last executing test programs: 1m23.614116856s ago: executing program 0 (id=690): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}}}, &(0x7f00000000c0)=0xe8) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r7 = getpid() syz_emit_ethernet(0x83, &(0x7f0000001f40)=ANY=[@ANYRESOCT=r5, @ANYRES32=r0], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001b00)={{{@in=@local, @in=@multicast1}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) getgid() getpid() ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000001c00)) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001c40)={{{@in=@dev, @in6=@remote}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f0000001d40)=0xe8) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e088a8", 0x0, 0xd5b3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x74) r13 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r10, &(0x7f0000000900)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)="8bf2a9895b0482298957225db6305cb494040519b2d1c06b91f53f132b1adc54702890f832f197310bd8f797c2666a0fd2025729daf53b1d6ce0e11283bc784c095cb6574b211740df3fff2d6e00f90b5e64aef681af87596fc7d442d452185775636c2110a39449b286b5c739674b4a8fc0fb6ea4c2f3d5f2b19dc0257570c17a6b1573cb49bcf7e0576e7ccb5ee2d51f1dca3141d09189d7d960744ddd15dfd34fe24bce07933c88ac02", 0xab}, {&(0x7f0000000340)="3dea65ab23b8cdfa4115994f5872fbbb34c986bbfb6b2ff4406233bde4fe5ae4a6bb25ae4e0280c16b976d1955816e0240d691a8cc6b300b5ef48d91f20fb1c9ca9155c2e0a8530dbe76ab7b7e946c71142b77ce14905f1054c70026dc360566a252fd5d1e3640e6c97cd1aacad8ab545be67d5b4540e81ee835ba22c7d85de5fbcfb371aa543162fd3355a4f932d2269d73cc47f1abde049ba3fe2fb6866d015982705bd1898ead1d0b1d16452408abd1c106de", 0xb4}, {&(0x7f0000000400)="931a382ac01224a1891e599588d5b25c256e71cfc7b3548c7a38fde905c8b79178867d55ed03440e1453ad75be4cf143618ed03c9519e2efca62fafe78d484", 0x3f}, {&(0x7f0000000200)="4aa6d0e1d22941dd34080ff43e61735c8b2cc854e7e316f9610d872edf0f61a388e96db2cae3e3877a6684721e75a751b40850eb83163711ebf574da09af3ec76173e5265a177592895e438cf1da9d0fe59ba0f8e1", 0x55}, {&(0x7f00000005c0)="b6bff468fdf50b74d64c709601cdc77272af1dbce95d84763065c1d9c93c5145c943b9cc5d2e30cb6295b478d137", 0x2e}], 0x5, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r13, 0x0, r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x40, 0x4044005}}], 0x1, 0x0) 1m22.172644856s ago: executing program 4 (id=1335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x34, r3, 0xf, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003600c5e918b1913b53a14a65a09f0a6b92efd798aced6dfb9f107ff0fabd16da8867f38ba1f0149da4570ab5b5d6275cde9b32162bf730244ef0d43b1a43a37ef967ec8a7be8992a7c1a5319fbd6c88a39301d62880439c6c3162d736b3fb97e69edc780bda007132f8850f4eb870b1492e251757a4ccc5d8f98f74d603c9fcd9da994d21589d433b5f9587a1981ef961b3e1df85d8f08620600e86339c6a3d2edee8d73b11a3b1f4eac3b69b84384f40189aa8c179132e86eec4a6687"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x8080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r8}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) r11 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r11, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x4f, 0x303}}], 0x18}, 0x4000081) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) 1m7.71745534s ago: executing program 0 (id=690): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}}}, &(0x7f00000000c0)=0xe8) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r7 = getpid() syz_emit_ethernet(0x83, &(0x7f0000001f40)=ANY=[@ANYRESOCT=r5, @ANYRES32=r0], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001b00)={{{@in=@local, @in=@multicast1}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) getgid() getpid() ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000001c00)) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001c40)={{{@in=@dev, @in6=@remote}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f0000001d40)=0xe8) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e088a8", 0x0, 0xd5b3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x74) r13 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r10, &(0x7f0000000900)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)="8bf2a9895b0482298957225db6305cb494040519b2d1c06b91f53f132b1adc54702890f832f197310bd8f797c2666a0fd2025729daf53b1d6ce0e11283bc784c095cb6574b211740df3fff2d6e00f90b5e64aef681af87596fc7d442d452185775636c2110a39449b286b5c739674b4a8fc0fb6ea4c2f3d5f2b19dc0257570c17a6b1573cb49bcf7e0576e7ccb5ee2d51f1dca3141d09189d7d960744ddd15dfd34fe24bce07933c88ac02", 0xab}, {&(0x7f0000000340)="3dea65ab23b8cdfa4115994f5872fbbb34c986bbfb6b2ff4406233bde4fe5ae4a6bb25ae4e0280c16b976d1955816e0240d691a8cc6b300b5ef48d91f20fb1c9ca9155c2e0a8530dbe76ab7b7e946c71142b77ce14905f1054c70026dc360566a252fd5d1e3640e6c97cd1aacad8ab545be67d5b4540e81ee835ba22c7d85de5fbcfb371aa543162fd3355a4f932d2269d73cc47f1abde049ba3fe2fb6866d015982705bd1898ead1d0b1d16452408abd1c106de", 0xb4}, {&(0x7f0000000400)="931a382ac01224a1891e599588d5b25c256e71cfc7b3548c7a38fde905c8b79178867d55ed03440e1453ad75be4cf143618ed03c9519e2efca62fafe78d484", 0x3f}, {&(0x7f0000000200)="4aa6d0e1d22941dd34080ff43e61735c8b2cc854e7e316f9610d872edf0f61a388e96db2cae3e3877a6684721e75a751b40850eb83163711ebf574da09af3ec76173e5265a177592895e438cf1da9d0fe59ba0f8e1", 0x55}, {&(0x7f00000005c0)="b6bff468fdf50b74d64c709601cdc77272af1dbce95d84763065c1d9c93c5145c943b9cc5d2e30cb6295b478d137", 0x2e}], 0x5, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r13, 0x0, r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x40, 0x4044005}}], 0x1, 0x0) 1m6.998940692s ago: executing program 4 (id=1335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x34, r3, 0xf, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003600c5e918b1913b53a14a65a09f0a6b92efd798aced6dfb9f107ff0fabd16da8867f38ba1f0149da4570ab5b5d6275cde9b32162bf730244ef0d43b1a43a37ef967ec8a7be8992a7c1a5319fbd6c88a39301d62880439c6c3162d736b3fb97e69edc780bda007132f8850f4eb870b1492e251757a4ccc5d8f98f74d603c9fcd9da994d21589d433b5f9587a1981ef961b3e1df85d8f08620600e86339c6a3d2edee8d73b11a3b1f4eac3b69b84384f40189aa8c179132e86eec4a6687"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x8080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r8}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) r11 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r11, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x4f, 0x303}}], 0x18}, 0x4000081) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) 51.68400326s ago: executing program 0 (id=690): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}}}, &(0x7f00000000c0)=0xe8) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r7 = getpid() syz_emit_ethernet(0x83, &(0x7f0000001f40)=ANY=[@ANYRESOCT=r5, @ANYRES32=r0], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001b00)={{{@in=@local, @in=@multicast1}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) getgid() getpid() ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000001c00)) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001c40)={{{@in=@dev, @in6=@remote}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f0000001d40)=0xe8) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e088a8", 0x0, 0xd5b3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x74) r13 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r10, &(0x7f0000000900)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)="8bf2a9895b0482298957225db6305cb494040519b2d1c06b91f53f132b1adc54702890f832f197310bd8f797c2666a0fd2025729daf53b1d6ce0e11283bc784c095cb6574b211740df3fff2d6e00f90b5e64aef681af87596fc7d442d452185775636c2110a39449b286b5c739674b4a8fc0fb6ea4c2f3d5f2b19dc0257570c17a6b1573cb49bcf7e0576e7ccb5ee2d51f1dca3141d09189d7d960744ddd15dfd34fe24bce07933c88ac02", 0xab}, {&(0x7f0000000340)="3dea65ab23b8cdfa4115994f5872fbbb34c986bbfb6b2ff4406233bde4fe5ae4a6bb25ae4e0280c16b976d1955816e0240d691a8cc6b300b5ef48d91f20fb1c9ca9155c2e0a8530dbe76ab7b7e946c71142b77ce14905f1054c70026dc360566a252fd5d1e3640e6c97cd1aacad8ab545be67d5b4540e81ee835ba22c7d85de5fbcfb371aa543162fd3355a4f932d2269d73cc47f1abde049ba3fe2fb6866d015982705bd1898ead1d0b1d16452408abd1c106de", 0xb4}, {&(0x7f0000000400)="931a382ac01224a1891e599588d5b25c256e71cfc7b3548c7a38fde905c8b79178867d55ed03440e1453ad75be4cf143618ed03c9519e2efca62fafe78d484", 0x3f}, {&(0x7f0000000200)="4aa6d0e1d22941dd34080ff43e61735c8b2cc854e7e316f9610d872edf0f61a388e96db2cae3e3877a6684721e75a751b40850eb83163711ebf574da09af3ec76173e5265a177592895e438cf1da9d0fe59ba0f8e1", 0x55}, {&(0x7f00000005c0)="b6bff468fdf50b74d64c709601cdc77272af1dbce95d84763065c1d9c93c5145c943b9cc5d2e30cb6295b478d137", 0x2e}], 0x5, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r13, 0x0, r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x40, 0x4044005}}], 0x1, 0x0) 51.227245279s ago: executing program 4 (id=1335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x34, r3, 0xf, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003600c5e918b1913b53a14a65a09f0a6b92efd798aced6dfb9f107ff0fabd16da8867f38ba1f0149da4570ab5b5d6275cde9b32162bf730244ef0d43b1a43a37ef967ec8a7be8992a7c1a5319fbd6c88a39301d62880439c6c3162d736b3fb97e69edc780bda007132f8850f4eb870b1492e251757a4ccc5d8f98f74d603c9fcd9da994d21589d433b5f9587a1981ef961b3e1df85d8f08620600e86339c6a3d2edee8d73b11a3b1f4eac3b69b84384f40189aa8c179132e86eec4a6687"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x8080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r8}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) r11 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r11, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x4f, 0x303}}], 0x18}, 0x4000081) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) 37.955645907s ago: executing program 0 (id=690): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}}}, &(0x7f00000000c0)=0xe8) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r7 = getpid() syz_emit_ethernet(0x83, &(0x7f0000001f40)=ANY=[@ANYRESOCT=r5, @ANYRES32=r0], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001b00)={{{@in=@local, @in=@multicast1}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) getgid() getpid() ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000001c00)) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001c40)={{{@in=@dev, @in6=@remote}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f0000001d40)=0xe8) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e088a8", 0x0, 0xd5b3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x74) r13 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r10, &(0x7f0000000900)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)="8bf2a9895b0482298957225db6305cb494040519b2d1c06b91f53f132b1adc54702890f832f197310bd8f797c2666a0fd2025729daf53b1d6ce0e11283bc784c095cb6574b211740df3fff2d6e00f90b5e64aef681af87596fc7d442d452185775636c2110a39449b286b5c739674b4a8fc0fb6ea4c2f3d5f2b19dc0257570c17a6b1573cb49bcf7e0576e7ccb5ee2d51f1dca3141d09189d7d960744ddd15dfd34fe24bce07933c88ac02", 0xab}, {&(0x7f0000000340)="3dea65ab23b8cdfa4115994f5872fbbb34c986bbfb6b2ff4406233bde4fe5ae4a6bb25ae4e0280c16b976d1955816e0240d691a8cc6b300b5ef48d91f20fb1c9ca9155c2e0a8530dbe76ab7b7e946c71142b77ce14905f1054c70026dc360566a252fd5d1e3640e6c97cd1aacad8ab545be67d5b4540e81ee835ba22c7d85de5fbcfb371aa543162fd3355a4f932d2269d73cc47f1abde049ba3fe2fb6866d015982705bd1898ead1d0b1d16452408abd1c106de", 0xb4}, {&(0x7f0000000400)="931a382ac01224a1891e599588d5b25c256e71cfc7b3548c7a38fde905c8b79178867d55ed03440e1453ad75be4cf143618ed03c9519e2efca62fafe78d484", 0x3f}, {&(0x7f0000000200)="4aa6d0e1d22941dd34080ff43e61735c8b2cc854e7e316f9610d872edf0f61a388e96db2cae3e3877a6684721e75a751b40850eb83163711ebf574da09af3ec76173e5265a177592895e438cf1da9d0fe59ba0f8e1", 0x55}, {&(0x7f00000005c0)="b6bff468fdf50b74d64c709601cdc77272af1dbce95d84763065c1d9c93c5145c943b9cc5d2e30cb6295b478d137", 0x2e}], 0x5, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r13, 0x0, r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x40, 0x4044005}}], 0x1, 0x0) 36.066708611s ago: executing program 4 (id=1335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x34, r3, 0xf, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003600c5e918b1913b53a14a65a09f0a6b92efd798aced6dfb9f107ff0fabd16da8867f38ba1f0149da4570ab5b5d6275cde9b32162bf730244ef0d43b1a43a37ef967ec8a7be8992a7c1a5319fbd6c88a39301d62880439c6c3162d736b3fb97e69edc780bda007132f8850f4eb870b1492e251757a4ccc5d8f98f74d603c9fcd9da994d21589d433b5f9587a1981ef961b3e1df85d8f08620600e86339c6a3d2edee8d73b11a3b1f4eac3b69b84384f40189aa8c179132e86eec4a6687"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x8080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r8}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) r11 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r11, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x4f, 0x303}}], 0x18}, 0x4000081) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) 23.052423677s ago: executing program 0 (id=690): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}}}, &(0x7f00000000c0)=0xe8) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r7 = getpid() syz_emit_ethernet(0x83, &(0x7f0000001f40)=ANY=[@ANYRESOCT=r5, @ANYRES32=r0], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001b00)={{{@in=@local, @in=@multicast1}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) getgid() getpid() ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000001c00)) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001c40)={{{@in=@dev, @in6=@remote}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f0000001d40)=0xe8) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e088a8", 0x0, 0xd5b3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x74) r13 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r10, &(0x7f0000000900)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)="8bf2a9895b0482298957225db6305cb494040519b2d1c06b91f53f132b1adc54702890f832f197310bd8f797c2666a0fd2025729daf53b1d6ce0e11283bc784c095cb6574b211740df3fff2d6e00f90b5e64aef681af87596fc7d442d452185775636c2110a39449b286b5c739674b4a8fc0fb6ea4c2f3d5f2b19dc0257570c17a6b1573cb49bcf7e0576e7ccb5ee2d51f1dca3141d09189d7d960744ddd15dfd34fe24bce07933c88ac02", 0xab}, {&(0x7f0000000340)="3dea65ab23b8cdfa4115994f5872fbbb34c986bbfb6b2ff4406233bde4fe5ae4a6bb25ae4e0280c16b976d1955816e0240d691a8cc6b300b5ef48d91f20fb1c9ca9155c2e0a8530dbe76ab7b7e946c71142b77ce14905f1054c70026dc360566a252fd5d1e3640e6c97cd1aacad8ab545be67d5b4540e81ee835ba22c7d85de5fbcfb371aa543162fd3355a4f932d2269d73cc47f1abde049ba3fe2fb6866d015982705bd1898ead1d0b1d16452408abd1c106de", 0xb4}, {&(0x7f0000000400)="931a382ac01224a1891e599588d5b25c256e71cfc7b3548c7a38fde905c8b79178867d55ed03440e1453ad75be4cf143618ed03c9519e2efca62fafe78d484", 0x3f}, {&(0x7f0000000200)="4aa6d0e1d22941dd34080ff43e61735c8b2cc854e7e316f9610d872edf0f61a388e96db2cae3e3877a6684721e75a751b40850eb83163711ebf574da09af3ec76173e5265a177592895e438cf1da9d0fe59ba0f8e1", 0x55}, {&(0x7f00000005c0)="b6bff468fdf50b74d64c709601cdc77272af1dbce95d84763065c1d9c93c5145c943b9cc5d2e30cb6295b478d137", 0x2e}], 0x5, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r13, 0x0, r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x40, 0x4044005}}], 0x1, 0x0) 21.021288446s ago: executing program 4 (id=1335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x34, r3, 0xf, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003600c5e918b1913b53a14a65a09f0a6b92efd798aced6dfb9f107ff0fabd16da8867f38ba1f0149da4570ab5b5d6275cde9b32162bf730244ef0d43b1a43a37ef967ec8a7be8992a7c1a5319fbd6c88a39301d62880439c6c3162d736b3fb97e69edc780bda007132f8850f4eb870b1492e251757a4ccc5d8f98f74d603c9fcd9da994d21589d433b5f9587a1981ef961b3e1df85d8f08620600e86339c6a3d2edee8d73b11a3b1f4eac3b69b84384f40189aa8c179132e86eec4a6687"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x8080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r8}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) r11 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r11, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x4f, 0x303}}], 0x18}, 0x4000081) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) 7.588090355s ago: executing program 1 (id=2063): socket$packet(0x11, 0x2, 0x300) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f00000008c0)=ANY=[@ANYBLOB="9feb010018000000000000003000000030000000020000000000000001000004ffffffff000000000200000000000000000000000000000903000000000000000000"], 0x0, 0x4a}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x80000, 0x4) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x89e2, &(0x7f0000000180)={r1}) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(r1, 0x84, 0x1a, &(0x7f0000000700)={0x0, 0x1000, "032ba49a2d97669bd45485e3d3d8513f925177539c5b019526db01d576372b2db76771ae831cb3263c15ac4fb61a7ad9a007deb7ecd96651bc9f2a911f79e353f1e567ea553c610e413436e441bdded8a13308266e5d2861ee7a7dbfd122f46f3b55e43c4683ca55c52ff34a9b10d40570228ad11077a74dec5d9adb98a16ad009a468fbcfa1c230eba52619d84ad1f22ede2d338bc6711287db7f227aed77b4358e2dbe405901768b50fcee96f8bb0cba167d30de0ec11371dde1f65beb5051e3cc4008809e5f9f7b40e3c89f31010f319b4d6aa00e431265a5505b78fbe87651906158d33fad153d0a5d18c9d6674e9d51fe5b38b03bb73a626de6ce049e19e7432513b95bd492135773160021adcefe879eaa93c08d0fba40bf2b5381cbf6819bd712a5c1037448d59d183332d0b0d80a168ade2e7ac84f895f93cd3b6123bd1f5b87f6011b0f0cbd8c08a0c5fd9d01df6f511fcb822ec67868b3f2ca19ff418c3d843e5e7fea92146ee4169ad162b1f9ad19062ed7e9d16e271390b086ccea42225cb7d08297b1d190a4cce36b5db3825e7817ced20d15af40110c138a8dad1603e2f86653b203689a04aaf8ca9ca71c3d20433ba34493fd5e92647b913308c858db91c41574ba716c46e7c362e84d21f2c5a90bd5248a3f936dd5b1230960a3f630cd4ca9fca77aab102a8b51f9e3f9b554635a6ba833796378b38dd6c839ce3e5e1f2270a203dc658f388a24ae57af4811c22628ad1e71f07dcf5badbb166580b88452bf4d70c6b0d99e8d793ef86b401e2ba13381708b5e2d919680b86acf8126507a4670e91bc37367c5a6372f9a146c28dda43c868999c5cbb44f01c8a5799ce8866656824c5b3c8c430aab51b8e0d9e03ff4a6c593e9e51c42c789ca23a83036b95514ff7dbede2e0b8a27d4c8f90f351e213f36db62b01db0365c421b6db4b578dd13424b9382ceeaeb2bc1b53c714020c7412c80286c269f6705f18c5883a40e9069748747faa339800255939a6953381201d2554d04e751946c8db51cc2666b3cc0cab1596cb7a7a451e88dd782f63e5f30d8269c26fea140878711b7f5ae64d1f7f93068fa706e9991dfb7fe1d6de136e27fe4d3c07a88dc087b98b7c9af22c6a3ee013990afd16bdf5763cf20c7c76424f2c02228d48704cacf5ac4145ed8b6718bcea32703f8e41e09692bb9d68c3281d35602917705de8d7a54aecec8fd70b894f99f99e679824e88664f0c5c769621964178afbd57398c4729ca859ae4b43c7b63ab1d18edf2a094e1ad865fb082a59d5e118b1a8f2e47463050f011512e2efcc2e403751b4d383bb16c8c7f37a7a38cabff864de7ea2db7fe3a7ad0bf0b59569b653e06f80219ff9ea55fb17cf762d79c9ad7ab29066a4478ef513ad5d0c3d263f91ae753af47eeeb2e33913979516f0bc2657f42355167ec6fd0e94af06299722a471ec83ee8a3c431fb3152a964f458c2cd7501a2a25a389390e28255f154ec2abb84dc70292a6d5d61d4854651e3826e0f42d3dbcb824d949d6d70c30b9e9ed14cb42580e7c384af276eca81eaebef4657b4dac11eed48c74bdc472e355e38e63a1c9cb4363dc36670f4f1ab8e2985776ff5943498b3081ed35f1bc306e7461b163c379532f88848f526ce6524c7da913db399a55d701507fe01a5216bc061d17850c0c75ee25b9d79ceb68eb4b79587b0b8c51c15deb54e5513e68d29f0e7e78bc957933be598d81bbac465d1ed3f808281ce82cc3da7cfdb190690f6e0957ac9e33550db323e8824705b14069f351317ca1eaff2635ba0e3ac6e4dbb9d038d90506b6ef707a35daff0b08c1ce3c1df51e686ce2f74fc47d609c1bb1dec3b526507f504f735f4a1e6c8f4832846a1f0120c1849fddf4630c4cd114611023cee26b7e624c4595ad08adbcca09b313bc4cfeef4ac08f87b7a5e8c3fc17a1a54e9b6c54e6ca0d5eb65352c1229ae1931f960c2f8a42fcef58d1592bb95998f6316274060738bfc8329e59bc340b6c7096fef9d4002648dbc9ca7cedd3ff0f26b01953698b7afc69bcede8a3326f4c2c2f3497e2f4e41b2902965763e6e22ae572f6e293b14a47c2dc2aacba908246b6896a5e303e3db65b01d73ff6e01e134985d996f746f16adea2e2e8c9bab2e55f1219458117d970b822f99759e8a11c9843988331857eba4d0e8201a5312d9669c89da773a9826f6411e2d6ffc0ae2b74800e64ae89fcdce195bf952012493b98713fe8f0d5f49702446dbbc98b8568b3fbcd866bc5f37e90e79c1fe4662b61cc4a26e69ec378cb0c92ab9d5cb2e390e5b82e2982cdc50cc2a76abb035a4b6d2dd215fb867f1c6d8697b47b782037d9a44ec7d3d3322cf9d2c57629bd90c781bfe7258fa1b2bf6d9902096555fcedf54985623151e28c5e93de30b714fc72bdf39c2b670f7b6a4f78ee6aa25b968842da8fd0fe533668c0518011e5621cc98a825c625025ed4c7ad9b0121c68eb0ef6b877fd3dc7836db63ada644416493c9bbc6d6103315d1df2bb5e92fd4ad076c90276a72551f705ff2a8fcfd50035241a75134f14e4f2d35a0f225fc07a87d02c04e2853310b767ebece5dd8f2d4cdf72238ca81b4ccb5dc759ef574ffe3f704293450f634dfe89288f849b637d19f588c9e5786f715aec3938af1262f4b02ffb9a955f2dad7e33e300d791b6a61e811faedad6968665b504c1400806d6b5391f125432854bc5f26bb7a4f443b3baa491f8b57f99586310215cef02573e1ea0fb50a25293f1fdf8550aa1bfb63f6faff1b18684418c2262141639b6f4a33cae27fc9ef8805dc988c905cc313bc4f6782b62609c0088a623482922e93d9ebbb5cfbbe4c068576ead04bd6809de4074477f9da761d14dfddc498ff54742281558634bd5b0ca8eac4987bfa937363faa2c92f8370e9a2a46122f01b0e723cbf260098d7bf5e2c62f4aa63639df0a60fcce96b57f30b5615e6dc2edc425c47f3b602907fd13af524e262c7a3cd810fab114df54ac9a908b176f415b792be55c1e268dcc5278a9e4e0152937caa0c794124699c4283cc2d72fdd9804e3be8177543a05afad4f75108342a6aa70d538191ff0d180524d236b406d04b01550cddf4913689db63bdb6f5be1b108f8fef6cd59707d357798f1676ab8f4e7b64f0c7912f095b9dfa0070f412f34cb80f4ba5efe99cc0a028a7f0f7a371f50ca47a95bfcd02c6a3a446f32a590061d9f4c96ce664d75b6e174722b16cc4616b6dd6fcb2e699104ffe8c3b3da4c6017c0bc6c4e9ac35bff773cc035f8fbb2661a4b92dcb7fcf722c92561c0830673bf13a64940857cf265efcc1bc002aa1456584647f56ff3770ea2bd0848df1498ad42083c1dabd71c86690044fc6030e18b0d3a12e1618a17460bd1fc97811689d11b4e2c2a8038aba10b675dacc83a245b879b2b5f744e5b7c496b5d8a3f0bca8dd272dbde46c66d8257b89c406e5a9c85f1b0d367995284169fc59b21f468ec894b88dde7c4c1ed5e0625bd364b852a502b5bf3a6ed551b0284a5366f9b5db9dc796cf51b0a32af708076366cc455e074d397cb7f880dbc203c97d64501d5eeb4551dfb64009ec8d1d9d39cd252d6fce52fe68ab57f519e1819756660236bd6f7d67d0ccf7b201b17893164e625fe62a9ceb55f98ecc2cfeaf8079a89cec2018e9756108954d36f67bed9ae07e3db2fa6a8414505065528d73658237a7d17578c502696bc4cef812e60740b061518949de4842051761f12e247239ef145f7e08ab24369cd0e04824e5495fc32b9b0184ab84f0a2e9a99b61796fe2d8ce76e605e2a920c181e0af3dabcfedcabe7f1e98ea3a6e2173e7fde5aa5f71ada669ad4d95e12bb948c68b730b12040a28135c455b530d4fc0e528e3fc6b01a9d4b74ccf500f2f015fd7719334f577c664d3352ad9afae449550fd24cb00586b9bf6b00615a0ba0eb60698e0e7d6ff316a20695f41522ed4487692c8f1da532f8b413efe5e416a3d425ec9715a10adcd11928538d36e2f62fc000d9fac78040b6155ab9e3ae89145e22b8ccd275671704b0ee22dbc640a21d69714da9ac2e1c53a7f9e8cef34f1fab427c1c0a5ba8833a46c33e1e69cfe1c525dde481173437d5428530554a50d2cb24c20e9a2f076987fd085e0ac6452011ca05275b73b6567f392d7f2bf1019f9f9b8cffa5d3b2be30270bb4b89472877c0b95099687c537abc080af3b86efb49dee5af6475afaf38b0b5815e20371041d1ea3beb312adc7d1c91b06dfa3e16b5524b9f399a7245cd2d76fc054802c42645448f352ae9cd1bb7207c1352076d93b1fb2923a054c45f5144bf102222d734a3df4802dc40881e78f8e9fe17cf30ab20664b732a4cadb8e8dee741b31d7bd913930ff1bcae77a782ed304ccfa3c0df0526f816a60fdfd051c05df8d7b69f8ac5beee9096a4bbc18ea9f9277e9c1b4a2ac2243177d48f06f2a94df18b57df49f0cd084258fb218a6a62dbb048b669f6ce530e56dc27c2a5dc3b53eff1aa9e9bf9de4bcf6a1b991384a0e86f550e6de74f5296cd62511ce4a5a68d4277d360695f4c464360df73d3b477e9814ef2b2ec45b9cc37a0a82cb5cc4652e83cfb7312aad013d4d6ae9fc3972fbd2d8356d3e121190f203490ed07191d165cf1ebe0ff5eeeac18a87d4a1444147cdfae68c44606f4823b0517b48b9bd6b8664dc028e07aaee1d48312026bc9fe9255f14ddb20fb2f535314e14ab132d43e4452251ef190494a48de2cf6827034ad3750e31edbb1842743e73374db7bb81809fc7ee75530034bc416ff7b7ac701c6729992c456905e9ed56696d526e2f8093b7aac7063c1bd8b160ccb031b4730a7ab32f69522a8b93f635306c9321cf09baf1e781965f7dcf3bbcfe03323fb88da8dd883ef81c785ab7226db8ce52166cda5d4602f437e632d318f4317566344337c7669ce1490200cebfde813173fe758cf1e4d0f054a2402ddaae32681de1f4ca68e4928255fcbbab6c54d471f931c106a92d558f081748fc65b9af8e19af10fd66c0ae4d9b82ee80a54d4604d8400600527d7df85ff568eebb759917194a5c971d4490a07c62a135784324ab2204b5cb28c018ead0a371a847ef05f6643e342388268da703c2f82e4bb24fa23f96d3af63a1509642040ba512cb54f2bfcf7cc6a10691199515a27ec18db5ecdbe8611e89470c76836d8607b15efb54e1fcbf6210aaa5791c90d30b662ba84ebf92e715bc9aecfa8b6b7abfb12caae4b204d3c6a52de571f8ceff39acaaeb084e45880b144770db53fb5154216e19d1a8e1b8e4c41efab5a06a395a5051f490900b135bfd456b2bee2996265e71e727e791b98a1858743dd59587ade046c8903bd310f3d512de52104aa9b24d25e60ccbf7c8b6678ffbca8431841f118787e9d88273386a9cd744425fe7148e9c7a715c46d82aef8d9c4253ecb8d2f93e40e5eb7e68e056d485cb4d8dafee90623f6e1e2de78df0960e3b0c719574f146bf878845a3f34246268395ee8482b6106393e38754de95ffe5b1058a27cbf69e140eb01b45e192b394a8c47332eaafe1a4628cb50db02367090c397892c755d60a1e8235d0f4846289ce8db13560fe2583df520a766c23fe889812ddefa932f86a62a04395639e93a348823d7b3099946287785abcb194408ce9e13de8a7bd9ec087f12985608f8b2526c1791b9a270083a913aa85c67b569795a7821fdb56bb0518f6e14cab6199fec3aba4c134abe3890848b97bee7c141aeaca7b01dc1005e4381338d22"}, &(0x7f00000002c0)=0x1008) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r2, 