xfffffff0}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r2}) 22m17.412461425s ago: executing program 3 (id=3212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a01040000000000000000190000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000000800034000000004400000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100000000000a400000000c0a010100000000000000080a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010012ad00001400000011005f6a0000000300000a9cc39e55e81eb18500a81678d755826a6b94004b5a08fd82cd7ee962258fc358909629ad8796c9e55718001672"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f00000006c0)={{0x89, 0x0, 0xffffffff, 0x1001, 0x800b}, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) sendto$inet(r2, &(0x7f00000043c0)="897fa9438bbc214341192002e8ccdcd172f2f0acb7cd4b6dbd5f615f122504dc6b689af997353ae755efea6e6f1ed67b28a4fa0c7d96181b7395c2a87f6a84309aa31b7ec6252d968a9ed04031b115f9b3d5149e171695a05e590739c1ed528b8fe5a27a9a0a8490a63741530063dafc7290d85000"/130, 0xfffffd05, 0x0, &(0x7f00000044c0)={0x2, 0x4e21, @multicast1}, 0xfffffffffffffff5) 22m9.828763996s ago: executing program 1 (id=3213): r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f00000000c0)=@abs={0x1, 0x0, 0x4e24}, 0x6e) (async) listen(r0, 0x0) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_CONTEXT(r1, 0x84, 0x11, &(0x7f0000000240)={0x0, 0xa2}, 0x8) (async) r2 = socket$unix(0x1, 0x1, 0x0) connect$unix(r2, &(0x7f0000000000)=@abs={0x1, 0x0, 0x4e24}, 0x6e) 22m0.050168096s ago: executing program 32 (id=3207): bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x48) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="0000080001050600030080"], 0x22e) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'vlan0\x00', 0x0}) r4 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd29, 0xfffbffff, {0x0, 0x0, 0x0, r3, {0x0, 0x8}, {0xffff, 0xffff}, {0xc, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x1000}]}]}, @TCA_TAPRIO_ATTR_SCHED_CLOCKID={0x8, 0x5, 0x1}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x10) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0x8}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x24040084) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000791048000000000063000000000000009500740079be9edf"], &(0x7f0000003ff6)='GPL\x00', 0x8, 0xc3, &(0x7f0000000400)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000580)=@newqdisc={0x50, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r7, {0xffff}, {0xffff, 0xffff}, {0x2, 0xa}}, [@qdisc_kind_options=@q_cbs={{0x8}, {0x1c, 0x2, @TCA_CBS_PARMS={0x18, 0x1, {0x8, '\x00', 0x7, 0x7f, 0x1, 0x7}}}}, @TCA_RATE={0x6, 0x5, {0x7}}]}, 0x50}, 0x1, 0x0, 0x0, 0x14028010}, 0x20004000) syz_genetlink_get_family_id$tipc2(&(0x7f00000000c0), r4) 21m55.584375071s ago: executing program 33 (id=3211): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000090000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5}, 0x50) r1 = socket(0x27, 0x5, 0x0) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c) r2 = syz_init_net_socket$bt_rfcomm(0x1f, 0x3, 0x3) pipe(&(0x7f0000000080)={0xffffffffffffffff}) pipe(&(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) tee(r3, r4, 0x8f5, 0x100000000000000) setsockopt$RXRPC_SECURITY_KEYRING(r4, 0x110, 0x2, &(0x7f0000000140)='wg0\x00', 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f00000000c0)={'wg0\x00', 0x0}) setsockopt$MRT6_DEL_MIF(r4, 0x29, 0xcb, &(0x7f0000000100)={0x0, 0x0, 0x7, r5, 0xfffffff0}, 0xc) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000080)={r2}) 21m54.298911531s ago: executing program 1 (id=3216): ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$XFS_IOC_START_COMMIT(0xffffffffffffffff, 0x80585882, &(0x7f0000000000)) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x10, 0x17, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000074f6967d00000000000000180100002020702500000000002020207baaf8ff00000000bda100000000000027010000f8ffffffb702000008000000b7030000000000002500000006000000be91000000000000b502ecffffff00008500000005000000b70000000000000095"], &(0x7f00000002c0)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) 21m53.623384901s ago: executing program 34 (id=3212): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a44000000090a01040000000000000000190000040900010073797a310000000008000540000000020900020073797a310000000008000a40000000000800034000000004400000000c0a050000000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c00018006000100d1030000140000001100010000000000000000000100000a"], 0xac}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000740)=ANY=[@ANYBLOB="1400000010000100000000000a400000000c0a010100000000000000080a0000060900020073797a31000000000900010073797a310000000014000380100000800c0001800600010012ad00001400000011005f6a0000000300000a9cc39e55e81eb18500a81678d755826a6b94004b5a08fd82cd7ee962258fc358909629ad8796c9e55718001672"], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000002c0)=ANY=[], 0x68}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) r2 = socket$inet_icmp_raw(0x2, 0x3, 0x1) ioctl$XFS_IOC_BULKSTAT(r2, 0x8040587f, &(0x7f00000006c0)={{0x89, 0x0, 0xffffffff, 0x1001, 0x800b}, &(0x7f0000000000)=[{}, {}, {}, {}, {}, {}, {}, {}, {}]}) sendto$inet(r2, &(0x7f00000043c0)="897fa9438bbc214341192002e8ccdcd172f2f0acb7cd4b6dbd5f615f122504dc6b689af997353ae755efea6e6f1ed67b28a4fa0c7d96181b7395c2a87f6a84309aa31b7ec6252d968a9ed04031b115f9b3d5149e171695a05e590739c1ed528b8fe5a27a9a0a8490a63741530063dafc7290d85000"/130, 0xfffffd05, 0x0, &(0x7f00000044c0)={0x2, 0x4e21, @multicast1}, 0xfffffffffffffff5) 21m45.676658016s ago: executing program 1 (id=3218): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=@delpolicy={0x60, 0x14, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @in=@multicast1}}, [@replay_val={0x10, 0xa, {0x70bd2a, 0x70bd2b, 0x6}}]}, 0x60}, 0x1, 0x0, 0x0, 0x48040}, 0x0) 21m38.47041622s ago: executing program 5 (id=3214): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x25}, [0xff, 0xff000000, 0xffffff00, 0xffff00], [0xff000000, 0x0, 0x0, 0xff000000], 'ipvlan0\x00', 'veth1\x00', {}, {0xff}, 0x89, 0x40, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x82}}}, {{@ipv6={@private0, @local, [0x0, 0x0, 0xff000000, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xff], 'dvmrp1\x00', 'vlan0\x00', {0xff}, {}, 0x5e, 0x8, 0x2, 0x50}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x400, 0x6, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000540), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}]}, 0x1c}}, 0x20008000) (async) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}]}, 0x1c}}, 0x20008000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000700)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000740)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000801) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000801) r9 = socket$alg(0x26, 0x5, 0x0) sendfile(r1, r9, &(0x7f00000008c0)=0x5, 0x641) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xd8, 0x4, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x73cc42bc}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x15e89e81}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_FLAGS={0x8}]}, 0xd8}}, 0x4044041) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b00)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xe}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40040) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x40) (async) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x40) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r2) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000dc0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000dc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x70, r11, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001240)={0xffffffffffffffff, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000fc0)=[0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000001040)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001080), &(0x7f00000010c0), 0x8, 0xc0, 0x8, 0x8, &(0x7f0000001100)}}, 0x10) sendmsg$GTP_CMD_NEWPDP(r13, &(0x7f0000001340)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x48088020}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, r14, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @empty}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8, 0x1, r15}]}, 0x58}}, 0x40400c8) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0), r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x12120000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x40, r16, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xb4}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x95}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044004}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, 0x0, 0x8599a9c05a3c54c6, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, 0x0, 0x8599a9c05a3c54c6, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x800) 21m37.085583003s ago: executing program 1 (id=3219): getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f00000007c0)={@multicast1, @multicast1, 0x0}, &(0x7f0000000800)=0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f0000000000)={'wlan1\x00', @random="000500000020"}) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000840)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0xffffffff, '\x00', r0, 0x0}, 0x50) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000000)=@nat={'nat\x00', 0x1d, 0x5, 0x628, 0x0, 0x488, 0xffffffff, 0x0, 0x268, 0x558, 0x558, 0xffffffff, 0x558, 0x558, 0x5, 0x0, {[{{@uncond, 0x0, 0x220, 0xc8, 0x0, {}, [@common=@rt={{0x138}, {0x4, [0x3, 0x800], 0x0, 0xf23d8cefb056ae2b, 0x7, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, @private0, @private1={0xfc, 0x1, '\x00', 0x1}, @ipv4={'\x00', '\xff\xff', @remote}, @loopback, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @remote, @mcast2, @private0={0xfc, 0x0, '\x00', 0x1}, @private2={0xfc, 0x2, '\x00', 0x1}, @empty, @dev={0xfe, 0x80, '\x00', 0x2b}, @dev={0xfe, 0x80, '\x00', 0x39}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote], 0x9}}, @common=@unspec=@connlimit={{0x40}, {[0x0, 0xffffffff, 0xffffffff, 0xff000000], 0xffffff7f, 0x1, {0x4}}}]}, @MASQUERADE={0x48, 'MASQUERADE\x00', 0x0, {0x0, @ipv4=@empty, @ipv6=@remote}}}, {{@ipv6={@dev, @loopback, [], [], 'batadv0\x00', 'veth1_vlan\x00'}, 0x0, 0xe8, 0x130, 0x0, {}, [@common=@unspec=@connlimit={{0x40}}]}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x0, @ipv4=@loopback, @ipv6=@private0, @icmp_id, @icmp_id}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x0, @ipv6=@dev={0xfe, 0x80, '\x00', 0x1b}, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @gre_key, @gre_key}}}, {{@ipv6={@remote, @mcast1, [0x0, 0xff000000], [], 'ipvlan0\x00', 'pim6reg\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x688) r4 = socket$inet(0x2, 0x5, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) connect$bt_l2cap(r5, &(0x7f0000000080)={0x1f, 0x1, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000180)=0x7b, 0x4) shutdown(r4, 0x0) recvmmsg(r4, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = openat$cgroup_subtree(r6, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r7, 0x0, 0x0) write$cgroup_subtree(r7, &(0x7f00000001c0)={[{0x2d, 'cpu'}]}, 0x5) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0xa, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r2}, {}, {0x85, 0x0, 0x0, 0x88}}]}, &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 21m30.638206075s ago: executing program 1 (id=3220): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x10}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xfff3}, {0xc, 0x5}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x2000c095) r4 = socket(0x10, 0x803, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x3}, 0x6) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3e, &(0x7f0000000000)=0x4, 0x4) writev(r6, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000000c0)="4c08c559bd", 0x5}, {0x0}], 0x3) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r7, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r7, 0x1) listen(r7, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000010000000000000c02000000000000000200000d00000000000000006100"], 0x0, 0x43}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@ifindex=r9, r10, 0x2f, 0x10, r8}, 0x20) shutdown(r7, 0x0) write$bt_hci(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="010008"], 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x34, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 21m11.30366435s ago: executing program 35 (id=3220): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r2, &(0x7f0000000100)={0x10}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r3, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000900)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xfff1, 0xfff3}, {0xc, 0x5}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x2000c095) r4 = socket(0x10, 0x803, 0x4) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000040)={0x1f, 0x3}, 0x6) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) setsockopt$SO_TIMESTAMP(r6, 0x1, 0x3e, &(0x7f0000000000)=0x4, 0x4) writev(r6, &(0x7f00000002c0)=[{0x0}, {&(0x7f00000000c0)="4c08c559bd", 0x5}, {0x0}], 0x3) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$int_in(r7, 0x5452, &(0x7f0000000280)=0x3a0af83a) shutdown(r7, 0x1) listen(r7, 0x20) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb01001800000000000000280000002800000003000000010000000000000c02000000000000000200000d00000000000000006100"], 0x0, 0x43}, 0x28) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000001c0)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r8, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r10 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r9}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000140)={@ifindex=r9, r10, 0x2f, 0x10, r8}, 0x20) shutdown(r7, 0x0) write$bt_hci(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="010008"], 0x7) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=@delchain={0x34, 0x2c, 0xf31, 0x70bd27, 0x2000, {0x0, 0x0, 0x0, 0x0, {0x8}, {0xfff2, 0xffff}, {0xffff, 0xffe0}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) r11 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r11, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x2, 0xa, 0x2) 21m3.025381976s ago: executing program 5 (id=3214): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x25}, [0xff, 0xff000000, 0xffffff00, 0xffff00], [0xff000000, 0x0, 0x0, 0xff000000], 'ipvlan0\x00', 'veth1\x00', {}, {0xff}, 0x89, 0x40, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x82}}}, {{@ipv6={@private0, @local, [0x0, 0x0, 0xff000000, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xff], 'dvmrp1\x00', 'vlan0\x00', {0xff}, {}, 0x5e, 0x8, 0x2, 0x50}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x400, 0x6, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000540), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}]}, 0x1c}}, 0x20008000) (async) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}]}, 0x1c}}, 0x20008000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000700)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000740)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000801) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000801) r9 = socket$alg(0x26, 0x5, 0x0) sendfile(r1, r9, &(0x7f00000008c0)=0x5, 0x641) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xd8, 0x4, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x73cc42bc}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x15e89e81}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_FLAGS={0x8}]}, 0xd8}}, 0x4044041) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b00)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xe}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40040) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x40) (async) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x40) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r2) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000dc0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000dc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x70, r11, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001240)={0xffffffffffffffff, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000fc0)=[0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000001040)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001080), &(0x7f00000010c0), 0x8, 0xc0, 0x8, 0x8, &(0x7f0000001100)}}, 0x10) sendmsg$GTP_CMD_NEWPDP(r13, &(0x7f0000001340)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x48088020}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, r14, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @empty}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8, 0x1, r15}]}, 0x58}}, 0x40400c8) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0), r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x12120000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x40, r16, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xb4}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x95}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044004}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, 0x0, 0x8599a9c05a3c54c6, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, 0x0, 0x8599a9c05a3c54c6, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x800) 20m42.941666115s ago: executing program 2 (id=3177): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x85, 0x0, &(0x7f00000004c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r2, &(0x7f0000002100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/17, 0x11}, 0x3}], 0x1, 0x10003, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000080382ec096cebbff54000000060a010400000000a39441efa2fd0feb0900010073797a310000000028000480240001800b007a006e756d67656e00001400028008efa463b98e00014000000016080002400000000928b80a220900020073797a320000000014000000110020000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000080382ec096cebbff54000000060a010400000000a39441efa2fd0feb0900010073797a310000000028000480240001800b007a006e756d67656e00001400028008efa463b98e00014000000016080002400000000928b80a220900020073797a320000000014000000110020000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 20m22.745395827s ago: executing program 2 (id=3177): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x85, 0x0, &(0x7f00000004c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r2, &(0x7f0000002100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/17, 0x11}, 0x3}], 0x1, 0x10003, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000080382ec096cebbff54000000060a010400000000a39441efa2fd0feb0900010073797a310000000028000480240001800b007a006e756d67656e00001400028008efa463b98e00014000000016080002400000000928b80a220900020073797a320000000014000000110020000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000080382ec096cebbff54000000060a010400000000a39441efa2fd0feb0900010073797a310000000028000480240001800b007a006e756d67656e00001400028008efa463b98e00014000000016080002400000000928b80a220900020073797a320000000014000000110020000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 18m7.721107598s ago: executing program 6 (id=3215): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)={0x14, r2, 0x1, 0x4}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)={0x14, r2, 0x1, 0x4}, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) 17m47.283617453s ago: executing program 7 (id=3217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r6 = syz_open_procfs$namespace(r3, &(0x7f0000001780)='ns/ipc\x00') r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r8}, 0x10, &(0x7f00000003c0)={&(0x7f0000000140)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x75, 0x0, 0x0, 0x0, "fa77068e9ba7f60291c0c2883b46271c1679c3c0cf5101a328bb3fbd261e7eba5594caf70eec1c694f644e13312db4bda5b524b6e151c1deaf3e9edb7a56adcb"}, 0x48}, 0x2, 0x0, 0x0, 0x20008004}, 0x10048808) r9 = getpid() sendmmsg$unix(r2, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {r9, r4}}}, @rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0xc0e00, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b95bec00c600000000001b0000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000800010000001400030067656e9a1f5d6576653100000000000000000094d85ea97bdd27dc887817e5532db613cf2f3cecbf23346240f32d3211a672cab898e063b763db08a5f1eaa592ab75cfdd88cd860e9d4f49cd6046c3f8776128f5cd5a030560f40bb016af5edbe6e64cac7bcea46a1e49cdc2fc2b826ff1633e185a6e0e1a47d6693dd4dedc449d14580616b5eb091629829e2684c220834d12bfb501efd706768fe358adbaab9afbfcfed1668fad"], 0x50}}, 0x4000000) 17m13.004274095s ago: executing program 8 (id=3221): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x1000}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @dev}], 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x4e21, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffd, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1801000055003d0902000000fcdbdf2507000000", @ANYRES32=r4], 