last executing test programs: 4m13.985388651s ago: executing program 0 (id=1058): r0 = socket$nl_generic(0x11, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=@dellink={0x20, 0x11, 0x101, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2}}, 0x20}, 0x1, 0x0, 0x0, 0x4}, 0x240400c4) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xc, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="61124c00000000006113500000000000bf2000000000000007000000180000003d030100000000009500f000000000006926000000000000bf67000000000000560602000f0200006706000020000000620a00ff0ee60000bf250000000000002d350000000000006507000002080000070700004c0000001f75000000000000bf54000000000000070400000400f9ffcd35010000000000ce040000000000001c000000000000009500000000000000db13d5d8b741f2cdaabc8383c8f56bb5df3083d20f8c2bf304000000815dcf0066d7ded3c5c49a08a503ea6d54f7f3125a8200578ac0836d6454745e70a27444003c5b20451b624db6f5320e9befc1e00b8b32917c4d30d16b7edb732bc3ac330b16c442aff70d27659bc58e296b16750c5577c848754b4894b07f15bab1c640a5c0c4fd62f9db829b301ef67fd2b2736f3af0c54af2412313b17c4c8081c4ed0572261960e227d34cfbfdb247bc2351c9d8363a8cb18b7330604da78b0aba47545f9a25a80dd7d28a5ae41824f611dd2de6dd581c52698f9542a444a8a3969946faded5275c00"/420], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 4m13.659283563s ago: executing program 0 (id=1061): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000007c0)={{0x14}, [@NFT_MSG_DELSET={0x3c, 0xb, 0xa, 0x301, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0xa}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x150}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x70, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_ID={0x8}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xfffdfffe}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x277e2093}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_COUNTERS={0x34, 0x8, 0x0, 0x1, [@NFTA_COUNTER_PACKETS={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}, @NFTA_COUNTER_BYTES={0xc}]}]}], {0x14, 0x10}}, 0xd4}}, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) sendmsg$L2TP_CMD_SESSION_DELETE(r2, &(0x7f0000000780)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x20000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x24004) close(r2) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r2, 0x800448d2, &(0x7f0000000680)={0x9, &(0x7f0000000140)=[{@fixed}, {@fixed}, {@fixed}, {}, {@fixed}, {@none}, {}, {}, {@none}]}) 4m13.578938887s ago: executing program 0 (id=1062): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f0000000380)={0x1d, r1, 0x0, {0x0, 0x0, 0x1}, 0x1}, 0x18) connect$can_j1939(r0, &(0x7f0000000000)={0x1d, r1, 0x2, {0x1, 0x0, 0x4}, 0x2}, 0x18) sendmsg$can_j1939(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x1d, r1, 0x3, {0x1, 0x1, 0x4}}, 0x18, &(0x7f0000001800)={0x0}, 0x1, 0x0, 0x0, 0x4848}, 0x4000800) (async) sendmsg$can_j1939(r0, &(0x7f0000001840)={&(0x7f0000001780)={0x1d, r1, 0x3, {0x1, 0x1, 0x4}}, 0x18, &(0x7f0000001800)={0x0}, 0x1, 0x0, 0x0, 0x4848}, 0x4000800) socket$netlink(0x10, 0x3, 0x5) (async) socket$netlink(0x10, 0x3, 0x5) 4m13.231236917s ago: executing program 0 (id=1064): r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC_PROXY(r0, 0x0, 0xd2, &(0x7f0000000280)={@broadcast, @remote, 0x0, "d009000000000000006404000000dc3f0900000000000000d800000000000400", 0x0, 0x0, 0xfffffd, 0xfffffffd}, 0x3c) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r2, &(0x7f0000000040)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x0, @any, 0x4, 0x1}, 0xe) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000140)='ns/mnt\x00') ioctl$BTRFS_IOC_ADD_DEV(r3, 0x5000940a, &(0x7f0000000f80)={{}, "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"}) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000040)={@mcast2, 0x10011, 0x1, 0x2, 0x2, 0xc}, 0x20) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r4, 0x8b32, &(0x7f0000000040)) getsockopt$bt_l2cap_L2CAP_OPTIONS(r2, 0x6, 0x1, 0x0, &(0x7f0000000100)) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f000000d4c0), 0xffffffffffffffff) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r6, &(0x7f000000f840)={0x0, 0x0, &(0x7f000000f800)={&(0x7f0000000340)=ANY=[@ANYBLOB="08000000d30724f713d4ee79ccf3cbed0adea9f8f9d551437123397da69991b444f0f81b7c786767a99b513419df0fbe4e0b4d52b2d5a37c8e6a0c1df3350490a14f3562cf7ad2085471aa5232d0fadb2bae02a76df44cf421c2", @ANYRES16=r7, @ANYBLOB="010025bd7000ffdbdf251500000004002b800c0006000100000001000000"], 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x8040) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r9 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r8) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r8) sendmsg$NL802154_CMD_NEW_INTERFACE(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYRESOCT=r4, @ANYRES32=0x0, @ANYRES8=r9], 0x30}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_CHANNEL(r6, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x38, r10, 0x2, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_PAGE={0x5, 0x7, 0xd}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r11}]}, 0x38}, 0x1, 0x0, 0x0, 0x80}, 0x20008800) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000180)=""/86, &(0x7f0000000080)=0x56) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000000)=@ethtool_gstrings={0x1b, 0x1}}) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x3000002, 0x80010, r1, 0xffffe000) 4m11.966993351s ago: executing program 0 (id=1066): socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r0, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r1, &(0x7f0000000240)={0x0, 0xfffffff5, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) (async) sendmmsg$sock(r1, &(0x7f000000bb40)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000001740)="ee5886e0b4a7667690f1667187f548b5dd806b642c598c818297305ef94826cf43347480c352a7687efd2b88142035c05e0b12bf21ce9c302aec3dad537125bf10c5d85c7af2cac9b92bb50a62c1497041f9745be39fc73b06ccc272be3d1570557eb0a831cf68944bf8d2efcbdf362cbe33092b0d78bcc9c3967b86525d47e16d8c3adda02b695bfa52f28142e759f8dbb33476c2edbb2707ee460329afe8275aca6bc1ec8ce9bd03ff0c188e2d8cb8f741800474df71d4c2a1e21a9b52b2c90a7162e2205546a2be56164b1f172a0dce32a1fd903726c08ea3dbe194aaefe465fac3a7", 0xe4}, {&(0x7f0000001840)="b792374b149f4cc5d3f155a0451609108f52206fe2441f23b1ba334d6c15b5268b4301fd805e21e7fc62f1acb0189c2786864f8af215c4c9327efb60965faa14092ae73bd93521b4c1b8cd70ef6991a33d69741e7c7e4b06e1ea98e0543698018f28ed13370d8e43fcecfbb0a1e909f6b4b2af1a3a832c56172abb1960a6f26447066f947d368188198761c4a9b7bbaa984b18f663e6dbeb1ed88fd32ceb88a6c743f303850988", 0xa7}, {&(0x7f0000001900)="814d61e8e52c537c9998f5b84a01cfef88daee9bfe1542b6953c6521e3453264f8dad438b05944c30d60e479cf5d55c288a89dec7b0dcbe43b723ef32926423c17", 0x41}, {&(0x7f0000001980)="c17c8b83f132c039d41275cc024ca0411772c061cbf34e34f6aa", 0x1a}, {&(0x7f00000019c0)="cd50cb276d31843728fdd1b4d9443f0493685a902bbe47543901d67a4b9add80e5c48f94808ac3bb1cc7d7525bd861267c6051fcb1fd90752bd7515a6734563e983cdddef8a40af954c51dce6d3fbd7fcb5f0e9aa5c842969251fb6e9d2e468e84cbaeab607d071abc6e59b673315473db64494f7f86a51820a12fcbe13498951f45ba3274e6de36ce8ec65d50cc4dfce288fc5f23289576a10b", 0x9a}], 0x5}}, {{0x0, 0x0, &(0x7f0000005500)=[{&(0x7f00000050c0)="ee0e4582ba0614e5e185ee74c1ededadbe569a96b62b925667d0a392fe8c900a119fd9c2b14e91ffa24b211a903afb6f6cdd3143f507ac024293e3923d3617e0667a5902cbfce554ef481af6057c861c627557da175c76b452bc68f081f551cc55e8c52440be9529dadcca04a4c0eabf833d9c45c8d01ee6bfaa0615590126e79a9665445056", 0x86}, {&(0x7f0000005180)="b04ec075ede0fd36f1f44707f67ac022dd7e9e53fc1fb4ad288f4155d572f2619b4ce51cd5cf0ad18e429dfd8fa80afb01f25064bc8b9f6790cf42dfa95b0c2eea70b4a435ec3b8e138d7ac5d5e03549ab05be431c31046700791a9d1ca44797", 0x60}], 0x2}}, {{0x0, 0x0, &(0x7f00000059c0)=[{&(0x7f0000005640)="35033276e4182bf05da6dba9497609361c261aacc3f1f07b2786fa3cc11683a17d722e3035c5b73598c0835f3ebcbc15d5bf1b6f07426475348426b74e314d7b11083f2f2331a4", 0x47}, {&(0x7f00000056c0)="0cf3bbc86c3be13e049b7726659813f6e5002a95fbc60ada3a271d39af8445e7698c90d154b32e68f7037786e3e0baab8b3bf51033206fbb9b82c171950e2f951149c90d88f07d59e2c3a34d1b51ce18c051ad19138299f0db214dd0a0f2f3b733922434f0e1cba8c19d31ea7429ade0a5bce8aa8ef6613c475f37f08a1b03e37104", 0x82}, {&(0x7f0000005780)="e6afeb66137d540bb20fc2648790cd3143649ad14a4ae447e071d23877c471fce8cb00af5bff001c81e78809efa77efdb8a912894dd545c1cefa6295be21dbbecab4a74f5b49bd2014a7dd3b348417a44f6c4f8abd1f7c193a46f0ebbe444f71c66ceeac9235e92fb34a9cb158469bc9d62db26e52fe4e9a4bc3b37d9c822f0aea673a02c4324bfc638a0898ea6de844851aeaec603fb31490e0e60264f14e333333807db17277caed9f9bfa5c25947766dba10c75bfd55350f72272e7b781de95cae3d1f76d46b61e9f1d7b37b3835bccec30fd0b7fe8e0d20dc6e4dd54c5437420517e873777a935eb24dfa59c", 0xee}, {&(0x7f0000005880)="1abec9916dfc6341f205af2ddeb54033c4a8c733e1a211363dd3e77850fbcf63c394c6c0cb0f4a0c0386e79590492085d40b0bac721875e27388dc2fbafcf190d69b5a71681be3cd08117460b878f3bb42734e0dd00564dcc8c51454fd01860221bb996caac887c1af262dcfaf527916db9feda28dea3a8e8a5fe9f3e28dddaf8546cff808f818a30d6be666081ae6b8fd47133ffbc10a8345d2fd", 0x9b}, {&(0x7f0000005940)="40ee9ab1e7dc5e3b590a66b1e1", 0xd}], 0x5}}], 0x4, 0x4000011) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$nl_generic(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2010164}, 0xc, &(0x7f00000000c0)={&(0x7f0000000340)={0x3ac, 0x10, 0x200, 0x70bd26, 0x25dfdbfb, {0x19}, [@generic="1a1d2af8fec2e4b932694c3141f7b9109d666fe3f6d7bfc5686227ab9a43a90ff186c98f77b9d99fa2eac55a95f76d57a20882c8c2f965cc76bae57852597dd64d2f2744dcbb54fcdf48d4cd424567be62167783279b6e131868c9812862fff235658ac438445bad798a755604ff32f5418acc7ba530f1a9829cc4b88264b655c6caf45f52688ea9531d52b437bc947ff064b53ef7c3033f37e6671f253548260abd7ab3a70aadac21c2493c46b510585e5e38364446a59c406bfdf8dd62da6021961ef33ccfce4c6f23f49660da", @generic="5c15cbc2344f1919c64925b6839bbaa5f7c9d96c39b6040a1086a028fe2dfa6a42b5f9fe682d47666af470ff18aea2419cecc075b58c7a67ce74f436de9a4154ff2db478c41d958b6b7be3e7fb573e9fd88d965da0e8f3520160ff949a68aa16493aa1c809645d7c9625eeb5009e608ef2", @nested={0x208, 0x65, 0x0, 0x1, [@typed={0x8, 0xa, 0x0, 0x0, @u32=0x1}, @generic="96476b39c0a74774e5c67603a08a06a4feddaf6f7189b04fb949b54f7ff3a835b672d5dd8d82e97da6bfac925df29ab6a81cd00c42c4ce2d93b6b8a2c5974725bf2b66ba2f7728440447d792ee1a2f02d9caa86461104746ee117b3830f26235587db960fd232846995623f0b54654017a4640139da242621e8b3173d2c53cdb3d18a3ae858e485d3652c183f62dda40ef2633aa284648b75004525e9c6d0127fc0341c2fd296fd15dd52fa25a52bc3973973d3209c2e4440ea2ea448d1397f2f4d53320e66334e07eefe4c7d95c990366d0d01eb6f4ae1e320906306291993ecfb901207dc1bcc64658f5ddd04c3670f33def1b96336c9a", @typed={0x14, 0x91, 0x0, 0x0, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @generic="4f5808a02f8b3e4ca58bdf66c836a1e7a8eca1f53a19270893e85839454d3e2c24ca77e6104bab760b8c224d426aec0f25f31e3c6a08aae8e7b398eb99658a6b26e9c8d0a7fa50df725beffbb89b5765d8bcdecaecd57f8a49bff4c2a54867348a72faebca9fcd768b00a58d7affd666309b07de910194caad34859025797397d29794133acd3f213992f8695e4dff75384c3e68a2faf0c2fdb07321e6aa48dd0d5ca021365fb4170371700d574a9a9b4df75fc828b62014ddef5a6882aaf7cd5313a57cfb2ef614cd09fd8d22824f86028a76157fcd1b58e80e1141e932c13cfdb46c6332babb2e73a05c48c4bd3688"]}, @nested={0x43, 0x138, 0x0, 0x1, [@nested={0x4, 0x26}, @generic="84bf7f478ef8e12ec5e8de3498dde0c6c7ca3c4f5202eb", @nested={0x4, 0x94}, @nested={0x4, 0x75}, @typed={0x8, 0xda, 0x0, 0x0, @u32=0x4}, @typed={0x14, 0x8b, 0x0, 0x0, @ipv6=@private0}]}, @typed={0xc, 0xa1, 0x0, 0x0, @u64=0x8000000000000000}]}, 0x3ac}, 0x1, 0x0, 0x0, 0xf418887dd4c9e318}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={0x50, 0x0, 0x1, 0x401, 0x0, 0x0, {0x2}, [@CTA_SYNPROXY={0x14, 0x18, 0x0, 0x1, [@CTA_SYNPROXY_ISN={0x8}, @CTA_SYNPROXY_ITS={0x8}]}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_LABELS={0x4}]}, 0x50}}, 0x0) 4m11.101346776s ago: executing program 0 (id=1069): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r1, 0x0, 0xf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x24044044) 3m55.555054635s ago: executing program 32 (id=1069): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_stats_latency\x00', r1, 0x0, 0xf}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x24044044) 2m29.33079315s ago: executing program 1 (id=1421): r0 = socket(0x40000000015, 0x5, 0x0) getsockopt(r0, 0x200000000114, 0x271b, 0x0, &(0x7f0000000000)) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000040)={0x0, 0x0}, &(0x7f0000000080)=0xc) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)={0x24, 0x2e, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid=r4}, @typed={0x8, 0x9f, 0x0, 0x0, @pid=r3}, @nested={0x4, 0x1}]}, 0x24}], 0x1}, 0x0) setsockopt$inet_IP_IPSEC_POLICY(r0, 0x0, 0x10, &(0x7f0000000180)={{{@in=@loopback, @in6=@empty, 0x4e20, 0x600, 0x4e20, 0x200, 0xa, 0x20, 0xa0, 0x88, 0x0, r4}, {0x2, 0x5, 0x8000000000000001, 0x0, 0x7, 0x8, 0x846a, 0x9}, {0xfffffffffffffffd, 0x2, 0x2, 0x8}, 0x9, 0x6e6bb1, 0x2, 0x1, 0x1, 0x3}, {{@in=@remote, 0x4d2, 0xff}, 0x2, @in6=@empty, 0x3506, 0x0, 0x1, 0x2, 0x100, 0x4}}, 0xe8) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000f80)={0x34, r6, 0x1, 0x70bd28, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x14, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000880}, 0x8000) syz_emit_ethernet(0x46, &(0x7f0000000800)={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cedd00", 0x10, 0x3a, 0xff, @remote={0xfe, 0xe0}, @mcast2, {[], @ndisc_ra={0x89}}}}}}, 0x0) 2m28.983201033s ago: executing program 1 (id=1424): r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000c00)="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", 0x1ec}, {&(0x7f0000001680)="fae0835ee82c20abb86f7c287ffb04a52a0b2339a4efc8216bada6fb7f4385ead471969bdf9b82994c10898db8b0fd9a6068b87f4547eff53d6cb7b37534e44d27c79042f5c405c0ff3eaf643001000000000000008263d71ee0e5b2cb31215ded6df9c76d150aa52a4eecb94fe48e79205c96a0aab13eaa4681860576d2e32f6873b200d669e65d56bd8a4703cbea6b8c610ec158fe5f8683f7", 0x9a}, {&(0x7f00000015c0)="6b75b597d05d969a191023", 0xb}, {&(0x7f00000006c0)="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", 0x338}], 0x4, &(0x7f0000000180)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x30}, @loopback}}}], 0x20}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_int(r1, 0x0, 0x18, &(0x7f0000000240)=0xc, 0x3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000002540)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt$sock_int(r4, 0x28, 0x1, 0x0, &(0x7f0000000080)) getsockopt$inet_mreqn(r1, 0x0, 0x20, &(0x7f00000019c0)={@empty, @broadcast, 0x0}, &(0x7f0000001a00)=0xc) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$OSF_MSG_REMOVE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x268, 0x1, 0x5, 0x801, 0x0, 0x0, {0x0, 0x0, 0x2}, [{{0x254, 0x1, {{0x0, 0x6}, 0x81, 0x0, 0x7, 0x800, 0x8, 'syz1\x00', "ba34d459039550206fca97d92ad8b1f4fd02ffa5ac236232a2ae9313642c7c52", "2e5153c04c59cd6a8ce8f4758ba1d83532000000008c0c00", [{0x6, 0xf0c6, {0x0, 0x2844}}, {0x1, 0x1, {0x0, 0x9}}, {0x90, 0x7d, {0x2, 0x9}}, {0xffff, 0xff, {0x3, 0xb31}}, {0x0, 0x85ec, {0x1, 0x3000}}, {0x100, 0xcf, {0x2, 0xff}}, {0x8ffe, 0xbe20, {0x2, 0xd9}}, {0x3, 0x1, {0x3, 0x89a}}, {0x1, 0x6, {0x3, 0x7fff}}, {0x1, 0x4, {0x0, 0x8}}, {0x5, 0x1, {0x0, 0x78cc8ffb}}, {0x6, 0x1, {0x2}}, {0x5, 0x3, {0x3, 0xb5c7}}, {0x1, 0x4, {0x2, 0x1}}, {0x7, 0x2, {0x0, 0x7fffffff}}, {0x6, 0x0, {0x1, 0x9}}, {0x8fd, 0x8, {0x1, 0x158}}, {0xfa, 0x2, {0x3, 0x6}}, {0x3, 0x9, {0x3, 0x3ff}}, {0x8, 0xffff, {0x3, 0x9}}, {0x0, 0xa, {0x2, 0x3}}, {0x4, 0x5, {0x1, 0xe}}, {0x2e, 0xae, {0x3, 0xcdc}}, {0xfffe, 0x100, {0x3, 0x5}}, {0x95, 0x7, {0x3, 0x10001}}, {0x6, 0x0, {0x3, 0x100}}, {0x5, 0x2, {0x0, 0x3}}, {0x7, 0x9, {0x0, 0x3}}, {0x2, 0x5, {0x1, 0x80000000}}, {0xfa, 0x8, {0x3, 0x2}}, {0x4, 0x800, {0x3, 0x9}}, {0x3, 0x4, {0x2, 0x8000}}, {0xfffd, 0x10, {0x1, 0x5}}, {0x0, 0x1d07, {0x1, 0x6}}, {0x2, 0xe6, {0x1}}, {0x7fff, 0xec, {0x0, 0x1}}, {0x7, 0x3, {0x2, 0x2189}}, {0x401, 0x9, {0x3, 0x4}}, {0x401, 0xa, {0x0, 0x3}}, {0x4, 0x1, {0x3, 0x3}}]}}}]}, 0x268}}, 0x40880) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000006900), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r7, &(0x7f0000006a00)={&(0x7f00000068c0)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000069c0)={&(0x7f0000006940)={0x4c, r8, 0x1, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xd}, {0x5, 0x83, 0x1}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4004000}, 0x2) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000001d40)={'team0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002780)={'ip6gre0\x00', &(0x7f0000002700)={'syztnl2\x00', 0x0, 0x2d, 0x7, 0x6, 0x5, 0x6c, @private1, @mcast2, 0x700, 0x7800, 0x8, 0xdab1}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000002d00)=0x0, &(0x7f0000002d40)=0x4) sendmmsg$inet(r4, &(0x7f0000002f80)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @multicast2}, 0x10, &(0x7f0000000600)=[{&(0x7f0000000100)="7806ee370d69d7a3ce7a07f16aca46120cd3456316ab1cca61007fde10e32929", 0x20}, {&(0x7f0000000140)="cb", 0x1}, {&(0x7f0000000480)="553829f9216e1c0e4bdcb3c10878b9e888f92ac03001ac10cc10083ffd545414ca8de114230170070584742bb82e2f5e72378658811d4e0b1034edabbc96ecc98a6d308a544b5d10a588ecfea10c0afd7998f282e06d7605d654a18440a86665f0061ed561b42e900bb0143ddc4510a63be719bd67a80c35c2195cfe80d01a2e3a751a62e2c15837cfb83d159b6e24e2e724b805d2a3dfc4e34d5e3bb1c010bcbccefdfb28750ae3e62da9b4775046dd0071f823334025a63afa97f3c4787d5f52497a58bec9082ba3dcefaa567eae0c42d727d6eabe3ba5851f3034cb63afca4e9b73c586", 0xe5}, {&(0x7f0000000380)="e124450d66bfc577c6b9574b23786d974e1109b873dea93ef0641ff542085a5bab4a62e0ae84df1f99fccd94d657f48a7202fdcb455932cc1a2c0e89d11252bf4564b79ed92c9926ae37fb88ec7c100d1994c3ed4f5ef7ec5ebd00abe007", 0x5e}, {&(0x7f00000001c0)="b31d42bb5b9760bf63db1668df4875bb206d2e689b5c987dea2f436e4fec7d1740f347859414e0f7a3ac1aa71e209024439e0e", 0x33}, {&(0x7f00000002c0)="5874beccdd22ca747592f7c11372bd309fc9edab1c06b58027c12dd338", 0x1d}, {&(0x7f0000000580)="7f11a3d854c762c7ee661078e7df9936eeef833c895f0c8af2cb3ecf7a03fdb27228be36a1f8503a2acc973a5338d88cc36066b36fc71ff26a4b23d44a99f7c6990b472cfdd4dddf4ded951ae35f5d03ab777619505e96594eb4d5ee929cf8e3fffe73fe7c88", 0x66}], 0x7, &(0x7f0000000400)=[@ip_tos_u8={{0x11}}], 0x18}}, {{&(0x7f0000000680)={0x2, 0x4e24, @broadcast}, 0x10, &(0x7f0000001240)=[{&(0x7f0000000a00)="0f2694d5d508768513f2b17f3ae25b8f8e8e33f2fd69177eb5fa72384b53efac43043df5293eedf3b6c2231aecd92604fb7bc14d5e3ddfbbc4305b624db5e87d7940ed98e85cfd8485ed94526fe276a72284e491a8aa60441b5fb98d207ff19bdaa8de6ed8b7cf1b18262514986e563cb02b8f8ffa164dfb71d585a97fa37ea95f87ba0cfa77ff6864c526b0ad2b74", 0x8f}, {&(0x7f0000000ac0)="e0170425b9c13d679e430895b98f45fe26f50d589e3e8d9c96a2df7babbf13a3ed5a427b9e4a0486fc442896bb235207c6387ac896311f57c12289396fb9bedaaebdc34cfea1b3a1c39a4cd0cca47019bf7a747141c568793f7c5d8966e2e2d5e4", 0x61}, {&(0x7f0000000b40)="31bdaef67b6c3d44fde398611c0eaf56220d8b8ac224af8c468f3d1b696cfcabf335c1b877d0af6eaebe3e58ddce66c2ef060613db967e58b9af71bacaf64c756165604e113423a54d05ae396b266d5480e7151fdca5c42d646d5c98d9ea667d3355790f60974f3b28cfd9ee9f119f317b7296dba41d45be591e350057166960a34c2c253fbad786bdb5349c8a4d90a5f6542d120938c6", 0x97}, {&(0x7f0000000e00)="41bf461de810e0deb1da81461edc9410a03adfca47479408aebb7fdf364f1b4da326f5caa128ffbc5e1dc0d941eefc78dd6b17ab261f9e68be7918f4053b097854f1d1b3e397cf4cb24619eff6c1d0d4203eeb519618146169a207d41333b065da5e0942b6fdd14e505a457d4bd78c649455fea2a7988f82f7d8c212a7907dd6705bc182c21f1d42fff6d6e6f9fa253d56d727b099fa80d0140ea60deb93ce0bc1eacf54e8b620855f55c8b18510f4b19271b93ef5c9fdb0a6d2f3626e8ec04fce736e6989b1d7df065de0bd95d6bd7493f16daff2dd034647", 0xd9}, {&(0x7f0000000f00)="79aacab65e0de19c7ab7b0316c0914f070346b9c2272f5805457535a0f503f2b94fe8bb930f5eae98a6f61bb85887456eeaf3fd7192f582f7ae69565cc462cf0299483b69585cc8774a78bb06867489f5f28ebf5f68294ce81714417e283325948972bada36cfb12c1741b0f3d4323989783e568000efecb2be3003311d8f7c61b6a0572350056f0774fda51c808e50f69ccc2f6640153179b55", 0x9a}, {&(0x7f0000000fc0)="e6fd24f9f697a00781af401e45e39308f41deaa963b4cfde36943b4a58503c99c1185f1f68b4e4180495eafc979c3471d7a9f2deb7373e25806443c62a7b89fe9ed1263aecf2d78776e2b0d52786aba7213f30a66c7158b1eb811ebfabbf6369c9829049dc66fa90fd5e6a5be612c4ffbffb3d092768080e3bdb475e69bdb745489f92482ae3dd57ec6942f5b6bcb3a9208463d0e10439f29c1b573d0a5777da622e3984531c9c70f319bfadad3b0e742ddd7b2b51645da534976bb9f01a228b0c858e5eb84621f54d98fe2e25bd713d223d0ae0064d5f4a2eb98cb8b8c94821467ce95bf55c2628472c", 0xea}, {&(0x7f00000010c0)="c2b10d931f15a2af7ba6ad", 0xb}, {&(0x7f0000001100)="370c57880d48e71c5e8419661c5acbf53f9b11997cabc03e13f66f740c1f2cd660bcada10d21e82226b2dc08c1b0ea77d319a40283b3b00e21f03cd42204562b0310f905d679abbc268e1c119d2ec31b419778cce4431c1cfdc750872c85198a4965a97e846934e7c12342e1b3726d433edcedbf5940af7b8b6f19bcd1b7adf765dbb626d2a5cce7d0d7332af2de8fc4fd7fef1c0d0dfa25a33ddc764f", 0x9d}, {&(0x7f00000011c0)="0cf36763869c82f3f19131d3ad6105a50915ea5ed4ba1fc40f41c7b08ddea20c9cb1f3833903c75726f508c26a87d112236922862b9ffdf5c2c9556893ebceed558280ccc17d4dd1096bbf7e55341744fc19734ed1969c6b999acd765580", 0x5e}], 0x9, &(0x7f0000001300)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x5d}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x5}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x17}, @empty}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @multicast1, @loopback}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x10}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xb}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xaa}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffff}}], 0xd0}}, {{&(0x7f0000001400)={0x2, 0x4e22, @empty}, 0x10, &(0x7f0000001940)=[{&(0x7f0000001440)="ce7add62c10dbc881488e9848112f1465f707cf662b2e168161395685808dbc638cf2cf9b272a154de4a76f3211847aeb79c8e198780719fcfe43f5431c166a2a98f010f28fe7b98aa9e081658ab572155ee7908edbbde333412961563ed31c10085939f0e84c6cd295f63e9e2be2e80c551c8785427574b69a0763b57adeb48fdf2af75f2423540d07f8efe16fe46ce2f7ce02167cfcb324620a6a6ac55fd2ec4a3123629ed46e01eb30da4b11a708c544e53904eb000cf21beb6373d696f3f2453087fe6bcd5b5af9a0d830c46c4e555305fe648cc74e445fe8b6b6f5d81ae577223f4f0175bb9e40e239fed419b93eaa613c4", 0xf4}, {&(0x7f0000001540)="1a15750232422343a757221d855a4af98f1c7bf5cd1087a0172cdbd2656f0af5d9e799a24fa0dbdee685fa8216730d73207b0c820a747735b126f57dce06d45bc47a90267fb5d103bf81d141909c3a3180c0c0211477361892a5ba8807e6a2a938", 0x61}, {&(0x7f0000001740)="1ab3876f7262ed6645ec30d7fb31fc621d41e906bc0b662f112477b9ae8f4da2459d542b72bea23f88d294d6d3d6d9ba320d0f5be3aed9a9d648980f1c11a8b2b9f1f48d0accae6bfc2e74c9f1d584fc1df5bd805c3ab80a75bcc66f39d2b0e4e152132016966938b16509d0c4df628567c41b0c7bdcd5468bb9e9842cdba5a2d0ee9317d608be52e612e7ca6aa60f54f3fe5b2c6e04d9f2f0b56d642dc350cda2f42258df900419629683ceccb3af437888c39ae974c893ac7c93", 0xbb}, {&(0x7f0000001600)="42e206f98a23e05cf0979255c5f13b1e3113b23750032b4c09ad773422127bf6bbb096ec7ba923fca2c168b3378edb6a86ab0396754d1a1a", 0x38}, {&(0x7f0000001800)="6b17b4fdfae72393e9f02ae60d821d4a15a32abec1a7bd3c2da4cdcee3dfe3c9f8ce98ed0fc764bb251daf3f8c375fe284c6cb97f80640c35ee503e30e4cbbc7094433a6b7152decf474b10472b0e9d2d4c430baba1abe0a644816e3f846b758b70da8fe036b99600a277f81e1cd5719fa839499993699c69f8093e5675fe28cd9bd543a64559edd14b0640a6d8c4b39ceee2a55ab6aa4b8ce34614753e8dfb9b6dd1a108b4db50049fc89f011160f1bddfb4e83e1d1f57fbc65aead2de39468139653ef8a69e681e2f703bf3c7d487a6951497ddc46c6ee4cbe6f7810bcd6df5fcaa9373aa99c8210b8ff5a9d70fd9d8e90dcf78a1a5a9d", 0xf8}, {&(0x7f0000001900)="94c91067af9a1551a3516db9ee27d9", 0xf}], 0x6, &(0x7f0000001a40)=[@ip_retopts={{0x28, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0x28, [@rand_addr=0x64010101]}, @end, @timestamp_prespec={0x44, 0xc, 0x21, 0x3, 0x0, [{@loopback, 0x100000}]}, @end]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffff7}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r5, @rand_addr=0x64010100, @private=0xa010102}}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc}}, @ip_ttl={{0x14, 0x0, 0x2, 0xfffffffe}}], 0x90}}, {{&(0x7f0000001b00)={0x2, 0x4e24, @loopback}, 0x10, &(0x7f0000001c00)=[{&(0x7f0000001b40)="24e63b7b361bcbf35287a6e7b420b0902a131e88abec709413e3176294d1dd0b3bfd5d2395ad5b3e2ef5bee50e2e7fcfef", 