0x84, 0x18, &(0x7f0000000300)={r3, 0x400}, 0x8) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000440)=ANY=[@ANYBLOB="60000000027027fc1aaa06010800000000000000000100000005000100070000000900020073797a30000000001400078008001240fffffffe080013400000ffff050004000000000011b30000686173683a69702cb9ffffffffffffff050005000a0000000451528dc71078c0a74a3094f95cdc"], 0x60}, 0x1, 0x0, 0x0, 0x4028055}, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x18}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001740)=0x14) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0xffffffffffffff6e, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="5000000010008105e9c51c000000000000000000", @ANYRES32=r5, @ANYBLOB="01000000000000002800128009000100766c616e000000001800028006000100000000000c0002000c0000000d00000008000500", @ANYRES64=r0], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x0) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_qrtr_SIOCGIFADDR(r2, 0x8915, &(0x7f0000000340)={'veth1_to_bond\x00'}) sendto$packet(r6, 0x0, 0x0, 0x44010, &(0x7f0000000040)={0x11, 0x1, r5, 0x1, 0x7}, 0x14) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x12, 0x0, 0x0, 0x0, 0x8000006, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x94) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x61, 0x11, 0x4}]}, &(0x7f00000000c0)='GPL\x00', 0x8, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, @cgroup_sockopt=0x15, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xfffffd97}, 0x70) socketpair(0x1e, 0x80005, 0x0, &(0x7f0000000000)={0x0, 0x0}) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) writev(r9, &(0x7f0000000400)=[{&(0x7f0000000100)="92", 0x1}], 0x1) pipe(&(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r11, 0x0, r12, 0x0, 0xf3a, 0x0) write$cgroup_pid(r12, &(0x7f0000000000), 0xffffff98) splice(r8, 0x0, r12, 0x0, 0x80, 0x4) write(r10, 0x0, 0x0) close(r7) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000500)={r3, 0x2c, &(0x7f00000004c0)=[@in={0x2, 0x4e23, @multicast1}, @in6={0xa, 0x4e24, 0x0, @mcast2, 0x738}]}, &(0x7f0000000580)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r7, 0x84, 0x11, &(0x7f00000005c0)={r13, 0x2}, 0x8) 6.55190126s ago: executing program 1 (id=2068): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xb, 0x4, 0x2}, 0x48) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000800"], 0x48) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8e5ffffb703000008000000b706000000000000850000000100000095"], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x801, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x25}, @NFTA_SET_EXPR={0x1c, 0x11, 0x0, 0x1, @limit={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_LIMIT_TYPE={0x8}]}}}]}], {0x14, 0x10}}, 0xa0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r3, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000300)=ANY=[@ANYBLOB="240004005df4720047087d500d135782f7fea9ee7eea9a4a451f509ac4df308c72c5b24533b7fd620915463de23bc2c835f425e20be6f24cf52722cb9dfcb2f1c35383876bba8d5a85eed9915bca798ff93041a0f97f23ec0e467d25cf99", @ANYRES16=r6, @ANYBLOB="010029bd7000fcdbdf251200000008000300", @ANYRES32=r5, @ANYBLOB="0600120006000000"], 0x24}, 0x1, 0x0, 0x0, 0x400c0}, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_WIPHY(r7, &(0x7f0000000500)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x3c, r6, 0x20, 0x70bd26, 0x25dfdbfd, {}, [@NL80211_ATTR_WIPHY_RTS_THRESHOLD={0x8, 0x40, 0x9}, @NL80211_ATTR_WIPHY_TX_POWER_LEVEL={0x8, 0x62, 0x1}, @NL80211_ATTR_WIPHY_ANTENNA_TX={0x8, 0x69, 0x1}, @NL80211_ATTR_WIPHY_RETRY_LONG={0x5, 0x3e, 0x4}, @NL80211_ATTR_WIPHY_TX_POWER_SETTING={0x8, 0x61, 0x1}]}, 0x3c}, 0x1, 0x0, 0x0, 0x40080}, 0x4090) r8 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), r8) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r2}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r1, &(0x7f0000000040)}, 0x20) 6.383451128s ago: executing program 1 (id=2070): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x75) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000100), 0x2b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001e00"/24], &(0x7f0000000480)='syzkaller\x00', 0xd, 0xa9, &(0x7f00000004c0)=""/169, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x5, 0xe, 0x4, 0x6ee}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c00080000002c000000040000000000000008000948b71000f5ffffff0800"/45], 0x2c}, 0x1, 0x0, 0x0, 0x4894}, 0x40008c0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045a7091c000000000002907800000000ac1414aa1100907800000000"], 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x34}, 0x1000}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="3914e8de6813b90af0c159952b27041788838241af1e94a7f6a44a2526cf236f9971e6ad598c44ec15fea694cb4ea6a003d8d3bca5f78f0bd628f8019b79d04cff9f790ae9fd9005e1d798251dc17e0a08e246df3d816299bbc286219d09b0f9c3244aff9500d56627b17e", 0x6b}, {&(0x7f00000000c0)="db951de24507e2cd5cc84a5af40339222208472634143f05dc959a76f99b9ff587933a8ee69ca82ce73f534762101ba3a39b0bf09aadbf6a7bac370331e43bc32a7087676926d045899f9dbf259e906224", 0x51}, {&(0x7f0000000140)="31328e16899990fd38418eaf096b7cea983696", 0x13}, {&(0x7f0000000180)="6315726e64bfe51fa57379dd77103d4e502fe1c68cd18ab3df601761a1172a9d7a0e", 0x22}, {&(0x7f00000001c0)="a61d78a924d4f921d1ada1bec942fc02111f40370f4f49eb65cd412f130fa64aaf4795577c", 0x25}, {&(0x7f0000000200)="5b34b715ff67ae2714a5ecbdc79776ccca667493122ebf2b378b0ced9169db92342ef89a0b47f34c399975f9abe3e06fac11bf987b7d302b510f27f571c3236ad9d6ec6c3033381fc2f4f53e5f2f7b93c630d1a534570f2adb5ff96d3970c6a5097c96095e1dd57c9bef966557f5a95a3fcb800016a0d5abee44d19e6dea24710aa85bf9f429707a0c5a6e4a380f951f02eb5371ee186e7bfafcbf950fc46031407309033cf02700e3f115d812b27244b8d099051f37e2a9bb5ef72028663d3fff4f49da4e1e7aea25e2517838d1f1025ad19e8d41483252331e044e977cf0d2846ffab40e840a2c4c06abb1a6", 0xed}, {&(0x7f0000000300)="45e368df9ed48d8f7607c03fe67eca38af4231f5be22661a8ad2729d9eb00b3c4d173fce63ff9c4e0caf1a317e66f8aa295379ae55b0bfcf855b02d91300011edf2ee0b6a9ff7f0986a5d289e18a4bf328b60180f110a857306898", 0x5b}, {&(0x7f0000000380)="7242ff80cc90b755590842328e66250c8807d8b246d04bc8225ed07b62d240f616be341553bf015fb84f4ce7ef36df61dfa7eb44ad57983bbe972af84db4e44d28a5d4a4641d8015c77a2a061d939437a496f5681204f036cac056901aa1db16a72d8d09bd63f83f294a23eb393b0c27f278214e6b10ffbbd7d7304e988506c40f69273ea3913c5e3a1e8ec0ee4113e5905b7e0609a2be2684f67ca3a56cb8bd4c365b230db9daac146d51053abee3d8944be5", 0xb3}, {&(0x7f0000000e00)="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", 0x1000}], 0x9}, 0x90) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)=0x7ffd) socket$kcm(0x10, 0x2, 0x10) 6.315717369s ago: executing program 1 (id=2071): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r2, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609", 0xc0}, {&(0x7f00000002c0)="9c811ff500139d7d28", 0x9}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x58, 0x10, 0x503, 0x70bd2a, 0x4, {0x0, 0x0, 0x0, 0x0, 0x3a, 0x263b0}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x2}, @IFLA_VLAN_PROTOCOL={0x6, 0x5, 0x88a8}]}}}, @IFLA_LINK={0x8, 0x5, r1}, @IFLA_BROADCAST={0xa, 0x2, @remote}]}, 0x58}}, 0x800) 5.968966784s ago: executing program 1 (id=2072): r0 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r0, &(0x7f0000001dc0)=[{{&(0x7f00000001c0)={0x2, 0x2, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10, &(0x7f0000000340)=[{&(0x7f00000003c0)="a90500000000746400010000000000009f3f", 0x12}, {&(0x7f0000001e00)="50ed", 0x2}], 0x2}}], 0x1, 0x24004044) r1 = bpf$ITER_CREATE(0x21, &(0x7f0000000100), 0x8) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r1, 0x0, 0x72, 0xe1, &(0x7f0000000140)="797be3f390cf36cbb4cd7e8377f0c611c9b4867fc52e9cb5d0fe904a48e39f4ed2ce243e213098399e77ef2af01a6fdfaffdbe96ab7cf72f302c4513a09a10b5d019f9553b0e8454ea1ff2512872de41fc167cfde66ead23423c85169efa83791213e665cbe6cf1ced7329529a3a0eabe6bd", &(0x7f0000000200)=""/225, 0xc, 0x0, 0x2a, 0x38, &(0x7f0000000300)="3ec79bafa1415e24c948f1104f90072be0ed88f7ee509db92c9023eef29cc9a9da2d09fb9a854b29768e", &(0x7f0000000380)="3acbd1c065f78541211ab6032f743466166866466a338192498698da86f3390928caf584bd15c6ef90f71737031b7bf487ffcd198faa9402", 0x4, 0x0, 0x1ff}, 0x50) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x28, 0x140b, 0x100, 0x70bd25, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x8440}, 0x4000008) 5.824002087s ago: executing program 0 (id=690): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000180)) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000000540)={{{@in=@dev, @in6=@mcast2}}, {{@in=@broadcast}}}, &(0x7f00000000c0)=0xe8) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r4 = getpid() r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), r3) sendmsg$DEVLINK_CMD_RELOAD(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r6, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r4}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) r7 = getpid() syz_emit_ethernet(0x83, &(0x7f0000001f40)=ANY=[@ANYRESOCT=r5, @ANYRES32=r0], 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r8, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r9, 0x1, 0x0, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r7}}]}, 0x3c}}, 0x0) getsockopt$inet_IP_IPSEC_POLICY(r1, 0x0, 0x10, &(0x7f0000001b00)={{{@in=@local, @in=@multicast1}}, {{@in=@local}, 0x0, @in=@multicast2}}, &(0x7f0000000140)=0xe8) getgid() getpid() ioctl$NS_GET_OWNER_UID(r2, 0xb704, &(0x7f0000001c00)) getgid() getpid() getsockopt$inet6_IPV6_IPSEC_POLICY(r1, 0x29, 0x22, &(0x7f0000001c40)={{{@in=@dev, @in6=@remote}}, {{@in6=@private1}, 0x0, @in=@dev}}, &(0x7f0000001d40)=0xe8) r10 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r12 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xd, &(0x7f0000000700)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006100000018110000", @ANYRES32=r11, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000009800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r12, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000300)="d2ffdd934517f3e145f228e088a8", 0x0, 0xd5b3, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) bind$bt_hci(r10, &(0x7f0000000000)={0x27}, 0x74) r13 = gettid() getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) sendmmsg$unix(r10, &(0x7f0000000900)=[{{&(0x7f00000000c0)=@file={0x1, './file0\x00'}, 0x6e, &(0x7f0000000640)=[{&(0x7f0000000140)="8bf2a9895b0482298957225db6305cb494040519b2d1c06b91f53f132b1adc54702890f832f197310bd8f797c2666a0fd2025729daf53b1d6ce0e11283bc784c095cb6574b211740df3fff2d6e00f90b5e64aef681af87596fc7d442d452185775636c2110a39449b286b5c739674b4a8fc0fb6ea4c2f3d5f2b19dc0257570c17a6b1573cb49bcf7e0576e7ccb5ee2d51f1dca3141d09189d7d960744ddd15dfd34fe24bce07933c88ac02", 0xab}, {&(0x7f0000000340)="3dea65ab23b8cdfa4115994f5872fbbb34c986bbfb6b2ff4406233bde4fe5ae4a6bb25ae4e0280c16b976d1955816e0240d691a8cc6b300b5ef48d91f20fb1c9ca9155c2e0a8530dbe76ab7b7e946c71142b77ce14905f1054c70026dc360566a252fd5d1e3640e6c97cd1aacad8ab545be67d5b4540e81ee835ba22c7d85de5fbcfb371aa543162fd3355a4f932d2269d73cc47f1abde049ba3fe2fb6866d015982705bd1898ead1d0b1d16452408abd1c106de", 0xb4}, {&(0x7f0000000400)="931a382ac01224a1891e599588d5b25c256e71cfc7b3548c7a38fde905c8b79178867d55ed03440e1453ad75be4cf143618ed03c9519e2efca62fafe78d484", 0x3f}, {&(0x7f0000000200)="4aa6d0e1d22941dd34080ff43e61735c8b2cc854e7e316f9610d872edf0f61a388e96db2cae3e3877a6684721e75a751b40850eb83163711ebf574da09af3ec76173e5265a177592895e438cf1da9d0fe59ba0f8e1", 0x55}, {&(0x7f00000005c0)="b6bff468fdf50b74d64c709601cdc77272af1dbce95d84763065c1d9c93c5145c943b9cc5d2e30cb6295b478d137", 0x2e}], 0x5, &(0x7f0000000880)=[@cred={{0x1c, 0x1, 0x2, {r13, 0x0, r14}}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}], 0x40, 0x4044005}}], 0x1, 0x0) 5.748186862s ago: executing program 1 (id=2074): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, 0x0, 0xfffffffffffffe13}, 0x5}], 0x1, 0x4c42bb6ef2, 0x0) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) epoll_create1(0x0) (async) epoll_create1(0x0) unshare(0x6a040000) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="183d279ac1019042000000000000004000000000000000850000000700000018010000202064250004bd9b1559588a91f4c20bd8954e6600000000002020207b1af8ff00000000bfa100000000000007010000f8ffffff0600000008000000b703000000000e0000000000a800703862"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x4000) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000077400062c00070073797374656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000000000080004200000000014000600626f6e64300000"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) socket(0x10, 0x2, 0x0) socket(0x28, 0x5, 0x0) (async) r5 = socket(0x28, 0x5, 0x0) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x8008000000010, &(0x7f0000000180), 0x0) connect$vsock_stream(r5, &(0x7f0000000180)={0x28, 0x0, 0x0, @local}, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x7c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="170000000000000004000000ff"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES16=r6, @ANYRES32=r6, @ANYRES16=r6, @ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x5822063364ccb978) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f00000000c0)=ANY=[@ANYRES16=r6, @ANYRES32=r6, @ANYRES16=r6, @ANYRES8=r6], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x5822063364ccb978) r7 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x2000002, 0xe, 0x0, &(0x7f0000000200)="df33c9f7b9a60000000000000000", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x50) r8 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r8, 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r4, @ANYRES64=r7], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) (async) r9 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000680)=@bpf_lsm={0x6, 0x3, &(0x7f0000000100)=ANY=[@ANYRES8=0x0, @ANYRESHEX=r4, @ANYRES64=r7], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x1b, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001}, 0x94) r10 = bpf$ITER_CREATE(0xb, &(0x7f00000004c0)={r9}, 0x8) close(r10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r9, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 3.908054762s ago: executing program 3 (id=2077): r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, 0x0, 0x0) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) setsockopt$sock_int(r0, 0x1, 0x2, &(0x7f0000000000)=0xd5d8, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}, 0xfffffdff}, 0x1c) listen(r0, 0x0) 3.906029635s ago: executing program 4 (id=1335): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000e7057b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001600000095"], 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000a00)={0x11, 0xc, &(0x7f0000000180)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffd}, 0x94) (async) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000680), r2) (async) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f00000006c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)={0x34, r3, 0xf, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x18, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x4040000}, 0x40000) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x20, r3, 0x10, 0x70bd2a, 0x25dfdbfe, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000000}, 0x40c0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000040)='sys_enter\x00', r1, 0x0, 0xfffffffffffffffe}, 0x18) (async) r6 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x3, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000095000000000000003600c5e918b1913b53a14a65a09f0a6b92efd798aced6dfb9f107ff0fabd16da8867f38ba1f0149da4570ab5b5d6275cde9b32162bf730244ef0d43b1a43a37ef967ec8a7be8992a7c1a5319fbd6c88a39301d62880439c6c3162d736b3fb97e69edc780bda007132f8850f4eb870b1492e251757a4ccc5d8f98f74d603c9fcd9da994d21589d433b5f9587a1981ef961b3e1df85d8f08620600e86339c6a3d2edee8d73b11a3b1f4eac3b69b84384f40189aa8c179132e86eec4a6687"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r9, 0x0, 0x10, 0x10, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) (async) sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x8080) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r8}, 0x10) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f0000000100)={'wlan0\x00'}) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000240)) r11 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r11, &(0x7f00000009c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x20044818) sendmsg$sock(r11, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@timestamping={{0x14, 0x1, 0x4f, 0x303}}], 0x18}, 0x4000081) socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c00000002000000000000000000000604"], 0x0, 0x26}, 0x28) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000001c0)={'wlan0\x00'}) (async) socket$nl_route(0x10, 0x3, 0x0) 2.885929029s ago: executing program 3 (id=2079): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'rose0\x00', 0x112}) (async, rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) (async, rerun: 64) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x102}) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'rose0\x00'}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=0x0], 0x20}}, 0x24000051) 2.407400137s ago: executing program 3 (id=2081): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000000c0)={'ip6tnl0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000300)=ANY=[], &(0x7f0000000280)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x75) r1 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) preadv(r1, &(0x7f0000000100), 0x2b, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x3, &(0x7f0000000380)=ANY=[@ANYBLOB="180000001e00"/24], &(0x7f0000000480)='syzkaller\x00', 0xd, 0xa9, &(0x7f00000004c0)=""/169, 0x41100, 0x14, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000580)={0x5, 0xe, 0x4, 0x6ee}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000600)=ANY=[@ANYBLOB="2c00080000002c000000040000000000000008000948b71000f5ffffff0800"/45], 0x2c}, 0x1, 0x0, 0x0, 0x4894}, 0x40008c0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020148100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f00000006c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb080045a7091c000000000002907800000000ac1414aa1100907800000000"], 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x2c, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0x3e}], 0x2, 0x0, 0x0, 0x11000000}, 0x0) setsockopt$CAN_RAW_FILTER(r1, 0x65, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', 0xffffffffffffffff, 0x0, 0xd}, 0x18) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000004a40)=ANY=[@ANYBLOB="c0260000410007010000000007000000027c00000400fc80a72601"], 0x26c0}}, 0x4010) sendmsg$inet6(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f0000000000)={0xa, 0x4e21, 0x3, @dev={0xfe, 0x80, '\x00', 0x34}, 0x1000}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000040)="3914e8de6813b90af0c159952b27041788838241af1e94a7f6a44a2526cf236f9971e6ad598c44ec15fea694cb4ea6a003d8d3bca5f78f0bd628f8019b79d04cff9f790ae9fd9005e1d798251dc17e0a08e246df3d816299bbc286219d09b0f9c3244aff9500d56627b17e", 0x6b}, {&(0x7f00000000c0)="db951de24507e2cd5cc84a5af40339222208472634143f05dc959a76f99b9ff587933a8ee69ca82ce73f534762101ba3a39b0bf09aadbf6a7bac370331e43bc32a7087676926d045899f9dbf259e906224", 0x51}, {&(0x7f0000000140)="31328e16899990fd38418eaf096b7cea983696", 0x13}, {&(0x7f0000000180)="6315726e64bfe51fa57379dd77103d4e502fe1c68cd18ab3df601761a1172a9d7a0e", 0x22}, {&(0x7f00000001c0)="a61d78a924d4f921d1ada1bec942fc02111f40370f4f49eb65cd412f130fa64aaf4795577c", 0x25}, {&(0x7f0000000200)="5b34b715ff67ae2714a5ecbdc79776ccca667493122ebf2b378b0ced9169db92342ef89a0b47f34c399975f9abe3e06fac11bf987b7d302b510f27f571c3236ad9d6ec6c3033381fc2f4f53e5f2f7b93c630d1a534570f2adb5ff96d3970c6a5097c96095e1dd57c9bef966557f5a95a3fcb800016a0d5abee44d19e6dea24710aa85bf9f429707a0c5a6e4a380f951f02eb5371ee186e7bfafcbf950fc46031407309033cf02700e3f115d812b27244b8d099051f37e2a9bb5ef72028663d3fff4f49da4e1e7aea25e2517838d1f1025ad19e8d41483252331e044e977cf0d2846ffab40e840a2c4c06abb1a6", 