0x18}}, 0x4090) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x2}], 0x1, 0x24040800) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={'bridge0\x00', {0x2, 0x4e22, @empty}}) (async) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x120, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1e8, 0x20a, 0x278, 0x1e8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0xd}, @common=@unspec=@state={{0x28}, {0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0xff000000], [0x0, 0xffffff00, 0x0, 0xffffffff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x0, 0x13}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x20) 15m4.626650186s ago: executing program 2 (id=3177): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x85, 0x0, &(0x7f00000004c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r2, &(0x7f0000002100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/17, 0x11}, 0x3}], 0x1, 0x10003, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000080382ec096cebbff54000000060a010400000000a39441efa2fd0feb0900010073797a310000000028000480240001800b007a006e756d67656e00001400028008efa463b98e00014000000016080002400000000928b80a220900020073797a320000000014000000110020000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000080382ec096cebbff54000000060a010400000000a39441efa2fd0feb0900010073797a310000000028000480240001800b007a006e756d67656e00001400028008efa463b98e00014000000016080002400000000928b80a220900020073797a320000000014000000110020000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 15m0.381293115s ago: executing program 7 (id=3217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r6 = syz_open_procfs$namespace(r3, &(0x7f0000001780)='ns/ipc\x00') r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r8}, 0x10, &(0x7f00000003c0)={&(0x7f0000000140)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x75, 0x0, 0x0, 0x0, "fa77068e9ba7f60291c0c2883b46271c1679c3c0cf5101a328bb3fbd261e7eba5594caf70eec1c694f644e13312db4bda5b524b6e151c1deaf3e9edb7a56adcb"}, 0x48}, 0x2, 0x0, 0x0, 0x20008004}, 0x10048808) r9 = getpid() sendmmsg$unix(r2, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {r9, r4}}}, @rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0xc0e00, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b95bec00c600000000001b0000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000800010000001400030067656e9a1f5d6576653100000000000000000094d85ea97bdd27dc887817e5532db613cf2f3cecbf23346240f32d3211a672cab898e063b763db08a5f1eaa592ab75cfdd88cd860e9d4f49cd6046c3f8776128f5cd5a030560f40bb016af5edbe6e64cac7bcea46a1e49cdc2fc2b826ff1633e185a6e0e1a47d6693dd4dedc449d14580616b5eb091629829e2684c220834d12bfb501efd706768fe358adbaab9afbfcfed1668fad"], 0x50}}, 0x4000000) 12m26.632843343s ago: executing program 7 (id=3217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r6 = syz_open_procfs$namespace(r3, &(0x7f0000001780)='ns/ipc\x00') r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r8}, 0x10, &(0x7f00000003c0)={&(0x7f0000000140)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x75, 0x0, 0x0, 0x0, "fa77068e9ba7f60291c0c2883b46271c1679c3c0cf5101a328bb3fbd261e7eba5594caf70eec1c694f644e13312db4bda5b524b6e151c1deaf3e9edb7a56adcb"}, 0x48}, 0x2, 0x0, 0x0, 0x20008004}, 0x10048808) r9 = getpid() sendmmsg$unix(r2, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {r9, r4}}}, @rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="7a0af8ff75257035bfa100000000000007010000f9ffffffb702000005000000bf130000000000008500000006000000b7000000000000009500000000000000b2595285faa6ead0169191d54f8196217fc560e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c8edd3aa5d6ee7ab10b1a297cf528666d1ddd73f3047d248df061222193165274bc7f2382f6cda4bfdd45be583823c0f09621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000000db453620ce7243d1aebdb638d91dbef661935839c77edf2d34b12cd48a0c20fb7dd843267e0331759f4ec6b5b0af58e604f4942eb613eff289026d5045ef76d7d864409eb2dc7718a09f4886afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc76be40d435aa8b5202db761014b1b999a12df6bee431a6681"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0xc0e00, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b95bec00c600000000001b0000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000800010000001400030067656e9a1f5d6576653100000000000000000094d85ea97bdd27dc887817e5532db613cf2f3cecbf23346240f32d3211a672cab898e063b763db08a5f1eaa592ab75cfdd88cd860e9d4f49cd6046c3f8776128f5cd5a030560f40bb016af5edbe6e64cac7bcea46a1e49cdc2fc2b826ff1633e185a6e0e1a47d6693dd4dedc449d14580616b5eb091629829e2684c220834d12bfb501efd706768fe358adbaab9afbfcfed1668fad"], 0x50}}, 0x4000000) 11m25.690907444s ago: executing program 6 (id=3215): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)={0x14, r2, 0x1, 0x4}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)={0x14, r2, 0x1, 0x4}, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) 10m20.937645475s ago: executing program 6 (id=3215): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)={0x14, r2, 0x1, 0x4}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)={0x14, r2, 0x1, 0x4}, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) 6m8.390571771s ago: executing program 7 (id=3217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r6 = syz_open_procfs$namespace(r3, &(0x7f0000001780)='ns/ipc\x00') r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r8}, 0x10, &(0x7f00000003c0)={&(0x7f0000000140)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x75, 0x0, 0x0, 0x0, "fa77068e9ba7f60291c0c2883b46271c1679c3c0cf5101a328bb3fbd261e7eba5594caf70eec1c694f644e13312db4bda5b524b6e151c1deaf3e9edb7a56adcb"}, 0x48}, 0x2, 0x0, 0x0, 0x20008004}, 0x10048808) r9 = getpid() sendmmsg$unix(r2, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {r9, r4}}}, @rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0xc0e00, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b95bec00c600000000001b0000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000800010000001400030067656e9a1f5d6576653100000000000000000094d85ea97bdd27dc887817e5532db613cf2f3cecbf23346240f32d3211a672cab898e063b763db08a5f1eaa592ab75cfdd88cd860e9d4f49cd6046c3f8776128f5cd5a030560f40bb016af5edbe6e64cac7bcea46a1e49cdc2fc2b826ff1633e185a6e0e1a47d6693dd4dedc449d14580616b5eb091629829e2684c220834d12bfb501efd706768fe358adbaab9afbfcfed1668fad"], 0x50}}, 0x4000000) 5m47.860535055s ago: executing program 5 (id=3214): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x25}, [0xff, 0xff000000, 0xffffff00, 0xffff00], [0xff000000, 0x0, 0x0, 0xff000000], 'ipvlan0\x00', 'veth1\x00', {}, {0xff}, 0x89, 0x40, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x82}}}, {{@ipv6={@private0, @local, [0x0, 0x0, 0xff000000, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xff], 'dvmrp1\x00', 'vlan0\x00', {0xff}, {}, 0x5e, 0x8, 0x2, 0x50}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x400, 0x6, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000540), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}]}, 0x1c}}, 0x20008000) (async) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}]}, 0x1c}}, 0x20008000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000700)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000740)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000801) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000801) r9 = socket$alg(0x26, 0x5, 0x0) sendfile(r1, r9, &(0x7f00000008c0)=0x5, 0x641) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xd8, 0x4, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x73cc42bc}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x15e89e81}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_FLAGS={0x8}]}, 0xd8}}, 0x4044041) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b00)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xe}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40040) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x40) (async) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x40) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r2) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000dc0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000dc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x70, r11, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001240)={0xffffffffffffffff, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000fc0)=[0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000001040)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001080), &(0x7f00000010c0), 0x8, 0xc0, 0x8, 0x8, &(0x7f0000001100)}}, 0x10) sendmsg$GTP_CMD_NEWPDP(r13, &(0x7f0000001340)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x48088020}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, r14, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @empty}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8, 0x1, r15}]}, 0x58}}, 0x40400c8) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0), r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x12120000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x40, r16, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xb4}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x95}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044004}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, 0x0, 0x8599a9c05a3c54c6, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, 0x0, 0x8599a9c05a3c54c6, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x800) 5m20.412482331s ago: executing program 8 (id=3221): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x1000}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @dev}], 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x4e21, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffd, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1801000055003d0902000000fcdbdf2507000000", @ANYRES32=r4], 0x18}}, 0x4090) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x2}], 0x1, 0x24040800) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={'bridge0\x00', {0x2, 0x4e22, @empty}}) (async) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x120, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1e8, 0x20a, 0x278, 0x1e8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0xd}, @common=@unspec=@state={{0x28}, {0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0xff000000], [0x0, 0xffffff00, 0x0, 0xffffffff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x0, 0x13}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x20) 4m57.09036076s ago: executing program 8 (id=3221): r0 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet_int(r0, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000100)=[@in={0x2, 0x0, @loopback}, @in6={0xa, 0x0, 0x0, @private0}], 0x2c) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000200)=@newlink={0x48, 0x10, 0x1, 0x70bd2c, 0x0, {0x0, 0x0, 0x0, 0x0, 0x21a8}, [@IFLA_IFNAME={0x14, 0x3, 'netdevsim0\x00'}, @IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_SPOOFCHK={0xc, 0x4, {0x9, 0x1000}}]}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x40}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r0, 0x84, 0x65, &(0x7f00000003c0)=[@in={0x2, 0x4e24, @dev}], 0x10) syz_emit_ethernet(0xbe, &(0x7f0000000540)={@local, @multicast, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x4, 0x0, 0x0, 0x11, 0x0, @private, @empty}, {0x4e21, 0x17c1, 0x9c, 0x0, @wg=@initiation={0x1, 0xfffffffd, "717c72635f3b384bdfc23b7cdbd1617d39980ae0343d91a3756391fe0a9a66d4", "0838dbc96ba13dd069ce9c1099890915a06c22e110516ac8db72cf46be8a2cd2288112c641ae96fd6321aabb617c7209", "7b8d57a7c7bce1276d915e2d6d05e53c86a47b318a3ac04c5dd38853", {"7719eecd7b1f5591c287cd8bdc5cb100", "705e0032bb769f2581b5b6ae81bd7bad"}}}}}}}, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="1801000055003d0902000000fcdbdf2507000000", @ANYRES32=r4], 0x18}}, 0x4090) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) (async) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-serpent-sse2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) (async) sendmmsg$alg(0xffffffffffffffff, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da", 0x33}], 0x2}], 0x1, 0x24040800) ioctl$sock_inet_SIOCSIFADDR(r1, 0x8916, &(0x7f00000001c0)={'bridge0\x00', {0x2, 0x4e22, @empty}}) (async) recvmsg(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000280)=""/81, 0x51}, {&(0x7f0000000200)=""/83, 0x53}], 0x2}, 0x0) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r2) (async) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) r8 = socket$inet6(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r8, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x2b8, 0x120, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x1e8, 0x20a, 0x278, 0x1e8, 0x278, 0x3, 0x0, {[{{@uncond, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@inet=@socket3={{0x28}, 0xd}, @common=@unspec=@state={{0x28}, {0x3}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ipv6={@loopback, @mcast2, [0x0, 0xff000000], [0x0, 0xffffff00, 0x0, 0xffffffff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x0, 0x13}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x318) (async) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r7, 0x84, 0x17, 0x0, 0x0) (async) ioctl$FS_IOC_SETFLAGS(r5, 0x40086602, &(0x7f0000000080)=0x20) 3m49.815492415s ago: executing program 6 (id=3215): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)={0x14, r2, 0x1, 0x4}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)={0x14, r2, 0x1, 0x4}, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) 1m58.441395788s ago: executing program 7 (id=3217): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_mreq(r1, 0x29, 0x14, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @multicast2}}, 0x14) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000540)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000380)={0x0, 0x0, 0x0}, &(0x7f00000003c0)=0xc) r6 = syz_open_procfs$namespace(r3, &(0x7f0000001780)='ns/ipc\x00') r7 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_FD_FRAMES(r7, 0x65, 0x5, &(0x7f0000000040)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'batadv_slave_0\x00', 0x0}) sendmsg$can_raw(r7, &(0x7f0000000000)={&(0x7f0000000580)={0x1d, r8}, 0x10, &(0x7f00000003c0)={&(0x7f0000000140)=@canfd={{0x1, 0x1, 0x0, 0x1}, 0x75, 0x0, 0x0, 0x0, "fa77068e9ba7f60291c0c2883b46271c1679c3c0cf5101a328bb3fbd261e7eba5594caf70eec1c694f644e13312db4bda5b524b6e151c1deaf3e9edb7a56adcb"}, 0x48}, 0x2, 0x0, 0x0, 0x20008004}, 0x10048808) r9 = getpid() sendmmsg$unix(r2, &(0x7f0000001b00)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400), 0x0, 0x4044014}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=[@cred={{0x1c, 0x1, 0x2, {r3, 0x0, r5}}}, @cred={{0x1c, 0x1, 0x2, {r9, r4}}}, @rights={{0x18, 0x1, 0x1, [r6, 0xffffffffffffffff]}}], 0x58, 0x800}}], 0x2, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket$unix(0x1, 0x5, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x5, 0x0, 0x0) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0xc0e00, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r10, 0x0, 0xe, 0x0, &(0x7f0000000140)="e0b95bec00c600000000001b0000", 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="500000001000010400000000fedbdf2500000000", @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028005000800010000001400030067656e9a1f5d6576653100000000000000000094d85ea97bdd27dc887817e5532db613cf2f3cecbf23346240f32d3211a672cab898e063b763db08a5f1eaa592ab75cfdd88cd860e9d4f49cd6046c3f8776128f5cd5a030560f40bb016af5edbe6e64cac7bcea46a1e49cdc2fc2b826ff1633e185a6e0e1a47d6693dd4dedc449d14580616b5eb091629829e2684c220834d12bfb501efd706768fe358adbaab9afbfcfed1668fad"], 0x50}}, 0x4000000) 40.694639355s ago: executing program 2 (id=3177): socket$inet6_sctp(0xa, 0x1, 0x84) (async) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$bt_hci(r0, 0x84, 0x85, 0x0, &(0x7f00000004c0)) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) (async) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x40) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) setsockopt$inet6_int(r2, 0x29, 0x3, &(0x7f0000004240)=0x40000006, 0x4) setsockopt$inet6_IPV6_HOPOPTS(r2, 0x29, 0x36, &(0x7f0000000600)=ANY=[], 0x8) recvmmsg(r2, &(0x7f0000002100)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001f80)=""/17, 0x11}, 0x3}], 0x1, 0x10003, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20000001, &(0x7f0000000300)={0xa, 0x4e20, 0x5, @mcast1}, 0x1c) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000080382ec096cebbff54000000060a010400000000a39441efa2fd0feb0900010073797a310000000028000480240001800b007a006e756d67656e00001400028008efa463b98e00014000000016080002400000000928b80a220900020073797a320000000014000000110020000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001000000000080382ec096cebbff54000000060a010400000000a39441efa2fd0feb0900010073797a310000000028000480240001800b007a006e756d67656e00001400028008efa463b98e00014000000016080002400000000928b80a220900020073797a320000000014000000110020000000000000000000"], 0x7c}, 0x1, 0x0, 0x0, 0x4000850}, 0x20040040) 15.466606683s ago: executing program 5 (id=3214): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r0 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000040)='blkio.throttle.write_bps_device\x00', 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f00000000c0)=@raw={'raw\x00', 0x9, 0x3, 0x2e8, 0x0, 0xffffffff, 0xffffffff, 0x120, 0xffffffff, 0x218, 0xffffffff, 0xffffffff, 0x218, 0xffffffff, 0x3, &(0x7f0000000080), {[{{@ipv6={@private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x25}, [0xff, 0xff000000, 0xffffff00, 0xffff00], [0xff000000, 0x0, 0x0, 0xff000000], 'ipvlan0\x00', 'veth1\x00', {}, {0xff}, 0x89, 0x40, 0x2}, 0x0, 0xf8, 0x120, 0x0, {}, [@inet=@rpfilter={{0x28}, {0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x82}}}, {{@ipv6={@private0, @local, [0x0, 0x0, 0xff000000, 0xffffffff], [0xffffff00, 0x0, 0xff000000, 0xff], 'dvmrp1\x00', 'vlan0\x00', {0xff}, {}, 0x5e, 0x8, 0x2, 0x50}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x400, 0x6, 0x1}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x348) r1 = accept$unix(0xffffffffffffffff, &(0x7f0000000440), &(0x7f00000004c0)=0x6e) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x4) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nfc(&(0x7f0000000540), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$nfc(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}]}, 0x1c}}, 0x20008000) (async) sendmsg$NFC_CMD_DEP_LINK_DOWN(r2, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, r3, 0x10, 0x70bd2a, 0x25dfdbfb, {}, [@NFC_ATTR_TARGET_INDEX={0x8}]}, 0x1c}}, 0x20008000) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000680)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000700)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000740)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000740)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000780)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000801) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r2, &(0x7f0000000880)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)={0x70, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r8}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000801) r9 = socket$alg(0x26, 0x5, 0x0) sendfile(r1, r9, &(0x7f00000008c0)=0x5, 0x641) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000a40)={&(0x7f0000000940)={0xd8, 0x4, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xa}, [@NFTA_CHAIN_HOOK={0x50, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'ip6_vti0\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x73cc42bc}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x15e89e81}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x4}]}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x9}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x7}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0xe}, @NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x2}]}, @NFTA_CHAIN_FLAGS={0x8}]}, 0xd8}}, 0x4044041) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000b00)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_SECLEVEL(r2, &(0x7f0000000c00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b40)={0x44, 0x0, 0x1, 0x70bd29, 0x25dfdbff, {}, [@IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0xe}, @IEEE802154_ATTR_LLSEC_CMD_FRAME_ID={0x5, 0x34, 0x6}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}, @IEEE802154_ATTR_LLSEC_FRAME_TYPE={0x5, 0x33, 0x8}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r5}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}]}, 0x44}, 0x1, 0x0, 0x0, 0x4}, 0x40040) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x40) (async) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f0000000d00)={&(0x7f0000000c40)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x14, r3, 0x400, 0x70bd2d, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4004080}, 0x40) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r2) (async) r11 