0x31}, {&(0x7f0000001b80)="abbec958c4a91c8bcce24d352034c5b24792dd7b45176695fa71e35b335210d0ab9cef73e09583090263ed7e24227e16b5816394773763a3e8c7293550468e9d9bdd3c2604348f60b30bf3be9f4757bd4fc030679f98e372fd3368e1055395e641b1c2c2916ed0e5560b", 0x6a}], 0x2}}, {{0x0, 0x0, &(0x7f0000001d00)=[{&(0x7f0000001c40)="be3e6a644759733d5245469b436a162eae1b36d75b75dd2b79eae7e6d0aa28bd54dd7ecb78f572b99d45bbf5cdd3231b6be37cbfd9d248486fb638bedc8a6d14954df314d9dc45cc739f3bbe96b0b261165ea19e59b4298473227d18a05f21aff7fa4f70c246f463425c4b2a2a27ffd91b1eae019e436df0f854564840410a7c209d7406c3cce936580198c655bc6887ddc43f3774ad179d1bd67ed35b2de874d33d4a3a920035864f76e6ce56cd8c", 0xaf}], 0x1, &(0x7f0000001d80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @local, @empty}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_ttl={{0x14, 0x0, 0x2, 0xc9e}}], 0x50}}, {{0x0, 0x0, &(0x7f0000001e80)=[{&(0x7f0000001e00)="59c6e13ac09efc8fe697672d381a43ab3eaf59779f713cd67ab56fdd", 0x1c}, {&(0x7f0000001e40)="4b859486586c6f3a16c939b581ff0eb64a4ea8548d8325da49416d2db77a201e39d308fc7d8145dfec27e7ae75", 0x2d}], 0x2, &(0x7f0000001ec0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x9}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xe}}], 0x48}}, {{&(0x7f0000001f40)={0x2, 0x4e22, @broadcast}, 0x10, &(0x7f0000002680)=[{&(0x7f0000001f80)="ae1687b2ad91bf889e9ca4b4f4c26999d7f0b193228d0ec96da2b16904500b01ef623777aa7238550ac6d0847ac8acab43cda3734ab01d943cc0a363527c9c6f2bbd49bd216ae62c8927f434017a9c5db455f08b3c8a2efa5b993d10970051a12c24af7939e4073285b7c8324c717cc63a819acc0ad204a81dbb784b898bae131e47f031de129cda56f0", 0x8a}, {&(0x7f0000002040)="ce758eb5fcc94087b25ce5402811a0a745254bd896d1ce4708a84db0ef2bd654a6108d8be47aab652383695730b4f5fb1827bc69efbaaa7d40e6b3b8ac95178217b9ad3c2779b0023b8fcaa502a5eedec30701fd3d4dc310e37bca640eb2aa63a90c1d5f7af529c8be7a0830ac03092a4dded875b0f43ca249c8730cb719f689dd0b559a55f59a0da3407dc60801ec0e6800bcdf1d8bf5fd38bcbce5a3790ddee27b85ebd7480721d2308c328891497aed824af1ffc270466dcc8877b8807d359ac50c26647c25488e7f7b7a7c3cce1046470ffdf013873ceeeb4559fc3896c4c084c4c3aa3c50d95b93ff2dd5278a7940d5bf2385abc4", 0xf7}, {&(0x7f0000002140)="20c7ccbd178ef77ca768758f3172e98fbc77caf7d7a9e105ce904dc21ffcef393aa97f60864ebee2402157692cfb2f7d7b8bfa2abdd78a2c600372b3d078f2764b901a1358eeee87df8287af439b6b2542b4b28d02f83fefaa3b7e5007773a2079ad50ea0505fa1ccee237fdebbf9fc912319146ccee0fe7bb77d61967659f3830770d41863775d3725fce1d6377b81202288eb628add32cb3aa27d91a7557e5aeab7d83210a473b08b85c9f", 0xac}, {&(0x7f0000002200)="5fa36a5a77c266f14d37dbcd48493369d275f0a3d06c2a1ffa5139da0c26f707b8c111007179317f247322ae1629b707161d181e30319179df1effae8335144ab858e70a663ce6d0c27427fb21e6c211b09ec5fd59a25326ec198cc6f8f574119ee8e16a300f942a67a764b133b09b581618e46cfff852463fba2380d9ffa92aea95d3e68ff786a0600f64d1d0a21103620332532d762f545066e19d3fbda27d9a940609659de49d02a62672b98d5537457c33c98f85d16dcda4a604bed8bad31f60a2bff1914b2b46f564b40545f368ed79025c689b73fe9c73a0f1817f8ae80990602c023d9f5e323d", 0xea}, {&(0x7f0000002300)="9ba35d6bcbaebea5393f668168da23d8db5604218ab0506c61e5124938450520afb450b5c4b11d05db6b730fadb1d1f61108ae720222f4adfbba08f76f012d17ae6fbf7bc4792af6fa563cd5bec8174924cdf885dd26190a3f999136be3c8ba4816ed0079dfc6118451e6255ad4c6f0243b8f29ee2265747d3", 0x79}, {&(0x7f0000002380)="dd184f373f63409a16a161e865a959368e0ce0d67b3f1ad49094203b0f3e99553cab370816ee956f43910b7d54b80b6523b9a021aafea5028fd85adea6b6041373eb8d6233c74f9d6260c321f49560446b1bb6a32c76e5f4bd462aa13866d73b5df26923bac8f30dc8e002463f502e6b", 0x70}, {&(0x7f0000002400)="e0007571e378742c1a40259f5ea0e653c2fa7100349aab7484f12c273eb4c5115d1406c9a0207d3cc09d792e10bce72b2b4f16767dcfdb9b56715c02e02b6f42f0e04e7d62e656f8eaf3ea522f8683cb385cb140deea10647be4708d7a563e1f908e6682c1a3533052a4ce83f07fe6a232be7bb2a6305aaa3b1587d499ee1bdb5c796cce7472f874237e366c99307b94b935ad8b688f86f7c371f38927a9b724752e471b02ab1612da19e4cdcd593c230a8e835538ecaec551cd891db755ea2f6d1c61a7ed564df84864257a80", 0xcd}, {&(0x7f0000002580)="87e4bbaf43c78d32fd32cca21d9f3ae482d74565377ecd91d2b51ffd08a91c4f673f848dfdd92a4622f37ea6915fdecc69cce5b289e1af70facde0b13ed0391d70f203d77416cca1a249957606403e251165780c943aa31012688e2fcd65277e9fb34c4b45d3e90cc2910b46d3b7c0a603e52235d7208fcd2da29ca2f844df7587e4483cf76543bf945df186c6d077054ac244bad13e1612a11b43a3cbdd70b8ba33ebd14d7062f869920a4feccba3be7e89c29d3d5781c70c2127d00cdff43b8a11c921922590fd4f8ef245194b0172a6c1e31f8d8a8433f27e79", 0xdb}], 0x8, &(0x7f00000027c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r10, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x4}}], 0x50}}, {{&(0x7f0000002840)={0x2, 0x4e20, @empty}, 0x10, &(0x7f0000002c80)=[{&(0x7f0000002880)="30feb722d50d7ed1080a4511c075fc562bb56b915dffbafd5027ac233900bbc379547cb39b04cd42815890eecdcdc1fd8cf2caad2296e2c01b0cd4f6ce0d9400406d18f2d838692307fc7c22e51bd98f2c08e81e7af139e121cb9d163ace5702c10a9deeff17630cf4413848685d3867af6534ab28b1dcb546397238a343c28a2c398d0941ce8cbff8aef7cf3d081daa61db3d5edae573d460aba361b557cccb3eea1962e246f9152fe6375a64a06a021a8b93ebbbcedb49dcafc73794814efc9345cb564b33df7e4529cd6c040344fe4faa43133492ea2d59", 0xd9}, {&(0x7f0000002980)}, {&(0x7f00000029c0)="1edbcef47f6edd14fc6b4924d650789e3eeb943b87d07924a4d17cb739830b30a3951933d2207ec4cffaa683928ab0467e6211ae271da2ed2f0fd9436381b379d4ca41810d34a79530039065d1359e78c758b3f88dc50493fd10e67f0f8d81190c425fdcd76fb4a12994d2cc7afab430c9d761fce6207ad50b1b4bdcf1aaca63158692", 0x83}, {&(0x7f0000002a80)="d7e2c0a7f143a260fd1212d30020b08f1b5a06d7d1b2f0029b490ab420c82c14babc2ca211dc31b62d0660c784ba541562f55cccd8a332594ed13e3d876c3bae69d7b9edabad1507773bec59c96f4c5461c0e40f58bd062c498e2ce39561a1f9ec2595d672204d7e6c07572ff24c855b37929f5a390a5c1de0f0ae433a62a9509c58655525cd15f23915deb146edc985fae5517ca13896fa36907ebac475f07d4c887b2fe506aa042a6689c027139928810c", 0xb2}, {&(0x7f0000002b40)="3d6975e2129a737dfedbecd07b3204074b9e2af04b803b17b32c558df53e1af65e052b0e538e354eb1bc926ccd6697fa024bbaa3195a15", 0x37}, {&(0x7f0000002b80)="1c991ee8cd5af4b1dcc68d61c88e84d2f39e4cde16615d9d67a7208ecaf223aaa76cd433e754157da31bc08c674fb3bcb45d5edc5e68c07fbdc499d5fc7fcdebc3f77bd8387608ab3e4b2d47cde077928d7e86fd5849fa884d33defe4725a5e62ce74af9848bc1", 0x67}, {&(0x7f0000002c00)="7afdf6f6b76e64b76db52547a0256465b03d9217408a53d5a26bcf49abc49141f63490bcfc8e53e7f68b4d510847643a8b528a81993d8ec470b910f987836dbf0454c9caa8d0107e101438b4fc9c366539aa0a4eaf30bf5996652af71c9b", 0x5e}], 0x7, &(0x7f0000002d80)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r11, @dev={0xac, 0x14, 0x14, 0x14}, @dev={0xac, 0x14, 0x14, 0x32}}}}, @ip_retopts={{0x20, 0x0, 0x7, {[@end, @noop, @timestamp_addr={0x44, 0xc, 0xf, 0x1, 0x0, [{@multicast2}]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x2}}], 0x58}}, {{&(0x7f0000002e00)={0x2, 0x4e24, @remote}, 0x10, &(0x7f0000002e80)=[{&(0x7f0000002e40)="44f07376b6a175e0cd5bb759c4df50e17bebd04c0058513c9dd8c44c264b1c1ce319", 0x22}], 0x1, &(0x7f0000002ec0)=[@ip_ttl={{0x14, 0x0, 0x2, 0x3}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@rr={0x7, 0x7, 0xc6, [@empty]}, @timestamp={0x44, 0x18, 0xc7, 0x0, 0x2, [0x1000, 0x0, 0x7fffffff, 0x9, 0xfffffffb]}, @ra={0x94, 0x4}, @ra={0x94, 0x4}, @noop, @timestamp_prespec={0x44, 0x24, 0x87, 0x3, 0xf, [{@private=0xa010100, 0x3}, {@dev={0xac, 0x14, 0x14, 0x12}, 0x7}, {@remote, 0x8}, {@remote, 0x7fff}]}]}}}, @ip_retopts={{0x44, 0x0, 0x7, {[@ssrr={0x89, 0x7, 0xd9, [@remote]}, @rr={0x7, 0x1f, 0x24, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @local, @broadcast, @remote, @dev={0xac, 0x14, 0x14, 0xb}, @private=0xa010101]}, @noop, @noop, @generic={0x83, 0x8, "1c1cefbc0602"}, @noop, @end]}}}], 0xc0}}], 0x9, 0x2000c404) sendmsg$unix(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000000)='\"', 0x1}], 0x1, &(0x7f0000000440)=ANY=[@ANYBLOB="14000000000000000100000001"], 0x18}, 0x0) recvmsg$unix(r3, &(0x7f0000002500)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffd, 0x1000000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x4040, 0x0) 2m27.961905252s ago: executing program 1 (id=1425): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) setsockopt$bt_hci_HCI_DATA_DIR(r1, 0x0, 0x1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000180)={0x0, 0x3b, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020002000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f00000002c0)="f9", 0x1, 0x0, &(0x7f0000000040)={0xa, 0x0, 0x0, @private0}, 0x1c) shutdown(r2, 0x1) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r2, 0x84, 0x74, &(0x7f0000000200)={0x0, 0x0, 0x10}, &(0x7f0000000240)=0x18) r3 = socket$netlink(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r4, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbff, 0x2ffffffff}, 0xc) r5 = syz_genetlink_get_family_id$team(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r7, &(0x7f0000000500)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000002c0)={&(0x7f0000000580)={0xcc, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_COMPAT={0x14, 0x5, 0x0, 0x1, [@NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_RULE_COMPAT_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x1}, @NFTA_RULE_USERDATA={0x13, 0x7, 0x1, 0x0, "070c82354c0f67599350af2440d421"}, @NFTA_RULE_USERDATA={0x75, 0x7, 0x1, 0x0, "ba37e1246c65a788251c64cb673339d77f198087269b4e7864c3cdb9c3a585f839c5648580a96bc32b6757cbd786ebaa5a49d7c72dcc6dfc064f6d5b50bd4b3d2e18c721859ab414a15ba76838e48a3133aceb6b51877defb4b606a351ef10211ee56e3efc18a274fdeb7b439eabcc3553"}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0xcc}, 0x1, 0x0, 0x0, 0x40000}, 0x4004884) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000300)=ANY=[@ANYBLOB="d0000000", @ANYRES16=r5, @ANYBLOB="01002abd7000fcdbdf250100000008000100", @ANYRES32=r6, @ANYBLOB="b400028038000100240001006d636173745f72656a6f696e5f696e74657276616c00000000000000000000000500030003000000080004"], 0xd0}, 0x1, 0x0, 0x0, 0x24004000}, 0x24054880) r8 = socket(0x28, 0x5, 0x0) r9 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r9, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(r9, 0x1) connect$vsock_stream(r8, &(0x7f0000000080), 0x10) sendmsg$IPSET_CMD_DESTROY(r8, &(0x7f0000000740)={&(0x7f0000000680)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000700)={&(0x7f00000006c0)={0x20, 0x3, 0x6, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x404c884}, 0x880) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x1, 0x5}, 0x8) sendmmsg(r8, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)="1b", 0x1}], 0x1}}], 0x1, 0x24008094) socket$inet6_tcp(0xa, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000440)={0x98, 0x2, 0x6, 0x3, 0x0, 0x0, {0xa, 0x0, 0x6}, [@IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_DATA={0x44, 0x7, 0x0, 0x1, [@IPSET_ATTR_CIDR={0x5, 0x3, 0x3}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x6}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x8}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x3}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x20}, @IPSET_ATTR_IP={0x18, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @mcast2}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x3}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x98}, 0x1, 0x0, 0x0, 0x40010}, 0x80) syz_extract_tcp_res(&(0x7f0000000380)={0x41424344, 0x41424344}, 0x5b, 0x7) syz_emit_ethernet(0x3e, &(0x7f0000000540)={@multicast, @local, @val={@val={0x88a8, 0x7, 0x1, 0x1}, {0x8100, 0x5, 0x1, 0x4}}, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x3, 0x2d, 0x28, 0x67, 0x0, 0x5a, 0x6, 0x0, @remote, @multicast1}, {{0x4e22, 0x4e24, 0x41424344, r10, 0x0, 0x0, 0x5, 0xc2, 0x5, 0x0, 0x6}}}}}}, 0x0) 2m27.567248198s ago: executing program 1 (id=1426): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x10, 0x10, &(0x7f0000000080)=ANY=[@ANYBLOB="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", @ANYRES32=r1, @ANYBLOB="0000000000000000b705000008000000850000005b0000009500000000000000"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f00000007c0)={'filter\x00', 0x7, 0x4, 0x3f0, 0x0, 0x0, 0x0, 0x308, 0x308, 0x308, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0xe8}, @unspec=@NFQUEUE0={0x28, 'NFQUEUE\x00', 0x0, {0x2}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@local, @mac=@local, @local, @remote, 0xf, 0xfffffffe}}}, {{@arp={@multicast1, @private=0xa010102, 0x0, 0xffffffff, 0xf, 0x7, {@empty, {[0x0, 0x0, 0x0, 0xff, 0xff, 0xff]}}, {@empty, {[0xff, 0x0, 0x0, 0xff]}}, 0xbbda, 0x6, 0x6, 0x9, 0xe0c, 0xcb, 'erspan0\x00', 'netpci0\x00', {0xff}, {0xff}}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @rand_addr=0x64010102, @remote, 0x4, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x440) 2m27.459965552s ago: executing program 1 (id=1427): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000724000/0x1000)=nil, 0x1000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000840)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r0, &(0x7f0000000740)={&(0x7f0000000040)={0x2, 0x2, @dev}, 0x10, 0x0, 0x0, &(0x7f0000000880)=[@zcopy_cookie={0x18, 0x114, 0xc, 0x1}], 0x18}, 0x4000000) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet6_int(r1, 0x29, 0x1a, 0x0, 0xfdb7) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$IP_VS_SO_GET_VERSION(r0, 0x0, 0x480, &(0x7f00000000c0), &(0x7f0000000140)=0x40) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) setsockopt$bt_l2cap_L2CAP_CONNINFO(r3, 0x6, 0x2, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000a40)={0x14, 0x56, 0x601, 0x0, 0x0, "", [@generic="f4"]}, 0x14}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) syz_emit_ethernet(0xbe, &(0x7f0000000180)=ANY=[], 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000400)=ANY=[@ANYBLOB="200000002d00091327bd70000000000006"], 0x20}}, 0x84) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r2}) ioctl$sock_inet6_tcp_SIOCATMARK(r6, 0x8905, &(0x7f0000000080)) 2m27.215400325s ago: executing program 1 (id=1429): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x5}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073117000000000008510000002000000850000000500010095000000000000009500a505000000009e3c5012d001cd60cd367e723983fe12f001bbc74ec6009f7b78abf5d31bb8b9a7ffbe741a957146d6366d93f6c2a3ea91921bac7551cf105c2b71be23f6099b4811193b2a22b41308da5c4ea5c4d0e798527ebb720848ba65d359070b5a092f6f5f7e65c0ef1f6ad70c1f18d5508ec353876a032f8b0674bc194ad2073619bf3b1beeae23884eb2aacbe52fd0d2bb7fa0a07d15142c915f6f9613"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 2m25.506281626s ago: executing program 4 (id=1241): bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xca, &(0x7f0000000700)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "11a8bc", 0x94, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @local, {[@dstopts={0xff, 0xe, '\x00', [@generic={0x40, 0x19, "dd29ad96da6c2ab37a59df56c08a6e35c2f6495b3bcbee2e69"}, @calipso={0x7, 0x50, {0x0, 0x12, 0x63, 0xff, [0xfffffffffffffffa, 0x0, 0x6, 0x0, 0x6, 0x1, 0x400, 0xffffffffffffffd7, 0x5]}}, @enc_lim={0x4, 0x1, 0xf}, @generic={0x6}]}], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000080)=0xd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x83}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="06"], 0x9) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000540)=""/252, 0xfc, 0x0, &(0x7f0000000080)=""/76, 0x4c}}, 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m24.365323104s ago: executing program 3 (id=924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001500000000000000000000000800120002000200000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000ac14140000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000010006"], 0xa8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1a2275248918d07d48ffe30a30c49d8e8988634f533821c9c4a74708bc19017d47e5a70f964ace511ccb338e48a40535ba2ab105ce9cebd6371d0d6645cb2b3ffcaef542595d49421e8c14b543cb78f9bc3f8c8394ba3e55b26fdf2d33b3002049bcdf5335a3b549a954be2d05ed9f9c0d6118adbba0f47bc09d2b8bba3c29accc8e4f698e0dbf69802ae569bf"], 0x20}}, 0x0) 2m22.089724595s ago: executing program 2 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) write$tun(r1, &(0x7f0000000340)={@void, @val={0x1, 0x1, 0xa1, 0x7, 0x20, 0x8}, @arp=@generic={0x133, 0xf8, 0x6, 0xa, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, "2cdd66a0b1cc5dbd2274", @local, "c0aa819ff0c1"}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a0000021c000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r5, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xd}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x40}, 0x1, 0x0, 0x0, 0x1000}, 0x44005) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) close(0x3) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 2m12.164423457s ago: executing program 33 (id=1429): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000120000002400000008000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f00000000c0)='rpc_request\x00', r0, 0x0, 0x5}, 0x18) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="050000000000000073117000000000008510000002000000850000000500010095000000000000009500a505000000009e3c5012d001cd60cd367e723983fe12f001bbc74ec6009f7b78abf5d31bb8b9a7ffbe741a957146d6366d93f6c2a3ea91921bac7551cf105c2b71be23f6099b4811193b2a22b41308da5c4ea5c4d0e798527ebb720848ba65d359070b5a092f6f5f7e65c0ef1f6ad70c1f18d5508ec353876a032f8b0674bc194ad2073619bf3b1beeae23884eb2aacbe52fd0d2bb7fa0a07d15142c915f6f9613"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) 2m3.223931337s ago: executing program 4 (id=1241): bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xca, &(0x7f0000000700)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "11a8bc", 0x94, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @local, {[@dstopts={0xff, 0xe, '\x00', [@generic={0x40, 0x19, "dd29ad96da6c2ab37a59df56c08a6e35c2f6495b3bcbee2e69"}, @calipso={0x7, 0x50, {0x0, 0x12, 0x63, 0xff, [0xfffffffffffffffa, 0x0, 0x6, 0x0, 0x6, 0x1, 0x400, 0xffffffffffffffd7, 0x5]}}, @enc_lim={0x4, 0x1, 0xf}, @generic={0x6}]}], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000080)=0xd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x83}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="06"], 0x9) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000540)=""/252, 0xfc, 0x0, &(0x7f0000000080)=""/76, 0x4c}}, 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124b00000000006113bb0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa7664012d42961e1445ce83def332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5bb6f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a976774"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 2m1.91198462s ago: executing program 2 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) write$tun(r1, &(0x7f0000000340)={@void, @val={0x1, 0x1, 0xa1, 0x7, 0x20, 0x8}, @arp=@generic={0x133, 0xf8, 0x6, 0xa, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, "2cdd66a0b1cc5dbd2274", @local, "c0aa819ff0c1"}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a0000021c000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r5, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xd}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x40}, 0x1, 0x0, 0x0, 0x1000}, 0x44005) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) close(0x3) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 2m0.235350957s ago: executing program 3 (id=924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001500000000000000000000000800120002000200000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000ac14140000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000010006"], 0xa8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1a2275248918d07d48ffe30a30c49d8e8988634f533821c9c4a74708bc19017d47e5a70f964ace511ccb338e48a40535ba2ab105ce9cebd6371d0d6645cb2b3ffcaef542595d49421e8c14b543cb78f9bc3f8c8394ba3e55b26fdf2d33b3002049bcdf5335a3b549a954be2d05ed9f9c0d6118adbba0f47bc09d2b8bba3c29accc8e4f698e0dbf69802ae569bf"], 0x20}}, 0x0) 1m36.035286987s ago: executing program 4 (id=1241): bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xca, &(0x7f0000000700)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "11a8bc", 0x94, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @local, {[@dstopts={0xff, 0xe, '\x00', [@generic={0x40, 0x19, "dd29ad96da6c2ab37a59df56c08a6e35c2f6495b3bcbee2e69"}, @calipso={0x7, 0x50, {0x0, 0x12, 0x63, 0xff, [0xfffffffffffffffa, 0x0, 0x6, 0x0, 0x6, 0x1, 0x400, 0xffffffffffffffd7, 0x5]}}, @enc_lim={0x4, 0x1, 0xf}, @generic={0x6}]}], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000080)=0xd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x83}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="06"], 0x9) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000540)=""/252, 0xfc, 0x0, &(0x7f0000000080)=""/76, 0x4c}}, 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m33.788551261s ago: executing program 2 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) write$tun(r1, &(0x7f0000000340)={@void, @val={0x1, 0x1, 0xa1, 0x7, 0x20, 0x8}, @arp=@generic={0x133, 0xf8, 0x6, 0xa, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, "2cdd66a0b1cc5dbd2274", @local, "c0aa819ff0c1"}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a0000021c000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r5, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xd}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x40}, 0x1, 0x0, 0x0, 0x1000}, 0x44005) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) close(0x3) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 1m32.720845244s ago: executing program 3 (id=924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001500000000000000000000000800120002000200000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000ac14140000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000010006"], 0xa8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1a2275248918d07d48ffe30a30c49d8e8988634f533821c9c4a74708bc19017d47e5a70f964ace511ccb338e48a40535ba2ab105ce9cebd6371d0d6645cb2b3ffcaef542595d49421e8c14b543cb78f9bc3f8c8394ba3e55b26fdf2d33b3002049bcdf5335a3b549a954be2d05ed9f9c0d6118adbba0f47bc09d2b8bba3c29accc8e4f698e0dbf69802ae569bf"], 0x20}}, 0x0) 1m12.312075541s ago: executing program 4 (id=1241): bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xca, &(0x7f0000000700)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "11a8bc", 0x94, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @local, {[@dstopts={0xff, 0xe, '\x00', [@generic={0x40, 0x19, "dd29ad96da6c2ab37a59df56c08a6e35c2f6495b3bcbee2e69"}, @calipso={0x7, 0x50, {0x0, 0x12, 0x63, 0xff, [0xfffffffffffffffa, 0x0, 0x6, 0x0, 0x6, 0x1, 0x400, 0xffffffffffffffd7, 0x5]}}, @enc_lim={0x4, 0x1, 0xf}, @generic={0x6}]}], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000080)=0xd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x83}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="06"], 0x9) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000540)=""/252, 0xfc, 0x0, &(0x7f0000000080)=""/76, 0x4c}}, 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m4.285350363s ago: executing program 3 (id=924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001500000000000000000000000800120002000200000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000ac14140000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000010006"], 0xa8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1a2275248918d07d48ffe30a30c49d8e8988634f533821c9c4a74708bc19017d47e5a70f964ace511ccb338e48a40535ba2ab105ce9cebd6371d0d6645cb2b3ffcaef542595d49421e8c14b543cb78f9bc3f8c8394ba3e55b26fdf2d33b3002049bcdf5335a3b549a954be2d05ed9f9c0d6118adbba0f47bc09d2b8bba3c29accc8e4f698e0dbf69802ae569bf"], 0x20}}, 0x0) 59.242036558s ago: executing program 2 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) write$tun(r1, &(0x7f0000000340)={@void, @val={0x1, 0x1, 0xa1, 0x7, 0x20, 0x8}, @arp=@generic={0x133, 0xf8, 0x6, 0xa, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, "2cdd66a0b1cc5dbd2274", @local, "c0aa819ff0c1"}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a0000021c000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r5, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xd}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x40}, 0x1, 0x0, 0x0, 0x1000}, 0x44005) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) close(0x3) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 54.034908454s ago: executing program 6 (id=1687): setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)=@req={0x3fc}, 