0xed}, {&(0x7f0000000300)="45e368df9ed48d8f7607c03fe67eca38af4231f5be22661a8ad2729d9eb00b3c4d173fce63ff9c4e0caf1a317e66f8aa295379ae55b0bfcf855b02d91300011edf2ee0b6a9ff7f0986a5d289e18a4bf328b60180f110a857306898", 0x5b}, {&(0x7f0000000380)="7242ff80cc90b755590842328e66250c8807d8b246d04bc8225ed07b62d240f616be341553bf015fb84f4ce7ef36df61dfa7eb44ad57983bbe972af84db4e44d28a5d4a4641d8015c77a2a061d939437a496f5681204f036cac056901aa1db16a72d8d09bd63f83f294a23eb393b0c27f278214e6b10ffbbd7d7304e988506c40f69273ea3913c5e3a1e8ec0ee4113e5905b7e0609a2be2684f67ca3a56cb8bd4c365b230db9daac146d51053abee3d8944be5", 0xb3}, {&(0x7f0000000e00)="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", 0x1000}], 0x9}, 0x90) ioctl$PPPIOCNEWUNIT(0xffffffffffffffff, 0xc004743e, &(0x7f0000000140)=0x7ffd) socket$kcm(0x10, 0x2, 0x10) 2.225285515s ago: executing program 3 (id=2084): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r1) sendmsg$IEEE802154_START_REQ(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x34, r2, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x12}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x3}, @IEEE802154_ATTR_COORD_SHORT_ADDR={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x18000}, 0x0) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f00000005c0)={@mcast2={0xff, 0x5}, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1, 0x800000, 0xa, 0x0, 0x0, 0x7ffffffe, 0x2160302}) 2.062477388s ago: executing program 3 (id=2085): sendmsg$NL802154_CMD_NEW_SEC_KEY(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)=ANY=[@ANYBLOB="d3a13a0dace547a69858dc9a5d554598afa5c07799e7b2adadb3d9bdd3b7f8014d08a146424160fb3994fdbd9fdb412e3ce89a5f5fdce3d52bea6618444f877e38a849f2d6a2b32fcd5e16edb226cf83a39ffc4f5beba159b2745ba2340ff78e68bf481bcb6d182e39779f466bf5bbb38fc8bf653a989401fd162f228e0c3a0b6b"], 0x44}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl2\x00', &(0x7f0000000380)={'sit0\x00', 0x0, 0x7, 0x1, 0x0, 0x6, {{0x5, 0x4, 0x2, 0x2d, 0x14, 0x64, 0x0, 0xe0, 0x2f, 0x0, @local, @empty}}}}) r0 = socket$netlink(0x10, 0x3, 0x15) syz_emit_ethernet(0x5e, &(0x7f0000000c00)={@random="c3472ab8358d", @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00\b', 0x28, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0xe}, @mcast2, {[], @ndisc_redir={0x87, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1}}}}}}, 0x0) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f0000000380)=0x20000, 0x4) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000100)={&(0x7f0000000000)=""/5, 0x204000, 0x1000}, 0x20) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000040)=0x4000, 0x4) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000000080)=[{&(0x7f0000000700)="89000000120081ae08060c40928505007f03e3f70000000000e2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaee0c7a6ec08123d000200080001070400c46b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x20000010) bind$xdp(r1, &(0x7f00000002c0)={0x2c, 0x4, r3}, 0x10) pipe(&(0x7f0000000000)) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0xc, 0xe, &(0x7f0000001a40)=ANY=[], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x11, 0xffffffffffffffff, 0x8, 0x0, 0x5c}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000600000018100000", @ANYRES32, @ANYBLOB="00000000000000006600000000000000180000000000000000000000000000009500000000000000360a00000000000018010000202078250000000053e3bb3250a9630b00000000bfa100000000000007010000f8ffffffb702000008000000b70200000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x4, 0xb, &(0x7f0000000340)=""/222}, 0x21) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r5, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="b9ff03076844268cb89e14f0080047e0ffff00124000633a77fbac141416e000000194029f034d2f87e589ca6aab845013f2325f1a3901050b038da1880b25181aa59d943be3f4aed50ea5a6b8686731cb89ef77123c899b699eeaa8eaa0073461119663906400f30c0600000000000059b6d3296e8ca31bce1d8392078b72f24996ae17dffc2e43c8174b54b620636894aaacf28ff62616363c70a440aec4014caf28c0adc043084617d7ecf41e9d134589d46e5dfc4ca5780d38cae870b9a1df48b238190da450296b0ac01496ace23eefc9d4246dd14afbf79a2283a0bb7e1d235f3df126c3acc240d75a058f6efa6d1f5f7ff4000000000000000000", 0x0, 0x6b, 0x60000000, 0x0, 0x1c, &(0x7f0000000000), &(0x7f0000000200)="b1763869c6071a71bb26e17681fdef98d9c1c3a25e1022cac4be4a47"}, 0x50) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="040100001000"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) 1.662738958s ago: executing program 2 (id=2087): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000700)=ANY=[@ANYBLOB="7e87703b00000000000000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb7001c0000000000b7030000000000fd85001d83e3c2935c000072000000181100001a33f23a", @ANYRES32=r0, @ANYBLOB="0000000020000000b7080000000000005c8af8ff0008000000000007020000f8ffffffb703000008000000b7040000000000e78400000003000000950004000000"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffd0d, 0x0, 0x0, 0x0, 0xe119}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="05000000040000000400000001"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x8, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="17fa00000000090000000400000000001c110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000007d00000095"], 0x0, 0x3, 0x0, 0x0, 0x40f00, 0x40, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000000700000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f00000000c0), &(0x7f0000000680)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000006c0)={{r2}, &(0x7f00000000c0), &(0x7f0000000680)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='tlb_flush\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r1}, 0x10) socket(0x10, 0x3, 0x0) (async) r4 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) (async) setsockopt$netlink_NETLINK_TX_RING(r4, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) (async) sendmsg$kcm(r4, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="2e00000022008102e00f80ecdb4cb9020a", 0x4a}, {&(0x7f0000001700)="0c74c75350f4a590e15c61c7942348092734fe1863473bbce6798a60e9", 0x1d}], 0x2, 0x0, 0x0, 0x10}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)={0x120, r5, 0x20, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_WANT_1X_4WAY_HS={0x4}, @NL80211_ATTR_BG_SCAN_PERIOD={0x6, 0x98, 0x2}, @NL80211_ATTR_KEYS={0xcc, 0x51, 0x0, 0x1, [{0x1c, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_TYPE={0x8}, @NL80211_KEY_DEFAULT_MGMT={0x4}]}, {0x28, 0x0, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x2}, @NL80211_KEY_DATA_WEP40={0x9, 0x1, "e8ff6f0649"}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_IDX={0x5}]}, {0x40, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DEFAULT_TYPES={0x18, 0x8, 0x0, 0x1, [@NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_MULTICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}, @NL80211_KEY_DEFAULT_TYPE_UNICAST={0x4}]}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "b53cff5bee0d1833901b1ec1d6"}]}, {0x24, 0x0, 0x0, 0x1, [@NL80211_KEY_DEFAULT={0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "d137b2350dfbd27f521ffb44d5"}, @NL80211_KEY_SEQ={0x7, 0x4, "fe7358"}]}, {0x20, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "701a12a8dbe24813804e72490b"}]}]}, @NL80211_ATTR_PBSS={0x4}, @fils_params=[@NL80211_ATTR_FILS_ERP_NEXT_SEQ_NUM={0x6}], @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_WIPHY_FREQ_HINT={0x8, 0xc9, @random}, @NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @from_mac=@device_b}]}, 0x120}, 0x1, 0x0, 0x0, 0x805}, 0x81) 1.660410459s ago: executing program 3 (id=2088): r0 = socket$inet6(0xa, 0x5, 0x0) close(r0) unshare(0x6a040000) unshare(0x60400) shutdown(r0, 0x0) r1 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r1, 0x1, 0x4a, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="14000000100001000000002c835b13fe1c3252bc4574d9f9156900ff0000000000000a2c000000050a030000000000000000003fd09f5b70dc089ea686b7e680e5c033a7bdf2e1909f020000000c00024000000000000000010900010073797a30000000001400007cd5"], 0x68}}, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000004519000000000000000000000000005b34866d2ca8f00f7664a1000000000000"], 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYRESHEX=r2, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRESHEX=r2], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x24, &(0x7f0000000600)=ANY=[@ANYBLOB="18084c692803931db5000000000000140000000400000018111000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bca900000000000035090100000000009500000000000000b702000000000000632af8ff00000000b509000000000000dbaaf8fff1000000bf8600000000000007080000f8ffffffbfa400000000000007090000f0ffffffc70200000800000018220000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7050000080000004608f1ff760000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000010001008500000006000000bf9800000000000056080000000000008500000007000000b7000000000000009500000000000000"], &(0x7f0000000980)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x3f, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%nN\xd4\xa2\x88\x00\xd11=\x11\xc8\xdd\x15\xcc\xd2\xf1d\'%\x11c\x91l,'}, 0x30) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r5, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x32}, 0x9c) bind$inet6(r5, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r5, &(0x7f0000000300)="647a4cee25993e7a5c7df9", 0xb, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xfffffffc, @loopback}, 0x1c) sendmmsg$inet6(r5, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000004c0)="cc", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000b80)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277771bef544c745e7a80c9e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d219206ddc35099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de76", 0x390}], 0x1}}], 0x2, 0x4048884) getsockopt$inet_sctp6_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000000540)={0x0, 0x1, 0x0, 0x2, 0x9, 0x200, 0x0, 0xa77a, {0x0, @in6={{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, 0xfffffff7}}, 0x74, 0x4, 0xe60e, 0x8, 0x7}}, &(0x7f0000000280)=0xb0) connect$inet6(r5, &(0x7f0000000140)={0xa, 0x4e22, 0x6, @mcast2}, 0x1c) bpf$OBJ_GET_MAP(0x7, &(0x7f00000001c0), 0x18) syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r6, 0x84, 0x83, &(0x7f0000000000)=@assoc_value, &(0x7f00000010c0)=0x8) 1.525082332s ago: executing program 2 (id=2089): bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x10, 0xb, &(0x7f0000000180)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={0xffffffffffffffff, 0x3a, 0x0, 0x0, 0x0, 0x0, 0x401, 0x44000000, 0x0, 0x0, 0x0, 0x0, 0x1, 0xfffffffd, 0x2}, 0x50) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet(0x2, 0x1, 0x5) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/uts\x00') r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="09000000030000000400010005"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007200000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) 1.184003663s ago: executing program 2 (id=2090): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r0, &(0x7f0000000380)={{0x6, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, 0xa}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}]}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071123d000000000095000300"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) syz_init_net_socket$llc(0x1a, 0x1, 0x0) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000020601080000000000000000000000000c00078008001240000000080500010006000000050005000a00000005000400000000000900020073797a310000000010000300686173683a6970246d656300"], 0x54}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r3 = socket(0x10, 0x2, 0x0) (async) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f00000005c0)=0x2, 0x4) (async) connect$netrom(r2, &(0x7f0000000300)={{0x6, @rose, 0xffffffff}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async) listen(r0, 0x1ad72f7) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="a80000001000030500004088ee25db4bce7c1200", @ANYRES32, @ANYBLOB="1000020000000000600012800b00010065727370616e00005000028006000f00e6f2000008000700ff"], 0xa8}, 0x1, 0x0, 0x0, 0x40001}, 0x8000) (async) r5 = accept4(r0, 0x0, 0x0, 0x80000) (async) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000600)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x83000000}, {0x85, 0x0, 0x0, 0x71}}, @printk={@x, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0xe}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r6}, 0x18) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000480), r5) sendmsg$DEVLINK_CMD_RATE_SET(r5, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x65754f12bc7c30e}, 0xc, &(0x7f0000000500)={&(0x7f00000004c0)={0x2c, r7, 0x7, 0x70bd2d, 0x25dfdbfb, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}, @DEVLINK_ATTR_PORT_INDEX={0x8}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x1) (async) socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r3, 0x8983, &(0x7f00000002c0)={0x8, 'ip6_vti0\x00', {'ip6gre0\x00'}, 0x3}) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x3, 0xe, &(0x7f0000001540)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x200000, 0x10, &(0x7f0000000000), 0x143}, 0x48) r8 = accept4$netrom(r0, 0x0, 0x0, 0x80000) writev(r8, &(0x7f00000001c0)=[{&(0x7f0000000400)="c08f2d0a3c8a", 0x6}, {0x0}, {&(0x7f0000000000)="2b2e5b000b2fe53b47bd24442ab58812fd5f52ae8c0ea831945643792d2a17c2491c491c7e5e3f7079473b178f3eb75c42cd4c599c6a4fed5d477b", 0x3b}, {0x0}, {&(0x7f0000000080)="ecd4068d764de36b469f30a42d6f1a86b8da9a5341e7bab6cc77cf1d503cc8de4d5f", 0x22}, {&(0x7f0000000100)="789f631aec731f4176fe62a9b696fee65a738c419307f37f22fdae9144e31816475c5a03464df268ca", 0x29}, {0x0}], 0x7) 1.013213914s ago: executing program 2 (id=2091): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, r1, 0x1, 0x4, 0x0, {}, [@IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'ip6erspan0\x00'}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8}, @IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @dev={0xfe, 0x80, '\x00', 0x20}}]}]}, 0x50}}, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x6, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2, 0x0, 0x0, 0x80000009}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x2100, 0x0, &(0x7f0000000100), 0x0, 0x500, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, 0x50) syz_emit_ethernet(0x82, &(0x7f0000000000)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x80, 0x3, 0x0, [{@private=0xa010101}, {@private}, {@dev}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) 866.025934ms ago: executing program 2 (id=2092): r0 = socket(0x10, 0x803, 0x0) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0xffffff14, &(0x7f0000000000)={0x0, 0x14}}, 0x0) (async) sendmsg$SMC_PNETID_GET(r0, &(0x7f0000000300)={0x0, 0xffffff14, &(0x7f0000000000)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) (async) getsockname$packet(r0, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000580)=0x14) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4c0000001000370401000000f8dbdf2500000000", @ANYRES32=r1, @ANYBLOB="890c0400000000002c0012800900010069706970000000001c00028008000200ac1414bb06000f00010000000635ca74f6c066146f69cc217d6fba750b7d459731ef58735a97c66f7621f88ec62472a389e5c09e457c35e01691bb5eed207a9c0cfa605b88546d7d548f4ac30d401bc8acb03e4bf9c1a9fd352a95d732dec006b5f80028fc1d39e41e61a72c9740e72e263ebb8aeb87133a8819ddd82fbe263b257f715ffbddf9f7bc219d5bb411180272277e6426"], 0x4c}, 0x1, 0x0, 0x0, 0x44801}, 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="02004db90980ffff", 0x8) (async) setsockopt(r2, 0x84, 0x7f, &(0x7f0000000040)="02004db90980ffff", 0x8) socket$can_raw(0x1d, 0x3, 0x1) (async) r3 = socket$can_raw(0x1d, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'team_slave_1\x00', 0x0}) bind$can_raw(r3, &(0x7f0000000080)={0x1d, r5}, 0x10) r6 = socket$inet(0x2, 0x2, 0x0) sendmmsg$inet(r6, &(0x7f00000017c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @loopback}, 0x10, 0x0, 0x0, &(0x7f00000004c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r1, @empty, @loopback}}}], 0x20}}], 0x1, 0x4040880) 0s ago: executing program 2 (id=2093): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000900)=@newqdisc={0x78, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x198, 0x4, 0x9, 0x2, 0x68}, 0xb, 0x1, 0x5, 0x1, 0x5, 0x16, 0x15, 0x1d, 0x6, 0x4, {0x5, 0xb, 0x41, 0x0, 0x16, 0x3ff}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x40000}, 0x44080) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x30, 0x24, 0xd0f, 0x70bd29, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffe0, 0xa}, {0x1, 0x10}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x55}, 0x4000) getsockname$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000080)=0x14) r4 = socket$netlink(0x10, 0x3, 0xa) r5 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) getsockopt$XDP_STATISTICS(r5, 0x11b, 0x7, &(0x7f00000002c0), &(0x7f0000000300)=0x30) recvmmsg(r4, &(0x7f0000002400)=[{{&(0x7f0000000180)=@alg, 0x80, &(0x7f0000000840)=[{&(0x7f0000000200)=""/167, 0xa7}, {&(0x7f0000000380)=""/116, 0x74}, {&(0x7f0000000400)=""/177, 0xb1}, {&(0x7f00000004c0)=""/154, 0x9a}, {&(0x7f0000002580)=""/117, 0x75}, {&(0x7f00000002c0)=""/47, 0x2f}, {&(0x7f0000000680)=""/203, 0xcb}, {&(0x7f0000000780)=""/177, 0xb1}], 0x8, &(0x7f0000000580)=""/7, 0x7}}, {{&(0x7f00000008c0)=@in={0x2, 0x0, @loopback}, 0x80, &(0x7f0000001cc0)=[{&(0x7f0000000940)=""/138, 0x8a}, {&(0x7f0000000a00)=""/122, 0x7a}, {&(0x7f0000000a80)=""/157, 0x9d}, {&(0x7f0000000b40)=""/67, 0x43}, {&(0x7f0000000bc0)=""/39, 0x27}, {&(0x7f0000000c00)=""/77, 0x4d}, {&(0x7f0000000c80)=""/4096, 0x1000}, {&(0x7f0000001c80)=""/50, 0x32}], 0x8, &(0x7f0000001d40)=""/104, 0x68}, 0x8}, {{&(0x7f0000001dc0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @private}}}, 0x80, &(0x7f0000001ec0)=[{&(0x7f0000001e40)=""/17, 0x11}, {&(0x7f0000001e80)=""/10, 0xa}], 0x2, &(0x7f0000001f00)=""/170, 0xaa}, 0x4}, {{&(0x7f0000001fc0)=@un=@abs, 0x80, &(0x7f0000002200)=[{&(0x7f0000002040)=""/241, 0xf1}, {&(0x7f0000002140)=""/94, 0x5e}, {&(0x7f00000021c0)=""/39, 0x27}], 0x3, &(0x7f0000002240)=""/56, 0x38}, 0x8}, {{0x0, 0x0, &(0x7f00000023c0)=[{&(0x7f0000002280)=""/51, 0x33}, {&(0x7f00000022c0)=""/36, 0x24}, {&(0x7f0000002300)=""/187, 0xbb}], 0x3}, 0x8}], 0x5, 0x0, &(0x7f0000002540)) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) sendmsg$AUDIT_USER_AVC(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000600)=ANY=[@ANYBLOB="24000000530400012dbd7000ffdbdf25003791f889c094cb77c48d7abd06bd74f100fb4f44000000"], 0x24}, 0x1, 0x0, 0x0, 0x40014}, 0x4000040) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_EXP_GET(r6, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000006c0)=ANY=[@ANYBLOB="500000000102010200000000000000000a0000003c0001800c00028005000100000000002c00018014000300200100000000000000000000000000ef130004"], 0x50}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000000c0)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3}, 0x94) socket$kcm(0x29, 0x0, 0x0) kernel console output (not intermixed with test programs): evsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.437978][ T6344] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.497314][ T6344] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.513382][ T6344] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 307.739453][T11866] SET target dimension over the limit! [ 307.973610][T11862] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1522'. [ 307.997159][ T5857] Bluetooth: hci4: command tx timeout [ 307.998923][T11873] netlink: 'syz.1.1524': attribute type 7 has an invalid length. [ 308.123427][T11877] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 308.161117][T11877] macsec0: entered promiscuous mode [ 308.189260][T11877] macsec0: entered allmulticast mode [ 308.220568][T11877] mac80211_hwsim hwsim6 wlan0: entered allmulticast mode [ 308.431048][T11706] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 308.454438][T11706] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 308.509613][T11883] netlink: 'syz.1.1527': attribute type 1 has an invalid length. [ 308.529174][T11883] netlink: 232 bytes leftover after parsing attributes in process `syz.1.1527'. [ 308.542970][T11706] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 308.567757][T11706] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 308.633602][T11883] netlink: 248 bytes leftover after parsing attributes in process `syz.1.1527'. [ 309.074510][T11706] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.083118][T11689] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 309.110157][T11689] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 309.123306][T11689] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 309.145848][T11689] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 309.174539][T11706] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.220390][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.227593][ T6344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.274001][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.281218][ T6344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 309.336850][ T6655] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 309.357345][ T6655] hid-generic 0005:16BF:5505.0002: unknown main item tag 0x0 [ 309.421669][ T6655] hid-generic 0005:16BF:5505.0002: hidraw0: BLUETOOTH HID vc3.b8 Device [syz0] on aa:aa:aa:aa:aa:aa [ 309.603720][T11689] 8021q: adding VLAN 0 to HW filter on device bond0 [ 309.653876][T11689] 8021q: adding VLAN 0 to HW filter on device team0 [ 309.678076][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 309.685332][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 309.714746][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 309.721962][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 310.136185][T11706] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.150263][T11937] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1535'. [ 310.500317][T11689] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 310.524177][T11953] netlink: 'syz.3.1540': attribute type 10 has an invalid length. [ 310.694440][T11956] lo speed is unknown, defaulting to 1000 [ 310.714957][T11689] veth0_vlan: entered promiscuous mode [ 310.738553][T11689] veth1_vlan: entered promiscuous mode [ 310.819642][T11689] veth0_macvtap: entered promiscuous mode [ 310.833823][T11689] veth1_macvtap: entered promiscuous mode [ 310.878897][T11689] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 