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r2) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000dc0)={'wpan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000dc0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEV(r2, &(0x7f0000000ec0)={&(0x7f0000000d40)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e00)={0x70, r11, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVICE={0x24, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_SHORT_ADDR={0x6, 0x3, 0xaaa0}, @NL802154_DEV_ATTR_PAN_ID={0x6, 0x2, 0xffff}, @NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x1}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x7}]}, @NL802154_ATTR_SEC_DEVICE={0x14, 0x2e, 0x0, 0x1, [@NL802154_DEV_ATTR_KEY_MODE={0x8, 0x6, 0x2}, @NL802154_DEV_ATTR_FRAME_COUNTER={0x6, 0x1, 0x6}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}]}, 0x70}, 0x1, 0x0, 0x0, 0x20000000}, 0x90) r13 = socket$nl_generic(0x10, 0x3, 0x10) r14 = syz_genetlink_get_family_id$gtp(&(0x7f0000000f40), 0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000001240)={0xffffffffffffffff, 0xe0, &(0x7f0000001140)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, &(0x7f0000000f80)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x8, &(0x7f0000000fc0)=[0x0], &(0x7f0000001000)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xba, &(0x7f0000001040)=[{}, {}, {}], 0x18, 0x10, &(0x7f0000001080), &(0x7f00000010c0), 0x8, 0xc0, 0x8, 0x8, &(0x7f0000001100)}}, 0x10) sendmsg$GTP_CMD_NEWPDP(r13, &(0x7f0000001340)={&(0x7f0000000f00)={0x10, 0x0, 0x0, 0x48088020}, 0xc, &(0x7f0000001300)={&(0x7f0000001280)={0x58, r14, 0x200, 0x70bd2a, 0x25dfdbfc, {}, [@GTPA_PEER_ADDR6={0x14, 0xb, @ipv4={'\x00', '\xff\xff', @empty}}, @GTPA_PEER_ADDRESS={0x8, 0x4, @remote}, @GTPA_NET_NS_FD={0x8}, @GTPA_I_TEI={0x8, 0x8, 0x1}, @GTPA_FAMILY={0x5, 0xd, 0x1f}, @GTPA_O_TEI={0x8, 0x9, 0x1}, @GTPA_LINK={0x8, 0x1, r15}]}, 0x58}}, 0x40400c8) r16 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000013c0), r2) sendmsg$IEEE802154_SET_MACPARAMS(r2, &(0x7f0000001480)={&(0x7f0000001380)={0x10, 0x0, 0x0, 0x12120000}, 0xc, &(0x7f0000001440)={&(0x7f0000001400)={0x40, r16, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0xb4}, @IEEE802154_ATTR_FRAME_RETRIES={0x5, 0x28, 0xc}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_CSMA_MAX_BE={0x5, 0x27, 0x95}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r8}]}, 0x40}, 0x1, 0x0, 0x0, 0x24044004}, 0x0) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, 0x0, 0x8599a9c05a3c54c6, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x800) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f00000015c0)={&(0x7f00000014c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001580)={&(0x7f0000001540)={0x20, 0x0, 0x8599a9c05a3c54c6, 0x70bd29, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x20}, 0x1, 0x0, 0x0, 0x10}, 0x800) 0s ago: executing program 6 (id=3215): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)={0x14, r2, 0x1, 0x4}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) socket$inet6_sctp(0xa, 0x5, 0x84) (async) setsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000a80), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_PEER_REMOVE(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000001280)={&(0x7f0000000040)={0x14, r2, 0x1, 0x4}, 0x14}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0x39}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x34}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x70) (async) kernel console output (not intermixed with test programs): eased all slaves [ 362.575773][T14844] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2307'. [ 362.804537][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 362.878357][T14855] openvswitch: netlink: IP tunnel dst address not specified [ 363.356122][T14868] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 363.636193][T14871] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2315'. [ 364.249855][T14883] xt_hashlimit: size too large, truncated to 1048576 [ 364.278328][T14885] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2320'. [ 364.340076][T14885] tipc: Enabling of bearer rejected, failed to enable media [ 365.263132][T14904] netlink: 20 bytes leftover after parsing attributes in process `syz.1.2323'. [ 365.901595][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.784897][ T9813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 366.786934][T14939] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2337'. [ 366.793700][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 367.118842][T14943] netlink: 'syz.3.2337': attribute type 11 has an invalid length. [ 367.128165][T14946] netlink: 224 bytes leftover after parsing attributes in process `syz.2.2336'. [ 367.828406][T14950] bond8 (unregistering): Released all slaves [ 367.894294][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 368.160155][T14977] syzkaller1: entered promiscuous mode [ 368.169777][T14977] syzkaller1: entered allmulticast mode [ 368.752160][T14991] netlink: 76 bytes leftover after parsing attributes in process `syz.3.2347'. [ 368.761596][T14992] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2347'. [ 369.880443][T15013] sctp: [Deprecated]: syz.4.2354 (pid 15013) Use of struct sctp_assoc_value in delayed_ack socket option. [ 369.880443][T15013] Use struct sctp_sack_info instead [ 370.260549][T15020] workqueue: Failed to create a rescuer kthread for wq "nfc2_nci_rx_wq": -EINTR [ 370.470404][T15031] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2358'. [ 370.857259][T15048] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 371.742808][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.077469][T15072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2368'. [ 372.110897][T15072] netlink: 16 bytes leftover after parsing attributes in process `syz.1.2368'. [ 372.348122][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 372.356558][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 375.110811][T15140] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2391'. [ 376.000756][T15168] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2395'. [ 376.293736][T15172] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2397'. [ 376.316486][T15174] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2398'. [ 376.593904][T15178] netlink: 256 bytes leftover after parsing attributes in process `syz.4.2399'. [ 376.823523][T15181] vlan1: entered allmulticast mode [ 376.839366][T15181] hsr0: entered allmulticast mode [ 376.846407][T15183] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2401'. [ 376.868223][T15181] hsr_slave_0: entered allmulticast mode [ 376.868547][T15184] netlink: 'syz.0.2400': attribute type 1 has an invalid length. [ 376.905789][T15186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2401'. [ 376.927068][T15186] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2401'. [ 377.124578][T15190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2403'. [ 377.134088][T15190] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2403'. [ 377.166505][T15186] netlink: 'syz.3.2401': attribute type 1 has an invalid length. [ 377.209401][T15184] 8021q: adding VLAN 0 to HW filter on device bond8 [ 377.410985][ T9813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.595108][ T9813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.605160][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 377.853556][T15186] workqueue: Failed to create a rescuer kthread for wq "bond10": -EINTR [ 377.905014][T15213] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 378.713387][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.942302][T15230] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 379.237575][T15237] netlink: 'syz.2.2415': attribute type 2 has an invalid length. [ 379.901424][T15252] macvtap1: entered promiscuous mode [ 379.906979][T15252] macvtap1: entered allmulticast mode [ 380.175109][T15252] veth1_vlan: entered allmulticast mode [ 380.179925][T15259] netlink: 'syz.3.2422': attribute type 4 has an invalid length. [ 380.183630][T15257] netlink: 'syz.2.2416': attribute type 21 has an invalid length. [ 380.188496][T15259] __nla_validate_parse: 3 callbacks suppressed [ 380.188512][T15259] netlink: 240 bytes leftover after parsing attributes in process `syz.3.2422'. [ 380.243451][T15257] netlink: 128 bytes leftover after parsing attributes in process `syz.2.2416'. [ 381.278571][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 381.351283][T15257] netlink: 3 bytes leftover after parsing attributes in process `syz.2.2416'. [ 382.075758][T15269] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 382.630503][ T6210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 382.978236][T15291] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2427'. [ 383.041870][T15291] syzkaller1: entered promiscuous mode [ 383.048899][T15291] syzkaller1: entered allmulticast mode [ 383.211574][ T9804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.220141][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.221607][T15299] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2427'. [ 383.230375][ T9820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 383.550385][T15294] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2428'. [ 383.559688][T15294] openvswitch: netlink: IPv4 frag type 127 is out of range max 2 [ 383.878760][T15311] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2433'. [ 384.244511][T15323] xt_socket: unknown flags 0x8 [ 384.356599][T15313] L: renamed from nlmon0 [ 384.632507][T15331] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2437'. [ 384.671678][T15328] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2438'. [ 385.267918][T15343] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2441'. [ 385.901270][T15360] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 386.529342][T15377] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2447'. [ 386.554788][T15377] syzkaller0: entered promiscuous mode [ 386.560322][T15377] syzkaller0: entered allmulticast mode [ 387.432540][T15391] netlink: 'syz.2.2451': attribute type 12 has an invalid length. [ 387.452383][T15391] netlink: 'syz.2.2451': attribute type 29 has an invalid length. [ 387.462426][T15391] netlink: 148 bytes leftover after parsing attributes in process `syz.2.2451'. [ 387.494540][T15391] netlink: 59 bytes leftover after parsing attributes in process `syz.2.2451'. [ 387.721656][ T9804] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 388.455337][T15423] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2460'. [ 389.354021][T15446] xt_socket: unknown flags 0x8 [ 389.604016][T15449] netlink: 'syz.0.2466': attribute type 39 has an invalid length. [ 389.616212][T15450] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2467'. [ 389.871750][T15449] hsr_slave_0: left promiscuous mode [ 391.307107][T15478] netlink: 36 bytes leftover after parsing attributes in process `syz.0.2474'. [ 391.334471][T15478] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2474'. [ 391.353548][T15482] netlink: 'syz.2.2475': attribute type 10 has an invalid length. [ 391.745278][T15482] team0 (unregistering): Port device team_slave_0 removed [ 391.777419][T15482] team0 (unregistering): Port device team_slave_1 removed [ 392.401657][T15504] IPVS: set_ctl: invalid protocol: 137 172.20.20.30:20003 [ 392.419811][T15505] netlink: 52 bytes leftover after parsing attributes in process `syz.4.2482'. [ 393.925075][T15539] IPv6: sit3: Disabled Multicast RS [ 393.934639][T15540] blkio.reset_stats is deprecated [ 393.977585][T15550] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2494'. [ 394.071809][T15557] netlink: 36 bytes leftover after parsing attributes in process `syz.4.2494'. [ 394.206260][T15564] netlink: 'syz.1.2490': attribute type 1 has an invalid length. [ 395.828987][T15581] netlink: 'syz.1.2498': attribute type 4 has an invalid length. [ 395.869102][T15583] netlink: 52 bytes leftover after parsing attributes in process `syz.2.2499'. [ 395.920138][T15589] netlink: 'syz.1.2498': attribute type 4 has an invalid length. [ 397.379979][T15587] veth7: entered allmulticast mode [ 397.653958][T15595] ip6t_srh: unknown srh invflags 4000 [ 397.987100][T15602] netlink: 'syz.0.2506': attribute type 4 has an invalid length. [ 398.005525][T15602] netlink: 240 bytes leftover after parsing attributes in process `syz.0.2506'. [ 398.024558][T15605] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 398.056671][T15605] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 398.603618][ C1] vxcan0: j1939_tp_rxtimer: 0xffff888078ddf800: rx timeout, send abort [ 399.024329][T15632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2515'. [ 399.037561][T15633] netlink: 14544 bytes leftover after parsing attributes in process `syz.2.2514'. [ 399.103805][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880792b5c00: rx timeout, send abort [ 399.317269][T15632] 8021q: adding VLAN 0 to HW filter on device bond9 [ 399.612193][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880792b5c00: abort rx timeout. Force session deactivation [ 400.228952][T15649] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2520'. [ 400.535896][ T9813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 400.544407][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 403.205423][T15706] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2532'. [ 404.099638][T15709] netlink: 51 bytes leftover after parsing attributes in process `syz.2.2531'. [ 404.191153][T15730] netlink: 1363 bytes leftover after parsing attributes in process `syz.1.2537'. [ 404.844986][T15747] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2541'. [ 405.432269][T15756] netlink: 16 bytes leftover after parsing attributes in process `syz.4.2545'. [ 405.488457][T15761] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2546'. [ 406.140243][T15767] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2549'. [ 406.442140][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.450711][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 406.824976][T15747] infiniband syz0: set active [ 406.832943][T15747] infiniband syz0: added bridge_slave_1 [ 406.847564][T15747] workqueue: Failed to create a rescuer kthread for wq "ib_mad1": -EINTR [ 406.851542][T15747] infiniband syz0: Couldn't open port 1 [ 406.867989][T15747] smbdirect: ib_dev[syz0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 406.887527][T15747] smbdirect: ib_dev[syz0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 407.058033][T15747] smbdirect: ib_dev[syz0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 407.117705][T15747] RDS/IB: syz0: added [ 407.136119][T15747] smc: adding ib device syz0 with port count 1 [ 407.362317][T15747] smc: ib device syz0 port 1 has no pnetid [ 408.296552][T15809] IPv6: addrconf: prefix option has invalid lifetime [ 409.602243][T15838] geneve4: entered promiscuous mode [ 409.618898][T15838] geneve4: entered allmulticast mode [ 409.639326][ T9822] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 409.650253][ T9822] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 409.690523][ T9822] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 409.923077][ T9822] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 410.301124][T15842] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2567'. [ 410.663895][T15845] netlink: 'syz.2.2569': attribute type 2 has an invalid length. [ 410.673902][T15845] netlink: 244 bytes leftover after parsing attributes in process `syz.2.2569'. [ 411.602036][T15857] bridge3: entered promiscuous mode [ 411.616669][T15857] bridge3: entered allmulticast mode [ 411.633693][T15857] team0: Port device bridge3 added [ 411.957347][T15857] syzkaller0: entered promiscuous mode [ 411.976236][T15857] syzkaller0: entered allmulticast mode [ 411.991413][T15872] netlink: 9 bytes leftover after parsing attributes in process `syz.0.2576'. [ 412.265435][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.274037][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 412.640578][T15882] netlink: 'syz.2.2578': attribute type 24 has an invalid length. [ 412.856743][T15883] netlink: 'syz.2.2578': attribute type 1 has an invalid length. [ 412.864557][T15883] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2578'. [ 412.873433][T15883] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2578'. [ 412.882308][T15883] netlink: 'syz.2.2578': attribute type 2 has an invalid length. [ 412.890079][T15883] netlink: 'syz.2.2578': attribute type 2 has an invalid length. [ 412.898023][T15883] netlink: 'syz.2.2578': attribute type 2 has an invalid length. [ 413.926018][T15901] openvswitch: netlink: IP tunnel dst address not specified [ 414.994147][T15916] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2589'. [ 415.466195][T15920] bond4: option arp_validate: mode dependency failed, not supported in mode balance-alb(6) [ 415.486947][T15920] bond4 (unregistering): Released all slaves [ 416.141174][T15946] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2598'. [ 416.141245][T15947] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2598'. [ 416.168785][T15949] netlink: 12 bytes leftover after parsing attributes in process `syz.1.2597'. [ 416.194952][T15949] 8021q: adding VLAN 0 to HW filter on device bond7 [ 417.849705][ T9813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.858118][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 417.891542][T15990] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 419.082599][T16015] netlink: 'syz.1.2614': attribute type 12 has an invalid length. [ 419.085287][T16019] netlink: 'syz.2.2613': attribute type 16 has an invalid length. [ 419.090482][T16015] netlink: 'syz.1.2614': attribute type 29 has an invalid length. [ 419.090504][T16015] netlink: 148 bytes leftover after parsing attributes in process `syz.1.2614'. [ 419.090524][T16015] netlink: 'syz.1.2614': attribute type 1 has an invalid length. [ 419.090537][T16015] netlink: 'syz.1.2614': attribute type 2 has an invalid length. [ 419.098738][T16019] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2613'. [ 419.106166][T16015] netlink: 11 bytes leftover after parsing attributes in process `syz.1.2614'. [ 419.361671][T16019] veth0_macvtap: entered allmulticast mode [ 419.397805][T16026] netlink: 'syz.1.2617': attribute type 24 has an invalid length. [ 419.678305][T16030] netlink: 212348 bytes leftover after parsing attributes in process `syz.0.2618'. [ 420.099035][T16037] netlink: 'syz.0.2622': attribute type 61 has an invalid length. [ 420.348316][T16049] netlink: 'syz.2.2620': attribute type 1 has an invalid length. [ 420.365678][T16047] netlink: 212368 bytes leftover after parsing attributes in process `syz.4.2623'. [ 420.744223][T16058] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2624'. [ 421.026498][T16056] can: request_module (can-proto-0) failed. [ 421.038519][T16057] IPVS: Scheduler module ip_vs_sip not found [ 421.069732][T16071] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2624'. [ 421.084901][T16056] IPVS: set_ctl: invalid protocol: 135 100.1.1.1:20004 [ 421.310892][T16073] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2624'. [ 421.314539][T16058] 8021q: adding VLAN 0 to HW filter on device bond10 [ 421.355713][T16076] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2628'. [ 421.374623][T16063] 8021q: adding VLAN 0 to HW filter on device bond11 [ 421.384853][T16063] bond10: (slave bond11): Enslaving as an active interface with an up link [ 421.576903][T16071] bond10 (unregistering): (slave bond11): Releasing backup interface [ 421.635182][T16071] bond10 (unregistering): Released all slaves [ 422.102571][T16090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2633'. [ 422.122697][T16090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2633'. [ 422.162691][T16090] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2633'. [ 422.172130][T16090] veth1_to_bridge: entered allmulticast mode [ 422.178803][T16090] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2633'. [ 422.400272][T16090] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2633'. [ 423.062339][T16106] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2636'. [ 423.603575][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 423.612060][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 425.483195][T16157] netlink: 'syz.2.2656': attribute type 2 has an invalid length. [ 425.502336][T16157] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2656'. [ 426.775389][T16193] netlink: 96 bytes leftover after parsing attributes in process `syz.1.2667'. [ 427.496520][T16224] netlink: 27 bytes leftover after parsing attributes in process `syz.0.2671'. [ 427.525238][T16223] netlink: 208 bytes leftover after parsing attributes in process `syz.4.2672'. [ 427.745830][T16223] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2672'. [ 429.080480][T16255] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2683'. [ 429.092078][T16250] xt_hashlimit: invalid interval [ 429.126368][T16258] netlink: 188 bytes leftover after parsing attributes in process `syz.4.2684'. [ 