0x10) r0 = socket(0x1e, 0x4, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) r1 = syz_genetlink_get_family_id$nl802154(0x0, 0xffffffffffffffff) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r2, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r2, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x48) r4 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000002440)={0x0, 0x0, &(0x7f0000002400)={&(0x7f0000002080)={0x18, r7, 0xd01, 0x0, 0x0, {}, [@TIPC_NLA_MEDIA={0x4}]}, 0x18}}, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x2, 0x0, 0x0, {0x0, 0x0, 0x6a00}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x0, 0x2}, 0x2, r8}}]}, {0x4, 0xa}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x8000400, 0xfffffff7}, 0x3}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) sendmmsg$inet(r2, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f00000002c0)="68377863ac6ea61666eaa696435a75f1626fe3a3acedcaf71527ff51d446daac757559d2d6fc2b90952355ec6c61d718c91784312b1b4771888a0811895b02ffb658934b0bbd6466c9cc04cc7252f1f1deea5a8b9c6797c8f1263db526cf88899f7ecab544662eb34743cefb660a78cb9468d2900b3cda4cca9d89ab6d341d145acf249276dda272407bc98d9e5431316d468b9e4750f2316589dc4de3157592d27fd723a512c85b08035842b75ec422346f9696f4bb3226b0ca75d135ebd8cae46fb83b71c103e1fdcb1934fd1d28b4916abe2c44e26ea72be426c27052e816212096000155788943b846746ccb492175fc9e01", 0xf4}, {&(0x7f00000003c0)="5453b4b759f9d4f4f33bda880b70e0dadde06223919f4585429ef69078a4956f646ea03bfd4c090a003c01f32b1a175baf38c1eb4572c8b372a4cf9128062e58ff575546876a2804144c3aea98c4a3533396f87e860de8c66bceb0e6b387ec853b7e91c57587d38436637e702ae18eeccefdcd7a3cdd7bfc327b5d619b57d56afe1628b65e2948af5ee0e3f52746a5aff58bb7c6d253a58bf745584d1bc19fe5e42b5534eab9e9d2587b413e81f68b60f56130f82b327f5fe900e3e107bc6b783d1d23a056426d6502133386b51e657046c1c43a2a2c4a7611ee6592a5ee08700d24d832163b3def1f", 0xe9}, {&(0x7f0000000040)="f96be6c391f1f8b23ae44a70a75f4a5ed0e013f80882907ab089ee65d16a6c6f5c666dad31257fb48b66d940a3819d0809971ea8274a65901b", 0x39}, {&(0x7f0000000740)="f52ec22aafecc37a6d9995f1afb5c1727f223f9b84451a110b1dfbf19cc7ed183ba93f6d55645001887fc999262b9c938e22ef5ec46b4b1b535060dcca5cff1f0e5a1d9b32cef2b6e0a61af7968dc1759c4d901867d7d6e9f2521f6a1578e1cc2fbf58837a2633c0b8299192718c61227412dafd01e8", 0x76}, {&(0x7f0000000200)="057322e18609ed78266492c2a2ae3f0c0f3f6394c53de2727898d209dcb274efec9fc9995189ead7bf00148d091675fa045479985e4f644d258d0aa4a69618eb08ba045907a549ed83b88863c73d859acf1d16d599c71547d018", 0x5a}], 0x5}}, {}], 0x2, 0xc0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x20, r10, 0x301, 0xfffffffc, 0x0, {0x2b}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r9, &(0x7f0000000640)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000005c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1cecd0bf", @ANYRES16=r1, @ANYBLOB="08002dbd7000fcdbdf252100000008000300", @ANYRES32=r11, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4810) setsockopt$sock_int(r2, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r2, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 52.530475086s ago: executing program 6 (id=1689): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000080), r1) sendmsg$IEEE802154_ASSOCIATE_REQ(r0, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x14, r2, 0x1}, 0x14}}, 0x0) sendmsg$IEEE802154_ADD_IFACE(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x68, r2, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0002}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy1\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}]}, 0x68}, 0x1, 0x0, 0x0, 0x4000}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) r5 = socket(0x10, 0x803, 0x0) r6 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_opts(r6, 0x0, 0x53, 0x0, &(0x7f0000002e40)) sendmsg$SMC_PNETID_GET(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={0x0, 0x14}}, 0x0) syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r7 = socket(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, 0x0, 0x0) ioctl$BTRFS_IOC_DEV_REPLACE(r3, 0xca289435, &(0x7f0000001040)={0x2, 0x2, @status={[0x8, 0x80, 0x5, 0x9, 0x40000000000000, 0xfffffffffffffff0]}, [0x8, 0x7, 0x1, 0x10001, 0x8, 0x100, 0x0, 0x9, 0xb, 0x3, 0x6, 0x2, 0x9, 0x4, 0x4d6949, 0x1000, 0x8, 0x1ff, 0x101, 0x5, 0x6, 0x100000001, 0x8000000000000001, 0x7, 0x2d, 0x4, 0x5, 0x1, 0xfffffffffffff9fd, 0x0, 0x4, 0x80, 0x371f, 0x4, 0x8, 0x6e823677, 0x0, 0xa, 0x5, 0x7, 0x0, 0x1, 0x8000000000000000, 0x100, 0xffff, 0x9, 0x5a5, 0x4, 0x5, 0x4, 0x10000, 0x2c85, 0x0, 0x0, 0x2, 0x2000200, 0x100000000, 0x3, 0x4, 0x50d4, 0x8, 0x1, 0x2, 0x8000]}) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_WOL_SET(r7, 0x0, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r8, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r8, 0x84, 0x75, &(0x7f0000000000)={0x0, 0xcc}, 0x8) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000280)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r8, &(0x7f0000001000)=[{{&(0x7f0000000080)={0xa, 0x4e23, 0x0, @loopback, 0x280020}, 0x1c, &(0x7f00000000c0)=[{&(0x7f0000000100)="90", 0x1}], 0x1}}], 0x1, 0x20008050) socket$inet6(0xa, 0x3, 0x8000000003c) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r8, 0x84, 0x77, &(0x7f0000000040)=ANY=[@ANYRES32=0x0, @ANYRES16, @ANYRES16=r8], 0x1000f) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000000)={0x60, r4, 0x1, 0x0, 0x0, {{}, {@void, @val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'pim6reg0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x6}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "31329eae551326051c0ecba1df0ef9cc9415b343831f26fe"}, @NL80211_ATTR_MNTR_FLAGS={0xc, 0x17, 0x0, 0x1, [@NL80211_MNTR_FLAG_CONTROL={0x4}, @NL80211_MNTR_FLAG_OTHER_BSS={0x4}]}]]}, 0x60}}, 0x0) 52.238447737s ago: executing program 6 (id=1691): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f0000002140)=@raw={'raw\x00', 0x3c1, 0x3, 0x398, 0x0, 0xc8, 0x8, 0x170, 0x5803, 0x2c8, 0x2e8, 0x2e8, 0x2c8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@empty, @private1, [], [], 'pim6reg0\x00', 'wlan0\x00'}, 0x0, 0x128, 0x170, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@time={{0x38}}, @common=@dst={{0x48, 'dst\x00', 0x2}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}, {{@uncond, 0x0, 0x138, 0x158, 0x0, {}, [@common=@unspec=@rateest={{0x68}, {'dvmrp0\x00', 'batadv_slave_1\x00'}}, @inet=@rpfilter={{0x28}}]}, @unspec=@NOTRACK={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3f8) r3 = syz_genetlink_get_family_id$team(&(0x7f00000044c0), 0xffffffffffffffff) recvmsg(r0, &(0x7f0000000280)={&(0x7f0000000140)=@l2tp={0x2, 0x0, @local}, 0x80, &(0x7f0000000f40)=[{&(0x7f0000000380)=""/213, 0xd5}, {&(0x7f0000000480)=""/181, 0xb5}, {&(0x7f0000000540)=""/151, 0x97}, {&(0x7f0000000200)=""/33, 0x21}, {&(0x7f0000000600)=""/225, 0xe1}, {&(0x7f0000000700)=""/212, 0xd4}, {&(0x7f0000000e40)=""/198, 0xc6}, {&(0x7f0000000800)=""/182, 0xb6}], 0x8, &(0x7f0000000fc0)=""/213, 0xd5}, 0x10002) r4 = socket$nl_route(0x10, 0x3, 0x0) socket$l2tp6(0xa, 0x2, 0x73) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x80, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r6, @ANYRES32=r7, @ANYBLOB="02"], 0x10) socket$l2tp6(0xa, 0x2, 0x73) r8 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="380000005500e502000000000000000007000000", @ANYRES32=r9, @ANYBLOB="20000100", @ANYRES32=0x0, @ANYBLOB="0100"/11], 0x38}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000004700)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r0, &(0x7f0000004bc0)={0x0, 0x0, &(0x7f0000004b80)={&(0x7f00000002c0)=ANY=[@ANYBLOB="a4000000", @ANYRES16=r3, @ANYBLOB="050427bd7000fcdbdf250100000008000100", @ANYRES32=r10, @ANYBLOB="8800028040000100240001006d6f6465000000000000000000000000000000000200000000000000000000000500030005000000100004006c6f616462616c616e63650044000100240001006d6f6465000000000000000000000000000000000000000000000000000000000500030005000000"], 0xa4}, 0x1, 0x0, 0x0, 0x4000401}, 0x44084) 51.574127065s ago: executing program 6 (id=1694): r0 = syz_init_net_socket$x25(0x9, 0x5, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000080), &(0x7f00000000c0)=0xc) (async) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r1, 0x0, 0x0}, 0x20) (async) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000000)) unshare(0x20040600) (async) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r2, 0x84, 0x7c, &(0x7f0000000940)={0x0, 0x9}, 0xfc6d) ioctl$SIOCX25GFACILITIES(r0, 0x89e2, &(0x7f0000000040)) 51.162767239s ago: executing program 6 (id=1697): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e21, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @encap={0x1c, 0x4, {0x2}}]}, 0x170}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@flushpolicy={0x174, 0x1d, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@policy_type={0xa}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, @in=@rand_addr=0x64010102, 0x0, 0xa}}, @srcaddr={0x14, 0xd, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @algo_aead={0x117, 0x12, {{'morus1280-avx2\x00'}, 0x658, 0x60, "f95b319f54efb4294cc546991ea795b2c912dbf4b093a0244d69157ee759b3a374d725e78b62fe114f579cfb4062e61fedb76efb44164d435ad571b25cc98ea1ca73fbba5702f7f99e2ddb7f48d53830ae735b095131fdcac63bebf4f111d1ce99986bab9e1e37375435f475c2368ee282ebd00e294f40a8027a474371f2727c5213a859c06526f288a7d7989706c8c4f0d66a2f310c003008e99bc4386fa17c0c2e063fc78eb9d3c8fb6599a4952db21a816c2490d663961e94c826ec9c198d24cd6144220d77b3928c8c"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000055}, 0x80) 39.729059355s ago: executing program 4 (id=1241): bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xca, &(0x7f0000000700)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "11a8bc", 0x94, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @local, {[@dstopts={0xff, 0xe, '\x00', [@generic={0x40, 0x19, "dd29ad96da6c2ab37a59df56c08a6e35c2f6495b3bcbee2e69"}, @calipso={0x7, 0x50, {0x0, 0x12, 0x63, 0xff, [0xfffffffffffffffa, 0x0, 0x6, 0x0, 0x6, 0x1, 0x400, 0xffffffffffffffd7, 0x5]}}, @enc_lim={0x4, 0x1, 0xf}, @generic={0x6}]}], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000080)=0xd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x83}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="06"], 0x9) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000540)=""/252, 0xfc, 0x0, &(0x7f0000000080)=""/76, 0x4c}}, 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 38.314857608s ago: executing program 2 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) write$tun(r1, &(0x7f0000000340)={@void, @val={0x1, 0x1, 0xa1, 0x7, 0x20, 0x8}, @arp=@generic={0x133, 0xf8, 0x6, 0xa, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, "2cdd66a0b1cc5dbd2274", @local, "c0aa819ff0c1"}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a0000021c000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r5, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xd}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x40}, 0x1, 0x0, 0x0, 0x1000}, 0x44005) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) close(0x3) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 36.91628699s ago: executing program 3 (id=924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001500000000000000000000000800120002000200000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000ac14140000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000010006"], 0xa8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1a2275248918d07d48ffe30a30c49d8e8988634f533821c9c4a74708bc19017d47e5a70f964ace511ccb338e48a40535ba2ab105ce9cebd6371d0d6645cb2b3ffcaef542595d49421e8c14b543cb78f9bc3f8c8394ba3e55b26fdf2d33b3002049bcdf5335a3b549a954be2d05ed9f9c0d6118adbba0f47bc09d2b8bba3c29accc8e4f698e0dbf69802ae569bf"], 0x20}}, 0x0) 27.439185939s ago: executing program 6 (id=1697): socket$nl_xfrm(0x10, 0x3, 0x6) (async) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a00)=@newsa={0x170, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in6=@private1}, {@in=@dev, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0xb}, {}, {}, {}, 0x0, 0x0, 0xa, 0x1}, [@algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}}}, @encap={0x1c, 0x20, {0x0, 0x4e21, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}}, @encap={0x1c, 0x4, {0x2}}]}, 0x170}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000040)={&(0x7f00000001c0)=@flushpolicy={0x174, 0x1d, 0x400, 0x70bd2d, 0x25dfdbfb, "", [@policy_type={0xa}, @user_kmaddress={0x2c, 0x13, {@in6=@dev={0xfe, 0x80, '\x00', 0x1d}, @in=@rand_addr=0x64010102, 0x0, 0xa}}, @srcaddr={0x14, 0xd, @in6=@private2={0xfc, 0x2, '\x00', 0x1}}, @algo_aead={0x117, 0x12, {{'morus1280-avx2\x00'}, 0x658, 0x60, "f95b319f54efb4294cc546991ea795b2c912dbf4b093a0244d69157ee759b3a374d725e78b62fe114f579cfb4062e61fedb76efb44164d435ad571b25cc98ea1ca73fbba5702f7f99e2ddb7f48d53830ae735b095131fdcac63bebf4f111d1ce99986bab9e1e37375435f475c2368ee282ebd00e294f40a8027a474371f2727c5213a859c06526f288a7d7989706c8c4f0d66a2f310c003008e99bc4386fa17c0c2e063fc78eb9d3c8fb6599a4952db21a816c2490d663961e94c826ec9c198d24cd6144220d77b3928c8c"}}]}, 0x174}, 0x1, 0x0, 0x0, 0x4000055}, 0x80) 11.341538511s ago: executing program 4 (id=1241): bpf$TOKEN_CREATE(0x24, &(0x7f0000000300), 0x8) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xf, 0x3, &(0x7f0000001300)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0xca, &(0x7f0000000700)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "11a8bc", 0x94, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @dev}, @local, {[@dstopts={0xff, 0xe, '\x00', [@generic={0x40, 0x19, "dd29ad96da6c2ab37a59df56c08a6e35c2f6495b3bcbee2e69"}, @calipso={0x7, 0x50, {0x0, 0x12, 0x63, 0xff, [0xfffffffffffffffa, 0x0, 0x6, 0x0, 0x6, 0x1, 0x400, 0xffffffffffffffd7, 0x5]}}, @enc_lim={0x4, 0x1, 0xf}, @generic={0x6}]}], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x4}}}}}}}, 0x0) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f0000000000)=0x100000001, 0x4) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r1, 0x6, 0x18, &(0x7f0000000080)=0xd, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x2, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x4, 0x0, 0x1, 0x83}]}, &(0x7f0000000600)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r1, 0x6, 0x16, &(0x7f0000000340)=[@sack_perm, @mss, @sack_perm, @timestamp, @timestamp, @mss, @timestamp, @sack_perm], 0x20000000000000ec) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000001500)=ANY=[@ANYRES32, @ANYRES32=r0, @ANYBLOB="06"], 0x9) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000180)={r0, 0x20, &(0x7f0000000140)={&(0x7f0000000540)=""/252, 0xfc, 0x0, &(0x7f0000000080)=""/76, 0x4c}}, 0x10) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_FLUSH(r3, 0x29, 0xd1, 0x0, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0xe, 0x16, &(0x7f0000000340)=ANY=[@ANYBLOB="61124b00000000006113bb0000000000bf2000000000000007000000080000002d0301000000000095000000000000006926000000000000bf67000000000000150600000fff070067060000200000006a0200000ee60000bf050000000000003d350000000000006507000002000000070700004a0000000f75000000000000bf54000000000000070400000400f9ffad53010000000000840400000000000005000000000000009500000000000000db13d5d8b741f2cdaabc8383caf56b8c2b84a8d09535a157f9005bd38addaa65b925cd3ded25b8b9e2a095d2c51ef45c5588ec78c7f32946b17cecfe54c53ab530c58b67851b7e0e82452a083b98a6aa7664012d42961e1445ce83def332233b081df18961d6822d133bf72a4de1cc0800004537fc211576846ac629d1d93265ba474580047a9dc88de358ce795731891a2031de4e09740c64e5bb6f991ed4785a9773a433e0db9c1a7d4ab9d658ce9cfdb4db3bed62bcb2bc91ddcdfac2e6d4421c49fb6641cbf56914e76702f673b586c767030090a3967093b000e3806f825f1d0da2a304e06543b56d35235d78b7a7fe912971aab876022e96f5143b6234f5a6b701690b07fb664a44e22b72e843e7cf55f394cf75d1cd3ee79a25fb98cc45b3fde43e42e150d4a2fddd9a976774"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r2, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 10.09022039s ago: executing program 2 (id=586): r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x8c}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x88) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) write$tun(r1, &(0x7f0000000340)={@void, @val={0x1, 0x1, 0xa1, 0x7, 0x20, 0x8}, @arp=@generic={0x133, 0xf8, 0x6, 0xa, 0xa, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1c}, "2cdd66a0b1cc5dbd2274", @local, "c0aa819ff0c1"}}, 0x2e) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000080), 0xffffffffffffffff) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000580)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000380)={'wg1\x00'}) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$WG_CMD_SET_DEVICE(r7, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c020000", @ANYRES16=r5, @ANYBLOB="01000000000000000000010000001400020077673100000000000000000000000000f40108807000008048000980280000f8060001000a0000021c000200fe8000000000000000000000000000aa05000300000000001c000080060001000200000908000200e00000010500030000000000240001"], 0x21c}}, 0x0) sendmsg$WG_CMD_SET_DEVICE(r2, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x40, r5, 0x800, 0x70bd27, 0x25dfdbfe, {}, [@WGDEVICE_A_FWMARK={0x8, 0x7, 0xd}, @WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @b}]}, 0x40}, 0x1, 0x0, 0x0, 0x1000}, 0x44005) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000600)=@newtfilter={0x34, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0xfff3, 0x7}, {}, {0xa, 0x1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x4}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x40010) close(0x3) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000003e000701feffffff00000000047c000008004280040008000c000180060006"], 0x30}, 0x1, 0x0, 0x0, 0x4000c000}, 0xc000) 6.030880841s ago: executing program 3 (id=924): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="020d00001500000000000000000000000800120002000200000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000ac14140000000000000000000000000005000500000000000a00000000000000000000000000000000000000000000000000000000000000010006"], 0xa8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000080)=ANY=[@ANYBLOB="200000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1a2275248918d07d48ffe30a30c49d8e8988634f533821c9c4a74708bc19017d47e5a70f964ace511ccb338e48a40535ba2ab105ce9cebd6371d0d6645cb2b3ffcaef542595d49421e8c14b543cb78f9bc3f8c8394ba3e55b26fdf2d33b3002049bcdf5335a3b549a954be2d05ed9f9c0d6118adbba0f47bc09d2b8bba3c29accc8e4f698e0dbf69802ae569bf"], 0x20}}, 0x0) 2.431314957s ago: executing program 5 (id=1794): r0 = socket$vsock_stream(0x28, 0x1, 0x0) getsockopt(r0, 0x28, 0x5, &(0x7f0000000c80)=""/4085, &(0x7f0000000000)=0xff5) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket$vsock_stream(0x28, 0x1, 0x0) (async) getsockopt(r0, 0x28, 0x5, &(0x7f0000000c80)=""/4085, &(0x7f0000000000)=0xff5) (async) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000940)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) 2.330478181s ago: executing program 5 (id=1795): r0 = syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) ioctl$sock_SIOCGIFCONF(r0, 0x8912, &(0x7f0000000080)=@req={0x28, &(0x7f0000000040)={'bond_slave_0\x00', @ifru_map={0x5, 0x58, 0x0, 0x9, 0x2, 0xf8}}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e21}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="2800000021000100"], 0x28}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) preadv(r4, &(0x7f00000003c0)=[{&(0x7f0000000380)=""/21, 0x15}], 0x1, 0x13, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000017c0)=@newtaction={0xe98, 0x30, 0x25, 0x0, 0x0, {}, [{0xe84, 0x1, [@m_pedit={0xe80, 0x1, 0x0, 0x0, {{0xa}, {0xe54, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x30, 0x5, 0x0, 0x1, [{0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x14, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}]}, {0x4}]}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x800000}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe98}}, 0x0) 1.97163261s ago: executing program 5 (id=1796): syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x3f, 0x38, 0x65, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @local}, @time_exceeded={0x5, 0xea452954ff7d0934, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @empty, @loopback}, "001863718e9bf703"}}}}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$FOU_CMD_GET(r0, &(0x7f0000000300)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x28, r1, 0x1, 0x70bd2d, 0x25dfdbff, {}, [@FOU_ATTR_PORT={0x6, 0x1, 0x4e21}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_AF={0x5, 0x2, 0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x1}, 0xc010) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newqdisc={0x28, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0x2}}, [@TCA_STAB={0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$IPSET_CMD_ADD(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x10, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)={0x1c, 0x3, 0x6, 0x5, 0x0, 0x0, {0x5, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 359.058704ms ago: executing program 5 (id=1797): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000400)=@raw={'raw\x00', 0x3c1, 0x3, 0x458, 0x160, 0x4c, 0x1a, 0x160, 0x73, 0x388, 0x258, 0x258, 0x388, 0x258, 0x3, 0x0, {[{{@ipv6={@rand_addr=' \x01\x00', @local, [], [], 'wg2\x00', 'macvlan1\x00', {}, {}, 0x11}, 0x0, 0x130, 0x160, 0x0, {}, [@common=@inet=@multiport={{0x50}}, @common=@unspec=@time={{0x38}}]}, @common=@inet=@SET2={0x30, 'SET\x00', 0x2, {{}, {0x11}}}}, {{@uncond, 0x0, 0x100, 0x228, 0x0, {}, [@common=@inet=@dscp={{0x28}}, @common=@srh={{0x30}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:hald_var_run_t:s0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b8) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x2, &(0x7f0000000040)=0x9, 0x4) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) pselect6(0x2000, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x300}, 0x0, &(0x7f0000000100)={0x8}, 0x0, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x4, &(0x7f0000000540)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, [@kfunc={0x85, 0x0, 0x2, 0x0, 0x4}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x10, &(0x7f0000000080)=0x10001, 0x4) r3 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r3, 0x10e, 0xc, &(0x7f0000000040)={0x8604}, 0x10) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x7, 'veth0_macvtap\x00', {0x6}, 0x4}) r4 = socket$inet(0x2, 0x3, 0x33) getsockopt$inet_mreqsrc(r4, 0x0, 0x53, &(0x7f0000000000)={@dev, @local, @broadcast}, &(0x7f0000000040)=0x28) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a006da800000000000000001c000040"], 0x1c}}, 0x0) sendmmsg$inet(r1, &(0x7f00000005c0)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @remote}, 0x10, 0x0}}], 0x1, 0x0) 149.414381ms ago: executing program 5 (id=1798): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$inet_udplite(0x2, 0x2, 0x88) write(0xffffffffffffffff, &(0x7f0000000000)='\f\x00\x00', 0x3) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000100)={r3, 0x671a}, 0x8) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x0) 0s ago: executing program 5 (id=1799): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f0000000580)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000000700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$kcm(0x2, 0x922000000001, 0x106) setsockopt$sock_attach_bpf(r1, 0x1, 0xd, 0x0, 0x42) socket$netlink(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @rand_addr=0x64010102}}, 0x1c) shutdown(r3, 0x1) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r3, 0x84, 0x78, &(0x7f0000001b00), 0x4) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) (async) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000047c0)=ANY=[@ANYBLOB="140000003a00010100000000000204000a"], 0x14}}, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) (async) bind$alg(r4, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$unix(r5, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000005c0)="bb57170b6e2c61a6b10d245fbc24caebc3bc95b0ed67b92d253f46276c26e38cb044ae76030b53589696991185b6ecf0b2ebfefa6c7bb3c2c60b4c67c3e19aacb69b994d3b19d49c072aaa3bee8318669ce42d5f2203919d8ad9a6888ea63063877bd53c055c5ace6c23b2c24e", 0x6d}, {&(0x7f0000000640)="8c3ecceab483e1fa2fff0cc30e910c965f9a9232277a4682cc67d0c34488697a03aa55d391f06efd4fce8209e19480ded98a1f", 