310.918944][T11689] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 310.978832][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.000009][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.023956][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.044281][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.123454][T11706] veth0_vlan: entered promiscuous mode [ 311.168743][T11706] veth1_vlan: entered promiscuous mode [ 311.268530][ T6344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.286965][ T6344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.371263][T11706] veth0_macvtap: entered promiscuous mode [ 311.387231][T11706] veth1_macvtap: entered promiscuous mode [ 311.444706][ T6344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 311.458499][ T6344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 311.460040][T11969] netlink: 'syz.2.1543': attribute type 10 has an invalid length. [ 311.490551][T11706] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 311.524565][T11970] netlink: 'syz.2.1543': attribute type 10 has an invalid length. [ 311.532602][T11969] !: entered allmulticast mode [ 311.532749][T11969] !: entered promiscuous mode [ 311.534728][T11969] team0: Port device 0! added [ 311.593126][ T6344] bridge0: port 2(team0) entered blocking state [ 311.599554][ T6344] bridge0: port 2(team0) entered forwarding state [ 311.645019][T11970] !: left allmulticast mode [ 311.673347][T11970] team0: Port device 0! removed [ 311.681378][T11970] !: left promiscuous mode [ 311.698219][T11970] bond0: (slave 0!): Enslaving as an active interface with an up link [ 311.718631][T11706] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 311.810143][ T6344] bridge0: port 2(team0) entered disabled state [ 311.839801][ T69] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.850908][ T69] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.869862][ T69] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 311.879782][ T69] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 312.030932][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.063940][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.107392][ T6343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 312.130904][ T6343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 312.290853][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.633260][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 312.962730][T11993] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1548'. [ 313.047114][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.055998][T11996] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 313.181857][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 313.328425][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 313.338613][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 313.347310][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 313.356553][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 313.370066][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 313.552739][T11998] lo speed is unknown, defaulting to 1000 [ 313.576296][ T49] bridge_slave_1: left allmulticast mode [ 313.585364][ T49] bridge_slave_1: left promiscuous mode [ 313.619912][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 313.665796][ T49] bridge_slave_0: left allmulticast mode [ 313.681548][ T49] bridge_slave_0: left promiscuous mode [ 313.699646][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 313.872285][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 313.885847][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 313.894183][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 313.907044][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 313.917491][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 314.400925][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 314.413745][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 314.424008][ T49] bond0 (unregistering): Released all slaves [ 314.487040][T12004] lo speed is unknown, defaulting to 1000 [ 314.909512][T12011] lo speed is unknown, defaulting to 1000 [ 315.009050][T11998] chnl_net:caif_netlink_parms(): no params data found [ 315.277072][T12017] lo speed is unknown, defaulting to 1000 [ 315.284483][T11998] bridge0: port 1(bridge_slave_0) entered blocking state [ 315.302179][T11998] bridge0: port 1(bridge_slave_0) entered disabled state [ 315.309743][T11998] bridge_slave_0: entered allmulticast mode [ 315.318206][T11998] bridge_slave_0: entered promiscuous mode [ 315.327342][T11998] bridge0: port 2(bridge_slave_1) entered blocking state [ 315.334710][T11998] bridge0: port 2(bridge_slave_1) entered disabled state [ 315.343366][T11998] bridge_slave_1: entered allmulticast mode [ 315.352012][T11998] bridge_slave_1: entered promiscuous mode [ 315.408528][T11998] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 315.419038][ T5857] Bluetooth: hci2: command tx timeout [ 315.429369][T11998] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 315.488419][T11998] team0: Port device team_slave_0 added [ 315.503760][T11998] team0: Port device team_slave_1 added [ 315.550672][T11998] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 315.557825][T11998] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.586459][T11998] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 315.600263][T12033] lo speed is unknown, defaulting to 1000 [ 315.613466][T11998] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 315.620915][T11998] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 315.647670][T11998] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.937328][ T49] hsr_slave_0: left promiscuous mode [ 315.947350][ T49] hsr_slave_1: left promiscuous mode [ 315.953516][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 315.967587][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 315.977813][ T5857] Bluetooth: hci4: command tx timeout [ 315.991310][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 315.999663][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 316.028250][ T49] veth1_macvtap: left promiscuous mode [ 316.033819][ T49] veth0_macvtap: left promiscuous mode [ 316.040678][ T49] veth1_vlan: left promiscuous mode [ 316.046600][ T49] veth0_vlan: left promiscuous mode [ 316.570533][ T49] team0 (unregistering): Port device team_slave_1 removed [ 316.610798][ T49] team0 (unregistering): Port device team_slave_0 removed [ 317.090600][T11998] hsr_slave_0: entered promiscuous mode [ 317.098588][T11998] hsr_slave_1: entered promiscuous mode [ 317.104700][T11998] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 317.113154][T11998] Cannot create hsr debugfs directory [ 317.260056][ T1302] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.496798][ T5857] Bluetooth: hci2: command tx timeout [ 317.913838][T12045] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1560'. [ 317.915709][T12011] chnl_net:caif_netlink_parms(): no params data found [ 318.055333][ T5857] Bluetooth: hci4: command tx timeout [ 318.230767][T12062] atomic_op ffff888072dbf998 conn xmit_atomic 0000000000000000 [ 318.241223][T12062] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1564'. [ 318.328895][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.369583][T12060] erspan1: entered promiscuous mode [ 318.374638][T12066] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1565'. [ 318.375873][T12060] vlan3: entered promiscuous mode [ 318.441927][T12011] bridge0: port 1(bridge_slave_0) entered blocking state [ 318.451878][T12011] bridge0: port 1(bridge_slave_0) entered disabled state [ 318.461516][T12011] bridge_slave_0: entered allmulticast mode [ 318.469821][T12011] bridge_slave_0: entered promiscuous mode [ 318.507355][T12011] bridge0: port 2(bridge_slave_1) entered blocking state [ 318.515119][T12011] bridge0: port 2(bridge_slave_1) entered disabled state [ 318.522797][T12011] bridge_slave_1: entered allmulticast mode [ 318.530905][T12011] bridge_slave_1: entered promiscuous mode [ 318.600005][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.691650][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.720283][T12011] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 318.743786][T12011] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 318.807366][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 318.891243][T12011] team0: Port device team_slave_0 added [ 318.930183][T12011] team0: Port device team_slave_1 added [ 319.014525][T12011] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 319.026072][T12011] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.079247][T12011] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 319.111010][T12011] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 319.119354][T12011] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 319.146059][T12011] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 319.188699][T11998] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 319.244772][T12087] x_tables: unsorted entry at hook 3 [ 319.251080][T11998] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 319.305883][T11998] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 319.327477][T12092] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1574'. [ 319.430788][T11998] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 319.569349][T12011] hsr_slave_0: entered promiscuous mode [ 319.576040][ T5857] Bluetooth: hci2: command tx timeout [ 319.588090][T12011] hsr_slave_1: entered promiscuous mode [ 319.604903][T12011] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 319.620006][T12011] Cannot create hsr debugfs directory [ 319.717929][ T49] bridge_slave_1: left allmulticast mode [ 319.723613][ T49] bridge_slave_1: left promiscuous mode [ 319.751468][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.773174][ T49] bridge_slave_0: left allmulticast mode [ 319.789485][ T49] bridge_slave_0: left promiscuous mode [ 319.795725][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.009339][T12120] netlink: 'syz.1.1582': attribute type 13 has an invalid length. [ 320.030424][T12120] netlink: 'syz.1.1582': attribute type 17 has an invalid length. [ 320.082785][T12128] netlink: 'syz.3.1584': attribute type 3 has an invalid length. [ 320.137933][ T5857] Bluetooth: hci4: command tx timeout [ 320.256293][T12133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.322195][T12133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.403121][T12133] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 320.712333][T12138] x_tables: ip6_tables: tcp match: only valid for protocol 6 [ 321.114637][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 321.128978][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 321.139340][ T49] bond0 (unregistering): Released all slaves [ 321.166572][T12112] _ÐZ`Ô€@ÿÿ: entered promiscuous mode [ 321.288380][T12120] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 321.455348][T12127] lo speed is unknown, defaulting to 1000 [ 321.531106][T12151] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1588'. [ 321.675537][ T5857] Bluetooth: hci2: command tx timeout [ 322.226387][ T5857] Bluetooth: hci4: command tx timeout [ 322.629473][ T49] hsr_slave_0: left promiscuous mode [ 322.665865][ T49] hsr_slave_1: left promiscuous mode [ 322.689604][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 322.702540][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 322.723141][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 322.732605][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 322.789812][ T49] veth1_macvtap: left promiscuous mode [ 322.814601][ T49] veth0_macvtap: left promiscuous mode [ 322.821242][ T49] veth1_vlan: left promiscuous mode [ 322.835992][ T49] veth0_vlan: left promiscuous mode [ 323.074526][T12174] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 323.472196][ T49] team0 (unregistering): Port device team_slave_1 removed [ 323.514517][ T49] team0 (unregistering): Port device team_slave_0 removed [ 323.961746][T12169] lo speed is unknown, defaulting to 1000 [ 323.981754][T11998] 8021q: adding VLAN 0 to HW filter on device bond0 [ 324.027267][T11998] 8021q: adding VLAN 0 to HW filter on device team0 [ 324.204780][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state [ 324.212012][ T6344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 324.255236][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 324.262457][ T6344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 324.365976][T12011] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 324.393519][T12011] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 324.467408][T12186] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1599'. [ 324.628855][T12186] bond0 (unregistering): (slave syz_tun): Releasing backup interface [ 324.641243][T12186] bond0 (unregistering): (slave 0!): Releasing backup interface [ 324.653347][T12186] bond0 (unregistering): Released all slaves [ 324.677312][T12011] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 324.721518][T12011] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 325.143486][T12011] 8021q: adding VLAN 0 to HW filter on device bond0 [ 325.210929][T12011] 8021q: adding VLAN 0 to HW filter on device team0 [ 325.246896][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 325.254122][ T6342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 325.320577][ T9905] bridge0: port 2(bridge_slave_1) entered blocking state [ 325.327828][ T9905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 325.428361][T11998] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 325.682423][T12222] dvmrp8: entered allmulticast mode [ 325.749405][T11998] veth0_vlan: entered promiscuous mode [ 325.790456][T12220] dvmrp8: left allmulticast mode [ 325.944537][T11998] veth1_vlan: entered promiscuous mode [ 326.048972][T11998] veth0_macvtap: entered promiscuous mode [ 326.090004][T11998] veth1_macvtap: entered promiscuous mode [ 326.192307][T12237] netlink: 84 bytes leftover after parsing attributes in process `syz.1.1608'. [ 326.210929][T12011] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 326.229821][T11998] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 326.276686][T11998] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 326.381326][ T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.421365][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.467022][ T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.551016][ T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 326.579465][T12254] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1612'. [ 326.761462][ T1035] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.798055][ T1035] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 326.893137][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 326.932873][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 327.135633][T12278] lo speed is unknown, defaulting to 1000 [ 327.152786][T12273] netlink: 'syz.3.1617': attribute type 13 has an invalid length. [ 327.196864][T12273] netlink: 'syz.3.1617': attribute type 17 has an invalid length. [ 327.357722][T12273] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.372743][T12273] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.381694][T12273] batman_adv: batadv0: Interface activated: 0! [ 327.389139][T12273] batadv0: mtu less than device minimum [ 327.396349][T12273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.408288][T12273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.420216][T12273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.432121][T12273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.444022][T12273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.455945][T12273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.467851][T12273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.479757][T12273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.491664][T12273] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 327.893377][ T9905] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 327.970962][T12011] veth0_vlan: entered promiscuous mode [ 328.118520][ T9905] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.194281][T12011] veth1_vlan: entered promiscuous mode [ 328.307817][ T9905] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 328.350380][T12011] veth0_macvtap: entered promiscuous mode [ 328.359873][T12011] veth1_macvtap: entered promiscuous mode [ 328.384924][T12011] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 328.408361][T12011] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 328.424040][ T1035] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.432963][ T1035] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.443516][ T1035] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.452908][ T1035] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 328.513121][ T6344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.526936][ T6344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.552873][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 328.561376][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 328.678236][ T9905] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 329.020055][ T9905] bridge_slave_1: left allmulticast mode [ 329.026018][ T9905] bridge_slave_1: left promiscuous mode [ 329.031808][ T9905] bridge0: port 2(bridge_slave_1) entered disabled state [ 329.043595][ T9905] bridge_slave_0: left allmulticast mode [ 329.049931][ T9905] bridge_slave_0: left promiscuous mode [ 329.056181][ T9905] bridge0: port 1(bridge_slave_0) entered disabled state [ 329.197511][T12308] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1624'. [ 329.508008][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 329.520407][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 329.537487][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 329.572761][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 329.593332][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 329.712005][T12318] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1628'. [ 329.743684][ T9905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 329.760617][T12322] netlink: 'syz.2.1627': attribute type 10 has an invalid length. [ 329.772817][ T9905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 329.791040][ T9905] bond0 (unregistering): Released all slaves [ 329.812378][T12323] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1627'. [ 329.906537][T12323] bridge0: entered promiscuous mode [ 329.911790][T12323] team0: entered promiscuous mode [ 329.950493][T12323] macsec1: entered allmulticast mode [ 329.961883][T12323] bridge0: entered allmulticast mode [ 329.988245][T12323] bridge0: left allmulticast mode [ 329.997665][T12323] bridge0: left promiscuous mode [ 330.002888][T12323] team0: left promiscuous mode [ 330.014797][T12327] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1630'. [ 330.088858][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 330.121464][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 330.130486][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 330.141467][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 330.156086][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 330.246463][T12312] lo speed is unknown, defaulting to 1000 [ 330.626723][T12353] netlink: 88 bytes leftover after parsing attributes in process `syz.2.1636'. [ 330.637002][T12353] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1636'. [ 330.648577][T12353] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1636'. [ 330.737024][T12332] lo speed is unknown, defaulting to 1000 [ 330.921758][T12368] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1639'. [ 331.608148][ T9905] hsr_slave_0: left promiscuous mode [ 331.637303][ T9905] hsr_slave_1: left promiscuous mode [ 331.643283][ T9905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 331.655584][ T5851] Bluetooth: hci2: command tx timeout [ 331.670341][ T9905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 331.749625][ T9905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 331.757656][ T9905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 331.804564][ T9905] veth1_macvtap: left promiscuous mode [ 331.812556][ T9905] veth0_macvtap: left promiscuous mode [ 331.819102][ T9905] veth1_vlan: left promiscuous mode [ 331.824707][ T9905] veth0_vlan: left promiscuous mode [ 332.227076][ T5851] Bluetooth: hci4: command tx timeout [ 332.367080][ T9905] team0 (unregistering): Port device team_slave_1 removed [ 332.409323][ T9905] team0 (unregistering): Port device team_slave_0 removed [ 332.697927][T12407] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1647'. [ 333.237362][T12420] netlink: 14 bytes leftover after parsing attributes in process `syz.2.1650'. [ 333.354357][T12413] batman_adv: batadv0: Interface deactivated: 0! [ 333.389348][T12413] macvlan0: left allmulticast mode [ 333.399282][T12413] veth3: left promiscuous mode [ 333.404234][T12413] geneve2: left promiscuous mode [ 333.463392][T12332] chnl_net:caif_netlink_parms(): no params data found [ 333.574486][T12435] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1652'. [ 333.732115][T12312] chnl_net:caif_netlink_parms(): no params data found [ 333.745444][ T5851] Bluetooth: hci2: command tx timeout [ 333.833408][T12440] xt_CONNSECMARK: invalid mode: 254 [ 334.013610][T12332] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.022278][T12332] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.064589][T12332] bridge_slave_0: entered allmulticast mode [ 334.093193][T12332] bridge_slave_0: entered promiscuous mode [ 334.173759][T12332] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.187349][T12332] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.194644][T12332] bridge_slave_1: entered allmulticast mode [ 334.203347][T12332] bridge_slave_1: entered promiscuous mode [ 334.220596][T12450] lo speed is unknown, defaulting to 1000 [ 334.263976][T12312] bridge0: port 1(bridge_slave_0) entered blocking state [ 334.272282][T12312] bridge0: port 1(bridge_slave_0) entered disabled state [ 334.296134][ T5851] Bluetooth: hci4: command tx timeout [ 334.310882][T12312] bridge_slave_0: entered allmulticast mode [ 334.332804][T12312] bridge_slave_0: entered promiscuous mode [ 334.374650][T12312] bridge0: port 2(bridge_slave_1) entered blocking state [ 334.382221][T12312] bridge0: port 2(bridge_slave_1) entered disabled state [ 