429.358070][ T9815] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.366572][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 429.736829][T16265] geneve3: entered promiscuous mode [ 429.740026][T16270] netlink: 'syz.2.2688': attribute type 1 has an invalid length. [ 429.789666][T16270] 8021q: adding VLAN 0 to HW filter on device bond5 [ 430.014314][T16277] netlink: 48 bytes leftover after parsing attributes in process `syz.2.2688'. [ 430.019005][T16278] netlink: 'syz.0.2690': attribute type 9 has an invalid length. [ 430.685873][T16273] netlink: 'syz.1.2689': attribute type 39 has an invalid length. [ 430.728626][T16290] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2692'. [ 432.273759][T16327] bridge: RTM_NEWNEIGH with invalid state 0x20 [ 432.313066][T16332] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2698'. [ 432.569911][T16332] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2698'. [ 432.580888][T16332] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2698'. [ 433.205183][T16349] openvswitch: netlink: Message has 265 unknown bytes. [ 433.213916][T16349] netlink: 'syz.0.2702': attribute type 4 has an invalid length. [ 434.423475][T16370] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2707'. [ 434.445491][ T9806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.454129][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 434.471606][T16372] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2710'. [ 434.730043][T16374] erspan0: entered promiscuous mode [ 434.746515][T16374] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2707'. [ 435.379990][T16391] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2714'. [ 435.689004][T16390] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2715'. [ 435.699892][T16393] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2715'. [ 436.575384][T16405] netlink: 284 bytes leftover after parsing attributes in process `syz.0.2719'. [ 437.719954][T16436] netlink: 'syz.2.2728': attribute type 1 has an invalid length. [ 437.727968][T16436] __nla_validate_parse: 1 callbacks suppressed [ 437.727987][T16436] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2728'. [ 439.404625][T16483] netlink: 96 bytes leftover after parsing attributes in process `syz.2.2740'. [ 439.420911][T16485] tipc: Enabling of bearer rejected, failed to enable media [ 440.171834][ T9820] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.180299][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 440.194715][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 445.420659][T16533] tipc: Enabling of bearer rejected, failed to enable media [ 445.498867][T16521] netlink: 'syz.3.2750': attribute type 4 has an invalid length. [ 446.012822][ T9813] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.021591][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 446.066651][T16550] openvswitch: netlink: IP tunnel TTL not specified. [ 446.326125][T16541] tipc: Enabling of bearer rejected, failed to enable media [ 446.441953][T16556] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2758'. [ 447.017971][T16567] ksmbd: Unknown IPC event: 3, ignore. [ 447.133585][T16572] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2760'. [ 447.390910][T16574] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2761'. [ 447.420975][T16574] ip6gre0: Master is either lo or non-ether device [ 447.427357][T16580] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2762'. [ 448.018586][ T5630] block nbd0: Receive control failed (result -107) [ 448.064288][T16591] x_tables: duplicate underflow at hook 2 [ 449.166726][T16578] netlink: 12 bytes leftover after parsing attributes in process `syz.4.2762'. [ 449.219935][T16604] netlink: 'syz.3.2769': attribute type 4 has an invalid length. [ 449.227753][T16604] netlink: 152 bytes leftover after parsing attributes in process `syz.3.2769'. [ 449.237732][T16604] .`: renamed from bond0 [ 449.261811][ T5630] block nbd1: Receive control failed (result -32) [ 449.448395][T16590] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2766'. [ 449.673000][T16608] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2771'. [ 450.032400][T16620] netlink: 60 bytes leftover after parsing attributes in process `syz.4.2775'. [ 450.310864][T16625] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2778'. [ 450.576049][T16625] 8021q: adding VLAN 0 to HW filter on device bond0 [ 450.609262][T16630] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 450.984422][T16637] netlink: 'syz.2.2780': attribute type 25 has an invalid length. [ 451.751788][ T9810] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.760309][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 451.766767][T16651] __nla_validate_parse: 1 callbacks suppressed [ 451.766786][T16651] netlink: 248 bytes leftover after parsing attributes in process `syz.0.2782'. [ 451.783625][T16651] netlink: 52 bytes leftover after parsing attributes in process `syz.0.2782'. [ 451.855726][T16657] xt_hashlimit: size too large, truncated to 1048576 [ 452.113753][T16661] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2785'. [ 452.122993][T16661] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2785'. [ 452.132198][T16661] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2785'. [ 452.223989][T16666] bridge0: port 1(gretap0) entered blocking state [ 452.224155][T16666] bridge0: port 1(gretap0) entered listening state [ 452.236618][T16666] 8021q: adding VLAN 0 to HW filter on device .` [ 452.241757][T16666] 8021q: adding VLAN 0 to HW filter on device team0 [ 452.257582][T16666] batman_adv: batadv0: Interface activated: dummy0 [ 452.265636][T16666] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 452.883953][T16666] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 453.223419][T16666] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 453.543405][T16666] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 454.263063][T16694] netlink: 51 bytes leftover after parsing attributes in process `syz.0.2788'. [ 454.517982][T16704] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2790'. [ 455.117253][T16719] netlink: 'syz.1.2795': attribute type 11 has an invalid length. [ 455.134382][T16709] ip6gre1: entered allmulticast mode [ 455.140273][T16719] netlink: 224 bytes leftover after parsing attributes in process `syz.1.2795'. [ 455.143815][ T9807] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.180758][ T9807] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 455.478023][ T9807] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 456.129170][T16749] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 456.457836][T16760] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2807'. [ 457.404225][ T6210] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.413102][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 457.672586][T16784] sctp: [Deprecated]: syz.2.2813 (pid 16784) Use of int in max_burst socket option. [ 457.672586][T16784] Use struct sctp_assoc_value instead [ 457.710505][T16778] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2811'. [ 458.041312][T16791] netlink: 'syz.3.2815': attribute type 83 has an invalid length. [ 459.812012][T16834] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2831'. [ 460.142898][T16834] vlan3: entered allmulticast mode [ 460.148178][T16834] bond0: entered allmulticast mode [ 460.389087][T16846] netlink: 14 bytes leftover after parsing attributes in process `syz.1.2831'. [ 460.412863][T16834] bond_slave_0: entered allmulticast mode [ 460.418786][T16834] bond_slave_1: entered allmulticast mode [ 460.667423][T16846] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 460.686358][T16846] bond_slave_0: left allmulticast mode [ 460.700509][T16853] openvswitch: netlink: Duplicate key (type 2). [ 460.707551][T16854] netlink: 'syz.4.2830': attribute type 11 has an invalid length. [ 460.719797][T16854] netlink: 132 bytes leftover after parsing attributes in process `syz.4.2830'. [ 460.743633][T16846] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 460.979587][T16846] bond_slave_1: left allmulticast mode [ 460.986718][T16846] bond0 (unregistering): Released all slaves [ 461.035957][T16862] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2835'. [ 461.341987][T16865] bond10: entered promiscuous mode [ 461.352259][T16865] bond10: entered allmulticast mode [ 462.042974][T16887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.076550][T16887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.119177][T16887] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 462.211249][T16889] vlan3: entered promiscuous mode [ 462.639781][T16895] netlink: 144 bytes leftover after parsing attributes in process `syz.2.2845'. [ 463.226812][T16881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.246961][T16881] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.456422][ T9811] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.465074][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 463.812638][T16895] bond6 (unregistering): Released all slaves [ 463.912397][T16911] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2847'. [ 463.963475][T16911] netlink: 'syz.3.2847': attribute type 1 has an invalid length. [ 463.983179][T16911] netlink: 36 bytes leftover after parsing attributes in process `syz.3.2847'. [ 464.528642][T16921] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.2850'. [ 466.282631][T16959] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2858'. [ 468.327940][T17001] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2867'. [ 468.938941][ T9803] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 468.947621][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 469.186575][T17014] wg1 speed is unknown, defaulting to 1000 [ 469.194464][T17014] lo speed is unknown, defaulting to 1000 [ 469.202241][T17014] xfrm0 speed is unknown, defaulting to 1000 [ 472.441451][T17072] vcan0: entered promiscuous mode [ 472.458022][T17072] vcan0: entered allmulticast mode [ 472.496625][T17076] netlink: 'syz.1.2881': attribute type 15 has an invalid length. [ 473.478146][T17096] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2886'. [ 473.510407][T17096] netlink: 'syz.0.2886': attribute type 30 has an invalid length. [ 473.767782][ T9811] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.783361][ T9811] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.792194][ T9811] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 473.792418][T17108] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2887'. [ 473.819043][T17107] netlink: 'syz.0.2888': attribute type 24 has an invalid length. [ 473.851427][T17108] netlink: 'syz.2.2887': attribute type 7 has an invalid length. [ 474.031648][T17108] netlink: 'syz.2.2887': attribute type 8 has an invalid length. [ 474.039430][T17108] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2887'. [ 474.045672][T17107] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2888'. [ 474.092687][T17110] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2889'. [ 475.213148][T17117] syzkaller0: entered promiscuous mode [ 475.218685][T17117] syzkaller0: entered allmulticast mode [ 475.558131][T17124] netlink: 'syz.1.2893': attribute type 1 has an invalid length. [ 475.865907][T17127] openvswitch: netlink: Unexpected mask (mask=201040, allowed=10048) [ 475.876913][T17127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2895'. [ 477.106350][T17160] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2902'. [ 477.183084][T17161] wg1 speed is unknown, defaulting to 1000 [ 477.201410][T17161] lo speed is unknown, defaulting to 1000 [ 477.365489][T17161] xfrm0 speed is unknown, defaulting to 1000 [ 477.369445][T17166] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 477.383523][T17166] bond0: option ad_user_port_key: mode dependency failed, not supported in mode balance-rr(0) [ 477.656462][T17170] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2907'. [ 477.665977][T17168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.667147][T17169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.676334][T17170] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2907'. [ 477.686945][T17169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.695831][T17170] netlink: 100 bytes leftover after parsing attributes in process `syz.0.2907'. [ 477.705793][T17169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.725236][T17169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.736782][T17169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 477.748278][T17169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.047328][T17169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.304484][T17169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.336978][T17179] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 478.353384][T17169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.364813][T17169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.376289][T17169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.458672][T17179] netlink: 'syz.1.2911': attribute type 44 has an invalid length. [ 478.667775][T17169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.679449][T17169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.691095][T17169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.704403][T17169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.715950][T17169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.727375][T17169] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 478.808833][T17185] __nla_validate_parse: 30 callbacks suppressed [ 478.808853][T17185] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2913'. [ 478.832521][T17186] netlink: 28 bytes leftover after parsing attributes in process `syz.4.2913'. [ 479.133872][T17196] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2915'. [ 479.817585][T17206] tun0: tun_chr_ioctl cmd 1074025675 [ 479.822962][T17206] tun0: persist disabled [ 479.958369][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2919'. [ 479.991129][T17208] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2919'. [ 480.021807][T17209] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2919'. [ 480.199268][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 480.251133][ T50] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 480.498855][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 480.511620][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 480.522728][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 480.587974][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 480.597080][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 480.951130][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 481.138117][T17227] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2922'. [ 481.139450][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 481.155571][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 481.511073][T17239] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 482.147273][T17248] netlink: 'syz.1.2926': attribute type 29 has an invalid length. [ 482.158106][T17248] netlink: 'syz.1.2926': attribute type 29 has an invalid length. [ 482.175218][T17248] netlink: 'syz.1.2926': attribute type 29 has an invalid length. [ 482.184588][T17248] netlink: 'syz.1.2926': attribute type 29 has an invalid length. [ 482.194116][T17248] netlink: 'syz.1.2926': attribute type 29 has an invalid length. [ 482.202647][T17248] netlink: 'syz.1.2926': attribute type 29 has an invalid length. [ 482.211529][T17248] netlink: 'syz.1.2926': attribute type 29 has an invalid length. [ 482.220344][T17248] netlink: 'syz.1.2926': attribute type 29 has an invalid length. [ 482.365304][ C1] bridge0: port 1(gretap0) entered learning state [ 482.649155][T17248] netlink: 'syz.1.2926': attribute type 29 has an invalid length. [ 482.674995][T17248] netlink: 548 bytes leftover after parsing attributes in process `syz.1.2926'. [ 483.031068][T17266] netlink: 'syz.2.2930': attribute type 11 has an invalid length. [ 483.083449][T17266] netlink: 199820 bytes leftover after parsing attributes in process `syz.2.2930'. [ 483.224019][T17210] wg1 speed is unknown, defaulting to 1000 [ 483.242246][T17210] lo speed is unknown, defaulting to 1000 [ 483.248726][T17213] Bluetooth: hci5: command tx timeout [ 483.267087][T17210] xfrm0 speed is unknown, defaulting to 1000 [ 484.051010][ T9803] netdevsim netdevsim0 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 484.061674][ T9803] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 484.855434][T17278] netlink: 16 bytes leftover after parsing attributes in process `syz.2.2934'. [ 484.865467][T17278] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2934'. [ 485.551941][T17285] netlink: 256 bytes leftover after parsing attributes in process `syz.1.2936'. [ 485.626481][T17213] Bluetooth: hci5: command tx timeout [ 485.843819][ T9803] netdevsim netdevsim0 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 485.878795][ T9803] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.151837][T17292] veth0: entered promiscuous mode [ 486.425189][T17294] Cannot find set identified by id 3 to match [ 486.697339][ T9803] netdevsim netdevsim0 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 486.707853][ T9803] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 486.724204][T17309] kthread_run failed with err -4 [ 486.912530][T17291] veth0: left promiscuous mode [ 487.020201][T17317] openvswitch: netlink: Missing valid actions attribute. [ 487.029531][T17317] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 487.391615][T17210] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.422033][T17210] bridge0: port 1(bridge_slave_0) entered disabled state [ 487.453206][T17210] bridge_slave_0: entered allmulticast mode [ 487.495146][T17210] bridge_slave_0: entered promiscuous mode [ 487.525644][T17210] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.603473][T17210] bridge0: port 2(bridge_slave_1) entered disabled state [ 487.618975][T17210] bridge_slave_1: entered allmulticast mode [ 487.626897][T17210] bridge_slave_1: entered promiscuous mode [ 487.648256][ T5630] Bluetooth: hci5: command tx timeout [ 487.676974][T17210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 487.965627][T17210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 488.010033][T17210] team0: Port device team_slave_0 added [ 488.019596][T17210] team0: Port device team_slave_1 added [ 488.049183][T17333] netlink: 'syz.4.2948': attribute type 1 has an invalid length. [ 488.114048][T17333] netlink: 'syz.4.2948': attribute type 1 has an invalid length. [ 488.266620][T17210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 488.273721][T17210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.299628][T17210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 488.314238][T17210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 488.321767][T17210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 488.678861][T17352] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2952'. [ 488.861293][T17210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 488.952314][T17348] netlink: 40 bytes leftover after parsing attributes in process `syz.4.2950'. [ 489.241494][T17210] hsr_slave_0: entered promiscuous mode [ 489.248062][T17210] hsr_slave_1: entered promiscuous mode [ 489.254629][T17210] debugfs: 'hsr0' already exists in 'hsr' [ 489.260372][T17210] Cannot create hsr debugfs directory [ 489.773322][ T5630] Bluetooth: hci5: command tx timeout [ 490.112935][T17375] netlink: 32 bytes leftover after parsing attributes in process `syz.4.2959'. [ 490.122505][T17375] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2959'. [ 491.158978][T17387] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2960'. [ 491.551019][T17387] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 491.560718][T17387] netlink: 212348 bytes leftover after parsing attributes in process `syz.3.2960'. [ 492.655339][T17407] netlink: 28 bytes leftover after parsing attributes in process `syz.1.2965'. [ 492.677986][ T9803] bridge_slave_1: left allmulticast mode [ 492.686203][ T9803] bridge_slave_1: left promiscuous mode [ 492.711736][ T9803] bridge0: port 2(bridge_slave_1) entered disabled state [ 492.881588][T17414] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2962'. [ 492.931090][ T9803] bridge_slave_0: left allmulticast mode [ 492.936860][ T9803] bridge_slave_0: left promiscuous mode [ 492.942717][ T9803] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.250444][ T9803] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 493.258658][ T9803] ip6gre1 (unregistering): left promiscuous mode [ 494.782748][ T9803] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.795351][ T9803] bond0 (unregistering): (slave team0): Releasing backup interface [ 494.805069][ T9803] bond0 (unregistering): Released all slaves [ 494.816588][ T9803] bond1 (unregistering): Released all slaves [ 494.831121][ T9803] bond2 (unregistering): Released all slaves [ 494.854061][ T9803] bond3 (unregistering): Released all slaves [ 494.996326][ T9803] bond4 (unregistering): (slave bond5): Releasing backup interface [ 495.006395][ T9803] bond4 (unregistering): Released all slaves [ 495.024944][ T9803] bond5 (unregistering): Released all slaves [ 495.039181][ T9803] bond6 (unregistering): Released all slaves [ 495.053421][ T9803] bond7 (unregistering): Released all slaves [ 495.067494][ T9803] bond8 (unregistering): Released all slaves [ 495.085250][ T9803] bond9 (unregistering): Released all slaves [ 495.295980][T17405] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2964'. [ 495.357967][T17398] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 495.588735][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 495.613476][T17416] netlink: 104 bytes leftover after parsing attributes in process `syz.4.2966'. [ 496.217508][ T9803] tipc: Disabling bearer [ 496.497340][ T9803] tipc: Disabling bearer [ 496.504427][ T9803] tipc: Left network mode [ 498.386866][T17472] netlink: 'syz.3.2976': attribute type 4 has an invalid length. [ 498.428537][T17472] netlink: 'syz.3.2976': attribute type 4 has an invalid length. [ 498.895238][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 498.940618][T17429] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 499.172934][T17490] netlink: 1196 bytes leftover after parsing attributes in process `syz.4.2977'. [ 499.721230][T17494] netlink: 'syz.2.2980': attribute type 83 has an invalid length. [ 499.882988][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 501.274339][T17516] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 501.281379][T17524] netlink: 36 bytes leftover after parsing attributes in process `syz.2.2985'. [ 501.574118][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 502.271463][T17210] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 502.325504][T17210] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 502.358428][T17210] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 502.587351][T17210] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 502.624820][T17210] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 502.881614][ T9808] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 502.891883][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 503.248239][T17210] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 503.523126][T17210] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 503.658440][T17210] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 503.930538][T17563] ÿÿÿÿÿÿ: renamed from virt_wifi0 [ 503.948829][T17567] pim6reg: entered allmulticast mode [ 504.971822][T17593] netlink: 64 bytes leftover after parsing attributes in process `syz.4.2994'. [ 505.271176][T17210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 505.555475][T17210] 8021q: adding VLAN 0 to HW filter on device team0 [ 505.571402][ T9808] bridge0: port 1(bridge_slave_0) entered blocking state [ 505.578748][ T9808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 506.000829][ T9808] bridge0: port 2(bridge_slave_1) entered blocking state [ 506.008150][ T9808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 506.734363][T17616] netlink: 'syz.3.2999': attribute type 8 has an invalid length. [ 506.742164][T17616] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2999'. [ 507.322504][T17616] veth1_to_team: entered promiscuous mode [ 507.334352][T17616] veth1_to_team: left promiscuous mode [ 507.969261][ T9806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 507.977865][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 508.614231][ T9803] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 508.886191][ T9803] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 508.907827][T17643] netlink: 'syz.4.3007': attribute type 1 has an invalid length. [ 508.924668][T17645] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3009'. [ 509.191447][T17645] xt_hashlimit: size too large, truncated to 1048576 [ 509.199572][ T9803] veth1_macvtap: left promiscuous mode [ 509.206041][ T9803] veth0_macvtap: left promiscuous mode [ 509.249643][T17650] netlink: 'syz.2.3009': attribute type 21 has an invalid length. [ 509.294520][T17650] netlink: 128 bytes leftover after parsing attributes in process `syz.2.3009'. [ 509.551100][T17663] x_tables: duplicate underflow at hook 3 [ 510.236287][ T9803] team0 (unregistering): Port device team_slave_1 removed [ 510.367365][ T9803] team0 (unregistering): Port device team_slave_0 removed [ 510.592660][T17643] workqueue: Failed to create a rescuer kthread for wq "bond6": -EINTR [ 510.608742][T17648] veth0_to_bond: left allmulticast mode [ 510.633501][T17648] veth0_to_bond: left promiscuous mode [ 510.700297][T17648] bridge4: port 2(veth0_to_bond) entered disabled state [ 510.944503][T17650] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3009'. [ 510.973264][T17657] syzkaller0: entered promiscuous mode [ 510.979249][T17657] syzkaller0: entered allmulticast mode [ 511.207058][T17671] tipc: Enabled bearer , priority 0 [ 511.283396][T17671] tipc: Resetting bearer [ 511.514644][T17671] tipc: Disabling bearer [ 512.228107][T17701] netlink: 30 bytes leftover after parsing attributes in process `syz.4.3017'. [ 512.442806][ C1] bridge0: port 1(gretap0) entered forwarding state [ 512.442875][ C1] bridge0: topology change detected, propagating [ 512.914780][T17701] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3017'. [ 512.932474][T17718] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3022'. [ 512.958531][T17701] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3017'. [ 513.594442][T17728] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 513.603149][ C0] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.270473][T17740] netlink: 212344 bytes leftover after parsing attributes in process `syz.4.3027'. [ 514.317164][T17210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 514.564127][ T9809] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.572605][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 514.615238][T17210] veth0_vlan: entered promiscuous mode [ 514.877698][T17750] syzkaller1: entered promiscuous mode [ 514.883496][T17750] syzkaller1: entered allmulticast mode [ 514.937956][T17210] veth1_vlan: entered promiscuous mode [ 515.006461][T17210] veth0_macvtap: entered promiscuous mode [ 515.235293][T17210] veth1_macvtap: entered promiscuous mode [ 515.257446][T17210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 515.269305][T17210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 515.587529][T17759] bridge10: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 515.611716][ T9809] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 515.638888][ T9809] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.057045][ T9809] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.133296][ T9809] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 516.563553][T17778] netlink: 348 bytes leftover after parsing attributes in process `syz.3.3035'. [ 517.148313][ T9806] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.162421][ T9806] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.375956][ T6210] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 517.384332][ T6210] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 517.398500][T17797] x_tables: duplicate underflow at hook 2 [ 517.671360][T17797] netlink: 'syz.1.3039': attribute type 4 has an invalid length. [ 517.688246][T17797] netlink: 224 bytes leftover after parsing attributes in process `syz.1.3039'. [ 518.594813][ T9803] IPVS: stop unused estimator thread 0... [ 518.636494][T17213] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 518.653410][T17213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 518.702613][T17213] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 518.752867][T17213] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 518.770650][T17213] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 520.159004][ T9805] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.167614][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 520.918549][T17841] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3049'. [ 520.930306][T17805] wg1 speed is unknown, defaulting to 1000 [ 520.938279][T17805] lo speed is unknown, defaulting to 1000 [ 520.946053][T17805] xfrm0 speed is unknown, defaulting to 1000 [ 521.288905][T17846] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 521.598351][T17213] Bluetooth: hci2: command tx timeout [ 521.612285][T17851] bridge0: port 3(ipvlan2) entered blocking state [ 521.618895][T17851] bridge0: port 3(ipvlan2) entered disabled state [ 521.625510][T17851] ipvlan2: entered allmulticast mode [ 521.630801][T17851] bridge0: entered allmulticast mode [ 521.639144][T17851] ipvlan2: left allmulticast mode [ 521.644210][T17851] bridge0: left allmulticast mode [ 522.953447][T17864] netlink: 44 bytes leftover after parsing attributes in process `syz.3.3055'. [ 523.295905][T17884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3057'. [ 523.311639][T17884] netlink: 28 bytes leftover after parsing attributes in process `syz.3.3057'. [ 523.333484][T17873] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3056'. [ 523.925204][T17213] Bluetooth: hci2: command tx timeout [ 524.862283][T17923] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3067'. [ 524.863995][T17915] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3065'. [ 525.059908][T17805] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.070326][T17805] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.078422][T17805] bridge_slave_0: entered allmulticast mode [ 525.105829][T17805] bridge_slave_0: entered promiscuous mode [ 525.118521][T17914] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3065'. [ 525.127956][T17914] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3065'. [ 525.137733][T17920] netlink: 40 bytes leftover after parsing attributes in process `syz.2.3063'. [ 525.415260][T17805] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.422548][T17805] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.429799][T17805] bridge_slave_1: entered allmulticast mode [ 525.437848][T17805] bridge_slave_1: entered promiscuous mode [ 525.734937][T17805] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 525.765647][T17805] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 525.788034][T17939] tipc: Started in network mode [ 525.793432][T17939] tipc: Node identity eea7098b7f68, cluster identity 4711 [ 525.800843][T17939] tipc: Enabled bearer , priority 0 [ 525.823131][T17933] netlink: 104 bytes leftover after parsing attributes in process `syz.0.3072'. [ 525.897671][ T9819] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.906131][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 525.942603][T17935] syzkaller0: entered promiscuous mode [ 525.948589][T17935] syzkaller0: entered allmulticast mode [ 525.955524][T17935] tipc: Resetting bearer [ 525.963008][T17213] Bluetooth: hci2: command tx timeout [ 526.079515][ T9808] tipc: Resetting bearer [ 526.088552][T17805] team0: Port device team_slave_0 added [ 526.098628][T17805] team0: Port device team_slave_1 added [ 526.118038][T17935] tipc: Resetting bearer [ 528.144965][T17213] Bluetooth: hci2: command tx timeout [ 530.589532][T17935] tipc: Disabling bearer [ 530.618491][T17949] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 530.884179][T17955] netlink: 'syz.2.3077': attribute type 1 has an invalid length. [ 530.892922][T16183] tipc: Node number set to 2446264715 [ 530.910423][T17805] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 530.917447][T17805] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.182915][T17805] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 531.216448][T17962] x_tables: duplicate underflow at hook 1 [ 531.219576][T17955] 8021q: adding VLAN 0 to HW filter on device bond6 [ 531.240826][T17805] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 531.248004][T17805] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 531.506020][T17952] netlink: 576 bytes leftover after parsing attributes in process `syz.0.3076'. [ 531.535492][T17805] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 531.787488][ T9807] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.796011][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 531.861612][T17805] hsr_slave_0: entered promiscuous mode [ 531.869937][T17805] hsr_slave_1: entered promiscuous mode [ 531.877227][T17805] debugfs: 'hsr0' already exists in 'hsr' [ 532.115126][T17805] Cannot create hsr debugfs directory [ 532.477837][T17980] pimreg: entered allmulticast mode [ 532.484276][T17980] "syz.1.3084" (17980) uses obsolete ecb(arc4) skcipher [ 532.527165][T17976] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3082'. [ 533.026735][T17991] netlink: 'syz.1.3086': attribute type 1 has an invalid length. [ 533.366250][T18006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3089'. [ 533.662222][T17994] syzkaller0: entered promiscuous mode [ 533.667759][T17994] syzkaller0: entered allmulticast mode [ 533.948850][T17805] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 533.959855][T17805] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 533.969858][T17805] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 533.979989][T17805] netdevsim netdevsim4 eth3 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 535.101859][T18045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3097'. [ 535.105980][T17805] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 535.122054][T17805] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 535.131829][T17805] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 535.141764][T17805] netdevsim netdevsim4 eth2 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 535.496656][T18048] netlink: 'syz.3.3098': attribute type 5 has an invalid length. [ 535.513101][T18049] netlink: 'syz.3.3098': attribute type 5 has an invalid length. [ 535.837995][T18054] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3100'. [ 536.060241][T17805] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 536.070052][T17805] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 536.079739][T17805] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 536.089598][T17805] netdevsim netdevsim4 eth1 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 536.139941][T18058] syzkaller0: entered promiscuous mode [ 536.145488][T18058] syzkaller0: entered allmulticast mode [ 536.598700][T18067] netlink: 'syz.0.3105': attribute type 1 has an invalid length. [ 536.702157][T18067] 8021q: adding VLAN 0 to HW filter on device bond1 [ 536.725541][T18066] bond1: (slave ip6gretap1): making interface the new active one [ 536.748809][T18066] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 536.985387][T18072] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3106'. [ 537.474015][ T9806] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.482488][ C1] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 537.541094][T17805] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 537.550964][T17805] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 256 - 0 [ 537.560749][T17805] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 20004 - 0 [ 537.570611][T17805] netdevsim netdevsim4 eth0 (unregistering): unset [1, 2] type 2 family 0 port 6081 - 0 [ 537.586562][T18083] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3110'. [ 537.840047][T18083] netlink: 'syz.0.3110': attribute type 1 has an invalid length. [ 537.847916][T18083] netlink: 'syz.0.3110': attribute type 2 has an invalid length. [ 538.151519][T18093] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3111'. [ 538.167917][T18093] netlink: 'syz.1.3111': attribute type 8 has an invalid length. [ 538.504532][T17805] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 538.774600][T18098] netlink: 'syz.1.3115': attribute type 58 has an invalid length. [ 538.782478][T18098] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3115'. [ 538.806098][T17805] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 538.820521][T17805] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 539.153631][T17805] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 539.176430][T17805] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 539.187847][T17805] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 539.197425][T17805] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 539.207884][T17805] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 539.565157][T18118] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3120'. [ 539.576043][T18119] netlink: 168 bytes leftover after parsing attributes in process `syz.2.3120'. [ 540.939184][T18142] veth0: entered promiscuous mode [ 540.947653][T18142] veth0: left promiscuous mode [ 542.009038][T18150] netlink: 4 bytes leftover after parsing attributes in process `syz.3.3128'. [ 542.020583][T18150] netlink: 'syz.3.3128': attribute type 1 has an invalid length. [ 542.051905][T18150] bond12: (slave geneve4): making interface the new active one [ 542.060596][T18150] bond12: (slave geneve4): Enslaving as an active interface with an up link [ 542.071506][ T9805] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 20000 - 0 [ 542.210280][ T9805] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 20000 - 0 [ 542.214357][T18111] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 542.224489][ T9805] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 20000 - 0 [ 542.664746][T17805] 8021q: adding VLAN 0 to HW filter on device bond0 [ 542.849912][T17805] 8021q: adding VLAN 0 to HW filter on device team0 [ 542.863811][ T9808] bridge0: port 1(bridge_slave_0) entered blocking state [ 542.871025][ T9808] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.210383][ T9808] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.217704][ T9808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 543.436185][T18178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3134'. [ 543.478819][T18180] syzkaller0: entered promiscuous mode [ 543.699963][T18180] syzkaller0: entered allmulticast mode [ 543.704372][T18188] netlink: 'syz.3.3135': attribute type 1 has an invalid length. [ 543.716797][T18188] netlink: 12 bytes leftover after parsing attributes in process `syz.3.3135'. [ 543.731389][T18180] tc action pedit offset 136 out of bounds [ 543.756075][T18190] netlink: 'syz.0.3137': attribute type 1 has an invalid length. [ 546.442656][T18233] netlink: 'syz.3.3147': attribute type 1 has an invalid length. [ 546.485099][T18235] netlink: 'syz.3.3147': attribute type 1 has an invalid length. [ 546.703258][T18246] x_tables: ip_tables: DNAT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 546.827309][T18251] openvswitch: netlink: Geneve option length err (len 256, max 255). [ 546.849776][T18251] netlink: 'syz.3.3150': attribute type 1 has an invalid length. [ 546.857565][T18251] netlink: 'syz.3.3150': attribute type 2 has an invalid length. [ 547.217144][T18251] netlink: 'syz.3.3150': attribute type 1 has an invalid length. [ 547.224982][T18251] netlink: 'syz.3.3150': attribute type 2 has an invalid length. [ 547.229110][T17805] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 549.015134][T18292] netlink: 40 bytes leftover after parsing attributes in process `syz.3.3159'. [ 549.033020][T18291] netlink: 14 bytes leftover after parsing attributes in process `syz.1.3161'. [ 549.040031][T18294] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3162'. [ 549.374428][T17805] veth0_vlan: entered promiscuous mode [ 549.401944][T17805] veth1_vlan: entered promiscuous mode [ 549.435587][T18299] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3164'. [ 549.993380][T18316] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3165'. [ 550.006470][T17805] veth0_macvtap: entered promiscuous mode [ 550.248798][T17805] veth1_macvtap: entered promiscuous mode [ 550.297506][T17805] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 550.540047][T17805] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 550.567831][ T9806] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.602390][ T9806] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.611696][ T9806] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 550.620763][ T9819] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 551.192226][T18329] bridge0: port 3(ipvlan2) entered blocking state [ 551.212262][T18329] bridge0: port 3(ipvlan2) entered disabled state [ 551.219004][T18329] ipvlan2: entered allmulticast mode [ 551.476986][T18333] netlink: 48 bytes leftover after parsing attributes in process `syz.2.3170'. [ 551.487425][T18329] bridge0: entered allmulticast mode [ 551.496729][T18329] ipvlan2: left allmulticast mode [ 551.502019][T18329] bridge0: left allmulticast mode [ 551.820665][ T9807] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 551.829604][ T9807] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.046326][ T9807] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 552.054199][ T9807] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 552.409228][T18354] netlink: 'syz.4.3040': attribute type 1 has an invalid length. [ 552.419265][T18354] 8021q: VLANs not supported on gre0 [ 553.073304][ T5630] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 553.081736][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 553.095359][ T5630] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 553.107169][ T5630] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 553.116908][ T5630] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 554.176189][T18358] veth3: entered allmulticast mode [ 554.528160][T18377] IPv6: sit1: Disabled Multicast RS [ 555.107405][T18384] syzkaller1: entered promiscuous mode [ 555.112957][T18384] syzkaller1: entered allmulticast mode [ 555.163250][ T5630] Bluetooth: hci3: command tx timeout [ 555.316048][T18360] wg1 speed is unknown, defaulting to 1000 [ 555.337264][T18360] lo speed is unknown, defaulting to 1000 [ 555.562190][T18360] xfrm0 speed is unknown, defaulting to 1000 [ 555.591725][T16170] IPVS: starting estimator thread 0... [ 555.872247][T18392] IPVS: using max 29 ests per chain, 69600 per kthread [ 556.062849][T18404] netlink: 'syz.0.3186': attribute type 2 has an invalid length. [ 556.084570][T18404] netlink: 244 bytes leftover after parsing attributes in process `syz.0.3186'. [ 557.302783][ T5630] Bluetooth: hci3: command tx timeout [ 557.655592][T18428] netdevsim netdevsim0: loading /lib/firmware/. failed with error -22 [ 557.887136][T18428] netdevsim netdevsim0: Direct firmware load for . failed with error -22 [ 557.898108][T18428] netdevsim netdevsim0: Falling back to sysfs fallback for: . [ 558.846484][T18446] sctp: [Deprecated]: syz.4.3201 (pid 18446) Use of struct sctp_assoc_value in delayed_ack socket option. [ 558.846484][T18446] Use struct sctp_sack_info instead [ 559.415301][ T5630] Bluetooth: hci3: command tx timeout [ 559.496526][T18360] bridge0: port 1(bridge_slave_0) entered blocking state [ 559.503739][T18360] bridge0: port 1(bridge_slave_0) entered disabled state [ 559.511002][T18360] bridge_slave_0: entered allmulticast mode [ 559.574219][T18460] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3205'. [ 559.721916][T18470] netlink: 84 bytes leftover after parsing attributes in process `syz.3.3206'. [ 559.733549][T18360] bridge_slave_0: entered promiscuous mode [ 560.048976][T18360] bridge0: port 2(bridge_slave_1) entered blocking state [ 560.056177][T18360] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.063427][T18360] bridge_slave_1: entered allmulticast mode [ 560.342515][T18360] bridge_slave_1: entered promiscuous mode [ 560.385103][T18360] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 560.398046][T18360] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 562.335243][T18471] netlink: 'syz.4.3207': attribute type 1 has an invalid length. [ 562.834958][ T5630] Bluetooth: hci3: command tx timeout [ 563.871534][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 566.584388][T18360] team0: Port device team_slave_0 added [ 566.593053][T18360] team0: Port device team_slave_1 added [ 571.467009][T18360] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 571.474021][T18360] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.499938][T18360] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 571.512986][T18360] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 571.519994][T18360] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 571.545959][T18360] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 572.607100][T18360] hsr_slave_0: entered promiscuous mode [ 572.613974][T18360] hsr_slave_1: entered promiscuous mode [ 572.620379][T18360] debugfs: 'hsr0' already exists in 'hsr' [ 572.626125][T18360] Cannot create hsr debugfs directory [ 585.431889][T18360] netdevsim netdevsim2 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 585.442325][T18360] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 585.452669][T18360] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 586.838903][ C1] sched: DL replenish lagged too much [ 590.896089][T17215] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 594.659384][T17213] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 594.676321][T17213] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 594.684236][T17213] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 594.692426][T17213] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 594.700130][T17213] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 597.194934][ T5630] Bluetooth: hci1: Opcode 0x1003 failed: -110 [ 598.278410][T17213] Bluetooth: hci6: command tx timeout [ 598.289085][T17215] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 598.296844][T17215] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 599.384155][T17213] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 599.392681][T17213] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 599.400775][T17215] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 599.408539][T17215] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 601.826628][T18499] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 601.866112][T17215] Bluetooth: hci6: command tx timeout [ 601.871604][T17215] Bluetooth: hci7: command tx timeout [ 604.230785][ T5630] Bluetooth: hci7: command tx timeout [ 604.236245][ T5630] Bluetooth: hci6: command tx timeout [ 610.737484][T17215] Bluetooth: hci6: command tx timeout [ 610.742954][T17215] Bluetooth: hci7: command tx timeout [ 614.825268][T18533] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3220'. [ 614.839341][T18360] netdevsim netdevsim2 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 614.849648][T18360] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 614.859996][T18360] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 614.879646][ T5630] Bluetooth: hci7: command tx timeout [ 625.713301][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 631.985063][T17215] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 633.147224][T17213] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 633.155955][T18536] Bluetooth: hci1: Opcode 0x0c03 failed: -4 [ 640.893789][ T5630] Bluetooth: hci4: Opcode 0x1003 failed: -110 [ 640.901162][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 640.910440][ T5630] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 640.917859][ T5630] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 640.926081][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 642.005544][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 642.013520][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 645.293948][T18537] Bluetooth: hci4: Opcode 0x0c39 failed: -110 [ 645.305016][ T5630] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 648.968321][ T5630] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 648.977456][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 648.985495][ T5630] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 648.993725][ T5630] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 649.002222][ T5630] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 658.156189][ T5630] Bluetooth: hci1: command tx timeout [ 658.171223][T17215] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 658.249377][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 658.257479][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 658.265721][ T5630] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 658.273348][ T5630] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 661.035308][ T50] Bluetooth: hci1: command tx timeout [ 665.703634][ T50] Bluetooth: hci0: command tx timeout [ 665.709790][ T50] Bluetooth: hci1: command tx timeout [ 667.032528][T18360] netdevsim netdevsim2 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 667.042852][T18360] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 667.053206][T18360] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 669.271781][ T5630] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 669.278731][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 669.285943][ T5630] Bluetooth: hci1: command tx timeout [ 669.291358][ T5630] Bluetooth: hci0: command tx timeout [ 669.729689][T17215] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 669.738941][T17215] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 669.747351][T17215] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 669.755374][T17215] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 669.763027][T17215] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 671.228626][T17213] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 671.803049][T18576] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 674.360155][T17215] Bluetooth: hci0: command tx timeout [ 674.365660][T17215] Bluetooth: hci2: command tx timeout [ 675.743295][T17215] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 678.119813][T17213] Bluetooth: hci2: command tx timeout [ 678.125271][T17213] Bluetooth: hci0: command tx timeout [ 681.222480][ T50] Bluetooth: hci5: command 0x1001 tx timeout [ 681.229130][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 681.236616][ T5630] Bluetooth: hci5: Opcode 0x1001 failed: -110 [ 682.210050][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 683.248338][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 683.255739][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 683.263821][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 683.271477][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 683.405483][T17215] Bluetooth: hci3: command 0x0406 tx timeout [ 683.411554][T17215] Bluetooth: hci2: command tx timeout [ 686.644944][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 686.652931][ T50] Bluetooth: hci2: command tx timeout [ 692.059424][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 692.069085][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 692.077149][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 692.085332][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 692.092958][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 693.224498][ T9806] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 694.403597][ T50] Bluetooth: hci5: command tx timeout [ 695.766609][ T50] Bluetooth: hci4: command tx timeout [ 700.930075][ T50] Bluetooth: hci5: command tx timeout [ 700.935511][ T50] Bluetooth: hci4: command tx timeout [ 703.413730][ T5630] Bluetooth: hci4: command tx timeout [ 703.419171][ T5630] Bluetooth: hci5: command tx timeout [ 709.799152][ T50] Bluetooth: hci5: command tx timeout [ 709.804618][ T50] Bluetooth: hci4: command tx timeout [ 711.972914][ T5630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 722.060843][T17213] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 722.766045][ T5630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 726.629412][T17213] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 727.271525][T17215] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 728.829596][T17213] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 728.840146][T17213] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 728.849620][T17213] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 729.910523][ T9806] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 731.999703][T17213] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 736.634934][T17215] Bluetooth: hci7: command tx timeout [ 736.641620][T17215] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 737.592586][T17213] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 737.618328][T17213] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 737.627806][T17213] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 737.635989][T17213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 737.644823][T17213] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 739.108437][T18627] Bluetooth: hci7: command tx timeout [ 742.190553][ T50] Bluetooth: hci7: command tx timeout [ 745.740996][T18627] Bluetooth: hci7: command tx timeout [ 751.609318][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 752.837341][T17213] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 752.847094][T17213] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 752.855162][T17213] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 752.863206][T17213] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 752.871033][T17213] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 761.207843][T17213] Bluetooth: hci1: command tx timeout [ 764.154394][T17213] Bluetooth: hci1: command tx timeout [ 765.839741][ T50] Bluetooth: hci8: command tx timeout [ 765.845951][ T50] Bluetooth: hci6: command tx timeout [ 765.904485][T18360] netdevsim netdevsim2 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 765.914809][T18360] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 20000 - 0 [ 765.925176][T18360] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 19999 - 0 [ 765.942621][T18627] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 765.955044][T17213] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 765.963140][T17213] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 765.971174][T17213] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 765.978789][T17213] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 767.426167][T17213] Bluetooth: hci1: command tx timeout [ 771.561829][ T50] Bluetooth: hci6: command tx timeout [ 771.567297][ T50] Bluetooth: hci8: command tx timeout [ 771.572696][ T50] Bluetooth: hci1: command tx timeout [ 774.326707][T17213] Bluetooth: hci8: command tx timeout [ 774.332311][T17213] Bluetooth: hci6: command tx timeout [ 774.337732][T17213] Bluetooth: hci9: command tx timeout [ 782.905885][ T50] Bluetooth: hci9: command tx timeout [ 782.911350][ T50] Bluetooth: hci6: command tx timeout [ 782.916753][ T50] Bluetooth: hci8: command tx timeout [ 782.971074][T17213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 782.981467][T17213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 783.075660][T18627] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 786.994269][T18627] Bluetooth: hci9: command tx timeout [ 787.031174][ T50] Bluetooth: hci0: Opcode 0x1009 failed: -110 [ 789.806856][ T50] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 790.782378][T17215] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 791.081603][ T9806] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 791.104224][T17213] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 791.112321][T17213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 791.121037][T18675] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 791.129169][T18627] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 792.311090][T17213] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 792.319184][T17213] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 793.487955][T18675] Bluetooth: hci9: command tx timeout [ 793.512505][T18675] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 795.946411][T17213] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 801.139448][ T50] Bluetooth: hci0: command tx timeout [ 803.528145][T18675] Bluetooth: hci2: command tx timeout [ 805.356896][ T50] Bluetooth: hci0: command tx timeout [ 807.748142][T18675] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 807.950099][T18675] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 807.957420][T18675] Bluetooth: hci0: command tx timeout [ 807.962849][T18675] Bluetooth: hci2: command tx timeout [ 809.289453][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 810.294724][T18690] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 810.578169][ T5630] Bluetooth: hci2: command tx timeout [ 810.583646][ T5630] Bluetooth: hci0: command tx timeout [ 812.608737][T18649] wg1 speed is unknown, defaulting to 1000 [ 812.616671][T18649] lo speed is unknown, defaulting to 1000 [ 812.624417][T18649] xfrm0 speed is unknown, defaulting to 1000 [ 815.289275][ T5630] Bluetooth: hci2: command tx timeout [ 815.295676][T18675] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 818.587109][T18701] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 818.604107][T18675] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 833.310489][T18675] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 834.909886][T18675] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 836.667774][T18675] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 836.695902][T18675] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 836.703570][T18675] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 839.594169][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 839.603938][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 839.613344][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 839.621419][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 839.629068][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 848.186965][T18627] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 849.427405][ T5630] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 851.813254][T17213] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 854.542927][ T5630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 855.918104][ T5630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 855.926156][ T5630] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 855.934205][ T5630] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 855.941873][ T5630] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 857.375442][ T9806] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 857.870096][T18728] Bluetooth: hci10: Opcode 0x0c03 failed: -4 [ 864.558439][T18732] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 864.567490][T17215] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 864.576241][T17215] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 864.619546][T17215] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 864.627306][T17215] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 872.625952][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 873.167024][ T5630] Bluetooth: hci4: command tx timeout [ 873.173403][ T5630] Bluetooth: hci5: command tx timeout [ 876.864528][T17215] Bluetooth: hci6: command tx timeout [ 876.870743][T17215] Bluetooth: hci5: command tx timeout [ 876.876173][T17215] Bluetooth: hci4: command tx timeout [ 880.508152][ T5630] Bluetooth: hci3: command tx timeout [ 880.514468][ T5630] Bluetooth: hci4: command tx timeout [ 880.519890][ T5630] Bluetooth: hci5: command tx timeout [ 880.525289][ T5630] Bluetooth: hci6: command tx timeout [ 885.596328][T17213] Bluetooth: hci6: command tx timeout [ 885.601765][T17213] Bluetooth: hci5: command tx timeout [ 885.607211][T17213] Bluetooth: hci4: command tx timeout [ 885.612643][T17213] Bluetooth: hci3: command tx timeout [ 888.715812][ T5630] Bluetooth: hci3: command tx timeout [ 888.721435][ T5630] Bluetooth: hci6: command tx timeout [ 892.655504][T17213] Bluetooth: hci3: command tx timeout [ 893.146043][ T50] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 893.156043][ T50] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 893.164134][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 893.172269][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 896.465446][T17213] Bluetooth: hci1: Opcode 0x0c03 failed: -110 [ 896.472368][T18675] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 896.481600][T17215] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 896.490087][T17213] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 896.498258][T17215] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 896.506684][T17215] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 898.186351][T17213] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 898.194981][T17215] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 899.814457][ T5630] Bluetooth: hci9: command 0x0406 tx timeout [ 906.535082][T17215] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 906.548579][ T5630] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 906.557628][ T5630] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 910.167319][T17213] Bluetooth: hci0: Opcode 0x1001 failed: -110 [ 910.174236][T17215] Bluetooth: hci7: command tx timeout [ 910.180326][T17215] Bluetooth: hci1: command tx timeout [ 910.196527][T18732] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 910.203938][T18732] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 910.211253][T18732] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 910.219282][T18732] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 910.231299][T18732] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 910.267662][ T5630] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 913.656120][T18732] Bluetooth: hci1: command tx timeout [ 913.661566][T18732] Bluetooth: hci7: command tx timeout [ 917.305662][T18732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 917.313358][T18732] Bluetooth: hci7: command tx timeout [ 917.318792][T18732] Bluetooth: hci1: command tx timeout [ 917.324218][T18732] Bluetooth: hci0: command tx timeout [ 918.087323][ T5630] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 918.140121][T18732] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 918.147887][T18732] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 921.040246][T17213] Bluetooth: hci0: command tx timeout [ 921.045700][T17213] Bluetooth: hci1: command tx timeout [ 921.051103][T17213] Bluetooth: hci7: command tx timeout [ 937.857630][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 939.257647][ T50] Bluetooth: hci0: command tx timeout [ 944.924440][ T50] Bluetooth: hci0: command tx timeout [ 944.933677][ T50] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 944.943020][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 944.951052][ T50] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 944.959131][ T50] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 944.966757][ T50] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 953.424062][ T50] Bluetooth: hci8: command tx timeout [ 953.430347][ T50] Bluetooth: hci2: command tx timeout [ 956.431766][ T50] Bluetooth: hci2: command tx timeout [ 956.437234][ T50] Bluetooth: hci8: command tx timeout [ 960.027939][T18732] Bluetooth: hci8: command tx timeout [ 960.033389][T18732] Bluetooth: hci2: command tx timeout [ 961.455986][T17213] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 961.465603][T17213] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 961.473645][T17213] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 961.481776][T17213] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 961.489741][T17213] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 967.848657][ T50] Bluetooth: hci6: Opcode 0x0c03 failed: -110 [ 967.855642][T17213] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 967.863902][T17213] Bluetooth: hci2: command tx timeout [ 967.869334][T17213] Bluetooth: hci8: command tx timeout [ 969.075983][ T5630] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 969.085973][ T5630] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 969.095143][ T5630] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 969.103306][ T5630] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 969.111455][ T5630] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 972.320297][ T50] Bluetooth: hci10: command tx timeout [ 972.326765][T17213] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 972.335150][T17213] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 972.354013][T17213] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 972.368488][T17213] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 977.111540][ T5630] Bluetooth: hci10: command tx timeout [ 977.117203][ T5630] Bluetooth: hci6: command tx timeout [ 978.497939][T17213] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 980.933055][T18732] Bluetooth: hci11: Opcode 0x0c16 failed: -110 [ 982.306892][T17213] Bluetooth: hci6: command tx timeout [ 982.312358][T17213] Bluetooth: hci10: command tx timeout [ 982.333376][T18817] Bluetooth: hci11: Opcode 0x0c03 failed: -4 [ 988.725653][T18732] Bluetooth: hci10: command tx timeout [ 988.731211][T18732] Bluetooth: hci6: command tx timeout [ 990.826063][T17213] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 994.180883][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 994.188346][ T5630] Bluetooth: hci6: command tx timeout [ 994.195976][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 994.205336][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 994.214927][ T5630] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 994.224568][ T5630] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 994.231689][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 995.405436][ T5630] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 995.412609][ T5630] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 995.420901][ T5630] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 995.427975][ T5630] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 999.342851][T18838] Bluetooth: hci4: Opcode 0x0c1a failed: -110 [ 1006.771716][T18732] Bluetooth: hci3: Opcode 0x0c03 failed: -110 [ 1007.318374][ T50] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1008.501227][T18732] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1008.512798][T18732] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1008.530150][T18732] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1008.538297][T18732] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1008.546147][T18732] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1010.699801][ T9806] bridge_slave_1: left allmulticast mode [ 1010.705521][ T9806] bridge_slave_1: left promiscuous mode [ 1010.711365][ T9806] bridge0: port 2(bridge_slave_1) entered disabled state [ 1013.674059][ T9806] bridge_slave_0: left allmulticast mode [ 1013.679773][ T9806] bridge_slave_0: left promiscuous mode [ 1013.686518][ T9806] bridge0: port 1(bridge_slave_0) entered disabled state [ 1015.257959][T17213] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 1015.267453][T17213] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 1016.757933][T17213] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 1016.766070][T17213] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 1016.773852][T17213] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 1020.571878][T17213] Bluetooth: hci3: command tx timeout [ 1020.578123][T17213] Bluetooth: hci5: command tx timeout [ 1020.583945][T17213] Bluetooth: hci0: command tx timeout [ 1023.308498][T18732] Bluetooth: hci0: command tx timeout [ 1023.314131][T18732] Bluetooth: hci5: command tx timeout [ 1023.319621][T18732] Bluetooth: hci3: command tx timeout [ 1027.167515][T18732] Bluetooth: hci3: command tx timeout [ 1027.172987][T18732] Bluetooth: hci5: command tx timeout [ 1027.178388][T18732] Bluetooth: hci0: command tx timeout [ 1027.197517][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1027.207510][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1027.215539][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1027.223591][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1027.231373][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1029.911587][T17213] Bluetooth: hci0: command tx timeout [ 1029.917055][T17213] Bluetooth: hci5: command tx timeout [ 1029.922463][T17213] Bluetooth: hci3: command tx timeout [ 1031.387008][T18732] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1031.395296][T18732] Bluetooth: hci1: command tx timeout [ 1031.934872][T18732] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1031.943855][T18732] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1031.951884][T18732] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1031.959564][T18732] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1034.088274][T18732] Bluetooth: hci2: command tx timeout [ 1036.153436][T18732] Bluetooth: hci1: command tx timeout [ 1036.158881][T18732] Bluetooth: hci2: command tx timeout [ 1038.204273][ T9806] bond1 (unregistering): (slave ip6gretap1): Releasing active interface [ 1039.138564][ T50] Bluetooth: hci2: command tx timeout [ 1039.144018][ T50] Bluetooth: hci1: command tx timeout [ 1041.338048][T18732] Bluetooth: hci1: command tx timeout [ 1041.343491][T18732] Bluetooth: hci2: command tx timeout [ 1046.598931][ T9806] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1047.917159][ T9806] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1047.926949][ T9806] bond0 (unregistering): Released all slaves [ 1048.448462][ T9806] bond1 (unregistering): Released all slaves [ 1049.046183][ T5293] 8021q: adding VLAN 0 to HW filter on device eth2 [ 1052.868398][T18732] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1054.065906][T18732] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1055.223660][T18732] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1057.692818][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1068.587688][T18855] wg1 speed is unknown, defaulting to 1000 [ 1068.595471][T18855] lo speed is unknown, defaulting to 1000 [ 1068.603172][T18855] xfrm0 speed is unknown, defaulting to 1000 [ 1069.873238][ T50] Bluetooth: hci4: Opcode 0x0c23 failed: -110 [ 1071.279259][T17213] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1073.091747][ T50] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1073.099193][ T50] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1073.106547][ T50] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1073.114542][ T50] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1073.122215][ T50] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1080.495962][T18876] wg1 speed is unknown, defaulting to 1000 [ 1080.504007][T18876] lo speed is unknown, defaulting to 1000 [ 1087.721539][T18866] wg1 speed is unknown, defaulting to 1000 [ 1087.729448][T18866] lo speed is unknown, defaulting to 1000 [ 1090.686401][T18876] xfrm0 speed is unknown, defaulting to 1000 [ 1120.465935][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1125.893604][ T5630] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1125.902667][ T5630] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1127.820026][ T5630] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1127.828272][ T5630] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1127.853634][T17215] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1127.860804][T17215] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1130.693719][ T5630] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1130.701450][ T5630] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1133.281204][T18732] Bluetooth: hci8: Opcode 0x1009 failed: -110 [ 1135.678025][ T50] Bluetooth: hci4: command tx timeout [ 1137.350719][T17213] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 1138.932692][T18732] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1138.943871][ T50] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1138.951822][ T50] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1140.490223][T17213] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1140.499155][T17213] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1140.508419][T17213] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1140.516651][T17213] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1142.777103][T18950] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1142.806705][ T50] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1142.814952][ T50] Bluetooth: hci3: command 0x0406 tx timeout [ 1142.821028][ T50] Bluetooth: hci0: command 0x0406 tx timeout [ 1143.819715][T17213] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1143.826913][T17213] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1143.835476][T17213] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1143.843619][T17213] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1150.222881][T18939] Bluetooth: hci8: Opcode 0x0c38 failed: -110 [ 1150.229945][T18940] Bluetooth: hci11: Opcode 0x0c1a failed: -110 [ 1151.579786][T17213] Bluetooth: hci8: command 0x0c38 tx timeout [ 1151.587163][T17213] Bluetooth: hci11: command 0x0c1a tx timeout [ 1151.594779][T17213] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1155.916236][T18627] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1158.206960][T18627] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1158.214648][T18627] Bluetooth: hci2: command 0x0406 tx timeout [ 1158.221383][T18675] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1158.235624][T18675] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1158.243616][T18675] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1176.718953][T18866] xfrm0 speed is unknown, defaulting to 1000 [ 1180.397841][ T5293] 8021q: adding VLAN 0 to HW filter on device eth1 [ 1185.385071][T18966] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1185.399858][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1185.441408][ T5630] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1187.980017][ T5630] Bluetooth: hci7: command tx timeout [ 1189.323358][T18627] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1190.524094][T18627] Bluetooth: hci7: command tx timeout [ 1190.544267][T18627] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1190.551994][T18627] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1193.387624][T18966] Bluetooth: hci7: command tx timeout [ 1193.393865][T18966] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1193.404853][T18966] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1193.420286][T18966] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1193.433322][T18627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1193.441173][T18627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1196.467264][T18675] Bluetooth: hci7: command tx timeout [ 1208.057265][T18675] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1210.082560][T18985] Bluetooth: hci8: Opcode 0x0c03 failed: -4 [ 1216.724990][T18627] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1219.645573][T18990] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1219.821898][T18627] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1221.243221][T18990] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1222.716487][T18990] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1222.724031][T18990] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1222.732133][T18990] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1222.739836][T18990] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1228.622629][T18675] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1228.646331][T18675] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1228.654434][T18675] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1228.662561][T18675] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1228.670290][T18675] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1231.319946][T18966] Bluetooth: hci1: command tx timeout [ 1231.326173][T18966] Bluetooth: hci6: command tx timeout [ 1234.426317][T17213] Bluetooth: hci6: command tx timeout [ 1234.431784][T17213] Bluetooth: hci1: command tx timeout [ 1237.700018][ T50] Bluetooth: hci5: command tx timeout [ 1237.705680][ T50] Bluetooth: hci1: command tx timeout [ 1237.711089][ T50] Bluetooth: hci6: command tx timeout [ 1239.630372][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1240.960618][ T50] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1240.968861][ T50] Bluetooth: hci6: command tx timeout [ 1240.974269][ T50] Bluetooth: hci1: command tx timeout [ 1244.049102][T18675] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1244.056795][T18675] Bluetooth: hci9: command tx timeout [ 1244.062673][T18675] Bluetooth: hci8: command tx timeout [ 1244.070448][T18675] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1244.079610][T18675] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1247.295787][T17215] Bluetooth: hci8: command tx timeout [ 1247.301222][T17215] Bluetooth: hci9: command tx timeout [ 1247.306907][T18675] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1257.068741][T17215] Bluetooth: hci9: command tx timeout [ 1257.074193][T17215] Bluetooth: hci8: command tx timeout [ 1261.707041][T17215] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1264.932297][T19011] Bluetooth: hci4: Opcode 0x0c03 failed: -110 [ 1264.963949][T17215] Bluetooth: hci8: command tx timeout [ 1264.969404][T17215] Bluetooth: hci9: command tx timeout [ 1264.975367][T17215] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1264.984113][T17215] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1265.781190][T17215] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1265.790243][ T50] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1265.798381][ T50] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1265.806177][ T50] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1276.221137][T17213] Bluetooth: hci10: command tx timeout [ 1279.592984][ T50] Bluetooth: hci10: command tx timeout [ 1284.839088][T17213] Bluetooth: hci10: command tx timeout [ 1284.844685][T17213] Bluetooth: hci11: command tx timeout [ 1287.961965][T18675] Bluetooth: hci11: command tx timeout [ 1287.967508][T18675] Bluetooth: hci10: command tx timeout [ 1288.004948][T18675] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1288.014437][T18675] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1288.022324][T18675] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1288.030365][T18675] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1288.037989][T18675] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1290.563187][T18675] Bluetooth: hci11: command tx timeout [ 1293.975966][ T50] Bluetooth: hci11: command tx timeout [ 1295.798481][T17215] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1298.022784][T17215] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1299.368911][T17215] Bluetooth: hci4: command tx timeout [ 1300.387530][ T50] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1300.395759][ T50] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1300.404319][ T50] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1302.519333][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1302.529427][T17215] Bluetooth: hci4: command tx timeout [ 1305.142197][T17213] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1306.412619][T17213] Bluetooth: hci4: command tx timeout [ 1309.021324][T17213] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1310.377009][T17213] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1310.384378][T17213] Bluetooth: hci4: command tx timeout [ 1313.916398][T18675] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1313.924212][T18675] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1313.984365][ T50] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1313.994242][ T50] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1315.224197][ T50] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1315.232597][ T50] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1315.240384][ T50] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1316.566305][ T50] Bluetooth: hci6: command tx timeout [ 1316.572536][ T50] Bluetooth: hci5: command tx timeout [ 1318.051533][T18675] Bluetooth: hci1: command tx timeout [ 1323.548435][T18675] Bluetooth: hci5: command tx timeout [ 1323.553916][T18675] Bluetooth: hci6: command tx timeout [ 1326.902237][ T50] Bluetooth: hci1: command tx timeout [ 1326.913861][T17215] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1330.087387][ T50] Bluetooth: hci1: command tx timeout [ 1330.092851][ T50] Bluetooth: hci6: command tx timeout [ 1330.098270][ T50] Bluetooth: hci5: command tx timeout [ 1330.104093][T17215] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1330.158844][ T50] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1330.167076][ T50] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1333.722765][ T50] Bluetooth: hci5: command tx timeout [ 1333.728431][ T50] Bluetooth: hci6: command tx timeout [ 1333.735028][ T50] Bluetooth: hci1: command tx timeout [ 1333.797543][T17215] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1352.891763][T17215] Bluetooth: hci7: command tx timeout [ 1357.504715][T17215] Bluetooth: hci7: command tx timeout [ 1359.827132][T17215] Bluetooth: hci7: command tx timeout [ 1362.638187][T18675] Bluetooth: hci7: command tx timeout [ 1362.671255][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1362.683069][ T5293] 8021q: adding VLAN 0 to HW filter on device eth3 [ 1384.018899][T19035] wg1 speed is unknown, defaulting to 1000 [ 1384.027716][T19035] lo speed is unknown, defaulting to 1000 [ 1384.036492][T19035] xfrm0 speed is unknown, defaulting to 1000 [ 1453.852428][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1457.463892][T17213] Bluetooth: hci6: command 0x0406 tx timeout [ 1457.470223][T17213] Bluetooth: hci1: command 0x0406 tx timeout [ 1457.476484][T17213] Bluetooth: hci4: command 0x0406 tx timeout [ 1460.663928][T18966] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1469.583710][T17213] Bluetooth: hci8: Opcode 0x1003 failed: -110 [ 1474.720135][T19101] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1474.740502][T17213] Bluetooth: hci7: command 0x0406 tx timeout [ 1479.821111][ T5630] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1479.830514][T18627] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1479.842724][ T5630] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1479.853317][ T5630] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1482.436157][T18990] Bluetooth: hci9: Opcode 0x1009 failed: -110 [ 1482.449174][T18990] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1482.457240][T19102] Bluetooth: hci9: Opcode 0x0c03 failed: -4 [ 1492.673908][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1492.682516][T18627] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1494.834624][T18627] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1499.063909][T18990] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1505.612016][T17213] Bluetooth: hci10: Opcode 0x0c23 failed: -110 [ 1505.620852][T18627] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1505.629426][T18627] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1508.263002][T17213] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1508.273224][T17213] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1508.282100][T17213] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1508.289872][T17213] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1512.192162][T19110] Bluetooth: hci10: Opcode 0x1003 failed: -110 [ 1512.198640][T19112] Bluetooth: hci12: Opcode 0x0c1a failed: -110 [ 1512.985843][ T5630] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1517.229020][T17213] Bluetooth: hci12: command tx timeout [ 1517.237108][T18627] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1517.256524][T17213] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1521.665702][T17213] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1528.887730][T17213] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1528.894328][ T5630] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1528.901841][ T5630] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1533.103392][T19118] Bluetooth: hci8: Opcode 0x0c1a failed: -110 [ 1533.110642][T19130] Bluetooth: hci5: Opcode 0x0c03 failed: -110 [ 1542.302940][T17213] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1545.531686][T18627] Bluetooth: hci8: command tx timeout [ 1545.590145][T17213] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1545.598513][T17213] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1545.606713][T17213] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1545.614463][T17213] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1550.687300][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1554.880347][T17213] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 1558.836927][T19140] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 1558.845256][T19149] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1560.081403][T18627] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 1561.388011][T18675] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1562.669330][T19137] Bluetooth: hci11: Opcode 0x0c03 failed: -110 [ 1568.034807][T17215] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1568.043870][T17215] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1568.056276][T17215] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1568.064347][T17215] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1568.072830][T17215] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1568.080493][ T5630] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1568.089451][ T5630] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1568.096945][T17215] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1568.105484][ T5630] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1568.113049][T17215] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1597.037161][T17215] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1597.054662][ T5630] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 1599.861639][T19172] Bluetooth: hci10: Opcode 0x0c03 failed: -110 [ 1601.599835][T18627] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1601.678348][ T5630] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1603.777991][T18966] Bluetooth: hci3: Opcode 0x1003 failed: -110 [ 1605.278892][T18966] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1605.288076][T18966] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1606.895239][T18627] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1606.905456][T18627] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1606.914829][T18627] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1606.922840][T18966] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1606.931354][T18627] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1606.939943][T18627] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1608.485207][T18627] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1608.507059][T18966] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1608.856791][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1612.062989][T18627] Bluetooth: hci5: command tx timeout [ 1612.069452][T18627] Bluetooth: hci8: command tx timeout [ 1612.075775][T18627] Bluetooth: hci3: command tx timeout [ 1613.727958][T18966] Bluetooth: hci11: command tx timeout [ 1613.734745][T18966] Bluetooth: hci9: command tx timeout [ 1615.548982][ T9806] hsr_slave_0: left promiscuous mode [ 1615.555469][T18627] Bluetooth: hci3: command tx timeout [ 1615.561066][T18627] Bluetooth: hci8: command tx timeout [ 1615.566590][T18627] Bluetooth: hci5: command tx timeout [ 1617.489377][T18966] Bluetooth: hci11: command tx timeout [ 1619.359125][T18966] Bluetooth: hci5: command tx timeout [ 1619.365017][T18966] Bluetooth: hci8: command tx timeout [ 1619.370436][T18966] Bluetooth: hci3: command tx timeout [ 1619.376254][ T9806] hsr_slave_1: left promiscuous mode [ 1619.382485][ T9806] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1619.389889][ T9806] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1621.253955][T18627] Bluetooth: hci11: command tx timeout [ 1621.301177][ T9806] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1621.308654][ T9806] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1622.919509][T18627] Bluetooth: hci3: command tx timeout [ 1622.924985][T18627] Bluetooth: hci8: command tx timeout [ 1622.930389][T18627] Bluetooth: hci5: command tx timeout [ 1624.561141][ T9806] veth1_macvtap: left promiscuous mode [ 1624.566695][ T9806] veth0_macvtap: left promiscuous mode [ 1624.572257][ T9806] veth1_vlan: left promiscuous mode [ 1624.577661][ T9806] veth0_vlan: left promiscuous mode [ 1624.583683][T18966] Bluetooth: hci11: command tx timeout [ 1629.761936][T18627] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 1631.620641][ T5630] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 1634.039288][T18627] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 1634.047590][T18627] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 1634.055260][T18627] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 1640.539112][T18966] Bluetooth: hci1: command tx timeout [ 1640.549567][T18966] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1640.558725][T18966] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1640.567086][T18966] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1640.575601][T18966] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1640.583542][T18966] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1648.545642][T18966] Bluetooth: hci1: command tx timeout [ 1648.590410][ T5630] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1650.089605][ T5630] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1652.540233][ T5630] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 1652.546820][ T5630] Bluetooth: hci1: command tx timeout [ 1652.552354][ T5630] Bluetooth: hci6: command tx timeout [ 1653.318739][T18966] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1656.573117][T19207] Bluetooth: hci9: Opcode 0x0c03 failed: -110 [ 1657.943750][T18627] Bluetooth: hci7: Opcode 0x1001 failed: -110 [ 1657.950902][ T5630] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1657.959704][ T5630] Bluetooth: hci6: command tx timeout [ 1657.965260][ T5630] Bluetooth: hci1: command tx timeout [ 1658.094006][T18966] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1658.112470][T18966] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1659.585745][T18966] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1659.594018][T18966] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1659.601692][T18966] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1660.025053][T18627] Bluetooth: hci6: command tx timeout [ 1662.800806][T18966] Bluetooth: hci7: command tx timeout [ 1663.802096][T18966] Bluetooth: hci6: command tx timeout [ 1666.224132][T18966] Bluetooth: hci7: command tx timeout [ 1670.395175][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1670.402841][T18966] Bluetooth: hci7: command tx timeout [ 1674.074067][T18627] Bluetooth: hci7: command tx timeout [ 1680.439106][T18966] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1681.659867][T18966] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1681.680052][T18966] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1681.689020][T18966] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1681.697272][T18966] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1683.348452][ T9806] team0 (unregistering): Port device team_slave_1 removed [ 1684.159545][ T9806] team0 (unregistering): Port device team_slave_0 removed [ 1684.898083][T18966] Bluetooth: hci9: command tx timeout [ 1686.429768][T18627] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1686.439526][T18627] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1686.448706][T18627] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1686.456995][T18627] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1686.464892][T18627] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1687.966726][T18966] Bluetooth: hci9: command tx timeout [ 1691.425408][T18627] Bluetooth: hci10: command tx timeout [ 1691.431674][T18627] Bluetooth: hci9: command tx timeout [ 1691.739089][ T5293] 8021q: adding VLAN 0 to HW filter on device eth4 [ 1701.241678][T18966] Bluetooth: hci9: command tx timeout [ 1701.247261][T18966] Bluetooth: hci10: command tx timeout [ 1704.191234][T18966] Bluetooth: hci10: command tx timeout [ 1710.144694][T18627] Bluetooth: hci10: command tx timeout [ 1732.224173][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1744.403849][ T5630] Bluetooth: hci3: command 0x0406 tx timeout [ 1747.893430][T18990] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1750.951865][T18990] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 1754.125964][T19255] Bluetooth: hci13: Opcode 0x0c03 failed: -110 [ 1761.917182][T18990] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1761.927550][T18990] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1761.936664][T18990] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1761.944969][T18990] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1768.914202][T19251] Bluetooth: hci12: Opcode 0x0c1a failed: -110 [ 1790.439451][T18675] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1790.448521][T17215] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1790.457060][T17215] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1790.467271][T18675] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1790.475793][T18675] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1790.484006][T18675] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1790.492043][T18675] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1793.059209][T18675] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1793.611244][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1793.619094][T18966] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1794.382490][T17215] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1794.392743][T18675] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1794.401847][T18675] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1797.631465][T19268] Bluetooth: hci13: Opcode 0x0c1a failed: -110 [ 1801.516373][T18990] Bluetooth: hci12: Opcode 0x1001 failed: -110 [ 1802.981491][ T5630] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1802.990452][ T5630] Bluetooth: hci13: command tx timeout [ 1806.634049][T18627] Bluetooth: hci15: Opcode 0x0c03 failed: -110 [ 1806.641199][T18627] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1806.648534][T18627] Bluetooth: hci9: command 0x0406 tx timeout [ 1810.717391][T18675] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1811.667958][T18627] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 1811.675554][T19292] Bluetooth: hci15: Opcode 0x0c03 failed: -110 [ 1814.713290][T17215] Bluetooth: hci16: Opcode 0x1003 failed: -110 [ 1814.724572][T18990] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1814.759056][T19285] Bluetooth: hci12: Opcode 0x1003 failed: -110 [ 1814.789112][T18675] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 1814.797836][T18675] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 1814.805407][T18675] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 1814.813972][T18675] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 1814.821727][T18675] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 1838.705088][T17215] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1840.036189][T19286] wg1 speed is unknown, defaulting to 1000 [ 1840.044062][T19286] lo speed is unknown, defaulting to 1000 [ 1840.053018][T19286] xfrm0 speed is unknown, defaulting to 1000 [ 1841.475891][T18675] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1844.871777][T17215] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1844.907478][T18675] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1848.715323][T19313] Bluetooth: hci5: Opcode 0x1003 failed: -110 [ 1865.026151][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1871.123731][T18675] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1875.236612][T18675] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1876.567718][T19330] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 1893.918021][T18966] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1893.936889][T18966] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1893.945540][T18966] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1893.954185][T18966] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1893.962471][T18966] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1897.268339][T18966] Bluetooth: hci14: command tx timeout [ 1897.275119][T18966] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1903.930895][T17215] Bluetooth: hci14: command tx timeout [ 1903.937015][T18966] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1910.373065][T17215] Bluetooth: hci14: command tx timeout [ 1914.129913][T18675] Bluetooth: hci2: Opcode 0x1001 failed: -110 [ 1914.137362][T17215] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1914.146196][T17215] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1918.241901][T19351] wg1 speed is unknown, defaulting to 1000 [ 1918.249809][T19351] lo speed is unknown, defaulting to 1000 [ 1918.257795][T19351] xfrm0 speed is unknown, defaulting to 1000 [ 1918.338694][T19365] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1920.463218][T18675] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1921.342033][ T1316] ieee802154 phy0 wpan0: encryption failed: -22 [ 1921.350260][T19373] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1921.360376][T19373] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1921.367989][T19373] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1921.405819][T19373] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1921.413912][T19373] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1923.024465][T17215] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1926.739445][T18966] Bluetooth: hci7: Opcode 0x1001 failed: -110 [ 1928.813460][T17215] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1930.733668][T18966] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1930.742353][T18966] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1930.750540][T18966] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1930.758511][T18966] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1930.766123][T18966] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1934.273324][T19363] Bluetooth: hci7: Opcode 0x0c38 failed: -110 [ 1936.083524][T17215] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1937.889365][T19373] Bluetooth: hci2: command tx timeout [ 1937.896881][T19373] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1939.652711][T19377] Bluetooth: hci8: Opcode 0x0c03 failed: -110 [ 1941.617723][T17215] Bluetooth: hci2: command tx timeout [ 1945.145414][T19373] Bluetooth: hci2: command tx timeout [ 1952.170238][ T31] INFO: task syz-executor:19216 blocked for more than 141 seconds. [ 1952.178219][ T31] Not tainted syzkaller #0 [ 1952.183192][ T31] Blocked by coredump. [ 1952.187962][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1952.196743][ T31] task:syz-executor state:D stack:26760 pid:19216 tgid:19216 ppid:1 task_flags:0x40054c flags:0x00080003 [ 1952.209083][ T31] Call Trace: [ 1952.212397][ T31] [ 1952.215439][ T31] __schedule+0x1821/0x5740 [ 1952.220370][ T31] ? unwind_next_frame+0xa6/0x2550 [ 1952.225835][ T31] ? look_up_lock_class+0x57/0x110 [ 1952.231031][ T31] ? __pfx___schedule+0x10/0x10 [ 1952.236008][ T31] ? schedule+0x90/0x360 [ 1952.240290][ T31] schedule+0x164/0x360 [ 1952.244476][ T31] schedule_timeout+0xc3/0x2c0 [ 1952.249306][ T31] ? __lock_acquire+0x6b5/0x2cf0 [ 1953.523945][ T31] ? __pfx_schedule_timeout+0x10/0x10 [ 1953.530283][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1953.535351][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1953.540749][ T31] ? wait_for_completion+0x274/0x5e0 [ 1953.546186][ T31] wait_for_completion+0x2cc/0x5e0 [ 1953.551457][ T31] ? __pfx_wait_for_completion+0x10/0x10 [ 1953.557154][ T31] ? __flush_work+0x100/0xc50 [ 1953.561995][ T31] __flush_work+0xa17/0xc50 [ 1953.566696][ T31] ? __flush_work+0x100/0xc50 [ 1953.571402][ T31] ? __pfx___flush_work+0x10/0x10 [ 1953.577777][ T31] ? __flush_work+0xab9/0xc50 [ 1953.582698][ T31] ? __pfx_wq_barrier_func+0x10/0x10 [ 1953.588525][ T31] ? __cancel_work_sync+0x5c/0x110 [ 1953.593873][ T31] __cancel_work_sync+0xbe/0x110 [ 1953.599125][ T31] hci_cmd_sync_clear+0x30/0x230 [ 1953.604227][ T31] hci_unregister_dev+0x194/0x5a0 [ 1953.609448][ T31] vhci_release+0x152/0x1a0 [ 1953.614143][ T31] ? __pfx_vhci_release+0x10/0x10 [ 1953.619197][ T31] __fput+0x44f/0xa60 [ 1954.742901][T19373] Bluetooth: hci2: command tx timeout [ 1954.971501][ T31] task_work_run+0x1d9/0x270 [ 1954.976141][ T31] ? __pfx_task_work_run+0x10/0x10 [ 1954.981287][ T31] ? do_exit+0x70a/0x22c0 [ 1954.985638][ T31] ? kmem_cache_free+0x182/0x650 [ 1954.990659][ T31] ? put_net+0xfe/0x260 [ 1954.994852][ T31] do_exit+0x70f/0x22c0 [ 1954.999046][ T31] ? cgroup1_freezing+0x20/0x350 [ 1955.004124][ T31] ? __pfx_do_exit+0x10/0x10 [ 1955.008833][ T31] ? do_raw_spin_lock+0x12b/0x2f0 [ 1955.013902][ T31] do_group_exit+0x21b/0x2d0 [ 1955.019078][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 1955.024746][ T31] get_signal+0x1284/0x1330 [ 1955.029508][ T31] arch_do_signal_or_restart+0xbc/0x840 [ 1955.035776][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 1955.042156][ T31] ? sock_ioctl+0x5c6/0x7f0 [ 1955.046833][ T31] exit_to_user_mode_loop+0xa9/0x680 [ 1955.052160][ T31] ? rcu_is_watching+0x15/0xb0 [ 1955.057063][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.525518][ T31] do_syscall_64+0x353/0xf80 [ 1956.530277][ T31] ? trace_irq_disable+0x3b/0x140 [ 1956.535357][ T31] ? clear_bhb_loop+0x40/0x90 [ 1956.540060][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1956.545975][ T31] RIP: 0033:0x7f9a02d9caeb [ 1956.550506][ T31] RSP: 002b:00007ffe54ab8620 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 1956.559487][ T31] RAX: ffffffffffffffed RBX: 0000000000000005 RCX: 00007f9a02d9caeb [ 1956.567533][ T31] RDX: 00007ffe54ab8680 RSI: 0000000000008933 RDI: 0000000000000005 [ 1956.575571][ T31] RBP: 00007ffe54ab87a0 R08: 0000000000000000 R09: 00007ffe54ab8778 [ 1956.583590][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000003 [ 1956.591598][ T31] R13: 00007f9a03b44620 R14: 0000000000000005 R15: 0000000000000000 [ 1956.599616][ T31] [ 1956.603751][ T31] [ 1956.603751][ T31] Showing all locks held in the system: [ 1956.611590][ T31] 1 lock held by khungtaskd/31: [ 1956.616569][ T31] #0: ffffffff8e95cca0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 1958.155482][ T31] 2 locks held by getty/5385: [ 1958.160229][ T31] #0: ffff8880377470a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 1958.170193][ T31] #1: ffffc900032332e8 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x45c/0x13a0 [ 1958.180336][ T31] 5 locks held by kworker/u9:2/5630: [ 1958.185812][ T31] 5 locks held by kworker/u8:21/9806: [ 1958.191253][ T31] 2 locks held by kworker/u8:22/9807: [ 1958.196725][ T31] 5 locks held by kworker/u8:27/9813: [ 1958.202116][ T31] 4 locks held by kworker/u9:4/18627: [ 1958.208054][ T31] 4 locks held by kworker/u9:8/18990: [ 1958.213469][ T31] #0: ffff88805807d140 ((wq_completion)hci5#16){+.+.}-{0:0}, at: process_scheduled_works+0xa35/0x1860 [ 1958.225227][ T31] #1: ffffc9000268fc40 ((work_completion)(&hdev->rx_work)){+.+.}-{0:0}, at: process_scheduled_works+0xa70/0x1860 [ 1958.237934][ T31] #2: ffff8880756240b8 (&hdev->lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x9b/0x950 [ 1958.248150][ T31] #3: ffffffff8ff4af60 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_remote_features_evt+0x54c/0x950