0x33}], 0x2, 0x0, 0x0, 0x80}}], 0x1, 0x0) recvmmsg(r2, &(0x7f0000003700)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000280)=""/4085, 0xff5}], 0x1}}], 0x4000000000001a3, 0x140, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xfffffffffffffeba}}}]}]}, 0x98}}, 0x0) (async) sendmsg$nl_route_sched(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x8}]}]}, {0x4}, {0xc}, {0xfffffffffffffeba}}}]}]}, 0x98}}, 0x0) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={r7, 0x43, 0xfffffffffffffffe}, 0x1d) kernel console output (not intermixed with test programs): 0:50:50:50:50 [ 354.413191][ T12] bridge_slave_1: left allmulticast mode [ 354.439617][ T12] bridge_slave_1: left promiscuous mode [ 354.445607][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.482933][ T12] bridge_slave_0: left allmulticast mode [ 354.488683][ T12] bridge_slave_0: left promiscuous mode [ 354.523876][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 354.756873][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 354.785901][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 354.810837][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 354.820569][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 354.848132][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 355.252470][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.267325][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.280027][ T12] bond0 (unregistering): Released all slaves [ 355.425845][T10622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.434037][T10622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.765351][T12351] veth0_vlan: entered promiscuous mode [ 355.784331][ T12] hsr_slave_0: left promiscuous mode [ 355.791376][ T12] hsr_slave_1: left promiscuous mode [ 355.797353][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.805685][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.814751][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.822755][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.849173][ T12] veth1_macvtap: left promiscuous mode [ 355.854826][ T12] veth0_macvtap: left promiscuous mode [ 355.862479][ T12] veth1_vlan: left promiscuous mode [ 355.867923][ T12] veth0_vlan: left promiscuous mode [ 356.270445][T12460] blkio.reset_stats is deprecated [ 356.525000][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 356.547443][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 356.557575][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 356.569583][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 356.582441][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 356.913196][ T12] team0 (unregistering): Port device team_slave_1 removed [ 356.970013][ T5842] Bluetooth: hci0: command tx timeout [ 356.994698][ T12] team0 (unregistering): Port device team_slave_0 removed [ 357.351457][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 357.367657][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 357.378331][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 357.396877][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 357.405132][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 357.765217][T12351] veth1_vlan: entered promiscuous mode [ 358.251443][T12351] veth0_macvtap: entered promiscuous mode [ 358.434510][T12351] veth1_macvtap: entered promiscuous mode [ 358.485570][T12452] chnl_net:caif_netlink_parms(): no params data found [ 358.529959][T12351] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 358.639485][ T5844] Bluetooth: hci2: command tx timeout [ 358.693152][T12351] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 358.914618][T12351] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.939970][T12351] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.948750][T12351] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.958677][T12351] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 358.993595][T12464] chnl_net:caif_netlink_parms(): no params data found [ 359.039405][ T5844] Bluetooth: hci0: command tx timeout [ 359.135973][T12452] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.155689][T12452] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.170470][T12452] bridge_slave_0: entered allmulticast mode [ 359.178763][T12452] bridge_slave_0: entered promiscuous mode [ 359.226567][T12452] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.242491][T12452] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.254143][T12452] bridge_slave_1: entered allmulticast mode [ 359.263456][T12452] bridge_slave_1: entered promiscuous mode [ 359.271424][T12489] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1478'. [ 359.332501][T12461] chnl_net:caif_netlink_parms(): no params data found [ 359.403701][ T12] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.454452][T12489] 8021q: adding VLAN 0 to HW filter on device bond4 [ 359.485422][T12452] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 359.520727][ T5844] Bluetooth: hci3: command tx timeout [ 359.560648][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1479'. [ 359.603185][T12452] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 359.647703][T12492] bridge_slave_1: left allmulticast mode [ 359.654118][T12492] bridge_slave_1: left promiscuous mode [ 359.660634][T12492] bridge0: port 2(bridge_slave_1) entered disabled state [ 359.672128][T12492] bridge_slave_0: left allmulticast mode [ 359.678074][T12492] bridge_slave_0: left promiscuous mode [ 359.692118][T12492] bridge0: port 1(bridge_slave_0) entered disabled state [ 359.826883][ T12] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 359.832188][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1479'. [ 359.922490][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1479'. [ 359.964819][T12452] team0: Port device team_slave_0 added [ 359.985823][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1479'. [ 360.058448][ T12] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.076813][T12452] team0: Port device team_slave_1 added [ 360.105013][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1479'. [ 360.129149][T12461] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.137743][T12461] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.146210][T12461] bridge_slave_0: entered allmulticast mode [ 360.154490][T12461] bridge_slave_0: entered promiscuous mode [ 360.165592][T12461] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.173158][T12461] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.180725][T12461] bridge_slave_1: entered allmulticast mode [ 360.188439][T12461] bridge_slave_1: entered promiscuous mode [ 360.231138][T12464] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.238329][T12464] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.246830][T12464] bridge_slave_0: entered allmulticast mode [ 360.254835][T12464] bridge_slave_0: entered promiscuous mode [ 360.267404][T12492] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1479'. [ 360.296735][ T12] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.376720][T12452] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.383899][T12452] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.410590][T12452] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.422939][T12464] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.437540][T12464] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.445218][T12464] bridge_slave_1: entered allmulticast mode [ 360.454579][T12464] bridge_slave_1: entered promiscuous mode [ 360.499820][T10622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.509483][T10622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.554601][T12461] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.570730][T12461] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.586840][T12452] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.594164][T12452] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.620910][T12452] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.675479][T12502] dvmrp0: entered allmulticast mode [ 360.719353][ T5844] Bluetooth: hci2: command tx timeout [ 360.784822][T12464] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.808293][T12464] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.850607][T12461] team0: Port device team_slave_0 added [ 360.931758][T12461] team0: Port device team_slave_1 added [ 360.999495][T12464] team0: Port device team_slave_0 added [ 361.026911][T12508] veth0_to_hsr: invalid flags given to default FDB implementation [ 361.086027][T12452] hsr_slave_0: entered promiscuous mode [ 361.093988][T12452] hsr_slave_1: entered promiscuous mode [ 361.101219][T12452] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 361.108863][T12452] Cannot create hsr debugfs directory [ 361.119185][ T5844] Bluetooth: hci0: command tx timeout [ 361.152130][ T3015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.177077][T12464] team0: Port device team_slave_1 added [ 361.205210][ T3015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.227498][T12461] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.234644][T12461] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.262856][T12461] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.278820][T12461] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.287815][T12461] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.314610][T12461] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.406419][T12464] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 361.416311][T12464] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.444760][T12464] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 361.523305][T12513] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1485'. [ 361.564505][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.601303][ T5844] Bluetooth: hci3: command tx timeout [ 361.609272][T12464] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 361.616604][T12464] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 361.645306][T12464] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 361.848887][T12513] team0: Port device team_slave_0 removed [ 361.905598][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.063123][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.096753][T12461] hsr_slave_0: entered promiscuous mode [ 362.121815][T12461] hsr_slave_1: entered promiscuous mode [ 362.140802][T12461] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.161342][T12461] Cannot create hsr debugfs directory [ 362.238399][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.265644][T12529] netlink: 'syz.5.1487': attribute type 1 has an invalid length. [ 362.314305][T12464] hsr_slave_0: entered promiscuous mode [ 362.324903][T12464] hsr_slave_1: entered promiscuous mode [ 362.333603][T12464] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 362.343719][T12464] Cannot create hsr debugfs directory [ 362.694690][T12532] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1488'. [ 362.800427][ T5844] Bluetooth: hci2: command tx timeout [ 363.199918][ T5844] Bluetooth: hci0: command tx timeout [ 363.393675][ T12] bridge_slave_1: left allmulticast mode [ 363.401116][ T12] bridge_slave_1: left promiscuous mode [ 363.410609][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.428544][ T12] bridge_slave_0: left allmulticast mode [ 363.436631][ T12] bridge_slave_0: left promiscuous mode [ 363.443216][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.461943][ T12] bridge_slave_1: left allmulticast mode [ 363.467673][ T12] bridge_slave_1: left promiscuous mode [ 363.479254][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 363.496477][ T12] bridge_slave_0: left allmulticast mode [ 363.502383][ T12] bridge_slave_0: left promiscuous mode [ 363.508194][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 363.680032][ T5844] Bluetooth: hci3: command tx timeout [ 364.286969][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.306700][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.318292][ T12] bond0 (unregistering): Released all slaves [ 364.455611][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 364.468573][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 364.481806][ T12] bond0 (unregistering): Released all slaves [ 364.879306][ T5842] Bluetooth: hci2: command tx timeout [ 365.307426][T12452] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 365.360458][T12452] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 365.361706][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1497'. [ 365.427937][T12568] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1497'. [ 365.458681][T12572] netlink: 14 bytes leftover after parsing attributes in process `syz.6.1497'. [ 365.475299][T12568] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1497'. [ 365.546240][T12452] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 365.759320][ T5842] Bluetooth: hci3: command tx timeout [ 366.085356][T12572] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 366.118695][T12572] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 366.141705][T12572] bond0 (unregistering): Released all slaves [ 366.282160][T12452] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 366.397094][T12591] netlink: 36 bytes leftover after parsing attributes in process `syz.6.1500'. [ 366.667805][T12598] netlink: 'syz.6.1501': attribute type 11 has an invalid length. [ 366.747717][T12598] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1501'. [ 366.791418][T12598] netlink: 'syz.6.1501': attribute type 11 has an invalid length. [ 366.816458][T12598] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1501'. [ 366.841945][ T12] hsr_slave_0: left promiscuous mode [ 366.888476][ T5842] Bluetooth: hci5: command 0x0406 tx timeout [ 366.912753][ T12] hsr_slave_1: left promiscuous mode [ 366.923135][ T5888] hid-generic 0005:0004:1010.0003: item fetching failed at offset 0/1 [ 366.930256][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 366.938903][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 366.949325][ T5888] hid-generic 0005:0004:1010.0003: probe with driver hid-generic failed with error -22 [ 367.025031][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.045515][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.126809][ T12] hsr_slave_0: left promiscuous mode [ 367.169160][ T12] hsr_slave_1: left promiscuous mode [ 367.180502][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 367.216222][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 367.246759][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 367.272825][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 367.411512][ T12] veth1_macvtap: left promiscuous mode [ 367.423832][ T12] veth0_macvtap: left promiscuous mode [ 367.433688][ T12] veth1_vlan: left promiscuous mode [ 367.440497][ T12] veth0_vlan: left promiscuous mode [ 367.463446][ T12] veth1_macvtap: left promiscuous mode [ 367.489370][ T12] veth0_macvtap: left promiscuous mode [ 367.498741][ T12] veth1_vlan: left promiscuous mode [ 367.519543][ T12] veth0_vlan: left promiscuous mode [ 368.774696][ T12] team0 (unregistering): Port device team_slave_1 removed [ 368.878635][ T12] team0 (unregistering): Port device team_slave_0 removed [ 370.252399][ T12] team0 (unregistering): Port device team_slave_1 removed [ 370.312697][ T12] team0 (unregistering): Port device team_slave_0 removed [ 371.585398][T12691] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1511'. [ 371.610202][T12461] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 371.628424][T12693] ipt_REJECT: TCP_RESET invalid for non-tcp [ 371.634397][T12691] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1511'. [ 371.650473][T12461] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 371.672865][T12694] netlink: 'syz.6.1511': attribute type 10 has an invalid length. [ 371.717272][T12688] dvmrp0: entered allmulticast mode [ 371.775485][T12461] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 371.805461][T12693] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1512'. [ 371.819904][T12693] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1512'. [ 371.841294][T12694] bridge0: port 3(team0) entered blocking state [ 371.860728][T12694] bridge0: port 3(team0) entered disabled state [ 371.886733][T12694] team0: entered allmulticast mode [ 371.909407][T12694] team_slave_0: entered allmulticast mode [ 371.915254][T12694] team_slave_1: entered allmulticast mode [ 371.936556][T12694] team0: entered promiscuous mode [ 371.969418][T12694] team_slave_0: entered promiscuous mode [ 371.975432][T12694] team_slave_1: entered promiscuous mode [ 371.993243][T12694] bridge0: port 3(team0) entered blocking state [ 371.999762][T12694] bridge0: port 3(team0) entered forwarding state [ 372.063720][T12461] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 372.308445][T12452] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.332494][T12709] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 372.391325][T12452] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.423610][T12715] netlink: zone id is out of range [ 372.452140][T12715] netlink: zone id is out of range [ 372.496965][T12715] netlink: zone id is out of range [ 372.535071][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.542007][T12715] netlink: zone id is out of range [ 372.542340][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.555784][T12715] netlink: zone id is out of range [ 372.581625][T12719] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.592451][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.599771][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 372.637344][T12715] netlink: zone id is out of range [ 372.646263][T12715] netlink: zone id is out of range [ 372.674627][T12715] netlink: zone id is out of range [ 372.696268][T12715] netlink: zone id is out of range [ 372.738527][T12715] netlink: zone id is out of range [ 372.958066][T12461] 8021q: adding VLAN 0 to HW filter on device bond0 [ 373.008169][T12464] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 373.031328][T12464] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 373.078789][T12723] tipc: Started in network mode [ 373.105098][T12723] tipc: Node identity 8272d9349ee4, cluster identity 4711 [ 373.124377][T12723] tipc: Enabled bearer , priority 0 [ 373.136301][T12464] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 373.164029][T12464] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 373.232972][T12729] syzkaller0: entered promiscuous mode [ 373.238553][T12729] syzkaller0: entered allmulticast mode [ 373.245621][T12729] tipc: Resetting bearer [ 373.284491][T12722] tipc: Resetting bearer [ 374.149443][ T47] tipc: Node number set to 479648052 [ 374.329483][ T5844] Bluetooth: hci0: command 0x0c20 tx timeout [ 375.119969][T12722] tipc: Disabling bearer [ 375.154666][T12461] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.217463][T12737] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1521'. [ 375.260369][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.267609][ T5910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.323723][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.331013][ T5910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.383885][T12742] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.417600][T12452] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 375.520756][T12744] syz_tun: tun_net_xmit 1514 [ 375.525949][T12744] syz_tun: tun_net_xmit 1182 [ 375.695489][T12749] tipc: Enabled bearer , priority 10 [ 375.778809][T12464] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.901517][T12464] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.965639][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.972880][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.034062][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.041501][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.522365][ T13] bridge_slave_1: left allmulticast mode [ 376.528117][ T13] bridge_slave_1: left promiscuous mode [ 376.557733][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 376.647962][ T13] bridge_slave_0: left allmulticast mode [ 376.667732][ T13] bridge_slave_0: left promiscuous mode [ 376.682206][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 376.690940][T12781] netlink: 'syz.6.1531': attribute type 39 has an invalid length. [ 377.053371][ T13] team0: Port device geneve0 removed [ 377.411931][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.432678][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.457409][ T13] bond0 (unregistering): Released all slaves [ 377.658737][ T13] bond1 (unregistering): Released all slaves [ 377.696420][T12781] veth0_macvtap: left promiscuous mode [ 377.856581][T12461] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.988883][T12452] veth0_vlan: entered promiscuous mode [ 378.007866][T12798] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1533'. [ 378.046870][T12464] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.071514][T12452] veth1_vlan: entered promiscuous mode [ 378.102866][T12800] netlink: 92 bytes leftover after parsing attributes in process `syz.6.1534'. [ 378.168113][T12461] veth0_vlan: entered promiscuous mode [ 378.248027][T12461] veth1_vlan: entered promiscuous mode [ 378.381832][T12452] veth0_macvtap: entered promiscuous mode [ 378.442026][T12452] veth1_macvtap: entered promiscuous mode [ 378.455077][T12461] veth0_macvtap: entered promiscuous mode [ 378.486156][T12464] veth0_vlan: entered promiscuous mode [ 378.505200][T12461] veth1_macvtap: entered promiscuous mode [ 378.547742][T12452] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.571606][T12464] veth1_vlan: entered promiscuous mode [ 378.598730][T12452] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.667294][T12461] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.698621][T12452] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.711250][T12452] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.722091][T12452] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.742423][T12452] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.810994][T12461] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 378.891436][T12461] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.929352][T12461] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.941697][T12461] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.960125][T12461] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.108116][T12464] veth0_macvtap: entered promiscuous mode [ 379.175954][T12464] veth1_macvtap: entered promiscuous mode [ 379.180179][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.197141][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.464117][T12464] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.495921][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.520659][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 379.653093][T12464] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.685124][T12464] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.704328][T12464] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.713695][T12464] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.723764][T12464] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.797371][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 379.818384][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.018695][T12841] netlink: 'syz.6.1547': attribute type 1 has an invalid length. [ 380.043364][T12841] netlink: 224 bytes leftover after parsing attributes in process `syz.6.1547'. [ 380.132816][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.168899][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 380.172066][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.175551][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.322753][T12843] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.349223][T12843] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.639657][ T13] hsr_slave_0: left promiscuous mode [ 380.646157][ T13] hsr_slave_1: left promiscuous mode [ 380.662114][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 380.672047][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 380.681914][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 