334.393871][T12312] bridge_slave_1: entered allmulticast mode [ 334.402310][T12312] bridge_slave_1: entered promiscuous mode [ 334.457662][T12332] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.556220][T12332] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.639981][ T9905] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.667721][T12312] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 334.679241][T12458] lo speed is unknown, defaulting to 1000 [ 334.716698][T12312] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 334.792288][ T9905] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.869490][T12332] team0: Port device team_slave_0 added [ 334.878708][T12332] team0: Port device team_slave_1 added [ 334.969134][T12312] team0: Port device team_slave_0 added [ 335.006760][ T9905] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.084058][T12332] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.101414][T12332] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.142494][T12332] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.170326][T12312] team0: Port device team_slave_1 added [ 335.212121][ T9905] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.231327][T12461] lo speed is unknown, defaulting to 1000 [ 335.231379][T12332] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.244685][T12332] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.272412][T12332] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.426468][T12312] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 335.433445][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.467919][T12312] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 335.517790][T12312] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 335.524761][T12312] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 335.551368][T12312] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 335.635367][T12332] hsr_slave_0: entered promiscuous mode [ 335.647139][T12332] hsr_slave_1: entered promiscuous mode [ 335.666616][T12332] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.679161][T12332] Cannot create hsr debugfs directory [ 335.815412][ T5851] Bluetooth: hci2: command tx timeout [ 335.963959][T12312] hsr_slave_0: entered promiscuous mode [ 335.974446][T12312] hsr_slave_1: entered promiscuous mode [ 335.982251][T12312] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.990718][T12312] Cannot create hsr debugfs directory [ 336.236991][ T9905] bridge_slave_1: left allmulticast mode [ 336.245338][ T9905] bridge_slave_1: left promiscuous mode [ 336.257565][ T9905] bridge0: port 2(bridge_slave_1) entered disabled state [ 336.270214][ T9905] bridge_slave_0: left allmulticast mode [ 336.277091][ T9905] bridge_slave_0: left promiscuous mode [ 336.283127][ T9905] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.381785][ T5851] Bluetooth: hci4: command tx timeout [ 336.684355][ T9905] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.695125][ T9905] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.705504][ T9905] bond0 (unregistering): Released all slaves [ 337.279590][T12477] netlink: 'syz.1.1658': attribute type 1 has an invalid length. [ 337.546164][T12482] vlan1: entered promiscuous mode [ 337.591721][T12486] __nla_validate_parse: 1 callbacks suppressed [ 337.591743][T12486] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1660'. [ 337.609945][T12485] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1662'. [ 337.735588][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 337.918012][ T5851] Bluetooth: hci2: command tx timeout [ 337.950895][ T9905] hsr_slave_0: left promiscuous mode [ 337.957740][ T9905] hsr_slave_1: left promiscuous mode [ 337.963634][ T9905] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 337.997913][ T9905] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.021721][ T9905] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.038270][ T9905] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.149020][ T9905] veth1_macvtap: left promiscuous mode [ 338.167698][ T9905] veth0_macvtap: left promiscuous mode [ 338.173411][ T9905] veth1_vlan: left promiscuous mode [ 338.206161][ T9905] veth0_vlan: left promiscuous mode [ 338.264742][T12491] netlink: 'syz.2.1664': attribute type 303 has an invalid length. [ 338.313404][T12501] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1665'. [ 338.455322][ T5851] Bluetooth: hci4: command tx timeout [ 339.002042][ T9905] team0 (unregistering): Port device team_slave_1 removed [ 339.045098][ T9905] team0 (unregistering): Port device team_slave_0 removed [ 339.524227][ T49] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.554418][ T49] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.606499][T12332] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 339.627361][T12332] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 339.659508][T12332] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 339.723023][ T49] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.766701][T12332] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 339.812942][ T49] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 339.867190][T12514] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1667'. [ 340.159613][T12539] geneve2: entered promiscuous mode [ 340.243452][T12543] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1673'. [ 340.457719][T12312] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 340.548419][T12332] 8021q: adding VLAN 0 to HW filter on device bond0 [ 340.573430][T12312] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 340.642989][T12312] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 340.699937][T12312] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 340.744772][T12332] 8021q: adding VLAN 0 to HW filter on device team0 [ 340.813356][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 340.820600][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 340.894209][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 340.901433][ T6344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.106203][T12578] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1682'. [ 341.182012][T12312] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.230969][T12312] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.260768][T12580] xt_cgroup: path and classid specified [ 341.271371][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.278580][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.317387][T12580] net_ratelimit: 12 callbacks suppressed [ 341.317408][T12580] netlink: zone id is out of range [ 341.344937][ T3445] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.352154][ T3445] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.355663][T12580] netlink: zone id is out of range [ 341.364675][T12580] netlink: zone id is out of range [ 341.399206][T12580] netlink: zone id is out of range [ 341.410518][T12580] netlink: zone id is out of range [ 341.440366][T12580] netlink: zone id is out of range [ 341.452838][T12580] netlink: zone id is out of range [ 341.463415][T12312] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 341.482554][T12580] netlink: zone id is out of range [ 341.524191][T12590] netlink: 'syz.3.1684': attribute type 21 has an invalid length. [ 341.542305][T12594] batman_adv: batadv0: Interface deactivated: virt_wifi0 [ 341.548912][T12580] netlink: zone id is out of range [ 341.551108][T12594] batman_adv: batadv0: Removing interface: virt_wifi0 [ 341.555111][T12580] netlink: zone id is out of range [ 341.580254][T12594] bond5: (slave bridge2): Releasing active interface [ 341.663642][T12332] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 341.911405][T12312] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.081835][T12312] veth0_vlan: entered promiscuous mode [ 342.113692][T12312] veth1_vlan: entered promiscuous mode [ 342.200676][T12622] netlink: 68 bytes leftover after parsing attributes in process `syz.1.1690'. [ 342.240794][T12312] veth0_macvtap: entered promiscuous mode [ 342.269833][T12312] veth1_macvtap: entered promiscuous mode [ 342.333427][T12312] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 342.363536][T12312] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 342.406615][ T69] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.431033][ T69] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.481119][T12630] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1692'. [ 342.494865][ T69] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.520214][ T69] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 342.675700][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.700715][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.740689][T12642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'. [ 342.789773][ T3528] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 342.805788][ T3528] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 342.821239][T12332] veth0_vlan: entered promiscuous mode [ 342.862487][T12332] veth1_vlan: entered promiscuous mode [ 342.957808][T12332] veth0_macvtap: entered promiscuous mode [ 342.979120][T12332] veth1_macvtap: entered promiscuous mode [ 343.061226][T12332] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.081257][T12332] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.099850][ T6342] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.113790][ T6342] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.131353][T12646] lo speed is unknown, defaulting to 1000 [ 343.138454][ T6342] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.147777][ T6342] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.308737][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.317184][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.334577][ T9905] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.354683][ T9905] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.739096][T12653] xt_socket: unknown flags 0x8 [ 343.756222][ T6342] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.803455][T12658] netlink: 'syz.1.1697': attribute type 10 has an invalid length. [ 344.140771][ T6342] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.279991][T12668] sctp: [Deprecated]: syz.2.1700 (pid 12668) Use of int in maxseg socket option. [ 344.279991][T12668] Use struct sctp_assoc_value instead [ 344.381963][T12671] raw_sendmsg: syz.3.1701 forgot to set AF_INET. Fix it! [ 344.432930][ T6342] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.565068][ T6342] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.623116][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 344.633184][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 344.641502][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 344.650569][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 344.658458][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 344.699703][ T6342] bridge_slave_1: left allmulticast mode [ 344.706059][ T6342] bridge_slave_1: left promiscuous mode [ 344.711768][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.721885][ T6342] bridge_slave_0: left allmulticast mode [ 344.727955][ T6342] bridge_slave_0: left promiscuous mode [ 344.733639][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state [ 344.927984][T12682] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1703'. [ 345.092200][T12690] netlink: 'syz.3.1704': attribute type 1 has an invalid length. [ 345.108512][T12690] netlink: 208 bytes leftover after parsing attributes in process `syz.3.1704'. [ 345.200378][T12694] netlink: 'syz.2.1705': attribute type 10 has an invalid length. [ 345.259075][T12695] netlink: 'syz.2.1705': attribute type 10 has an invalid length. [ 345.321855][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.339826][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.348420][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.357758][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.365559][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 345.403275][ T6342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.414262][ T6342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.425044][ T6342] bond0 (unregistering): Released all slaves [ 345.473639][T12694] !: entered allmulticast mode [ 345.479711][T12694] !: entered promiscuous mode [ 345.502103][T12694] team0: Port device 0! added [ 345.572475][T12695] !: left allmulticast mode [ 345.580344][T12695] team0: Port device 0! removed [ 345.618249][T12673] lo speed is unknown, defaulting to 1000 [ 345.896978][T12696] lo speed is unknown, defaulting to 1000 [ 346.100722][T12707] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1709'. [ 346.134828][T12707] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1709'. [ 346.383250][T12721] xt_connbytes: Forcing CT accounting to be enabled [ 346.391593][T12721] x_tables: ip_tables: ah match: only valid for protocol 51 [ 346.696057][ T5857] Bluetooth: hci2: command tx timeout [ 347.008729][ T6342] hsr_slave_0: left promiscuous mode [ 347.038451][ T6342] hsr_slave_1: left promiscuous mode [ 347.044636][ T6342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 347.075590][ T6342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 347.094851][ T6342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 347.113660][ T6342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 347.161111][ T6342] veth1_macvtap: left promiscuous mode [ 347.203469][ T6342] veth0_macvtap: left promiscuous mode [ 347.213736][ T6342] veth1_vlan: left promiscuous mode [ 347.223616][ T6342] veth0_vlan: left promiscuous mode [ 347.415532][ T5857] Bluetooth: hci4: command tx timeout [ 347.829423][T12763] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1726'. [ 347.958377][T12768] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1726'. [ 347.979029][ T6342] team0 (unregistering): Port device team_slave_1 removed [ 348.029373][ T6342] team0 (unregistering): Port device team_slave_0 removed [ 348.640168][T12778] IPv6: Can't replace route, no match found [ 348.681741][T12778] netlink: 'syz.1.1728': attribute type 10 has an invalid length. [ 348.748876][T12781] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1730'. [ 348.773982][T12784] netlink: 'syz.3.1731': attribute type 39 has an invalid length. [ 348.787653][ T5857] Bluetooth: hci2: command tx timeout [ 348.816192][T12781] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1730'. [ 348.881357][ T9905] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.882527][T12786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1732'. [ 348.895313][ T9905] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.920528][ T9905] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 348.994235][T12696] chnl_net:caif_netlink_parms(): no params data found [ 349.010396][ T9905] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 349.117439][T12794] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1733'. [ 349.118525][T12793] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1734'. [ 349.190087][T12794] erspan0: entered promiscuous mode [ 349.222284][T12794] macvtap0: entered promiscuous mode [ 349.239424][T12794] macvtap0: entered allmulticast mode [ 349.244933][T12794] erspan0: entered allmulticast mode [ 349.262240][T12793] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1734'. [ 349.275101][T12801] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1735'. [ 349.317300][T12794] netlink: 'syz.2.1733': attribute type 32 has an invalid length. [ 349.326182][T12794] netlink: 'syz.2.1733': attribute type 4 has an invalid length. [ 349.363983][T12794] netlink: 'syz.2.1733': attribute type 29 has an invalid length. [ 349.400929][T12673] chnl_net:caif_netlink_parms(): no params data found [ 349.470235][T12807] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1737'. [ 349.498671][ T5857] Bluetooth: hci4: command tx timeout [ 349.566240][T12814] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 349.603869][T12814] net_ratelimit: 17 callbacks suppressed [ 349.603885][T12814] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 349.641256][T12696] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.650844][T12696] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.660661][T12696] bridge_slave_0: entered allmulticast mode [ 349.670025][T12696] bridge_slave_0: entered promiscuous mode [ 349.690356][T12696] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.697621][T12696] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.704872][T12696] bridge_slave_1: entered allmulticast mode [ 349.729988][T12696] bridge_slave_1: entered promiscuous mode [ 349.893800][T12828] netlink: 'syz.1.1743': attribute type 9 has an invalid length. [ 349.912737][T12696] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.988493][ T6342] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.017420][T12828] hsr0: entered promiscuous mode [ 350.022599][T12828] macvlan3: entered promiscuous mode [ 350.028546][T12828] macvlan3: entered allmulticast mode [ 350.033940][T12828] hsr0: entered allmulticast mode [ 350.041062][T12828] hsr_slave_0: entered allmulticast mode [ 350.046996][T12828] hsr_slave_1: entered allmulticast mode [ 350.081646][T12696] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 350.259324][T12850] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 350.284050][ T6342] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.351764][T12673] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.363698][T12673] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.371453][T12673] bridge_slave_0: entered allmulticast mode [ 350.384682][T12673] bridge_slave_0: entered promiscuous mode [ 350.401387][T12696] team0: Port device team_slave_0 added [ 350.428361][T12696] team0: Port device team_slave_1 added [ 350.461610][T12862] netlink: 'syz.1.1751': attribute type 10 has an invalid length. [ 350.463589][T12847] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 350.480562][T12847] geneve2: left promiscuous mode [ 350.497452][T12847] bridge3: left promiscuous mode [ 350.504876][T12847] macvtap0: left promiscuous mode [ 350.512445][T12673] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.529127][ T6655] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 350.532473][T12673] bridge0: port 2(bridge_slave_1) entered disabled state [ 350.559775][T12673] bridge_slave_1: entered allmulticast mode [ 350.579770][T12673] bridge_slave_1: entered promiscuous mode [ 350.838509][ T6342] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 350.858853][ T6655] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 350.876557][ T5857] Bluetooth: hci2: command tx timeout [ 350.888580][T12673] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 350.902282][T12673] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 351.052736][ T6342] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 351.217280][T12696] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.224626][T12696] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.254145][T12696] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.270617][T12696] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.278069][T12696] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.304541][T12696] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.364084][T12673] team0: Port device team_slave_0 added [ 351.381551][T12673] team0: Port device team_slave_1 added [ 351.484428][T12885] veth1_to_bond: entered allmulticast mode [ 351.506182][T12696] hsr_slave_0: entered promiscuous mode [ 351.516460][T12696] hsr_slave_1: entered promiscuous mode [ 351.525967][T12696] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.535620][T12696] Cannot create hsr debugfs directory [ 351.575718][ T5857] Bluetooth: hci4: command tx timeout [ 351.586072][T12882] veth1_to_bond: left allmulticast mode [ 351.668334][T12673] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.689724][T12673] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.716075][T12673] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.763050][T12673] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.772634][T12673] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.825306][T12673] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 352.079922][T12673] hsr_slave_0: entered promiscuous mode [ 352.100601][T12673] hsr_slave_1: entered promiscuous mode [ 352.116948][T12673] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.134779][T12673] Cannot create hsr debugfs directory [ 352.149710][ T6342] bridge_slave_1: left allmulticast mode [ 352.166041][ T6342] bridge_slave_1: left promiscuous mode [ 352.172032][ T6342] bridge0: port 2(bridge_slave_1) entered disabled state [ 352.201099][ T6342] bridge_slave_0: left allmulticast mode [ 352.208312][ T6342] bridge_slave_0: left promiscuous mode [ 352.214175][ T6342] bridge0: port 1(bridge_slave_0) entered disabled state [ 352.237677][T12894] netlink: 'syz.2.1761': attribute type 11 has an invalid length. [ 352.701597][ T6342] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 352.712866][ T6342] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 352.723569][ T6342] bond0 (unregistering): Released all slaves [ 352.936126][ T5857] Bluetooth: hci2: command tx timeout [ 353.089056][T12910] tc_dump_action: action bad kind [ 353.254148][T12920] __nla_validate_parse: 12 callbacks suppressed [ 353.254162][T12920] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1768'. [ 353.563324][T12937] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1771'. [ 353.655519][ T5857] Bluetooth: hci4: command tx timeout [ 353.770058][T12936] lo speed is unknown, defaulting to 1000 [ 353.788904][T12942] netlink: 'syz.2.1773': attribute type 39 has an invalid length. [ 353.808901][T12941] mac80211_hwsim hwsim8 wlan1: entered allmulticast mode [ 353.839737][T12939] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1773'. [ 354.132910][T12947] lo speed is unknown, defaulting to 1000 [ 354.218565][T12951] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode 802.3ad(4) [ 355.011124][ T6342] hsr_slave_0: left promiscuous mode [ 355.024269][ T6342] hsr_slave_1: left promiscuous mode [ 355.031835][ T6342] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.045833][ T6342] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.054039][ T6342] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.064407][ T6342] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.083848][ T6342] veth1_macvtap: left promiscuous mode [ 355.089774][ T6342] veth0_macvtap: left promiscuous mode [ 355.095581][ T6342] veth1_vlan: left promiscuous mode [ 355.100862][ T6342] veth0_vlan: left promiscuous mode [ 355.533427][ T6342] team0 (unregistering): Port device team_slave_1 removed [ 355.579060][ T6342] team0 (unregistering): Port device team_slave_0 removed [ 355.973083][T12696] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 356.019017][T12957] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1778'. [ 356.029124][T12696] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 356.055681][ T5851] Bluetooth: hci4: command 0x0405 tx timeout [ 356.090427][T12696] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 356.113868][T12696] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 356.314588][T12673] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 356.378409][T12673] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 356.393938][T12673] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 356.445477][T12673] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 356.525807][T12972] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1780'. [ 356.863469][T12696] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.884880][T12980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1781'. [ 356.916275][T12696] 8021q: adding VLAN 0 to HW filter on device team0 [ 356.942541][T12673] 8021q: adding VLAN 0 to HW filter on device bond0 [ 356.963637][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 356.970824][ T6342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.050827][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.058059][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.100020][T12673] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.203379][ T6342] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.210535][ T6342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.241005][ T9905] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.248209][ T9905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.556861][T13006] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1787'. [ 357.580182][T13006] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1787'. [ 357.634051][T13009] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1788'. [ 357.652547][T13010] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1788'. [ 357.869248][T12696] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 357.997685][T13024] vxcan1: entered allmulticast mode [ 358.024373][T12673] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.131993][T12673] veth0_vlan: entered promiscuous mode [ 358.160753][T12673] veth1_vlan: entered promiscuous mode [ 358.260311][T12673] veth0_macvtap: entered promiscuous mode [ 358.281795][T12673] veth1_macvtap: entered promiscuous mode [ 358.323273][T13034] syzkaller1: entered promiscuous mode [ 358.354701][T12673] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.380623][T12673] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.411770][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.421053][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.437145][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.447169][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.555526][T12696] veth0_vlan: entered promiscuous mode [ 358.564590][ T3528] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.578822][ T3528] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.618950][T12696] veth1_vlan: entered promiscuous mode [ 358.628111][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.638605][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.674622][T12696] veth0_macvtap: entered promiscuous mode [ 358.703127][T12696] veth1_macvtap: entered promiscuous mode [ 358.739161][T12696] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.780258][T12696] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.799204][ T3528] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.812753][ T3528] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.825137][ T3528] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.835076][ T3528] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.918405][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.931235][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 358.958469][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 358.969166][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.194068][T13042] batman_adv: batadv0: Adding interface: ipvlan2 [ 359.201463][T13042] batman_adv: batadv0: The MTU of interface ipvlan2 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 359.228362][T13042] batman_adv: batadv0: Interface activated: ipvlan2 [ 359.247003][T13044] __nla_validate_parse: 2 callbacks suppressed [ 359.247025][T13044] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1795'. [ 359.346600][T13048] netlink: 'syz.1.1797': attribute type 11 has an invalid length. [ 359.356770][T13048] netlink: 228 bytes leftover after parsing attributes in process `syz.1.1797'. [ 359.370304][T13048] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1797'. [ 359.402019][T13050] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1798'. [ 359.512541][T13052] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1799'. [ 359.568177][T13054] netlink: 'syz.3.1800': attribute type 7 has an invalid length. [ 359.583831][T13054] netlink: 'syz.3.1800': attribute type 3 has an invalid length. [ 359.612071][T13054] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1800'. [ 359.674901][T13056] bridge: RTM_NEWNEIGH with invalid ether address [ 359.780488][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.262078][ T5851] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 360.272192][ T5851] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 360.281463][ T5851] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 360.291487][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 360.301895][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 360.338931][T13070] lo speed is unknown, defaulting to 1000 [ 360.578548][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.660583][T13070] chnl_net:caif_netlink_parms(): no params data found [ 360.839726][T13070] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.866218][T13070] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.874014][T13070] bridge_slave_0: entered allmulticast mode [ 360.888178][T13070] bridge_slave_0: entered promiscuous mode [ 360.907947][T13070] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.928958][T13070] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.945954][T13070] bridge_slave_1: entered allmulticast mode [ 360.968907][T13070] bridge_slave_1: entered promiscuous mode [ 361.160009][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.246697][T13070] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 361.301753][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.331862][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 361.343053][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 361.351767][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 361.357460][T13070] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 361.362000][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 361.377319][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 361.459654][T13070] team0: Port device team_slave_0 added [ 361.517783][T13070] team0: Port device team_slave_1 added [ 361.594985][T13070] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.635188][T13070] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.638241][T13113] netlink: 'syz.3.1813': attribute type 11 has an invalid length. [ 361.669911][T13070] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.704393][T13113] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1813'. [ 361.778870][T13070] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.792500][T13070] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.849591][T13070] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.938740][T13103] lo speed is unknown, defaulting to 1000 [ 362.006444][T13126] netlink: 1041 bytes leftover after parsing attributes in process `syz.2.1816'. [ 362.101626][T13070] hsr_slave_0: entered promiscuous mode [ 362.131724][T13070] hsr_slave_1: entered promiscuous mode [ 362.146540][T13070] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.154136][T13070] Cannot create hsr debugfs directory [ 362.272290][T13130] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1817'. [ 362.309717][T13133] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1817'. [ 362.376278][ T5857] Bluetooth: hci2: command tx timeout [ 362.410034][ T49] bridge_slave_1: left allmulticast mode [ 362.422375][ T49] bridge_slave_1: left promiscuous mode [ 362.428732][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.440531][ T49] bridge_slave_0: left allmulticast mode [ 362.446729][ T49] bridge_slave_0: left promiscuous mode [ 362.452843][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.452969][T13144] x_tables: duplicate underflow at hook 2 [ 362.999843][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 363.013318][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 363.026177][ T49] bond0 (unregistering): Released all slaves [ 363.416265][ T5857] Bluetooth: hci4: command tx timeout [ 364.050665][ T49] hsr_slave_0: left promiscuous mode [ 364.071813][ T49] hsr_slave_1: left promiscuous mode [ 364.086298][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 364.093985][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 364.123596][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 364.143309][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 364.207754][ T49] veth1_macvtap: left promiscuous mode [ 364.213718][ T49] veth0_macvtap: left promiscuous mode [ 364.221205][ T49] veth1_vlan: left promiscuous mode [ 364.241695][ T49] veth0_vlan: left promiscuous mode [ 364.463735][ T5857] Bluetooth: hci2: command tx timeout [ 364.522334][T13172] netlink: 'syz.3.1830': attribute type 7 has an invalid length. [ 364.587645][T13177] __nla_validate_parse: 2 callbacks suppressed [ 364.587662][T13177] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1830'. [ 364.988090][ T49] team0 (unregistering): Port device team_slave_1 removed [ 365.038814][ T49] team0 (unregistering): Port device team_slave_0 removed [ 365.495558][ T5857] Bluetooth: hci4: command tx timeout [ 365.744281][T13103] chnl_net:caif_netlink_parms(): no params data found [ 365.820669][T13195] netlink: 4768 bytes leftover after parsing attributes in process `syz.2.1835'. [ 365.975938][ T6652] page_pool_release_retry() stalled pool shutdown: id 98, 1 inflight 60 sec [ 366.185039][T13208] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1840'. [ 366.264637][T13208] veth0_to_bond: entered allmulticast mode [ 366.341507][T13070] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 366.360621][T13103] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.376341][T13103] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.385964][T13103] bridge_slave_0: entered allmulticast mode [ 366.393959][T13103] bridge_slave_0: entered promiscuous mode [ 366.403112][T13070] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 366.404296][T13217] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1841'. [ 366.445946][T13070] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 366.484956][T13103] bridge0: port 2(bridge_slave_1) entered blocking state [ 366.513232][T13103] bridge0: port 2(bridge_slave_1) entered disabled state [ 366.534964][T13103] bridge_slave_1: entered allmulticast mode [ 366.545722][ T5857] Bluetooth: hci2: command tx timeout [ 366.551273][T13103] bridge_slave_1: entered promiscuous mode [ 366.579099][T13217] bond0: entered allmulticast mode [ 366.584703][T13217] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 366.609636][T13217] batadv0: entered allmulticast mode [ 366.619799][T13070] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 366.721074][T13103] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 366.736735][T13103] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 366.862687][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.917446][T13103] team0: Port device team_slave_0 added [ 366.931183][T13103] team0: Port device team_slave_1 added [ 366.967313][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.062137][T13237] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1847'. [ 367.075025][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.153800][T13103] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.174922][T13103] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.235572][T13103] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.307343][T13241] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1849'. [ 367.322043][T13241] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1849'. [ 367.323732][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.406053][T13103] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.413034][T13103] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.465613][T13103] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.501497][T13241] gtp0: entered promiscuous mode [ 367.513954][T13241] gtp0: entered allmulticast mode [ 367.576409][ T5857] Bluetooth: hci4: command tx timeout [ 367.632820][T13245] lo speed is unknown, defaulting to 1000 [ 367.678846][T13103] hsr_slave_0: entered promiscuous mode [ 367.696890][T13103] hsr_slave_1: entered promiscuous mode [ 367.703335][T13103] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 367.725555][T13103] Cannot create hsr debugfs directory [ 368.074543][T13070] 8021q: adding VLAN 0 to HW filter on device bond0 [ 368.151373][ T49] bridge_slave_1: left allmulticast mode [ 368.157747][ T49] bridge_slave_1: left promiscuous mode [ 368.163822][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.176665][ T49] bridge_slave_0: left allmulticast mode [ 368.182452][ T49] bridge_slave_0: left promiscuous mode [ 368.189212][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.558830][T13268] can-isotp: isotp_sendmsg: can_send_ret -ENETDOWN [ 368.620285][ T5857] Bluetooth: hci2: command tx timeout [ 368.771992][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.784287][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.794569][ T49] bond0 (unregistering): Released all slaves [ 369.044060][T13070] 8021q: adding VLAN 0 to HW filter on device team0 [ 369.451733][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 369.458958][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 369.501113][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 369.508368][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 369.656524][ T5857] Bluetooth: hci4: command tx timeout [ 370.060645][T13304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1868'. [ 370.118302][ T49] hsr_slave_0: left promiscuous mode [ 370.137531][ T49] hsr_slave_1: left promiscuous mode [ 370.157313][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.200818][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.241439][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.255949][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.308690][ T49] veth1_macvtap: left promiscuous mode [ 370.314284][ T49] veth0_macvtap: left promiscuous mode [ 370.328766][ T49] veth1_vlan: left promiscuous mode [ 370.342775][ T49] veth0_vlan: left promiscuous mode [ 370.918118][ T49] team0 (unregistering): Port device team_slave_1 removed [ 370.968244][ T49] team0 (unregistering): Port device team_slave_0 removed [ 371.427773][T13311] netlink: 'syz.1.1869': attribute type 1 has an invalid length. [ 371.592199][T13070] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 371.617956][T13103] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 371.679250][T13103] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 371.700631][T13103] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 371.725051][T13330] syzkaller0: entered promiscuous mode [ 371.734371][T13330] syzkaller0: entered allmulticast mode [ 371.753867][T13103] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 371.803528][T13330] : entered promiscuous mode [ 371.930324][T13070] veth0_vlan: entered promiscuous mode [ 371.960994][T13070] veth1_vlan: entered promiscuous mode [ 372.091575][T13070] veth0_macvtap: entered promiscuous mode [ 372.122853][T13103] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.131328][T13070] veth1_macvtap: entered promiscuous mode [ 372.176080][T13103] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.187197][T13070] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 372.224869][T13346] bond6: entered promiscuous mode [ 372.235125][T13346] bond6: entered allmulticast mode [ 372.241728][T13346] 8021q: adding VLAN 0 to HW filter on device bond6 [ 372.270572][ T6344] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.277787][ T6344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.293167][T13070] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 372.326893][ T6344] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.334140][ T6344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.398522][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.442635][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.473305][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.484329][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 372.596492][T13357] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1879'. [ 372.680628][T13357] 8021q: adding VLAN 0 to HW filter on device bond6 [ 372.694037][ T9905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.716007][ T9905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.744376][T13362] bond6: (slave batadv2): Opening slave failed [ 372.814326][T13364] netlink: 'syz.2.1881': attribute type 142 has an invalid length. [ 372.833270][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 372.852195][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 372.904715][T13103] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 373.081493][T13378] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1884'. [ 373.271116][T13382] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1886'. [ 373.291805][T13386] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1885'. [ 373.454437][ T1035] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.592450][ T1035] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.671072][T13103] veth0_vlan: entered promiscuous mode [ 373.682436][T13103] veth1_vlan: entered promiscuous mode [ 373.712614][T13103] veth0_macvtap: entered promiscuous mode [ 373.723168][T13103] veth1_macvtap: entered promiscuous mode [ 373.757878][ T1035] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.776607][T13103] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 373.790904][T13103] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 373.804348][ T6344] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.816695][ T6344] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.834572][ T9905] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.843983][ T9905] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 373.878380][ T1035] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 373.949369][ T6343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 373.970788][ T6343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.000049][ T6343] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 374.008967][ T6343] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 374.129690][ T1035] bridge_slave_1: left allmulticast mode [ 374.136867][ T1035] bridge_slave_1: left promiscuous mode [ 374.142659][ T1035] bridge0: port 2(bridge_slave_1) entered disabled state [ 374.152694][ T1035] bridge_slave_0: left allmulticast mode [ 374.158902][ T1035] bridge_slave_0: left promiscuous mode [ 374.166093][ T1035] bridge0: port 1(bridge_slave_0) entered disabled state [ 374.501452][ T1035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 374.512156][ T1035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 374.522608][ T1035] bond0 (unregistering): Released all slaves [ 374.882851][ T1035] hsr_slave_0: left promiscuous mode [ 374.889064][ T1035] hsr_slave_1: left promiscuous mode [ 374.894904][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 374.903054][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 374.916801][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 374.924247][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 374.948180][ T1035] veth1_macvtap: left promiscuous mode [ 374.953704][ T1035] veth0_macvtap: left promiscuous mode [ 374.959992][ T1035] veth1_vlan: left promiscuous mode [ 374.965922][ T1035] veth0_vlan: left promiscuous mode [ 375.631199][ T5170] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 375.641419][ T5170] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 375.664654][ T5170] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 375.673542][ T5170] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 375.691084][ T5170] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 375.831204][ T1035] team0 (unregistering): Port device team_slave_1 removed [ 375.871089][ T1035] team0 (unregistering): Port device team_slave_0 removed [ 376.086474][ T5857] block nbd0: Receive control failed (result -32) [ 376.403050][T13402] lo speed is unknown, defaulting to 1000 [ 376.589222][T13406] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1892'. [ 376.649177][T13410] netlink: 9286 bytes leftover after parsing attributes in process `syz.1.1891'. [ 376.980735][T13419] wg1: Master is either lo or non-ether device [ 377.031902][T13425] gtp1: entered promiscuous mode [ 377.045654][T13425] gtp1: entered allmulticast mode [ 377.062559][T13425] gtp2: entered promiscuous mode [ 377.095556][T13425] gtp2: entered allmulticast mode [ 377.151106][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 377.171515][T13425] gtp3: entered promiscuous mode [ 377.177075][T13425] gtp3: entered allmulticast mode [ 377.183360][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 377.194800][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 377.210757][T13425] gtp4: entered promiscuous mode [ 377.216036][T13425] gtp4: entered allmulticast mode [ 377.221170][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 377.229898][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 377.292568][T13425] gtp5: entered promiscuous mode [ 377.302222][T13425] gtp5: entered allmulticast mode [ 377.370710][T13425] gtp6: entered promiscuous mode [ 377.389851][T13425] gtp6: entered allmulticast mode [ 377.423286][T13425] gtp7: entered promiscuous mode [ 377.428388][T13425] gtp7: entered allmulticast mode [ 377.441399][T13425] gtp8: entered promiscuous mode [ 377.446505][T13425] gtp8: entered allmulticast mode [ 377.464921][T13429] lo speed is unknown, defaulting to 1000 [ 377.484661][T13402] chnl_net:caif_netlink_parms(): no params data found [ 377.520459][T13425] gtp9: entered promiscuous mode [ 377.525877][T13425] gtp9: entered allmulticast mode [ 377.542748][T13425] gtp10: entered promiscuous mode [ 377.548013][T13425] gtp10: entered allmulticast mode [ 377.561604][T13425] gtp11: entered promiscuous mode [ 377.567577][T13425] gtp11: entered allmulticast mode [ 377.592886][T13425] gtp12: entered promiscuous mode [ 377.598834][T13425] gtp12: entered allmulticast mode [ 377.640252][T13447] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1903'. [ 377.659151][T13425] gtp13: entered promiscuous mode [ 377.664488][T13425] gtp13: entered allmulticast mode [ 377.712326][ T1035] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.736745][ T5851] Bluetooth: hci2: command tx timeout [ 377.757063][T13446] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.1903'. [ 377.773753][T13425] gtp14: entered promiscuous mode [ 377.780175][T13425] gtp14: entered allmulticast mode [ 377.820671][T13425] gtp15: entered promiscuous mode [ 377.830404][T13425] gtp15: entered allmulticast mode [ 377.874183][ T1035] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.893341][T13450] tap0: tun_chr_ioctl cmd 1074025677 [ 377.899848][T13450] tap0: linktype set to 823 [ 377.940112][T13453] vlan1: entered promiscuous mode [ 377.966747][ T1035] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.006228][T13402] bridge0: port 1(bridge_slave_0) entered blocking state [ 378.013690][T13402] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.027163][T13402] bridge_slave_0: entered allmulticast mode [ 378.035932][T13402] bridge_slave_0: entered promiscuous mode [ 378.071189][ T1035] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.084911][T13402] bridge0: port 2(bridge_slave_1) entered blocking state [ 378.092622][T13402] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.100368][T13402] bridge_slave_1: entered allmulticast mode [ 378.107696][T13402] bridge_slave_1: entered promiscuous mode [ 378.203467][T13402] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 378.238534][T13402] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 378.368809][T13402] team0: Port device team_slave_0 added [ 378.416702][T13402] team0: Port device team_slave_1 added [ 378.507082][T13402] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 378.514057][T13402] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 378.542648][T13402] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 378.543199][T13465] netlink: 'syz.1.1908': attribute type 13 has an invalid length. [ 378.558631][ T1035] bridge_slave_1: left allmulticast mode [ 378.569486][ T1035] bridge_slave_1: left promiscuous mode [ 378.575380][ T1035] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.584745][T13465] netlink: 'syz.1.1908': attribute type 17 has an invalid length. [ 378.597508][ T1035] bridge_slave_0: left allmulticast mode [ 378.603186][ T1035] bridge_slave_0: left promiscuous mode [ 378.609747][ T1035] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.768889][T13476] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1909'. [ 378.802597][T13476] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1909'. [ 378.826380][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.910100][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 378.981848][T13479] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 379.261416][ T5851] Bluetooth: hci4: command tx timeout [ 379.281174][ T1035] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 379.292359][ T1035] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 379.302648][ T1035] bond0 (unregistering): Released all slaves [ 379.321772][T13402] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 379.329636][T13402] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 379.365041][T13402] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 379.436040][T13465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 379.487526][T13467] lo speed is unknown, defaulting to 1000 [ 379.682593][T13402] hsr_slave_0: entered promiscuous mode [ 379.697818][T13402] hsr_slave_1: entered promiscuous mode [ 379.716341][T13402] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 379.724434][T13402] Cannot create hsr debugfs directory [ 379.817188][ T5851] Bluetooth: hci2: command tx timeout [ 379.836788][T13491] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1913'. [ 380.119376][T13503] vlan1: entered promiscuous mode [ 380.129868][T13495] lo speed is unknown, defaulting to 1000 [ 380.145653][T13429] chnl_net:caif_netlink_parms(): no params data found [ 380.528454][T13514] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1919'. [ 380.883190][ T1035] hsr_slave_0: left promiscuous mode [ 380.899599][ T1035] hsr_slave_1: left promiscuous mode [ 380.912366][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.920191][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.928837][ T1035] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.936845][ T1035] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.959780][ T1035] veth1_macvtap: left promiscuous mode [ 380.965682][ T1035] veth0_macvtap: left promiscuous mode [ 380.971353][ T1035] veth1_vlan: left promiscuous mode [ 380.979532][ T1035] veth0_vlan: left promiscuous mode [ 381.337503][ T5851] Bluetooth: hci4: command tx timeout [ 381.460939][ T1035] team0 (unregistering): Port device team_slave_1 removed [ 381.504925][ T1035] team0 (unregistering): Port device team_slave_0 removed [ 381.895893][ T5851] Bluetooth: hci2: command tx timeout [ 381.954157][T13429] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.970313][T13429] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.978184][T13429] bridge_slave_0: entered allmulticast mode [ 381.986059][T13429] bridge_slave_0: entered promiscuous mode [ 382.038981][T13429] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.047272][T13429] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.054534][T13429] bridge_slave_1: entered allmulticast mode [ 382.062506][T13429] bridge_slave_1: entered promiscuous mode [ 382.214975][T13429] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.302007][T13429] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.406173][T13524] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1923'. [ 382.429874][T13524] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1923'. [ 382.439149][T13524] netlink: 'syz.2.1923': attribute type 12 has an invalid length. [ 382.516702][T13526] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1923'. [ 382.539128][T13526] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1923'. [ 382.559467][T13526] netlink: 'syz.2.1923': attribute type 12 has an invalid length. [ 382.583512][T13429] team0: Port device team_slave_0 added [ 382.598517][T13429] team0: Port device team_slave_1 added [ 382.895395][T13429] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.912599][T13429] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.941347][T13429] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.953934][T13429] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.962292][T13429] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.990279][T13429] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.169170][T13543] netlink: 256 bytes leftover after parsing attributes in process `syz.1.1927'. [ 383.182423][T13429] hsr_slave_0: entered promiscuous mode [ 383.189460][T13429] hsr_slave_1: entered promiscuous mode [ 383.196661][T13429] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.204349][T13429] Cannot create hsr debugfs directory [ 383.230233][T13402] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 383.343137][T13402] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 383.369144][T13402] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 383.420064][ T5851] Bluetooth: hci4: command tx timeout [ 383.444052][T13402] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 383.655553][T13572] sctp: [Deprecated]: syz.1.1935 (pid 13572) Use of int in max_burst socket option. [ 383.655553][T13572] Use struct sctp_assoc_value instead [ 383.795404][T13577] netlink: 'syz.3.1937': attribute type 1 has an invalid length. [ 383.825931][T13577] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1937'. [ 383.873696][T13402] 8021q: adding VLAN 0 to HW filter on device bond0 [ 383.926684][T13402] 8021q: adding VLAN 0 to HW filter on device team0 [ 383.958275][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.965516][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 383.976254][ T5851] Bluetooth: hci2: command tx timeout [ 383.983485][T13586] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1940'. [ 383.987058][ T6342] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.999551][ T6342] bridge0: port 2(bridge_slave_1) entered forwarding state [ 384.196054][T13592] netlink: 'syz.3.1943': attribute type 22 has an invalid length. [ 384.348499][T13597] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1945'. [ 384.572928][T13429] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 384.661311][T13429] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 384.691782][T13429] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 384.714379][T13429] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 384.775974][T13402] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 384.900276][T13402] veth0_vlan: entered promiscuous mode [ 384.933563][T13402] veth1_vlan: entered promiscuous mode [ 384.983086][T13429] 8021q: adding VLAN 0 to HW filter on device bond0 [ 385.010507][T13402] veth0_macvtap: entered promiscuous mode [ 385.495753][ T5851] Bluetooth: hci4: command tx timeout [ 386.563036][T13402] veth1_macvtap: entered promiscuous mode [ 386.590158][T13429] 8021q: adding VLAN 0 to HW filter on device team0 [ 386.680082][T13402] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 386.717262][ T9905] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.724455][ T9905] bridge0: port 1(bridge_slave_0) entered forwarding state [ 386.756575][ T9905] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.756879][T13640] netlink: 3 bytes leftover after parsing attributes in process `syz.1.1952'. [ 386.763769][ T9905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 386.788132][T13636] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1951'. [ 386.833210][T13402] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 386.857320][T13640] batadv2: entered promiscuous mode [ 386.862732][T13640] batadv2: entered allmulticast mode [ 387.117318][ T3528] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.152494][ T3528] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.250488][ T3528] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.259784][ T3528] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 387.486408][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.504614][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.536857][T13673] netlink: 'syz.3.1959': attribute type 10 has an invalid length. [ 387.556633][ T3445] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 387.564482][ T3445] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 387.654435][T13677] __nla_validate_parse: 3 callbacks suppressed [ 387.654453][T13677] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1960'. [ 387.911289][T13429] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 388.268598][T13715] sctp: [Deprecated]: syz.1.1968 (pid 13715) Use of int in maxseg socket option. [ 388.268598][T13715] Use struct sctp_assoc_value instead [ 388.383417][ T3445] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.577831][ T3445] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.679099][ T3445] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.714977][T13429] veth0_vlan: entered promiscuous mode [ 388.725469][T13429] veth1_vlan: entered promiscuous mode [ 388.754749][ T3445] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 388.794189][T13429] veth0_macvtap: entered promiscuous mode [ 388.810863][T13429] veth1_macvtap: entered promiscuous mode [ 388.832109][T13429] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 388.847702][T13429] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 388.865013][ T6344] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.901898][ T6344] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.911469][ T6344] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 388.934508][ T6344] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 389.021832][ T3445] bridge_slave_1: left allmulticast mode [ 389.031676][ T3445] bridge_slave_1: left promiscuous mode [ 389.037648][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.050208][ T3445] bridge_slave_0: left allmulticast mode [ 389.056118][ T3445] bridge_slave_0: left promiscuous mode [ 389.061885][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.478108][ T3445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 389.490627][ T3445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 389.501270][ T3445] bond0 (unregistering): Released all slaves [ 389.534577][ T6343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.543628][ T6343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.613456][ T6344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 389.626442][ T6344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 389.953910][ T3445] hsr_slave_0: left promiscuous mode [ 389.959970][ T3445] hsr_slave_1: left promiscuous mode [ 389.971010][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.981646][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.990757][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.999486][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 390.030719][ T3445] veth1_macvtap: left promiscuous mode [ 390.043045][ T3445] veth0_macvtap: left promiscuous mode [ 390.048965][ T3445] veth1_vlan: left promiscuous mode [ 390.054318][ T3445] veth0_vlan: left promiscuous mode [ 390.703869][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 390.718739][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 390.727320][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 390.752234][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 390.760996][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 390.904525][ T3445] team0 (unregistering): Port device team_slave_1 removed [ 390.944758][ T3445] team0 (unregistering): Port device team_slave_0 removed [ 391.530398][ T5857] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 391.540623][ T5857] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 391.549892][ T5857] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 391.559132][ T5857] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 391.568753][ T5857] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 391.604478][T13741] lo speed is unknown, defaulting to 1000 [ 391.661626][T13749] netlink: 9280 bytes leftover after parsing attributes in process `syz.3.1975'. [ 392.502220][T13747] vlan0: left promiscuous mode [ 392.594953][T13747] mac80211_hwsim hwsim8 wlan1: left allmulticast mode [ 392.608906][T13747] syzkaller0: left promiscuous mode [ 392.614138][T13747] syzkaller0: left allmulticast mode [ 392.632575][T13747] ipvlan2: left allmulticast mode [ 392.641442][T13747] bond0: left allmulticast mode [ 392.681658][T13747] bond2: left promiscuous mode [ 392.695410][T13747] bond2: left allmulticast mode [ 392.706616][T13747] bridge1: left promiscuous mode [ 392.711604][T13747] bridge1: left allmulticast mode [ 392.725912][T13747] veth1: left promiscuous mode [ 392.785261][T13747] ipvlan3: left allmulticast mode [ 392.790327][T13747] bond4: left allmulticast mode [ 392.799866][T13747] xfrm1: left promiscuous mode [ 392.804662][T13747] xfrm1: left allmulticast mode [ 392.832469][T13747] mac80211_hwsim hwsim6 wlan0: left allmulticast mode [ 392.849226][T13747] macsec0: left promiscuous mode [ 392.854213][T13747] macsec0: left allmulticast mode [ 392.855956][ T5851] Bluetooth: hci2: command tx timeout [ 392.883930][T13747] geneve2: left promiscuous mode [ 392.899411][T13747] hsr0: left allmulticast mode [ 392.904223][T13747] hsr_slave_0: left allmulticast mode [ 392.909941][T13747] hsr_slave_1: left allmulticast mode [ 392.915831][T13747] macvlan3: left promiscuous mode [ 392.920862][T13747] macvlan3: left allmulticast mode [ 392.976909][T13744] lo speed is unknown, defaulting to 1000 [ 393.072701][ T1035] netdevsim netdevsim1 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.112442][ T1035] netdevsim netdevsim1 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.166602][ T1035] netdevsim netdevsim1 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.230618][ T1035] netdevsim netdevsim1 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.495617][T13792] netlink: 666 bytes leftover after parsing attributes in process `syz.3.1983'. [ 393.582997][ T6344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.597991][ T6344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.612015][T13792] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1983'. [ 393.656204][ T5851] Bluetooth: hci4: command tx timeout [ 393.670463][T13797] delete_channel: no stack [ 393.678178][ T3445] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.820322][ T3445] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.863123][T13741] chnl_net:caif_netlink_parms(): no params data found [ 393.873779][T13807] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1988'. [ 393.916510][ T3445] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.088145][ T3445] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 394.213369][T13827] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 394.390684][T13741] bridge0: port 1(bridge_slave_0) entered blocking state [ 394.413325][T13741] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.421345][T13741] bridge_slave_0: entered allmulticast mode [ 394.433139][T13741] bridge_slave_0: entered promiscuous mode [ 394.446021][T13812] netlink: 'syz.2.1989': attribute type 1 has an invalid length. [ 394.453781][T13812] nbd: error processing sock list [ 394.462485][T13744] chnl_net:caif_netlink_parms(): no params data found [ 394.469722][T13812] block nbd1: shutting down sockets [ 394.504486][T13741] bridge0: port 2(bridge_slave_1) entered blocking state [ 394.512725][T13741] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.520165][T13741] bridge_slave_1: entered allmulticast mode [ 394.546204][T13741] bridge_slave_1: entered promiscuous mode [ 394.811579][T13741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 394.853613][T13741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 394.904944][ T3445] bridge_slave_1: left allmulticast mode [ 394.915923][ T3445] bridge_slave_1: left promiscuous mode [ 394.934304][ T3445] bridge0: port 2(bridge_slave_1) entered disabled state [ 394.942247][ T5851] Bluetooth: hci2: command tx timeout [ 394.969279][ T3445] bridge_slave_0: left allmulticast mode [ 394.975482][ T3445] bridge_slave_0: left promiscuous mode [ 394.976866][T13852] netlink: 'syz.2.1995': attribute type 39 has an invalid length. [ 394.981384][ T3445] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.274501][T13860] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1997'. [ 395.449420][ T3445] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 395.464897][ T3445] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 395.469861][T13863] netlink: del zone limit has 4 unknown bytes [ 395.483706][ T3445] bond0 (unregistering): Released all slaves [ 395.616088][T13741] team0: Port device team_slave_0 added [ 395.648062][T13741] team0: Port device team_slave_1 added [ 395.684955][T13867] netlink: 'syz.1.1998': attribute type 21 has an invalid length. [ 395.702078][T13873] netlink: 'syz.1.1998': attribute type 21 has an invalid length. [ 395.735547][ T5851] Bluetooth: hci4: command tx timeout [ 395.777244][T13873] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1998'. [ 395.786864][T13867] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1998'. [ 395.801639][T13744] bridge0: port 1(bridge_slave_0) entered blocking state [ 395.809902][T13744] bridge0: port 1(bridge_slave_0) entered disabled state [ 395.823070][T13744] bridge_slave_0: entered allmulticast mode [ 395.832057][T13744] bridge_slave_0: entered promiscuous mode [ 395.846244][T13744] bridge0: port 2(bridge_slave_1) entered blocking state [ 395.853541][T13744] bridge0: port 2(bridge_slave_1) entered disabled state [ 395.861768][T13744] bridge_slave_1: entered allmulticast mode [ 395.871395][T13744] bridge_slave_1: entered promiscuous mode [ 395.879615][T13741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 395.887009][T13741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.914238][T13741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 395.937366][T13741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 395.944350][T13741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 395.990142][T13741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 396.243780][T13744] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 396.320826][T13744] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 396.399029][T13905] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2007'. [ 396.406343][T13741] hsr_slave_0: entered promiscuous mode [ 396.424912][T13741] hsr_slave_1: entered promiscuous mode [ 396.446001][T13741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 396.453598][T13741] Cannot create hsr debugfs directory [ 396.632201][T13911] netlink: 'syz.1.2010': attribute type 4 has an invalid length. [ 396.784091][T13916] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2012'. [ 396.807910][T13916] xt_hashlimit: size too large, truncated to 1048576 [ 396.934196][T13744] team0: Port device team_slave_0 added [ 396.984660][ T3445] hsr_slave_0: left promiscuous mode [ 397.015583][ T5851] Bluetooth: hci2: command tx timeout [ 397.017922][ T3445] hsr_slave_1: left promiscuous mode [ 397.044670][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 