380.689763][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 380.714211][ T13] veth1_macvtap: left promiscuous mode [ 380.721336][ T13] veth0_macvtap: left promiscuous mode [ 380.726990][ T13] veth1_vlan: left promiscuous mode [ 380.732507][ T13] veth0_vlan: left promiscuous mode [ 381.421201][ T13] team0 (unregistering): Port device team_slave_1 removed [ 381.498763][ T13] team0 (unregistering): Port device team_slave_0 removed [ 381.631624][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 381.642585][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 381.674370][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 381.705561][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 381.728467][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 382.110500][T12858] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1551'. [ 382.306445][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.315465][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.543581][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 382.579361][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 382.894866][ T13] IPVS: stop unused estimator thread 0... [ 383.137279][T12855] chnl_net:caif_netlink_parms(): no params data found [ 383.254730][ T13] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.406483][ T13] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.575355][T12875] x_tables: duplicate underflow at hook 2 [ 383.583712][T12877] syz_tun: tun_net_xmit 1514 [ 383.588596][T12877] syz_tun: tun_net_xmit 1182 [ 383.614475][ T13] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.646096][T12855] bridge0: port 1(bridge_slave_0) entered blocking state [ 383.653600][T12855] bridge0: port 1(bridge_slave_0) entered disabled state [ 383.664292][T12855] bridge_slave_0: entered allmulticast mode [ 383.677627][T12855] bridge_slave_0: entered promiscuous mode [ 383.773610][ T13] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.816862][T12855] bridge0: port 2(bridge_slave_1) entered blocking state [ 383.824418][T12855] bridge0: port 2(bridge_slave_1) entered disabled state [ 383.834052][T12855] bridge_slave_1: entered allmulticast mode [ 383.843500][ T5842] Bluetooth: hci0: command tx timeout [ 383.843874][T12855] bridge_slave_1: entered promiscuous mode [ 383.956249][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 383.961984][T12855] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 383.980781][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 383.983877][T12855] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 384.002678][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 384.015964][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 384.024003][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 384.094563][T12855] team0: Port device team_slave_0 added [ 384.111773][T12855] team0: Port device team_slave_1 added [ 384.254559][T12855] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 384.262852][T12855] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.290447][T12855] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 384.329465][T12855] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 384.336480][T12855] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 384.406661][T12855] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 384.447799][T12889] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1557'. [ 384.488014][T12889] netlink: 256 bytes leftover after parsing attributes in process `syz.6.1557'. [ 384.615910][ T13] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.876475][ T13] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.996860][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 385.006835][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 385.016161][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 385.059324][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 385.071258][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 385.074235][ T13] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.150696][T12855] hsr_slave_0: entered promiscuous mode [ 385.157880][T12855] hsr_slave_1: entered promiscuous mode [ 385.328307][ T13] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 385.461816][T12917] net_ratelimit: 7 callbacks suppressed [ 385.461856][T12917] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 385.483218][ T5890] IPVS: starting estimator thread 0... [ 385.545514][T12917] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1563'. [ 385.579602][T12921] IPVS: using max 33 ests per chain, 79200 per kthread [ 385.702079][T12931] netlink: 'syz.5.1565': attribute type 9 has an invalid length. [ 385.717857][T12931] netlink: 'syz.5.1565': attribute type 6 has an invalid length. [ 385.901283][T12939] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1566'. [ 385.920651][ T5844] Bluetooth: hci0: command tx timeout [ 386.079834][ T5842] Bluetooth: hci2: command tx timeout [ 386.765620][ T13] bridge_slave_1: left allmulticast mode [ 386.789658][ T13] bridge_slave_1: left promiscuous mode [ 386.795600][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.829692][ T13] bridge_slave_0: left allmulticast mode [ 386.835427][ T13] bridge_slave_0: left promiscuous mode [ 386.844748][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.893109][ T13] bridge_slave_1: left allmulticast mode [ 386.898931][ T13] bridge_slave_1: left promiscuous mode [ 386.914117][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.927836][ T13] bridge_slave_0: left allmulticast mode [ 386.935670][ T13] bridge_slave_0: left promiscuous mode [ 386.944289][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 387.119769][ T5842] Bluetooth: hci3: command tx timeout [ 387.919510][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 387.932227][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 387.943804][ T13] bond0 (unregistering): Released all slaves [ 388.007742][ T5842] Bluetooth: hci0: command tx timeout [ 388.093292][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 388.106191][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 388.118310][ T13] bond0 (unregistering): Released all slaves [ 388.159898][ T5842] Bluetooth: hci2: command tx timeout [ 388.318650][T12879] chnl_net:caif_netlink_parms(): no params data found [ 388.752223][T12906] chnl_net:caif_netlink_parms(): no params data found [ 389.076820][T12879] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.105316][T12879] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.117432][T12879] bridge_slave_0: entered allmulticast mode [ 389.141785][T12879] bridge_slave_0: entered promiscuous mode [ 389.161811][T12879] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.181432][T12879] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.188936][T12879] bridge_slave_1: entered allmulticast mode [ 389.202447][ T5842] Bluetooth: hci3: command tx timeout [ 389.220918][T12879] bridge_slave_1: entered promiscuous mode [ 389.394120][T13006] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 389.431335][T12879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.463527][T12906] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.471298][T12906] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.478790][T12906] bridge_slave_0: entered allmulticast mode [ 389.487653][T12906] bridge_slave_0: entered promiscuous mode [ 389.507838][T12906] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.515656][T12906] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.525213][T12906] bridge_slave_1: entered allmulticast mode [ 389.534254][T12906] bridge_slave_1: entered promiscuous mode [ 389.591139][T12879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.699316][ T13] hsr_slave_0: left promiscuous mode [ 389.713512][ T13] hsr_slave_1: left promiscuous mode [ 389.726317][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.734649][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.754905][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.765061][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.811328][ T13] hsr_slave_0: left promiscuous mode [ 389.821124][ T13] hsr_slave_1: left promiscuous mode [ 389.827290][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 389.836347][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 389.845445][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 389.854779][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 389.901382][ T13] veth1_macvtap: left promiscuous mode [ 389.907275][ T13] veth0_macvtap: left promiscuous mode [ 389.916628][ T13] veth1_vlan: left promiscuous mode [ 389.922358][ T13] veth0_vlan: left promiscuous mode [ 389.929040][ T13] veth1_macvtap: left promiscuous mode [ 389.934721][ T13] veth0_macvtap: left promiscuous mode [ 389.940702][ T13] veth1_vlan: left promiscuous mode [ 389.946082][ T13] veth0_vlan: left promiscuous mode [ 390.079590][ T5842] Bluetooth: hci0: command tx timeout [ 390.244204][ T5842] Bluetooth: hci2: command tx timeout [ 390.625803][ T13] team0 (unregistering): Port device team_slave_1 removed [ 390.688362][ T13] team0 (unregistering): Port device team_slave_0 removed [ 391.280219][ T5842] Bluetooth: hci3: command tx timeout [ 391.615293][ T13] team0 (unregistering): Port device team_slave_1 removed [ 391.673854][ T13] team0 (unregistering): Port device team_slave_0 removed [ 392.249094][T12855] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 392.260776][T12855] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 392.321302][ T5844] Bluetooth: hci2: command tx timeout [ 392.334917][T12879] team0: Port device team_slave_0 added [ 392.370100][T12906] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 392.379843][T12855] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 392.423436][T12879] team0: Port device team_slave_1 added [ 392.554127][T12906] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 392.592960][T12855] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 392.621468][T12879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 392.628507][T12879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.683873][T13029] syz_tun: tun_net_xmit 118 [ 392.741486][T12879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 392.826827][T12906] team0: Port device team_slave_0 added [ 392.854906][T12879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 392.885002][T12879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 392.996236][T12879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.075739][T12906] team0: Port device team_slave_1 added [ 393.301821][T12906] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 393.326813][T12906] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.361102][ T5842] Bluetooth: hci3: command tx timeout [ 393.363651][T12906] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 393.456785][T12906] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 393.481546][T12906] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 393.554592][T12906] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 393.719252][T12879] hsr_slave_0: entered promiscuous mode [ 393.726260][T12879] hsr_slave_1: entered promiscuous mode [ 393.753856][T12879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 393.789056][T12879] Cannot create hsr debugfs directory [ 394.144387][T13073] netlink: 4 bytes leftover after parsing attributes in process `syz.6.1592'. [ 394.177614][T12906] hsr_slave_0: entered promiscuous mode [ 394.190361][T12906] hsr_slave_1: entered promiscuous mode [ 394.207773][T12906] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 394.217914][T12906] Cannot create hsr debugfs directory [ 395.026597][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.262743][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.480000][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.508711][T13122] tipc: Enabled bearer , priority 0 [ 395.516975][T13122] syzkaller0: entered promiscuous mode [ 395.550072][T13122] syzkaller0: entered allmulticast mode [ 395.572345][T13127] tipc: Resetting bearer [ 395.580419][T13122] netlink: 48 bytes leftover after parsing attributes in process `syz.6.1604'. [ 395.663943][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 395.740362][T13134] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1606'. [ 395.777577][T12855] 8021q: adding VLAN 0 to HW filter on device bond0 [ 395.804573][T13134] hsr_slave_0: left promiscuous mode [ 395.835416][T13134] hsr_slave_1: left promiscuous mode [ 395.901240][T13131] tipc: Resetting bearer [ 395.937277][T13131] tipc: Disabling bearer [ 396.197265][T12855] 8021q: adding VLAN 0 to HW filter on device team0 [ 396.286426][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 396.293732][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 396.366713][T13150] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1609'. [ 396.428546][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 396.435892][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 396.498841][ T13] bridge_slave_1: left allmulticast mode [ 396.528270][ T13] bridge_slave_1: left promiscuous mode [ 396.544778][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 396.572380][ T13] bridge_slave_0: left allmulticast mode [ 396.578134][ T13] bridge_slave_0: left promiscuous mode [ 396.617425][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 396.761586][T13161] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1611'. [ 397.024137][T13170] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1611'. [ 397.352689][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 397.367022][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 397.385826][ T13] bond0 (unregistering): Released all slaves [ 397.956241][ T13] hsr_slave_0: left promiscuous mode [ 397.976795][ T13] hsr_slave_1: left promiscuous mode [ 397.993910][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 398.003958][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 398.020969][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 398.033150][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 398.049133][T13187] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1614'. [ 398.069657][T13187] netlink: 'syz.5.1614': attribute type 5 has an invalid length. [ 398.078773][T13187] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1614'. [ 398.105200][ T13] veth1_macvtap: left promiscuous mode [ 398.111083][ T13] veth0_macvtap: left promiscuous mode [ 398.116829][ T13] veth1_vlan: left promiscuous mode [ 398.127994][ T13] veth0_vlan: left promiscuous mode [ 398.857811][ T13] team0 (unregistering): Port device team_slave_1 removed [ 398.923711][ T13] team0 (unregistering): Port device team_slave_0 removed [ 399.464914][T13197] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1617'. [ 399.499236][T13198] netlink: 168 bytes leftover after parsing attributes in process `syz.5.1617'. [ 400.041105][T12855] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 400.616232][T13237] sock: sock_timestamping_bind_phc: sock not bind to device [ 400.885997][T13239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1625'. [ 400.909118][T13239] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1625'. [ 400.957533][T13252] IPVS: length: 72 != 24 [ 401.193616][T13257] syz_tun: tun_net_xmit 1510 [ 401.214312][T13257] syz_tun: tun_net_xmit 1510 [ 401.229401][T13257] syz_tun: tun_net_xmit 1510 [ 401.234222][T13257] syz_tun: tun_net_xmit 1510 [ 401.239002][T13257] syz_tun: tun_net_xmit 1510 [ 401.258541][T13257] syz_tun: tun_net_xmit 1510 [ 401.277975][T13257] syz_tun: tun_net_xmit 1510 [ 401.294575][T12855] veth0_vlan: entered promiscuous mode [ 401.314706][T13257] syz_tun: tun_net_xmit 1510 [ 401.325449][T13257] syz_tun: tun_net_xmit 1510 [ 401.335620][T13257] syz_tun: tun_net_xmit 1510 [ 401.349944][T13257] syz_tun: tun_net_xmit 1510 [ 401.364580][T13257] syz_tun: tun_net_xmit 1510 [ 401.382534][T12855] veth1_vlan: entered promiscuous mode [ 401.389344][T13257] syz_tun: tun_net_xmit 1510 [ 401.399636][T13257] syz_tun: tun_net_xmit 694 [ 401.424840][T12906] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 401.520968][T12906] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 401.567102][T12906] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 401.608239][T12906] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 401.818361][T12855] veth0_macvtap: entered promiscuous mode [ 401.834579][T12879] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 401.851009][T12879] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 401.873386][T12879] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 401.893475][T12855] veth1_macvtap: entered promiscuous mode [ 401.925817][T12879] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 402.050264][T12855] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 402.102984][T12855] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 402.146232][T12855] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.157610][T12855] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.169405][T12855] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.178580][T12855] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 402.263870][T12906] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.449565][T12906] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.479886][T12879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 402.525631][ T994] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.532891][ T994] bridge0: port 1(bridge_slave_0) entered forwarding state [ 402.628723][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 402.636086][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 402.697481][T12879] 8021q: adding VLAN 0 to HW filter on device team0 [ 402.704288][ T5910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.704322][ T5910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.905064][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 402.912397][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 403.007485][T10622] bridge0: port 2(bridge_slave_1) entered blocking state [ 403.014765][T10622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 403.069844][T13301] Bluetooth: MGMT ver 1.23 [ 403.156641][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 403.183100][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 403.413037][T13310] netlink: 'syz.5.1640': attribute type 2 has an invalid length. [ 403.421702][T13311] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1639'. [ 403.888433][T12906] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.118388][T13333] netlink: 24 bytes leftover after parsing attributes in process `syz.6.1644'. [ 404.143897][T13334] netlink: 'syz.5.1645': attribute type 1 has an invalid length. [ 404.188606][ T994] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.365473][ T994] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.436531][ T994] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.492347][T12879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 404.506958][T12906] veth0_vlan: entered promiscuous mode [ 404.553325][ T994] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 404.585963][T12906] veth1_vlan: entered promiscuous mode [ 404.677907][T12879] veth0_vlan: entered promiscuous mode [ 404.702443][T12906] veth0_macvtap: entered promiscuous mode [ 404.717535][T12879] veth1_vlan: entered promiscuous mode [ 404.747045][T12906] veth1_macvtap: entered promiscuous mode [ 404.871565][ T994] bridge_slave_1: left allmulticast mode [ 404.877280][ T994] bridge_slave_1: left promiscuous mode [ 404.887753][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.897717][ T994] bridge_slave_0: left allmulticast mode [ 404.905826][ T994] bridge_slave_0: left promiscuous mode [ 404.912379][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 405.371172][T13350] x_tables: duplicate underflow at hook 2 [ 405.751103][ T5844] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 405.787189][ T5844] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 405.812558][ T5844] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 405.827897][ T5844] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 405.836647][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 405.849302][ T5844] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 405.876103][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 405.888852][ T994] bond0 (unregistering): Released all slaves [ 405.928504][T12906] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 405.955282][T12906] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 405.985934][T12879] veth0_macvtap: entered promiscuous mode [ 406.082512][T12906] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.099384][T12906] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.108186][T12906] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.127467][T12906] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 406.187240][T12879] veth1_macvtap: entered promiscuous mode [ 406.237852][T13362] tipc: Enabled bearer , priority 0 [ 406.326031][T13365] FAULT_INJECTION: forcing a failure. [ 406.326031][T13365] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 406.346649][T13365] CPU: 0 UID: 0 PID: 13365 Comm: syz.5.1650 Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 406.346698][T13365] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 406.346789][T13365] Call Trace: [ 406.346847][T13365] [ 406.346867][T13365] dump_stack_lvl+0x189/0x250 [ 406.346975][T13365] ? __lock_acquire+0xaac/0xd20 [ 406.347018][T13365] ? __pfx_dump_stack_lvl+0x10/0x10 [ 406.347048][T13365] ? __pfx__printk+0x10/0x10 [ 406.347069][T13365] ? __might_fault+0xb0/0x130 [ 406.347112][T13365] should_fail_ex+0x414/0x560 [ 406.347146][T13365] _copy_from_iter+0x1db/0x15a0 [ 406.347185][T13365] ? trace_kmem_cache_alloc+0x1f/0xc0 [ 406.347210][T13365] ? kmem_cache_alloc_node_noprof+0x217/0x3c0 [ 406.347239][T13365] ? __pfx__copy_from_iter+0x10/0x10 [ 406.347274][T13365] ? __local_bh_enable_ip+0x12d/0x1c0 [ 406.347296][T13365] ? lockdep_hardirqs_on+0x9c/0x150 [ 406.347333][T13365] skb_copy_datagram_from_iter+0xf5/0x720 [ 406.347377][T13365] ? iov_iter_single_seg_count+0xc9/0x2f0 [ 406.347408][T13365] tun_get_user+0x1533/0x3c20 [ 406.347471][T13365] ? __pfx_tun_get_user+0x10/0x10 [ 406.347499][T13365] ? __lock_acquire+0xaac/0xd20 [ 406.347549][T13365] ? ref_tracker_alloc+0x318/0x460 [ 406.347576][T13365] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 406.347607][T13365] ? tun_get+0x1c/0x2f0 [ 406.347644][T13365] ? tun_get+0x1c/0x2f0 [ 406.347674][T13365] ? tun_get+0x1c/0x2f0 [ 406.347710][T13365] tun_chr_write_iter+0x113/0x200 [ 406.347745][T13365] do_iter_readv_writev+0x56e/0x7f0 [ 406.347791][T13365] ? __pfx_do_iter_readv_writev+0x10/0x10 [ 406.347850][T13365] ? bpf_lsm_file_permission+0x9/0x20 [ 406.347882][T13365] ? security_file_permission+0x75/0x290 [ 406.347920][T13365] ? rw_verify_area+0x258/0x650 [ 406.347949][T13365] vfs_writev+0x306/0x9a0 [ 406.347979][T13365] ? vfs_write+0x8d8/0xa90 [ 406.348012][T13365] ? __pfx_vfs_writev+0x10/0x10 [ 406.348061][T13365] ? __fget_files+0x2a/0x420 [ 406.348097][T13365] ? __fget_files+0x3a0/0x420 [ 406.348131][T13365] ? __fget_files+0x2a/0x420 [ 406.348169][T13365] do_writev+0x14d/0x2d0 [ 406.348204][T13365] ? __pfx_do_writev+0x10/0x10 [ 406.348240][T13365] ? do_syscall_64+0xba/0x210 [ 406.348273][T13365] do_syscall_64+0xf6/0x210 [ 406.348302][T13365] ? clear_bhb_loop+0x60/0xb0 [ 406.348330][T13365] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 406.348351][T13365] RIP: 0033:0x7f6f4058e969 [ 406.348404][T13365] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 406.348428][T13365] RSP: 002b:00007f6f4134c038 EFLAGS: 00000246 ORIG_RAX: 0000000000000014 [ 406.348459][T13365] RAX: ffffffffffffffda RBX: 00007f6f407b6160 RCX: 00007f6f4058e969 [ 406.348475][T13365] RDX: 0000000000000001 RSI: 00002000000001c0 RDI: 0000000000000003 [ 406.348488][T13365] RBP: 00007f6f4134c090 R08: 0000000000000000 R09: 0000000000000000 [ 406.348501][T13365] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 406.348514][T13365] R13: 0000000000000000 R14: 00007f6f407b6160 R15: 00007ffc0497a458 [ 406.348549][T13365] [ 406.735168][T13362] syzkaller0: entered promiscuous mode [ 406.740831][T13362] syzkaller0: entered allmulticast mode [ 406.747290][T13362] tipc: Resetting bearer [ 406.758763][T13361] tipc: Resetting bearer [ 406.880935][T13374] netlink: 16 bytes leftover after parsing attributes in process `syz.6.1654'. [ 407.324184][ T5889] tipc: Node number set to 3852903364 [ 407.923477][ T5844] Bluetooth: hci0: command tx timeout [ 408.543568][T13361] tipc: Disabling bearer [ 408.867755][ T994] hsr_slave_0: left promiscuous mode [ 408.875010][ T994] hsr_slave_1: left promiscuous mode [ 408.885145][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 408.888266][T13383] netlink: 28 bytes leftover after parsing attributes in process `syz.6.1657'. [ 408.893222][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 408.914707][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 408.923832][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 408.996278][ T994] veth1_macvtap: left promiscuous mode [ 409.002706][ T994] veth0_macvtap: left promiscuous mode [ 409.008407][ T994] veth1_vlan: left promiscuous mode [ 409.015852][ T994] veth0_vlan: left promiscuous mode [ 409.716519][ T994] team0 (unregistering): Port device team_slave_1 removed [ 409.774820][ T994] team0 (unregistering): Port device team_slave_0 removed [ 410.005106][ T5844] Bluetooth: hci0: command tx timeout [ 410.312209][T13380] tipc: Enabled bearer , priority 0 [ 410.377996][T13376] tipc: Disabling bearer [ 410.411365][T12879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 410.444746][T12879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 410.543586][T12879] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.579251][T12879] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.588066][T12879] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.639415][T12879] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 410.755580][T13409] openvswitch: netlink: IP tunnel attribute has 20 unknown bytes. [ 410.864238][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 410.894065][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.303847][ T5910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.333868][ T5910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.580072][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.618313][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.623561][T13356] chnl_net:caif_netlink_parms(): no params data found [ 411.933567][T13437] tipc: Enabled bearer , priority 0 [ 411.945334][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.981066][T13444] FAULT_INJECTION: forcing a failure. [ 411.981066][T13444] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 411.995161][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.080980][ T5844] Bluetooth: hci0: command tx timeout [ 412.105063][T13444] CPU: 0 UID: 0 PID: 13444 Comm: syz.5.1667 Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 412.105107][T13444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 412.105122][T13444] Call Trace: [ 412.105132][T13444] [ 412.105143][T13444] dump_stack_lvl+0x189/0x250 [ 412.105189][T13444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 412.105220][T13444] ? __pfx__printk+0x10/0x10 [ 412.105257][T13444] should_fail_ex+0x414/0x560 [ 412.105288][T13444] _copy_to_user+0x31/0xb0 [ 412.105324][T13444] simple_read_from_buffer+0xe1/0x170 [ 412.105360][T13444] proc_fail_nth_read+0x1df/0x250 [ 412.105399][T13444] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 412.105435][T13444] ? rw_verify_area+0x258/0x650 [ 412.105460][T13444] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 412.105494][T13444] vfs_read+0x1fd/0x980 [ 412.105534][T13444] ? __pfx___mutex_lock+0x10/0x10 [ 412.105569][T13444] ? __pfx_vfs_read+0x10/0x10 [ 412.105596][T13444] ? __fget_files+0x2a/0x420 [ 412.105631][T13444] ? __fget_files+0x3a0/0x420 [ 412.105659][T13444] ? __fget_files+0x2a/0x420 [ 412.105698][T13444] ksys_read+0x145/0x250 [ 412.105726][T13444] ? __pfx_ksys_read+0x10/0x10 [ 412.105756][T13444] ? do_syscall_64+0xba/0x210 [ 412.105793][T13444] do_syscall_64+0xf6/0x210 [ 412.105822][T13444] ? clear_bhb_loop+0x60/0xb0 [ 412.105850][T13444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 412.105871][T13444] RIP: 0033:0x7f6f4058d37c [ 412.105892][T13444] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 412.105912][T13444] RSP: 002b:00007f6f4134c030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 412.105936][T13444] RAX: ffffffffffffffda RBX: 00007f6f407b6160 RCX: 00007f6f4058d37c [ 412.105967][T13444] RDX: 000000000000000f RSI: 00007f6f4134c0a0 RDI: 0000000000000005 [ 412.105981][T13444] RBP: 00007f6f4134c090 R08: 0000000000000000 R09: 0000000000000000 [ 412.105994][T13444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 412.106006][T13444] R13: 0000000000000001 R14: 00007f6f407b6160 R15: 00007ffc0497a458 [ 412.106042][T13444] [ 412.360825][T13440] syzkaller0: entered promiscuous mode [ 412.366572][T13440] syzkaller0: entered allmulticast mode [ 412.373201][T13440] tipc: Resetting bearer [ 412.603498][ T994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 412.708105][ T13] tipc: Resetting bearer [ 412.745986][T13437] tipc: Resetting bearer [ 414.165371][ T5844] Bluetooth: hci0: command tx timeout [ 414.212895][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 414.227739][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 414.237101][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 414.245879][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 414.273908][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 416.116720][T13437] tipc: Disabling bearer [ 416.227537][ T994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.270912][T13356] bridge0: port 1(bridge_slave_0) entered blocking state [ 416.287616][T13356] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.297277][T13356] bridge_slave_0: entered allmulticast mode [ 416.311785][T13356] bridge_slave_0: entered promiscuous mode [ 416.334119][T13356] bridge0: port 2(bridge_slave_1) entered blocking state [ 416.343157][T13356] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.351462][T13356] bridge_slave_1: entered allmulticast mode [ 416.360213][T13356] bridge_slave_1: entered promiscuous mode [ 416.367444][T13482] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1670'. [ 416.401595][ T5842] Bluetooth: hci3: command tx timeout [ 416.492302][ T994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.535567][T13532] ieee802154 phy0 wpan0: encryption failed: -22 [ 416.602291][ T994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.785319][T13525] tipc: Enabled bearer , priority 0 [ 416.847070][T13535] syzkaller0: entered promiscuous mode [ 416.852881][T13535] syzkaller0: entered allmulticast mode [ 416.860315][T13535] tipc: Resetting bearer [ 416.875395][T13356] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 416.903481][T13356] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 416.995201][T13522] tipc: Resetting bearer [ 418.482441][ T5842] Bluetooth: hci3: command tx timeout [ 419.002683][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 419.038009][ T5844] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 419.064817][ T5844] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 419.089825][ T5844] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 419.114206][ T5844] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 419.914121][T13522] tipc: Disabling bearer [ 419.955522][T13356] team0: Port device team_slave_0 added [ 419.975819][T13356] team0: Port device team_slave_1 added [ 420.007089][T13567] IPv6: NLM_F_CREATE should be specified when creating new route [ 420.155497][T13356] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.171636][T13577] netlink: 8 bytes leftover after parsing attributes in process `syz.6.1677'. [ 420.183852][T13356] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.256739][T13356] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.358877][T13356] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.373479][T13356] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.416786][T13356] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.561150][ T5842] Bluetooth: hci3: command tx timeout [ 420.910218][ T994] bridge_slave_1: left allmulticast mode [ 420.916099][ T994] bridge_slave_1: left promiscuous mode [ 420.926494][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 420.940743][ T994] bridge_slave_0: left allmulticast mode [ 420.946496][ T994] bridge_slave_0: left promiscuous mode [ 420.953931][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.005784][T13604] netlink: 'syz.5.1683': attribute type 4 has an invalid length. [ 421.030672][T13605] netlink: 12 bytes leftover after parsing attributes in process `syz.6.1682'. [ 421.205839][ T5842] Bluetooth: hci2: command tx timeout [ 421.415589][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 421.427964][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 421.439391][ T994] bond0 (unregistering): Released all slaves [ 421.459633][T13356] hsr_slave_0: entered promiscuous mode [ 421.466458][T13356] hsr_slave_1: entered promiscuous mode [ 421.486357][T13600] netlink: 84 bytes leftover after parsing attributes in process `syz.6.1682'. [ 422.006407][ T994] hsr_slave_0: left promiscuous mode [ 422.035528][ T994] hsr_slave_1: left promiscuous mode [ 422.050396][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 422.057972][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 422.087752][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 422.096653][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 422.165271][ T994] veth1_macvtap: left promiscuous mode [ 422.172452][ T994] veth0_macvtap: left promiscuous mode [ 422.178239][ T994] veth1_vlan: left promiscuous mode [ 422.186383][ T994] veth0_vlan: left promiscuous mode [ 422.649443][ T5842] Bluetooth: hci3: command tx timeout [ 422.823834][ T994] team0 (unregistering): Port device team_slave_1 removed [ 422.886526][ T994] team0 (unregistering): Port device team_slave_0 removed [ 423.291319][ T5842] Bluetooth: hci2: command tx timeout [ 423.548179][T13626] netlink: 'syz.6.1687': attribute type 4 has an invalid length. [ 423.559916][ C0] syz_tun: tun_net_xmit 54 [ 423.629463][ C0] syz_tun: tun_net_xmit 54 [ 423.828718][T13639] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1688'. [ 423.977458][T13642] netlink: 'syz.5.1690': attribute type 10 has an invalid length. [ 424.176767][T13642] bond0: left allmulticast mode [ 424.183672][T13642] bond_slave_0: left allmulticast mode [ 424.199196][T13642] bond_slave_1: left allmulticast mode [ 424.213541][T13652] netlink: 20 bytes leftover after parsing attributes in process `syz.6.1691'. [ 424.267985][T13642] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.292613][T13642] team0: Port device bond0 added [ 424.355713][T13486] chnl_net:caif_netlink_parms(): no params data found [ 424.500467][T13652] team0: No ports can be present during mode change [ 424.585349][T13571] chnl_net:caif_netlink_parms(): no params data found [ 424.835260][T13667] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1695'. [ 424.847216][T13667] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 424.860440][T13667] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 425.370100][ T5842] Bluetooth: hci2: command tx timeout [ 425.387379][ T994] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.440470][T13486] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.447727][T13486] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.481029][T13486] bridge_slave_0: entered allmulticast mode [ 425.501451][T13486] bridge_slave_0: entered promiscuous mode [ 425.516313][T13486] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.524862][T13486] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.538078][T13486] bridge_slave_1: entered allmulticast mode [ 425.546842][T13486] bridge_slave_1: entered promiscuous mode [ 425.584529][T13685] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1699'. [ 425.607676][T13571] bridge0: port 1(bridge_slave_0) entered blocking state [ 425.624495][T13571] bridge0: port 1(bridge_slave_0) entered disabled state [ 425.633605][T13571] bridge_slave_0: entered allmulticast mode [ 425.643172][T13571] bridge_slave_0: entered promiscuous mode [ 425.652656][T13571] bridge0: port 2(bridge_slave_1) entered blocking state [ 425.660445][T13571] bridge0: port 2(bridge_slave_1) entered disabled state [ 425.667843][T13571] bridge_slave_1: entered allmulticast mode [ 425.676725][T13571] bridge_slave_1: entered promiscuous mode [ 425.787556][ T994] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 425.895546][ T5844] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 425.906256][ T5844] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 425.915972][ T5844] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 425.926350][ T5844] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 425.935707][ T5844] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 426.039492][ T994] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.061800][T13571] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.074890][T13571] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.093461][T13486] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 426.104550][T13694] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1702'. [ 426.117393][T13486] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 426.236012][ T994] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 426.341092][T13571] team0: Port device team_slave_0 added [ 426.355858][T13571] team0: Port device team_slave_1 added [ 426.401161][T13486] team0: Port device team_slave_0 added [ 426.420447][T13486] team0: Port device team_slave_1 added [ 426.513157][T13571] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.525069][T13571] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.553371][T13571] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.632325][T13356] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 426.645219][T13571] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.653737][T13571] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.681042][T13571] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.714288][T13486] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 426.722897][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.750255][T13486] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 426.761739][T13356] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 426.918906][T13486] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 426.935143][T13486] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 426.978294][T13486] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 426.996702][T13356] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 427.073284][T13356] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 427.191228][T13571] hsr_slave_0: entered promiscuous mode [ 427.201246][T13571] hsr_slave_1: entered promiscuous mode [ 427.218273][T13571] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 427.239352][T13571] Cannot create hsr debugfs directory [ 427.246865][ T994] bridge_slave_1: left allmulticast mode [ 427.272205][ T994] bridge_slave_1: left promiscuous mode [ 427.278192][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 427.312329][ T994] bridge_slave_0: left allmulticast mode [ 427.334638][ T994] bridge_slave_0: left promiscuous mode [ 427.341200][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 427.449645][ T5844] Bluetooth: hci2: command tx timeout [ 427.956708][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 427.969965][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 427.981773][ T994] bond0 (unregistering): Released all slaves [ 427.999182][ T5844] Bluetooth: hci6: command tx timeout [ 428.285985][T13486] hsr_slave_0: entered promiscuous mode [ 428.297526][T13486] hsr_slave_1: entered promiscuous mode [ 428.304166][T13486] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 428.312127][T13486] Cannot create hsr debugfs directory [ 428.595563][T13688] chnl_net:caif_netlink_parms(): no params data found [ 428.613085][ T994] hsr_slave_0: left promiscuous mode [ 428.619679][ T994] hsr_slave_1: left promiscuous mode [ 428.626552][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 428.634416][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 428.643443][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 428.652414][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 428.678938][ T994] veth1_macvtap: left promiscuous mode [ 428.684714][ T994] veth0_macvtap: left promiscuous mode [ 428.690846][ T994] veth1_vlan: left promiscuous mode [ 428.696168][ T994] veth0_vlan: left promiscuous mode [ 429.322573][ T994] team0 (unregistering): Port device team_slave_1 removed [ 429.373847][ T994] team0 (unregistering): Port device team_slave_0 removed [ 430.080078][ T5844] Bluetooth: hci6: command tx timeout [ 430.609640][T13688] bridge0: port 1(bridge_slave_0) entered blocking state [ 430.616975][T13688] bridge0: port 1(bridge_slave_0) entered disabled state [ 430.636556][T13688] bridge_slave_0: entered allmulticast mode [ 430.661384][T13688] bridge_slave_0: entered promiscuous mode [ 430.706313][T13688] bridge0: port 2(bridge_slave_1) entered blocking state [ 430.718537][T13688] bridge0: port 2(bridge_slave_1) entered disabled state [ 430.732458][T13688] bridge_slave_1: entered allmulticast mode [ 430.743530][T13688] bridge_slave_1: entered promiscuous mode [ 430.776201][T13760] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 430.947766][T13688] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 431.030712][T13356] 8021q: adding VLAN 0 to HW filter on device bond0 [ 431.047943][T13688] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 431.140264][T13688] team0: Port device team_slave_0 added [ 431.157146][T13688] team0: Port device team_slave_1 added [ 431.302466][T13688] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 431.315078][T13688] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.343184][T13688] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 431.370359][T13356] 8021q: adding VLAN 0 to HW filter on device team0 [ 431.399894][T13688] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 431.409185][T13688] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 431.443922][T13688] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 431.463626][T13571] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 431.476391][T13571] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 431.533748][T13571] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 431.547262][T13571] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 431.607426][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 431.614731][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 431.635203][T13688] hsr_slave_0: entered promiscuous mode [ 431.642168][T13688] hsr_slave_1: entered promiscuous mode [ 431.648519][T13688] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 431.656636][T13688] Cannot create hsr debugfs directory [ 431.768749][ T994] bridge0: port 2(bridge_slave_1) entered blocking state [ 431.775981][ T994] bridge0: port 2(bridge_slave_1) entered forwarding state [ 432.150294][T13774] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 432.159299][ T5844] Bluetooth: hci6: command tx timeout [ 432.262972][T13486] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 432.287174][T13486] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 432.303450][T13486] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 432.317786][T13486] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 432.415678][T13688] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.470109][T13778] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 432.487049][ T5889] syz_tun: tun_net_xmit 110 [ 432.548346][T13688] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.710977][T13688] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.753038][T13571] 8021q: adding VLAN 0 to HW filter on device bond0 [ 432.831499][T13688] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 432.904154][T13571] 8021q: adding VLAN 0 to HW filter on device team0 [ 432.948211][T13356] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 432.991069][ T1153] bridge0: port 1(bridge_slave_0) entered blocking state [ 432.998321][ T1153] bridge0: port 1(bridge_slave_0) entered forwarding state [ 432.999873][ T5886] syz_tun: tun_net_xmit 110 [ 433.078881][ T1153] bridge0: port 2(bridge_slave_1) entered blocking state [ 433.086222][ T1153] bridge0: port 2(bridge_slave_1) entered forwarding state [ 433.359383][ T5844] Bluetooth: hci0: command 0x0401 tx timeout [ 433.580520][T13486] 8021q: adding VLAN 0 to HW filter on device bond0 [ 433.658598][T13688] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 433.700614][T13688] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 433.742158][T13688] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 433.773780][T13688] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 433.892148][T13486] 8021q: adding VLAN 0 to HW filter on device team0 [ 433.937790][ T5910] bridge0: port 1(bridge_slave_0) entered blocking state [ 433.945126][ T5910] bridge0: port 1(bridge_slave_0) entered forwarding state [ 434.006380][ T5910] bridge0: port 2(bridge_slave_1) entered blocking state [ 434.013711][ T5910] bridge0: port 2(bridge_slave_1) entered forwarding state [ 434.214560][T13486] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 434.227018][T13486] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 434.243038][ T5844] Bluetooth: hci6: command tx timeout [ 434.261219][T13356] veth0_vlan: entered promiscuous mode [ 434.346559][T13356] veth1_vlan: entered promiscuous mode [ 434.387983][T13571] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 434.604067][T13356] veth0_macvtap: entered promiscuous mode [ 434.651931][T13356] veth1_macvtap: entered promiscuous mode [ 434.705970][T13356] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 434.733871][T13571] veth0_vlan: entered promiscuous mode [ 434.776756][T13688] 8021q: adding VLAN 0 to HW filter on device bond0 [ 434.842069][T13356] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 434.865984][T13571] veth1_vlan: entered promiscuous mode [ 434.945398][T13688] 8021q: adding VLAN 0 to HW filter on device team0 [ 434.982615][T13356] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.013050][T13356] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.024574][T13356] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.042440][T13356] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.078050][T13486] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 435.186008][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 435.193308][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 435.239202][T13571] veth0_macvtap: entered promiscuous mode [ 435.270069][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 435.277293][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 435.288004][T13853] netlink: 'syz.5.1727': attribute type 39 has an invalid length. [ 435.318139][T13571] veth1_macvtap: entered promiscuous mode [ 435.374743][T13853] veth0_macvtap: left promiscuous mode [ 435.674383][T10622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.685201][T13571] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 435.696555][T10622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.778565][T13571] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 435.827945][T13486] veth0_vlan: entered promiscuous mode [ 435.845060][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 435.856158][T13571] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.873868][T13571] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.874154][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 435.892443][T13571] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 435.911562][T13571] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 436.007164][T13486] veth1_vlan: entered promiscuous mode [ 436.272913][ T5910] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.314997][ T5910] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 436.379487][T13867] veth0: entered promiscuous mode [ 436.389338][T13867] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1729'. [ 