397.076708][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 397.101183][ T3445] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 397.125656][ T3445] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 397.200354][ T3445] veth1_macvtap: left promiscuous mode [ 397.215385][ T3445] veth0_macvtap: left promiscuous mode [ 397.226265][ T3445] veth1_vlan: left promiscuous mode [ 397.235395][ T3445] veth0_vlan: left promiscuous mode [ 397.293232][T13932] FAULT_INJECTION: forcing a failure. [ 397.293232][T13932] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 397.311952][T13932] CPU: 1 UID: 0 PID: 13932 Comm: syz.3.2017 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 397.311981][T13932] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 397.312004][T13932] Call Trace: [ 397.312012][T13932] [ 397.312021][T13932] dump_stack_lvl+0x189/0x250 [ 397.312050][T13932] ? __pfx____ratelimit+0x10/0x10 [ 397.312074][T13932] ? __pfx_dump_stack_lvl+0x10/0x10 [ 397.312097][T13932] ? __pfx__printk+0x10/0x10 [ 397.312121][T13932] ? __might_fault+0xb0/0x130 [ 397.312154][T13932] should_fail_ex+0x414/0x560 [ 397.312186][T13932] _copy_from_user+0x2d/0xb0 [ 397.312209][T13932] __sys_bpf+0x1ed/0x860 [ 397.312229][T13932] ? __pfx___sys_bpf+0x10/0x10 [ 397.312260][T13932] ? ksys_write+0x22a/0x250 [ 397.312286][T13932] ? __pfx_ksys_write+0x10/0x10 [ 397.312305][T13932] ? rcu_is_watching+0x15/0xb0 [ 397.312335][T13932] __x64_sys_bpf+0x7c/0x90 [ 397.312364][T13932] do_syscall_64+0xfa/0x3b0 [ 397.312388][T13932] ? lockdep_hardirqs_on+0x9c/0x150 [ 397.312412][T13932] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.312431][T13932] ? clear_bhb_loop+0x60/0xb0 [ 397.312460][T13932] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 397.312478][T13932] RIP: 0033:0x7f487b18e929 [ 397.312495][T13932] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 397.312511][T13932] RSP: 002b:00007f487c04f038 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 397.312529][T13932] RAX: ffffffffffffffda RBX: 00007f487b3b5fa0 RCX: 00007f487b18e929 [ 397.312543][T13932] RDX: 0000000000000020 RSI: 00002000000000c0 RDI: 0000000000000003 [ 397.312555][T13932] RBP: 00007f487c04f090 R08: 0000000000000000 R09: 0000000000000000 [ 397.312567][T13932] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 397.312579][T13932] R13: 0000000000000000 R14: 00007f487b3b5fa0 R15: 00007ffc16b37d08 [ 397.312609][T13932] [ 397.596288][T13938] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2018'. [ 397.616739][T13937] netlink: 3 bytes leftover after parsing attributes in process `syz.3.2018'. [ 397.815497][ T5851] Bluetooth: hci4: command tx timeout [ 397.948500][ T3445] team0 (unregistering): Port device team_slave_1 removed [ 397.989550][ T3445] team0 (unregistering): Port device team_slave_0 removed [ 398.443261][T13744] team0: Port device team_slave_1 added [ 398.644305][T13744] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.664795][T13744] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.732443][T13744] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.747077][T13744] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.759009][T13744] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.791417][T13744] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 399.051312][T13964] netlink: 44 bytes leftover after parsing attributes in process `syz.2.2027'. [ 399.054938][T13961] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 399.083551][T13744] hsr_slave_0: entered promiscuous mode [ 399.095535][ T5851] Bluetooth: hci2: command tx timeout [ 399.102362][T13744] hsr_slave_1: entered promiscuous mode [ 399.126379][T13744] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 399.143003][T13744] Cannot create hsr debugfs directory [ 399.183102][T13953] lo speed is unknown, defaulting to 1000 [ 399.488131][T13976] sctp: [Deprecated]: syz.2.2031 (pid 13976) Use of int in maxseg socket option. [ 399.488131][T13976] Use struct sctp_assoc_value instead [ 399.539945][T13978] netlink: 224 bytes leftover after parsing attributes in process `syz.3.2032'. [ 399.651178][T13980] netlink: 12 bytes leftover after parsing attributes in process `syz.2.2033'. [ 399.712446][T13983] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2033'. [ 399.834870][T13987] netlink: 8 bytes leftover after parsing attributes in process `syz.3.2035'. [ 399.895712][ T5851] Bluetooth: hci4: command tx timeout [ 400.195575][T14003] ÿ: renamed from bond_slave_0 [ 400.250017][T14003] netlink: 24 bytes leftover after parsing attributes in process `syz.2.2039'. [ 400.272201][T14007] macvlan0: entered promiscuous mode [ 400.286791][T14007] macvlan1: entered promiscuous mode [ 400.297299][T14007] hsr1: Slave A (macvlan0) is not up; please bring it up to get a fully working HSR network [ 400.307994][T14007] hsr1: Slave B (macvlan1) is not up; please bring it up to get a fully working HSR network [ 400.319235][T14007] hsr1: entered promiscuous mode [ 400.458106][T14011] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 400.484469][T14011] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 400.494219][T14011] team0: Port device netdevsim0 added [ 400.501667][T14016] netlink: 27 bytes leftover after parsing attributes in process `syz.1.2043'. [ 400.596010][T13741] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 400.653241][T13741] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 400.732865][T13741] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 400.831383][T13741] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 400.910750][T13744] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 401.045659][T14055] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2049'. [ 401.061558][T13744] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 401.104772][T13744] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 401.171204][T13744] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 401.273287][T14055] lo speed is unknown, defaulting to 1000 [ 401.542713][T13741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.569008][T14071] Bluetooth: MGMT ver 1.23 [ 401.578825][T14075] netlink: 'syz.2.2054': attribute type 19 has an invalid length. [ 401.587750][T14075] netlink: 'syz.2.2054': attribute type 19 has an invalid length. [ 401.618759][T14075] netlink: 'syz.2.2054': attribute type 19 has an invalid length. [ 401.680729][T13741] 8021q: adding VLAN 0 to HW filter on device team0 [ 401.794886][T14082] IPVS: Error connecting to the multicast addr [ 401.813928][T14084] netlink: 'syz.2.2057': attribute type 1 has an invalid length. [ 401.814259][ T1035] bridge0: port 1(bridge_slave_0) entered blocking state [ 401.828906][ T1035] bridge0: port 1(bridge_slave_0) entered forwarding state [ 401.867021][ T1035] bridge0: port 2(bridge_slave_1) entered blocking state [ 401.874220][ T1035] bridge0: port 2(bridge_slave_1) entered forwarding state [ 401.889007][T13744] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.897496][T14082] tun0: tun_chr_ioctl cmd 2147767520 [ 401.908232][T14084] bond0: entered promiscuous mode [ 401.913404][T14084] bond0: entered allmulticast mode [ 401.919416][T14084] 8021q: adding VLAN 0 to HW filter on device bond0 [ 401.931292][T14087] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2057'. [ 401.990802][T14086] netlink: 24 bytes leftover after parsing attributes in process `syz.1.2056'. [ 402.010873][T14082] mac80211_hwsim hwsim6 wlan0: left promiscuous mode [ 402.031325][T13744] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.043495][ T6344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.052986][ T6344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.064278][ T3528] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.071435][ T3528] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.137987][ T3528] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.145243][ T3528] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.579733][T14099] x_tables: duplicate underflow at hook 1 [ 402.793279][T13741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 402.911062][T13744] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 403.008991][T13741] veth0_vlan: entered promiscuous mode [ 403.052030][T13741] veth1_vlan: entered promiscuous mode [ 403.358531][T14110] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 403.370672][T14110] mac80211_hwsim hwsim3 wlan1: left allmulticast mode [ 403.382920][T14110] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 403.397985][T14110] batadv0: left allmulticast mode [ 403.404141][T14110] bond0 (unregistering): Released all slaves [ 403.518151][T13741] veth0_macvtap: entered promiscuous mode [ 403.564338][T13741] veth1_macvtap: entered promiscuous mode [ 403.660286][T13741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 403.723538][T13741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 403.768210][ T1035] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.791551][ T1035] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.843334][ T1035] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.863909][ T1035] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 403.987248][ T6343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.995099][ T6343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.021757][T14122] FAULT_INJECTION: forcing a failure. [ 404.021757][T14122] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 404.046525][ T6344] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 404.054368][ T6344] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 404.071898][T14122] CPU: 0 UID: 0 PID: 14122 Comm: syz.3.2064 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 404.071926][T14122] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 404.071937][T14122] Call Trace: [ 404.071944][T14122] [ 404.071953][T14122] dump_stack_lvl+0x189/0x250 [ 404.071987][T14122] ? __pfx____ratelimit+0x10/0x10 [ 404.072012][T14122] ? __pfx_dump_stack_lvl+0x10/0x10 [ 404.072035][T14122] ? __pfx__printk+0x10/0x10 [ 404.072075][T14122] should_fail_ex+0x414/0x560 [ 404.072108][T14122] _copy_to_user+0x31/0xb0 [ 404.072135][T14122] simple_read_from_buffer+0xe1/0x170 [ 404.072165][T14122] proc_fail_nth_read+0x1df/0x250 [ 404.072197][T14122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 404.072228][T14122] ? rw_verify_area+0x258/0x650 [ 404.072250][T14122] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 404.072280][T14122] vfs_read+0x200/0x980 [ 404.072309][T14122] ? __pfx___mutex_lock+0x10/0x10 [ 404.072339][T14122] ? __pfx_vfs_read+0x10/0x10 [ 404.072363][T14122] ? __fget_files+0x2a/0x420 [ 404.072390][T14122] ? __fget_files+0x3a0/0x420 [ 404.072414][T14122] ? __fget_files+0x2a/0x420 [ 404.072450][T14122] ksys_read+0x145/0x250 [ 404.072475][T14122] ? __pfx_ksys_read+0x10/0x10 [ 404.072494][T14122] ? rcu_is_watching+0x15/0xb0 [ 404.072523][T14122] ? do_syscall_64+0xbe/0x3b0 [ 404.072553][T14122] do_syscall_64+0xfa/0x3b0 [ 404.072576][T14122] ? lockdep_hardirqs_on+0x9c/0x150 [ 404.072599][T14122] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.072619][T14122] ? clear_bhb_loop+0x60/0xb0 [ 404.072642][T14122] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 404.072678][T14122] RIP: 0033:0x7f487b18d33c [ 404.072695][T14122] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 404.072712][T14122] RSP: 002b:00007f487c04f030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 404.072732][T14122] RAX: ffffffffffffffda RBX: 00007f487b3b5fa0 RCX: 00007f487b18d33c [ 404.072746][T14122] RDX: 000000000000000f RSI: 00007f487c04f0a0 RDI: 0000000000000006 [ 404.072758][T14122] RBP: 00007f487c04f090 R08: 0000000000000000 R09: 0000000000000000 [ 404.072771][T14122] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 404.072782][T14122] R13: 0000000000000000 R14: 00007f487b3b5fa0 R15: 00007ffc16b37d08 [ 404.072815][T14122] [ 404.453986][T13744] veth0_vlan: entered promiscuous mode [ 404.614383][T13744] veth1_vlan: entered promiscuous mode [ 404.821381][T13744] veth0_macvtap: entered promiscuous mode [ 404.852075][T13744] veth1_macvtap: entered promiscuous mode [ 404.914789][T13744] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 404.939012][T13744] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.163054][ T9905] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.190579][ T9905] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.223150][ T9905] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.265947][ T9905] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 405.484540][ T3445] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.512217][ T3445] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 405.692655][ T6344] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 405.853271][ T1035] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 405.875414][ T1035] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 406.001404][ T6344] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.152203][T14160] lo speed is unknown, defaulting to 1000 [ 406.333676][ T6344] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.606158][ T6344] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 406.630330][T14162] lo speed is unknown, defaulting to 1000 [ 407.073055][ T6344] bridge_slave_1: left allmulticast mode [ 407.096143][ T6344] bridge_slave_1: left promiscuous mode [ 407.107813][ T6344] bridge0: port 2(bridge_slave_1) entered disabled state [ 407.140229][ T6344] bridge_slave_0: left allmulticast mode [ 407.155536][ T6344] bridge_slave_0: left promiscuous mode [ 407.174184][ T6344] bridge0: port 1(bridge_slave_0) entered disabled state [ 407.537972][T14197] netlink: 'syz.2.2076': attribute type 7 has an invalid length. [ 407.569242][T14197] __nla_validate_parse: 2 callbacks suppressed [ 407.569259][T14197] netlink: 28 bytes leftover after parsing attributes in process `syz.2.2076'. [ 408.008237][ T5857] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 408.029262][ T5857] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 408.038442][ T5857] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 408.076052][ T5857] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 408.094577][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 408.130214][ T6344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 408.141722][ T6344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 408.152042][ T6344] bond0 (unregistering): Released all slaves [ 408.493662][T14208] lo speed is unknown, defaulting to 1000 [ 409.036124][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 409.047193][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 409.056225][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 409.065775][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 409.074586][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 409.485238][T14227] lo speed is unknown, defaulting to 1000 [ 409.492934][T14236] C: renamed from team_slave_0 [ 409.504631][T14236] netlink: 'syz.2.2086': attribute type 1 has an invalid length. [ 409.525852][T14236] netlink: 152 bytes leftover after parsing attributes in process `syz.2.2086'. [ 409.534919][T14236] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 409.672052][ T6344] hsr_slave_0: left promiscuous mode [ 409.685083][ T6344] hsr_slave_1: left promiscuous mode [ 409.697747][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 409.710004][ T6344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 409.733373][ T6344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 409.775519][ T6344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 409.833035][ T6344] veth1_macvtap: left promiscuous mode [ 409.859147][ T6344] veth0_macvtap: left promiscuous mode [ 409.865535][ T6344] veth1_vlan: left promiscuous mode [ 409.870891][ T6344] veth0_vlan: left promiscuous mode [ 410.136518][ T5851] Bluetooth: hci2: command tx timeout [ 410.187346][T14255] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2090'. [ 410.202784][T14255] netlink: 60 bytes leftover after parsing attributes in process `syz.2.2090'. [ 410.443700][T14263] netlink: 8 bytes leftover after parsing attributes in process `syz.2.2092'. [ 410.738032][ T6344] team0 (unregistering): Port device team_slave_1 removed [ 410.782501][ T6344] team0 (unregistering): Port device team_slave_0 removed [ 411.177190][ T5851] Bluetooth: hci4: command tx timeout [ 411.294241][T14242] lo speed is unknown, defaulting to 1000 [ 411.361816][T14270] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000035: 0000 [#1] SMP KASAN PTI [ 411.373739][T14270] KASAN: null-ptr-deref in range [0x00000000000001a8-0x00000000000001af] [ 411.382214][T14270] CPU: 1 UID: 0 PID: 14270 Comm: syz.2.2093 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 411.394270][T14270] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 411.404319][T14270] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 411.409700][T14270] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 ed 6a 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 0a 6f 3e f8 85 [ 411.429302][T14270] RSP: 0018:ffffc900048e6fb0 EFLAGS: 00010206 [ 411.435370][T14270] RAX: ffffffff8981f513 RBX: 00000000000001a8 RCX: 0000000000080000 [ 411.443339][T14270] RDX: ffffc90005364000 RSI: 0000000000000b68 RDI: 0000000000000b69 [ 411.451309][T14270] RBP: dffffc0000000000 R08: ffff888061981e00 R09: 0000000000000002 [ 411.459271][T14270] R10: 00000000ffffffff R11: ffffffff8981f4f0 R12: dffffc0000000000 [ 411.467234][T14270] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88804ba24000 [ 411.475196][T14270] FS: 00007f50b8a156c0(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 411.484119][T14270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.490693][T14270] CR2: 0000001b3181cff8 CR3: 00000000555b6000 CR4: 00000000003526f0 [ 411.498657][T14270] Call Trace: [ 411.501927][T14270] [ 411.504847][T14270] qdisc_tree_reduce_backlog+0x299/0x480 [ 411.510479][T14270] ? qdisc_tree_reduce_backlog+0x3c/0x480 [ 411.516192][T14270] fq_change+0x1519/0x1f50 [ 411.520604][T14270] ? __pfx_fq_change+0x10/0x10 [ 411.525368][T14270] ? __hrtimer_setup+0x187/0x210 [ 411.530301][T14270] fq_init+0x699/0x960 [ 411.534364][T14270] ? __pfx_fq_init+0x10/0x10 [ 411.538941][T14270] ? lockdep_rtnl_is_held+0x26/0x40 [ 411.544132][T14270] ? qdisc_lookup+0x36d/0x6d0 [ 411.548800][T14270] ? __pfx_fq_init+0x10/0x10 [ 411.553382][T14270] qdisc_create+0x7a9/0xea0 [ 411.557881][T14270] tc_modify_qdisc+0x1426/0x2010 [ 411.562816][T14270] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 411.568108][T14270] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 411.573385][T14270] rtnetlink_rcv_msg+0x77c/0xb70 [ 411.578322][T14270] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 411.583436][T14270] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 411.588888][T14270] ? ref_tracker_free+0x63a/0x7d0 [ 411.593902][T14270] ? __copy_skb_header+0xa7/0x550 [ 411.598918][T14270] ? __pfx_ref_tracker_free+0x10/0x10 [ 411.604283][T14270] netlink_rcv_skb+0x205/0x470 [ 411.609045][T14270] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 411.614501][T14270] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 411.619785][T14270] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.624981][T14270] ? netlink_deliver_tap+0x2e/0x1b0 [ 411.630179][T14270] netlink_unicast+0x758/0x8d0 [ 411.634938][T14270] netlink_sendmsg+0x805/0xb30 [ 411.639701][T14270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.644981][T14270] ? aa_sock_msg_perm+0x94/0x160 [ 411.649919][T14270] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 411.655194][T14270] ? __pfx_netlink_sendmsg+0x10/0x10 [ 411.660482][T14270] __sock_sendmsg+0x219/0x270 [ 411.665155][T14270] ____sys_sendmsg+0x505/0x830 [ 411.669920][T14270] ? __pfx_____sys_sendmsg+0x10/0x10 [ 411.675211][T14270] ? import_iovec+0x74/0xa0 [ 411.679720][T14270] ___sys_sendmsg+0x21f/0x2a0 [ 411.684401][T14270] ? __pfx____sys_sendmsg+0x10/0x10 [ 411.689611][T14270] ? __fget_files+0x2a/0x420 [ 411.694197][T14270] ? __fget_files+0x3a0/0x420 [ 411.698875][T14270] __x64_sys_sendmsg+0x19b/0x260 [ 411.703800][T14270] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 411.709262][T14270] ? rcu_is_watching+0x15/0xb0 [ 411.714017][T14270] ? do_syscall_64+0xbe/0x3b0 [ 411.718688][T14270] do_syscall_64+0xfa/0x3b0 [ 411.723295][T14270] ? lockdep_hardirqs_on+0x9c/0x150 [ 411.728503][T14270] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.734565][T14270] ? clear_bhb_loop+0x60/0xb0 [ 411.739236][T14270] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 411.745118][T14270] RIP: 0033:0x7f50b7b8e929 [ 411.749522][T14270] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 411.769127][T14270] RSP: 002b:00007f50b8a15038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 411.777536][T14270] RAX: ffffffffffffffda RBX: 00007f50b7db5fa0 RCX: 00007f50b7b8e929 [ 411.785499][T14270] RDX: 0000000000004000 RSI: 0000200000000280 RDI: 0000000000000003 [ 411.793459][T14270] RBP: 00007f50b7c10b39 R08: 0000000000000000 R09: 0000000000000000 [ 411.801418][T14270] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 411.809379][T14270] R13: 0000000000000000 R14: 00007f50b7db5fa0 R15: 00007fff37994c38 [ 411.817347][T14270] [ 411.820356][T14270] Modules linked in: [ 411.824349][T14270] ---[ end trace 0000000000000000 ]--- [ 411.829851][T14270] RIP: 0010:htb_qlen_notify+0x31/0xc0 [ 411.835258][T14270] Code: 41 56 41 55 41 54 53 49 89 f6 49 89 ff 49 bc 00 00 00 00 00 fc ff df e8 ed 6a 3e f8 49 8d 9e a8 01 00 00 49 89 dd 49 c1 ed 03 <43> 0f b6 44 25 00 84 c0 75 4d 8b 2b 31 ff 89 ee e8 0a 6f 3e f8 85 [ 411.854934][T14270] RSP: 0018:ffffc900048e6fb0 EFLAGS: 00010206 [ 411.861028][T14270] RAX: ffffffff8981f513 RBX: 00000000000001a8 RCX: 0000000000080000 [ 411.869015][T14270] RDX: ffffc90005364000 RSI: 0000000000000b68 RDI: 0000000000000b69 [ 411.877015][T14270] RBP: dffffc0000000000 R08: ffff888061981e00 R09: 0000000000000002 [ 411.884985][T14270] R10: 00000000ffffffff R11: ffffffff8981f4f0 R12: dffffc0000000000 [ 411.892975][T14270] R13: 0000000000000035 R14: 0000000000000000 R15: ffff88804ba24000 [ 411.900959][T14270] FS: 00007f50b8a156c0(0000) GS:ffff888125d16000(0000) knlGS:0000000000000000 [ 411.909902][T14270] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 411.916503][T14270] CR2: 0000001b3181cff8 CR3: 00000000555b6000 CR4: 00000000003526f0 [ 411.924486][T14270] Kernel panic - not syncing: Fatal exception in interrupt [ 411.931919][T14270] Kernel Offset: disabled [ 411.936229][T14270] Rebooting in 86400 seconds..