436.404351][T13486] veth0_macvtap: entered promiscuous mode [ 436.437217][T13866] veth0: left promiscuous mode [ 436.690136][ T53] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.757281][T13486] veth1_macvtap: entered promiscuous mode [ 436.835334][ T53] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.846495][T13884] netlink: 'syz.5.1730': attribute type 11 has an invalid length. [ 436.902730][T13882] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 436.943595][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 436.977018][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.046928][ T53] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.167469][ T53] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 437.194485][T13486] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 437.246928][T13486] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 437.302240][T13486] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.311516][T13486] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.320958][T13486] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.330027][T13486] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 437.425550][T13688] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 437.597154][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 437.625107][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 437.663669][ T53] bridge_slave_1: left allmulticast mode [ 437.672311][ T53] bridge_slave_1: left promiscuous mode [ 437.683010][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 437.704844][ T53] bridge_slave_0: left allmulticast mode [ 437.711443][ T53] bridge_slave_0: left promiscuous mode [ 437.717316][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 438.229292][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 438.244208][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 438.255905][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 438.266443][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 438.287919][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 438.422596][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 438.434387][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 438.447205][ T53] bond0 (unregistering): Released all slaves [ 438.597125][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 438.636524][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 439.118618][ T53] hsr_slave_0: left promiscuous mode [ 439.135602][ T53] hsr_slave_1: left promiscuous mode [ 439.143953][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 439.151896][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 439.161763][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 439.169634][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 439.227325][ T53] veth1_macvtap: left promiscuous mode [ 439.240508][ T53] veth0_macvtap: left promiscuous mode [ 439.249643][ T53] veth1_vlan: left promiscuous mode [ 439.262288][ T53] veth0_vlan: left promiscuous mode [ 440.029725][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 440.040333][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 440.061006][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 440.073347][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 440.093897][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 440.402396][ T5842] Bluetooth: hci0: command tx timeout [ 440.474792][ T53] team0 (unregistering): Port device team_slave_1 removed [ 440.527373][ T53] team0 (unregistering): Port device team_slave_0 removed [ 441.131701][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 441.153345][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 441.189017][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 441.198224][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 441.211440][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 441.608125][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 441.619255][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 441.694640][T13894] chnl_net:caif_netlink_parms(): no params data found [ 441.722123][T13688] veth0_vlan: entered promiscuous mode [ 441.934757][T13932] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1734'. [ 441.950374][T13932] netlink: 176 bytes leftover after parsing attributes in process `syz.5.1734'. [ 442.090245][T13688] veth1_vlan: entered promiscuous mode [ 442.160153][ T5844] Bluetooth: hci2: command tx timeout [ 442.323431][T13894] bridge0: port 1(bridge_slave_0) entered blocking state [ 442.332961][T13894] bridge0: port 1(bridge_slave_0) entered disabled state [ 442.342116][T13894] bridge_slave_0: entered allmulticast mode [ 442.350646][T13894] bridge_slave_0: entered promiscuous mode [ 442.381933][T13894] bridge0: port 2(bridge_slave_1) entered blocking state [ 442.391788][T13894] bridge0: port 2(bridge_slave_1) entered disabled state [ 442.400135][T13894] bridge_slave_1: entered allmulticast mode [ 442.407886][T13894] bridge_slave_1: entered promiscuous mode [ 442.483915][ T5844] Bluetooth: hci0: command tx timeout [ 442.562422][T13955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 442.578831][T13894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 442.613317][T13894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 442.711061][ T53] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.802736][T13894] team0: Port device team_slave_0 added [ 442.914896][ T53] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 442.975130][T13894] team0: Port device team_slave_1 added [ 443.017599][T13921] chnl_net:caif_netlink_parms(): no params data found [ 443.150470][ T53] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.174453][T13894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 443.183928][T13894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.214484][T13894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 443.289692][ T5842] Bluetooth: hci3: command tx timeout [ 443.303541][T13894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 443.314929][T13894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 443.343615][T13894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 443.357291][T13688] veth0_macvtap: entered promiscuous mode [ 443.412456][ T53] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 443.568509][T13688] veth1_macvtap: entered promiscuous mode [ 443.592651][T13918] chnl_net:caif_netlink_parms(): no params data found [ 443.836816][T13986] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1742'. [ 443.990686][T13921] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.003423][T13921] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.016646][T13986] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1742'. [ 444.027186][T13921] bridge_slave_0: entered allmulticast mode [ 444.041229][T13921] bridge_slave_0: entered promiscuous mode [ 444.054815][T13921] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.065301][T13921] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.078013][T13921] bridge_slave_1: entered allmulticast mode [ 444.095896][T13921] bridge_slave_1: entered promiscuous mode [ 444.115365][T13894] hsr_slave_0: entered promiscuous mode [ 444.133726][T13894] hsr_slave_1: entered promiscuous mode [ 444.240546][ T5842] Bluetooth: hci2: command tx timeout [ 444.395466][T13688] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 444.421069][T13918] bridge0: port 1(bridge_slave_0) entered blocking state [ 444.443412][T13918] bridge0: port 1(bridge_slave_0) entered disabled state [ 444.455371][T13918] bridge_slave_0: entered allmulticast mode [ 444.463954][T13918] bridge_slave_0: entered promiscuous mode [ 444.484495][T13918] bridge0: port 2(bridge_slave_1) entered blocking state [ 444.493782][T13918] bridge0: port 2(bridge_slave_1) entered disabled state [ 444.506769][T13918] bridge_slave_1: entered allmulticast mode [ 444.517698][T13918] bridge_slave_1: entered promiscuous mode [ 444.536209][T13921] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.559873][ T5842] Bluetooth: hci0: command tx timeout [ 444.563463][T13921] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.624629][T13688] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 444.745771][T13688] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.761261][T13688] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.775302][T13688] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.786581][T13688] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 444.811036][T13918] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 444.851021][T13921] team0: Port device team_slave_0 added [ 444.913326][T13918] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 444.938555][T13921] team0: Port device team_slave_1 added [ 444.947804][T14005] x_tables: duplicate underflow at hook 2 [ 445.049524][ T53] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.131745][T13921] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.144741][T13921] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.177858][T13921] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.195834][T13921] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.203624][T13921] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.230222][T13921] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.312394][T13918] team0: Port device team_slave_0 added [ 445.348233][ T53] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.360414][ T5842] Bluetooth: hci3: command 0x041b tx timeout [ 445.405876][T13918] team0: Port device team_slave_1 added [ 445.557291][T13918] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 445.565898][T13918] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.593311][T13918] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 445.637458][ T53] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 445.774233][T13921] hsr_slave_0: entered promiscuous mode [ 445.788481][T13921] hsr_slave_1: entered promiscuous mode [ 445.803176][T13921] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 445.811140][T13921] Cannot create hsr debugfs directory [ 445.826977][T13918] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 445.834310][T13918] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 445.861908][T13918] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 445.877101][T14011] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1746'. [ 445.886644][T14011] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1746'. [ 445.933610][ T53] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 446.175192][T14014] netlink: 'syz.5.1747': attribute type 1 has an invalid length. [ 446.186785][T14014] netlink: 'syz.5.1747': attribute type 1 has an invalid length. [ 446.195512][T14014] netlink: 244 bytes leftover after parsing attributes in process `syz.5.1747'. [ 446.319543][ T5844] Bluetooth: hci2: command tx timeout [ 446.554206][ T994] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 446.589233][ T994] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 446.639896][ T5844] Bluetooth: hci0: command tx timeout [ 446.666341][T13918] hsr_slave_0: entered promiscuous mode [ 446.683802][T13918] hsr_slave_1: entered promiscuous mode [ 446.696531][T13918] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 446.708014][T13918] Cannot create hsr debugfs directory [ 446.990245][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 447.014865][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 447.165406][T14042] syz_tun: tun_net_xmit 42 [ 447.378136][T14045] netlink: 'syz.5.1752': attribute type 3 has an invalid length. [ 447.439713][ T5844] Bluetooth: hci3: command 0x041b tx timeout [ 447.448489][ T53] bridge_slave_1: left allmulticast mode [ 447.454959][ T53] bridge_slave_1: left promiscuous mode [ 447.467701][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.486777][ T53] bridge_slave_0: left allmulticast mode [ 447.492729][ T53] bridge_slave_0: left promiscuous mode [ 447.498600][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 447.517288][ T53] bridge_slave_1: left allmulticast mode [ 447.523887][ T53] bridge_slave_1: left promiscuous mode [ 447.531838][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 447.544571][ T53] bridge_slave_0: left allmulticast mode [ 447.554420][ T53] bridge_slave_0: left promiscuous mode [ 447.561748][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.249333][ C0] syz_tun: tun_net_xmit 42 [ 448.311828][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.327125][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.338619][ T53] bond0 (unregistering): Released all slaves [ 448.409376][ T5844] Bluetooth: hci2: command tx timeout [ 448.475994][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 448.488470][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 448.500773][ T53] bond0 (unregistering): Released all slaves [ 448.842578][T13894] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 449.054111][T13894] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 449.151447][T13894] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 449.290910][ C0] syz_tun: tun_net_xmit 42 [ 449.366907][T13894] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 449.519957][ T5844] Bluetooth: hci3: command 0x041b tx timeout [ 449.621996][ T5842] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 449.632559][ T5842] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 449.643125][ T5842] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 449.668455][ T5842] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 449.682108][ T5842] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 449.735694][ T53] hsr_slave_0: left promiscuous mode [ 449.742916][ T53] hsr_slave_1: left promiscuous mode [ 449.749943][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.758264][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.769172][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.776707][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.801744][ T53] hsr_slave_0: left promiscuous mode [ 449.807896][ T53] hsr_slave_1: left promiscuous mode [ 449.814541][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 449.822745][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 449.832837][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.840750][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 449.887310][ T53] veth1_macvtap: left promiscuous mode [ 449.893426][ T53] veth0_macvtap: left promiscuous mode [ 449.899162][ T53] veth1_vlan: left promiscuous mode [ 449.904515][ T53] veth0_vlan: left promiscuous mode [ 449.913441][ T53] veth1_macvtap: left promiscuous mode [ 449.920321][ T53] veth0_macvtap: left promiscuous mode [ 449.926037][ T53] veth1_vlan: left promiscuous mode [ 449.931878][ T53] veth0_vlan: left promiscuous mode [ 450.771914][ T53] team0 (unregistering): Port device team_slave_1 removed [ 450.826718][ T53] team0 (unregistering): Port device team_slave_0 removed [ 451.605756][ T5844] Bluetooth: hci3: command 0x041b tx timeout [ 451.759224][ T5844] Bluetooth: hci6: command tx timeout [ 451.951148][ T53] team0 (unregistering): Port device team_slave_1 removed [ 452.007612][ T53] team0 (unregistering): Port device team_slave_0 removed [ 453.136435][T13894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 453.263714][T14087] xt_CT: You must specify a L4 protocol and not use inversions on it [ 453.269818][T13894] 8021q: adding VLAN 0 to HW filter on device team0 [ 453.465628][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.472933][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 453.503517][T14091] netlink: 'syz.5.1762': attribute type 10 has an invalid length. [ 453.526232][T10622] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.533533][T10622] bridge0: port 2(bridge_slave_1) entered forwarding state [ 453.593044][T13918] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 453.618268][T14091] macvlan0: entered promiscuous mode [ 453.628350][T14091] macvlan0: entered allmulticast mode [ 453.659953][T14091] veth1_vlan: entered allmulticast mode [ 453.672271][T14091] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 453.683782][T13918] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 453.734873][T13918] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 453.753855][T14067] chnl_net:caif_netlink_parms(): no params data found [ 453.810945][T13918] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 453.826492][T14093] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1763'. [ 453.839690][ T5844] Bluetooth: hci6: command tx timeout [ 454.104525][T14067] bridge0: port 1(bridge_slave_0) entered blocking state [ 454.122207][T14067] bridge0: port 1(bridge_slave_0) entered disabled state [ 454.148876][T14067] bridge_slave_0: entered allmulticast mode [ 454.161443][T14067] bridge_slave_0: entered promiscuous mode [ 454.180484][T13921] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 454.216796][T13921] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 454.245019][T14067] bridge0: port 2(bridge_slave_1) entered blocking state [ 454.254810][T14067] bridge0: port 2(bridge_slave_1) entered disabled state [ 454.263219][T14067] bridge_slave_1: entered allmulticast mode [ 454.271751][T14067] bridge_slave_1: entered promiscuous mode [ 454.355639][T13921] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 454.439750][T14067] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 454.474563][T13921] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 454.521620][T14112] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1766'. [ 454.538227][T14067] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 454.619985][T14116] netlink: 'syz.5.1766': attribute type 1 has an invalid length. [ 454.627802][T14116] netlink: 224 bytes leftover after parsing attributes in process `syz.5.1766'. [ 454.645572][T13918] 8021q: adding VLAN 0 to HW filter on device bond0 [ 454.782434][ T53] netdevsim netdevsim6 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.857156][T14116] netlink: 116 bytes leftover after parsing attributes in process `syz.5.1766'. [ 454.909507][ T53] netdevsim netdevsim6 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 454.937468][T13918] 8021q: adding VLAN 0 to HW filter on device team0 [ 455.018262][ T53] netdevsim netdevsim6 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.046656][T14067] team0: Port device team_slave_0 added [ 455.082217][T14067] team0: Port device team_slave_1 added [ 455.184672][ T53] netdevsim netdevsim6 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 455.253225][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.260480][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 455.286866][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.294147][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 455.404568][T13894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 455.433379][T14067] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 455.453929][T14067] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.548637][T14067] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 455.576940][T14067] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 455.591450][T14067] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 455.649312][T14067] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 455.919760][ T5844] Bluetooth: hci6: command tx timeout [ 456.235453][T14067] hsr_slave_0: entered promiscuous mode [ 456.283615][T14067] hsr_slave_1: entered promiscuous mode [ 456.297002][T14067] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 456.307287][T14067] Cannot create hsr debugfs directory [ 456.440702][ T53] bridge_slave_1: left allmulticast mode [ 456.446431][ T53] bridge_slave_1: left promiscuous mode [ 456.483352][ T53] bridge0: port 2(bridge_slave_1) entered disabled state [ 456.515541][ T53] bridge_slave_0: left allmulticast mode [ 456.535061][ T53] bridge_slave_0: left promiscuous mode [ 456.541715][ T53] bridge0: port 1(bridge_slave_0) entered disabled state [ 456.879061][T14171] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1773'. [ 456.932528][T14167] netlink: 260 bytes leftover after parsing attributes in process `syz.5.1773'. [ 457.209334][ T53] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 457.224372][ T53] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 457.236981][ T53] bond0 (unregistering): Released all slaves [ 457.309728][T14166] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1773'. [ 457.980393][T13921] 8021q: adding VLAN 0 to HW filter on device bond0 [ 457.998260][T13894] veth0_vlan: entered promiscuous mode [ 457.999219][ T5844] Bluetooth: hci6: command tx timeout [ 458.064864][ T53] hsr_slave_0: left promiscuous mode [ 458.077779][ T53] hsr_slave_1: left promiscuous mode [ 458.094789][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 458.105108][ T53] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 458.121744][ T53] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 458.136648][ T53] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 458.201784][ T53] veth1_macvtap: left promiscuous mode [ 458.213460][ T53] veth0_macvtap: left promiscuous mode [ 458.224254][ T53] veth1_vlan: left promiscuous mode [ 458.231946][ T53] veth0_vlan: left promiscuous mode [ 459.501820][ T53] team0 (unregistering): Port device team_slave_1 removed [ 459.593645][ T53] team0 (unregistering): Port device team_slave_0 removed [ 460.345567][T13918] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 460.361844][T13894] veth1_vlan: entered promiscuous mode [ 460.416150][T13921] 8021q: adding VLAN 0 to HW filter on device team0 [ 460.544150][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 460.551425][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 460.570873][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 460.578141][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 460.696867][T13918] veth0_vlan: entered promiscuous mode [ 460.806522][T13894] veth0_macvtap: entered promiscuous mode [ 460.864390][T13918] veth1_vlan: entered promiscuous mode [ 460.899771][T13894] veth1_macvtap: entered promiscuous mode [ 460.937696][T14231] tipc: Enabled bearer , priority 0 [ 461.040558][T14231] syzkaller0: entered promiscuous mode [ 461.046315][T14231] syzkaller0: entered allmulticast mode [ 461.054050][T14231] tipc: Resetting bearer [ 461.065529][T14230] tipc: Resetting bearer [ 463.071776][T14230] tipc: Disabling bearer [ 463.198881][T13894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.233122][T13894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.298596][T13894] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.319214][T13894] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.327972][T13894] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.337593][T13894] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.397399][T13918] veth0_macvtap: entered promiscuous mode [ 463.476791][T14067] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 463.502080][T14067] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 463.523965][T14067] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 463.546643][T14067] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 463.567682][T13918] veth1_macvtap: entered promiscuous mode [ 463.655812][T13918] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 463.782012][T13918] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 463.843969][T13918] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.861866][T13918] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.875158][T13918] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.886199][T13918] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 463.914187][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 463.928775][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.103752][T13921] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 464.227906][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.259307][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.535939][T14067] 8021q: adding VLAN 0 to HW filter on device bond0 [ 464.599488][T10622] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.608091][T10622] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 464.807525][T13921] veth0_vlan: entered promiscuous mode [ 464.853543][T10622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 464.886542][T10622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 465.021657][ T994] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.084375][T14067] 8021q: adding VLAN 0 to HW filter on device team0 [ 465.115380][T13921] veth1_vlan: entered promiscuous mode [ 465.246056][ T994] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.313413][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 465.320685][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 465.433600][ T994] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.471246][ T3015] bridge0: port 2(bridge_slave_1) entered blocking state [ 465.478478][ T3015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 465.582063][ T994] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 465.688723][T13921] veth0_macvtap: entered promiscuous mode [ 465.724394][T13921] veth1_macvtap: entered promiscuous mode [ 465.808160][T13921] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 465.858010][T13921] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 465.982460][T13921] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.013008][T13921] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.036279][T13921] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.046548][T13921] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 466.194766][ T994] bridge_slave_1: left allmulticast mode [ 466.220497][ T994] bridge_slave_1: left promiscuous mode [ 466.226426][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 466.276795][ T994] bridge_slave_0: left allmulticast mode [ 466.286521][ T994] bridge_slave_0: left promiscuous mode [ 466.293084][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 466.579436][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 466.598768][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 466.608632][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 466.634292][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 466.656705][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 466.889558][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.902147][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.915343][ T994] bond0 (unregistering): Released all slaves [ 467.056487][T14067] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 467.214229][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.233905][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.468898][ T5910] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 467.477039][ T5910] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 467.503985][ T994] hsr_slave_0: left promiscuous mode [ 467.511520][ T994] hsr_slave_1: left promiscuous mode [ 467.517945][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.540670][ T994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.555741][ T994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.592002][ T994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.664210][ T994] veth1_macvtap: left promiscuous mode [ 467.690185][ T994] veth0_macvtap: left promiscuous mode [ 467.709080][ T994] veth1_vlan: left promiscuous mode [ 467.714474][ T994] veth0_vlan: left promiscuous mode [ 468.262160][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 468.273033][ T5842] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 468.286618][ T5842] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 468.297788][ T5842] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 468.313175][ T5842] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 468.729858][ T5842] Bluetooth: hci0: command tx timeout [ 468.846202][ T994] team0 (unregistering): Port device team_slave_1 removed [ 468.912376][ T994] team0 (unregistering): Port device team_slave_0 removed [ 469.789361][T14325] ksmbd: Unknown IPC event: 3, ignore. [ 470.209562][T14292] chnl_net:caif_netlink_parms(): no params data found [ 470.375370][T14067] veth0_vlan: entered promiscuous mode [ 470.400617][ T5842] Bluetooth: hci2: command tx timeout [ 470.497396][ T994] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.683416][T14067] veth1_vlan: entered promiscuous mode [ 470.734850][ T994] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.799938][ T5842] Bluetooth: hci0: command tx timeout [ 470.901969][ T994] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 470.996257][ T994] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 471.027550][T14292] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.044424][T14292] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.057261][T14292] bridge_slave_0: entered allmulticast mode [ 471.068709][T14292] bridge_slave_0: entered promiscuous mode [ 471.082971][T14317] chnl_net:caif_netlink_parms(): no params data found [ 471.107217][T14292] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.117435][T14292] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.127459][T14292] bridge_slave_1: entered allmulticast mode [ 471.136394][T14292] bridge_slave_1: entered promiscuous mode [ 471.239684][T14067] veth0_macvtap: entered promiscuous mode [ 471.317813][T14292] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.388626][T14292] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.415008][T14067] veth1_macvtap: entered promiscuous mode [ 471.544846][T14317] bridge0: port 1(bridge_slave_0) entered blocking state [ 471.556740][T14317] bridge0: port 1(bridge_slave_0) entered disabled state [ 471.568861][T14317] bridge_slave_0: entered allmulticast mode [ 471.577643][T14317] bridge_slave_0: entered promiscuous mode [ 471.595983][T14292] team0: Port device team_slave_0 added [ 471.607776][T14292] team0: Port device team_slave_1 added [ 471.620873][T14317] bridge0: port 2(bridge_slave_1) entered blocking state [ 471.640108][T14317] bridge0: port 2(bridge_slave_1) entered disabled state [ 471.647819][T14317] bridge_slave_1: entered allmulticast mode [ 471.676199][T14317] bridge_slave_1: entered promiscuous mode [ 471.934780][T14292] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 471.949781][T14292] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 471.984884][T14292] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.015263][T14317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 472.033136][T14317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 472.061261][T14292] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 472.070437][T14292] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.100041][T14292] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 472.127559][T14067] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 472.217523][ T5844] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 472.229773][ T5844] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 472.238007][ T5844] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 472.249720][ T5844] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 472.257498][ T5844] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 472.311921][ T994] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.349575][T14367] netlink: 'syz.5.1789': attribute type 4 has an invalid length. [ 472.382789][T14317] team0: Port device team_slave_0 added [ 472.412724][T14317] team0: Port device team_slave_1 added [ 472.479595][ T5842] Bluetooth: hci2: command tx timeout [ 472.504604][T14378] x_tables: ip6_tables: MASQUERADE target: used from hooks INPUT, but only usable from POSTROUTING [ 472.524583][T14379] netlink: 'syz.5.1790': attribute type 39 has an invalid length. [ 472.616470][T14292] hsr_slave_0: entered promiscuous mode [ 472.627437][T14292] hsr_slave_1: entered promiscuous mode [ 472.708223][T14067] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 472.785353][ T994] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 472.814403][T14317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 472.822553][T14317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 472.857033][T14317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 472.881018][ T5842] Bluetooth: hci0: command tx timeout [ 472.919675][T14067] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.936849][T14067] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.946478][T14067] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 472.966323][T14067] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 473.101502][ T994] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.137954][T14391] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1791'. [ 473.154827][T14317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 473.161974][T14317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 473.195088][T14317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 473.292479][ T994] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 473.562380][T14317] hsr_slave_0: entered promiscuous mode [ 473.572463][T14317] hsr_slave_1: entered promiscuous mode [ 473.581466][T14317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 473.590939][T14317] Cannot create hsr debugfs directory [ 473.738337][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 473.754764][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 474.015002][T14409] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1795'. [ 474.169260][ T994] bridge_slave_1: left allmulticast mode [ 474.175017][ T994] bridge_slave_1: left promiscuous mode [ 474.187797][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.206205][ T994] bridge_slave_0: left allmulticast mode [ 474.219403][ T994] bridge_slave_0: left promiscuous mode [ 474.225403][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.282561][ T994] bridge_slave_1: left allmulticast mode [ 474.288316][ T994] bridge_slave_1: left promiscuous mode [ 474.295922][ T994] bridge0: port 2(bridge_slave_1) entered disabled state [ 474.309968][ T994] bridge_slave_0: left allmulticast mode [ 474.315687][ T994] bridge_slave_0: left promiscuous mode [ 474.322279][ T5842] Bluetooth: hci3: command tx timeout [ 474.339285][ T994] bridge0: port 1(bridge_slave_0) entered disabled state [ 474.572239][ T5842] Bluetooth: hci2: command tx timeout [ 474.982019][ T5842] Bluetooth: hci0: command tx timeout [ 475.445826][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.457672][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.473678][ T994] bond0 (unregistering): Released all slaves [ 475.644383][ T994] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 475.656130][ T994] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 475.668501][ T994] bond0 (unregistering): Released all slaves [ 475.831125][T14427] Cannot find add_set index 0 as target [ 475.885573][T10622] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 475.894864][T10622] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 475.954699][T14428] syz_tun: tun_net_xmit 42 [ 476.160872][ T31] INFO: task syz.1.1429:12074 blocked for more than 143 seconds. [ 476.179418][ T31] Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 [ 476.187152][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 476.203616][ T31] task:syz.1.1429 state:D stack:25656 pid:12074 tgid:12073 ppid:5838 task_flags:0x400140 flags:0x00000004 [ 476.217217][ T31] Call Trace: [ 476.224856][ T31] [ 476.227863][ T31] __schedule+0x16e2/0x4cd0 [ 476.235729][ T31] ? __lock_acquire+0xaac/0xd20 [ 476.245709][ T31] ? schedule+0x165/0x360 [ 476.276995][ T31] ? __pfx___schedule+0x10/0x10 [ 476.295668][ T31] ? schedule+0x91/0x360 [ 476.327192][ T31] schedule+0x165/0x360 [ 476.340532][ T31] schedule_preempt_disabled+0x13/0x30 [ 476.346111][ T31] __mutex_lock+0x724/0xe80 [ 476.356753][ T31] ? __mutex_lock+0x51b/0xe80 [ 476.362016][ T31] ? nfsd_nl_listener_set_doit+0x12a/0x1650 [ 476.367982][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 476.382869][ T31] ? __asan_memset+0x22/0x50 [ 476.387556][ T31] ? ____sys_sendmsg+0x505/0x830 [ 476.398486][ T31] ? ___sys_sendmsg+0x21f/0x2a0 [ 476.405009][ T31] ? __x64_sys_sendmsg+0x19b/0x260 [ 476.409734][ T5842] Bluetooth: hci3: command tx timeout [ 476.429259][ T31] nfsd_nl_listener_set_doit+0x12a/0x1650 [ 476.435684][ T31] ? __pfx___nla_validate_parse+0x10/0x10 [ 476.447054][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 476.453809][ T31] ? __nla_parse+0x40/0x60 [ 476.458398][ T31] ? genl_family_rcv_msg_attrs_parse+0x1c9/0x2a0 [ 476.475111][ T31] genl_family_rcv_msg_doit+0x212/0x300 [ 476.489528][ T31] ? __pfx_genl_family_rcv_msg_doit+0x10/0x10 [ 476.495738][ T31] ? bpf_lsm_capable+0x9/0x20 [ 476.515535][ T31] ? security_capable+0x7e/0x2e0 [ 476.527300][ T31] genl_rcv_msg+0x60e/0x790 [ 476.535249][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 476.547518][ T31] ? __pfx_nfsd_nl_listener_set_doit+0x10/0x10 [ 476.554822][ T31] netlink_rcv_skb+0x219/0x490 [ 476.566276][ T31] ? __pfx_genl_rcv_msg+0x10/0x10 [ 476.572610][ T31] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 476.578003][ T31] ? down_read+0x1ad/0x2e0 [ 476.585800][ T31] genl_rcv+0x28/0x40 [ 476.595877][ T31] netlink_unicast+0x75b/0x8d0 [ 476.601994][ T31] netlink_sendmsg+0x805/0xb30 [ 476.606862][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.620536][ T31] ? aa_sock_msg_perm+0x94/0x160 [ 476.625580][ T31] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 476.637306][ T31] ? __pfx_netlink_sendmsg+0x10/0x10 [ 476.645030][ T31] __sock_sendmsg+0x219/0x270 [ 476.649391][ T5842] Bluetooth: hci2: command tx timeout [ 476.650744][ T31] ____sys_sendmsg+0x505/0x830 [ 476.666129][ T31] ? __pfx_____sys_sendmsg+0x10/0x10 [ 476.671867][ T31] ? import_iovec+0x74/0xa0 [ 476.676468][ T31] ___sys_sendmsg+0x21f/0x2a0 [ 476.689960][ T31] ? __pfx____sys_sendmsg+0x10/0x10 [ 476.695268][ T31] ? __fget_files+0x2a/0x420 [ 476.700439][ T31] ? __fget_files+0x3a0/0x420 [ 476.705189][ T31] __x64_sys_sendmsg+0x19b/0x260 [ 476.710298][ T31] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 476.715811][ T31] ? do_syscall_64+0xba/0x210 [ 476.721130][ T31] do_syscall_64+0xf6/0x210 [ 476.725694][ T31] ? clear_bhb_loop+0x60/0xb0 [ 476.730498][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 476.736423][ T31] RIP: 0033:0x7f7a7798e969 [ 476.740927][ T31] RSP: 002b:00007f7a78723038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 476.749478][ T31] RAX: ffffffffffffffda RBX: 00007f7a77bb5fa0 RCX: 00007f7a7798e969 [ 476.757496][ T31] RDX: 0000000000000000 RSI: 0000200000000040 RDI: 0000000000000006 [ 476.765598][ T31] RBP: 00007f7a77a10ab1 R08: 0000000000000000 R09: 0000000000000000 [ 476.773750][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 476.781933][ T31] R13: 0000000000000000 R14: 00007f7a77bb5fa0 R15: 00007fff53a3eb48 [ 476.790539][ T31] [ 476.796724][T14369] workqueue: Failed to create a rescuer kthread for wq "bond0": -EINTR [ 476.822932][ T31] [ 476.822932][ T31] Showing all locks held in the system: [ 476.859022][ T31] 1 lock held by pool_workqueue_/3: [ 476.864323][ T31] #0: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 476.907740][ T31] 3 locks held by kworker/u8:0/12: [ 476.913229][ T31] #0: ffff88814cd64948 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 476.924959][ T31] #1: ffffc90000117c60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 476.937955][ T31] #2: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x112/0x14b0 [ 476.947713][ T31] 1 lock held by khungtaskd/31: [ 476.952759][ T31] #0: ffffffff8df3dce0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 476.962842][ C1] syz_tun: tun_net_xmit 42 [ 476.973271][ T31] 5 locks held by kworker/u8:5/994: [ 476.978542][ T31] #0: ffff88801aef6148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b1/0x17a0 [ 476.989738][ T31] #1: ffffc90003797c60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ec/0x17a0 [ 477.000791][ T31] #2: ffffffff8f2ea8d0 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x145/0xbd0 [ 477.010359][ T31] #3: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: ieee80211_unregister_hw+0x55/0x2c0 [ 477.020343][ T31] #4: ffff88804d6b8768 (&rdev->wiphy.mtx){+.+.}-{4:4}, at: cfg80211_netdev_notifier_call+0x1ab/0x13c0 [ 477.031656][ T31] 1 lock held by klogd/5188: [ 477.036284][ T31] #0: ffff8880b8839b58 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 477.046490][ T31] 2 locks held by dhcpcd/5494: [ 477.051345][ T31] #0: ffff88805c0436d0 (nlk_cb_mutex-ROUTE){+.+.}-{4:4}, at: netlink_dump+0xcd/0xe70 [ 477.061106][ T31] #1: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_dumpit+0x92/0x200 [ 477.070115][ T31] 2 locks held by getty/5590: [ 477.074842][ T31] #0: ffff8880303c10a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 477.093684][ T31] #1: ffffc900030162f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 477.107843][ T31] 2 locks held by syz.0.1069/10193: [ 477.117357][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 477.131758][ T31] #1: ffffffff8e2139a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 477.146211][ T31] 2 locks held by syz.1.1429/12074: [ 477.154221][ T31] #0: ffffffff8f35b9f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 477.166886][ T31] #1: ffffffff8e2139a8 (nfsd_mutex){+.+.}-{4:4}, at: nfsd_nl_listener_set_doit+0x12a/0x1650 [ 477.184990][ T31] 1 lock held by syz-executor/14067: [ 477.190638][ T31] #0: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 477.202623][ T31] 2 locks held by syz-executor/14292: [ 477.208027][ T31] #0: ffffffff8f7f3eb8 (&ops->srcu#2){.+.+}-{0:0}, at: rtnl_link_ops_get+0x23/0x250 [ 477.217739][ T31] #1: ffffffff8f2f7408 (rtnl_mutex){+.+.}-{4:4}, at: rtnl_newlink+0x8db/0x1c70 [ 477.226971][ T31] 1 lock held by syz-executor/14317: [ 477.232391][ T31] #0: ffffffff8df437b8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b7/0x730 [ 477.243500][ T31] 4 locks held by syz.5.1799/14433: [ 477.248697][ T31] #0: ffff88805b04cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x1fe/0x500 [ 477.258857][ T31] #1: ffff88805b04c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 477.268641][ T31] #2: ffffffff8f45ce48 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 477.278844][ T31] #3: ffff888023d4eb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 477.288467][ T31] [ 477.291939][ T31] ============================================= [ 477.291939][ T31] [ 477.301311][ T31] NMI backtrace for cpu 0 [ 477.301340][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 477.301363][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 477.301374][ T31] Call Trace: [ 477.301383][ T31] [ 477.301392][ T31] dump_stack_lvl+0x189/0x250 [ 477.301436][ T31] ? __wake_up_klogd+0xd9/0x110 [ 477.301465][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.301494][ T31] ? __pfx__printk+0x10/0x10 [ 477.301527][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 477.301555][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 477.301573][ T31] ? irqentry_exit+0x74/0x90 [ 477.301599][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.301634][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 477.301660][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 477.301685][ T31] watchdog+0xfee/0x1030 [ 477.301715][ T31] ? watchdog+0x1de/0x1030 [ 477.301750][ T31] kthread+0x711/0x8a0 [ 477.301780][ T31] ? __pfx_watchdog+0x10/0x10 [ 477.301803][ T31] ? __pfx_kthread+0x10/0x10 [ 477.301828][ T31] ? __pfx_kthread+0x10/0x10 [ 477.301850][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 477.301872][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.301896][ T31] ? __pfx_kthread+0x10/0x10 [ 477.301917][ T31] ret_from_fork+0x4b/0x80 [ 477.301938][ T31] ? __pfx_kthread+0x10/0x10 [ 477.301960][ T31] ret_from_fork_asm+0x1a/0x30 [ 477.301992][ T31] [ 477.302930][ T31] Sending NMI from CPU 0 to CPUs 1: [ 477.459541][ C1] NMI backtrace for cpu 1 [ 477.459562][ C1] CPU: 1 UID: 0 PID: 838 Comm: kworker/1:2 Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 477.459590][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 477.459603][ C1] Workqueue: events drain_vmap_area_work [ 477.459637][ C1] RIP: 0010:do_raw_spin_trylock+0x42/0x180 [ 477.459669][ C1] Code: 89 fb 65 48 8b 05 ee a9 d6 10 48 89 44 24 48 49 bf 00 00 00 00 00 fc ff df 48 c7 04 24 b3 8a b5 41 48 c7 44 24 08 65 46 89 8d <48> c7 44 24 10 10 e6 9e 81 49 89 e4 49 c1 ec 03 48 b8 f1 f1 f1 f1 [ 477.459686][ C1] RSP: 0018:ffffc900031ff6c0 EFLAGS: 00000286 [ 477.459702][ C1] RAX: 6dbcd852e3e60100 RBX: ffff8880b893f6c0 RCX: ffffffff9980b603 [ 477.459716][ C1] RDX: 0000000000000000 RSI: ffffffff8bc1d980 RDI: ffff8880b893f6c0 [ 477.459729][ C1] RBP: ffffc900031ff748 R08: dffffc0000000000 R09: 0000000000000000 [ 477.459741][ C1] R10: ffffed100aef0e00 R11: fffffbfff1efdfcf R12: ffffea00015de1c0 [ 477.459755][ C1] R13: ffff88813fffbb80 R14: ffff8880b893f6c0 R15: dffffc0000000000 [ 477.459769][ C1] FS: 0000000000000000(0000) GS:ffff8881261c7000(0000) knlGS:0000000000000000 [ 477.459784][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 477.459795][ C1] CR2: 0000561e87b24000 CR3: 0000000044176000 CR4: 00000000003526f0 [ 477.459811][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 477.459821][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 477.459832][ C1] Call Trace: [ 477.459840][ C1] [ 477.459854][ C1] ? __page_table_check_zero+0xba/0x510 [ 477.459886][ C1] _raw_spin_trylock+0x21/0x80 [ 477.459908][ C1] __free_frozen_pages+0x667/0xcd0 [ 477.459940][ C1] kasan_depopulate_vmalloc_pte+0x75/0x90 [ 477.459962][ C1] __apply_to_page_range+0x7cb/0xd20 [ 477.460000][ C1] ? __pfx_kasan_depopulate_vmalloc_pte+0x10/0x10 [ 477.460022][ C1] ? __pfx___apply_to_page_range+0x10/0x10 [ 477.460040][ C1] ? smp_call_function_many_cond+0xefe/0x11c0 [ 477.460077][ C1] ? _raw_spin_unlock+0x28/0x50 [ 477.460100][ C1] kasan_release_vmalloc+0xa2/0xd0 [ 477.460119][ C1] purge_vmap_node+0x245/0x880 [ 477.460135][ C1] ? __pfx_smp_call_function_many_cond+0x10/0x10 [ 477.460169][ C1] ? __pfx_purge_vmap_node+0x10/0x10 [ 477.460188][ C1] ? flush_tlb_kernel_range+0x358/0x470 [ 477.460219][ C1] __purge_vmap_area_lazy+0x71a/0xae0 [ 477.460239][ C1] ? process_scheduled_works+0x9ec/0x17a0 [ 477.460257][ C1] drain_vmap_area_work+0x27/0x40 [ 477.460272][ C1] process_scheduled_works+0xade/0x17a0 [ 477.460304][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 477.460353][ C1] worker_thread+0x8a0/0xda0 [ 477.460370][ C1] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 477.460393][ C1] ? __kthread_parkme+0x7b/0x200 [ 477.460433][ C1] kthread+0x711/0x8a0 [ 477.460455][ C1] ? __pfx_worker_thread+0x10/0x10 [ 477.460472][ C1] ? __pfx_kthread+0x10/0x10 [ 477.460493][ C1] ? __pfx_kthread+0x10/0x10 [ 477.460513][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 477.460531][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 477.460554][ C1] ? __pfx_kthread+0x10/0x10 [ 477.460580][ C1] ret_from_fork+0x4b/0x80 [ 477.460597][ C1] ? __pfx_kthread+0x10/0x10 [ 477.460618][ C1] ret_from_fork_asm+0x1a/0x30 [ 477.460644][ C1] [ 477.912090][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 477.919051][ T31] CPU: 0 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.15.0-rc6-syzkaller-00160-gc39b1bb5bc6d #0 PREEMPT(full) [ 477.930907][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 477.941017][ T31] Call Trace: [ 477.944324][ T31] [ 477.947277][ T31] dump_stack_lvl+0x99/0x250 [ 477.951925][ T31] ? __asan_memcpy+0x40/0x70 [ 477.956559][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 477.961900][ T31] ? __pfx__printk+0x10/0x10 [ 477.966540][ T31] panic+0x2db/0x790 [ 477.970486][ T31] ? __pfx_panic+0x10/0x10 [ 477.974942][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 477.980792][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 477.986219][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 477.992464][ T31] watchdog+0x102d/0x1030 [ 477.996842][ T31] ? watchdog+0x1de/0x1030 [ 478.001319][ T31] kthread+0x711/0x8a0 [ 478.005439][ T31] ? __pfx_watchdog+0x10/0x10 [ 478.010150][ T31] ? __pfx_kthread+0x10/0x10 [ 478.014938][ T31] ? __pfx_kthread+0x10/0x10 [ 478.019555][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 478.024785][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 478.030003][ T31] ? __pfx_kthread+0x10/0x10 [ 478.034607][ T31] ret_from_fork+0x4b/0x80 [ 478.039030][ T31] ? __pfx_kthread+0x10/0x10 [ 478.043635][ T31] ret_from_fork_asm+0x1a/0x30 [ 478.048423][ T31] [ 478.051928][ T31] Kernel Offset: disabled [ 478.056303][ T31] Rebooting in 86400 seconds..