last executing test programs: 2m7.965582723s ago: executing program 2 (id=666): r0 = socket$inet(0x2, 0x3, 0x8d) setsockopt$inet_msfilter(r0, 0x0, 0x8, &(0x7f00000000c0)=ANY=[@ANYRESDEC], 0x1) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @local}, &(0x7f0000000140)=0xc) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_inet6_SIOCSIFADDR(r2, 0x8916, &(0x7f0000000000)={@private0={0xfc, 0x0, '\x00', 0x1}, 0x0, r1}) r3 = socket(0xa, 0x1, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000300)={0x0, @in={{0x2, 0x4e24, @empty}}, 0x3ff, 0x7}, &(0x7f0000000240)=0x90) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, 0x0) ioctl(r2, 0x8916, &(0x7f0000000000)) ioctl(r3, 0x8936, &(0x7f0000000000)) 2m7.349829607s ago: executing program 2 (id=670): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="170900100000000000000100000008000900e400000500000a0001000000"], 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x0) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$ITER_CREATE(0x21, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000a00)=ANY=[@ANYBLOB="0d00000004001000040000000b00000001820000", @ANYRES32, @ANYBLOB="017101000000e4642aa2ab7ede00000000000000e2d06dd8cf580e9b40e8b8cf9798b8c424cfdd4b343322981536fde408d62d8627c34fa9a2a53143900f039b0a47d57c5f635a64837f8a026f949807f8d6d19a7218baf2d0f336aeb2d239aef5ee8d0e9521a686f66f6a565c78c14ccd42e10e939f9abbaba12c2118344a4e0a218ba895f97fbab6c619dca8692647a0", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="e200000000ff45f0fd0a25f286223f27e333e4b20000", @ANYRESHEX=r1, @ANYRESHEX=r0], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000700)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000040)='sched_switch\x00', r4}, 0x18) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000380), &(0x7f0000000380), 0x2, r3}, 0x38) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000080)={0x0, &(0x7f00000001c0)=""/40, &(0x7f00000001c0), &(0x7f00000000c0), 0x1, r3}, 0x38) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000540)=ANY=[@ANYBLOB="1400000015b04d917aa005113750c20b65cf8e0ab2c79ad61bd4581d00019f1dc95486d1c2dccd280aa87c88101cbc19cf61e42caa88e1e55b36e81eb05ccd6194e582d1ff81e51a59c253b965692efd54dcd99ff79f62c9c8c6143eccf09249caed100ef6c61b3372bc0143726c93067fab9544796791"], 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x1) read(r5, &(0x7f0000000080)=""/186, 0xba) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYBLOB="207706d75115ad8b360086efe23cdcc31ab1000400fbb63eff62e69c4366f2090701fca9e078c180a90926e23b99d9e6b59046b7c5a2f7bdf93393c7daca6a297ed689c5879f"], 0x20}}, 0x8044) ioctl$sock_SIOCSIFBR(r2, 0x890c, &(0x7f0000000000)=@generic={0x0, 0x2}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="9feb0100180000000000000024000000240000000b0000000000000000000003000000000100006d06c900010000040000000008000000000000120a010000005f2e003061612e30610062c985b64c8d07f1f089f175b903ea2311aa8fe41352b6501da3823fa54d5f10600a59f9b847c3e754471e51fb9d3f2480b23824b04b226c51056ac328bd5b2be917425269fe23980f40ff9226f6556be56c9f72f1d60d41f83bd34dd03326587a"], 0x0, 0x47}, 0x28) r7 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000000), 0x8) r8 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$BTRFS_IOC_QUOTA_CTL(r8, 0xc0109428, &(0x7f0000000000)={0x1, 0x61}) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x8, 0x6, &(0x7f0000000240)=ANY=[@ANYBLOB="b40800000000000073114100000000008510000002000000b7000000000000009500c200000000009500001200000000b609c5d8cc5a475dd466048a2af0057092bcc1631cb63d7cdb"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x38, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0xfffffffffffffee2}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000005c0)={r9, 0xe0, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, &(0x7f0000001640)=[0x0], 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, 0x8, 0x0, 0x0}}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_AUTHENTICATE(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={0x0, 0x124}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) r11 = socket$inet6(0xa, 0x2, 0x3a) sendmmsg$inet6(r11, &(0x7f0000000b80)=[{{&(0x7f0000000140)={0xa, 0x4e20, 0x7ffe, @remote, 0x4}, 0x1c, 0x0, 0x0, &(0x7f00000006c0)=ANY=[], 0x18}}], 0x1, 0x4000084) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="5c000000020601030000000000000000000000000900020073797a30001c0000050001000600000005000500000000000500040000000000140007800800114000000000080012400000ffff0d000300686173683a6d616300000000"], 0x5c}}, 0x0) 2m6.389974396s ago: executing program 2 (id=676): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000100)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@func_proto={0x0, 0x2}]}}, &(0x7f0000001f80)=""/212, 0x26, 0xd4, 0xa}, 0x20) sendmsg$MPTCP_PM_CMD_ADD_ADDR(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x20044811}, 0x2000c094) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="60000000020601080000000000f200000000000014000780080011"], 0x60}, 0x1, 0x0, 0x0, 0x44080}, 0x8040) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_EXTHDR_OP={0x8, 0x6, 0x1, 0x0, 0x4}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0xc1c6eeb1d29c64e8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}}, 0x840) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[], 0x24}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmmsg(r1, &(0x7f0000000000), 0x3ffff70, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r0, 0x2000012, 0x100e, 0x7ffe, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2m6.218195814s ago: executing program 2 (id=678): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x850) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) (async) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000100)=ANY=[], 0x32600) r0 = socket$igmp6(0xa, 0x3, 0x3a) setsockopt$MRT6_ADD_MFC(r0, 0x29, 0x22, &(0x7f0000000000)={{0xa, 0x0, 0x101, @mcast1, 0x8}, {0xa, 0x0, 0xfffffffd, @private2, 0x6}, 0x0, {[0x6, 0x200, 0x1, 0xfffffefc, 0x2d, 0x1, 0x0, 0x200003]}}, 0x5c) (async, rerun: 32) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) (async, rerun: 32) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000540)=@base={0x1, 0x7, 0x10001, 0x9, 0x1}, 0x50) socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={0x0, 0xffffffffffffffff, 0x0, 0x1c, &(0x7f0000000000)='/proc/1/\x00\x82q\xee\xe5\xa0\xbd\xc2\x98#YP\xee\x9c2G\xf0\x81x\x97'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000400000071108c000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async, rerun: 32) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0), 0x48) (rerun: 32) bpf$MAP_LOOKUP_ELEM(0x5, &(0x7f00000000c0)={r2, &(0x7f0000000000), &(0x7f0000000040)=""/73}, 0x70) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) (async, rerun: 64) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={0x0, 0x8}, 0x8) (rerun: 64) bind$inet6(r1, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) ioctl$F2FS_IOC_RELEASE_COMPRESS_BLOCKS(r0, 0x8008f512, &(0x7f0000000080)) (async) sendmmsg$inet6(r1, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback, 0x1}, 0x70, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) (async) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r1, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) 2m6.127273635s ago: executing program 2 (id=679): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r2, 0x1, 0x10, &(0x7f0000000100)=0xffff, 0x4) writev(r1, &(0x7f0000000cc0)=[{&(0x7f0000000780)="1e", 0x1}], 0x1) r3 = socket$inet(0x2, 0x6, 0x407) r4 = socket(0x10, 0x3, 0x0) close(0x3) r5 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$netrom(r5, &(0x7f0000000300)={{0x6, @rose, 0x1}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}, 0x48) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) bind$netrom(r6, &(0x7f00000004c0)={{0x6, @rose, 0x1}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) listen(r6, 0x80) accept$netrom(r6, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000a, 0x4031, 0xffffffffffffffff, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0xfffffffe}, 0x48) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x50) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000800)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r10}, 0x10) socketpair(0x18, 0x0, 0x2, &(0x7f0000000000)) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r7, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x4000, 0x9ffffc}) recvmmsg(r5, &(0x7f0000007cc0)=[{{0x0, 0x0, 0x0}, 0x80}], 0x1, 0x32000, 0x0) sendmsg$nl_route(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}}, 0x20}}, 0x0) recvmmsg(r3, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}, 0x3}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=""/108, 0x6c}, 0xb}], 0x2, 0x0, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) socket$netlink(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) 2m5.105309127s ago: executing program 2 (id=682): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7fffffff}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r3, 0x0, 0xfffffffffffffffe}, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000000)=[{0x3, 0x3, {0x0, 0x0, 0x4}, {0x1}, 0xfe, 0x1}, {0x0, 0x1, {0x2, 0x1}, {0x1, 0x0, 0x7}, 0xfd, 0x1}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7fffffff}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r3, 0x0, 0xfffffffffffffffe}, 0x10) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000000)=[{0x3, 0x3, {0x0, 0x0, 0x4}, {0x1}, 0xfe, 0x1}, {0x0, 0x1, {0x2, 0x1}, {0x1, 0x0, 0x7}, 0xfd, 0x1}], 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 1m49.985328422s ago: executing program 32 (id=682): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7fffffff}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r3, 0x0, 0xfffffffffffffffe}, 0x10) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000000)=[{0x3, 0x3, {0x0, 0x0, 0x4}, {0x1}, 0xfe, 0x1}, {0x0, 0x1, {0x2, 0x1}, {0x1, 0x0, 0x7}, 0xfd, 0x1}], 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x0, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000d40)={&(0x7f0000000b00)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@union={0x0, 0x0, 0x0, 0x5, 0x0, 0x7fffffff}]}}, 0x0, 0x26, 0x0, 0x1}, 0x28) (async) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000000)={r3, 0x0, 0xfffffffffffffffe}, 0x10) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000000)=[{0x3, 0x3, {0x0, 0x0, 0x4}, {0x1}, 0xfe, 0x1}, {0x0, 0x1, {0x2, 0x1}, {0x1, 0x0, 0x7}, 0xfd, 0x1}], 0x40) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 1m48.792173478s ago: executing program 3 (id=467): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000480)=0x1, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000008000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a8008"], 0x44}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xbd}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24000050) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRESHEX=r7, @ANYBLOB="08002dbd7000fcdbdf2501000000000000000141000000180017000000160000000b75647001007b7a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x891}, 0x40000c5) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4e21, 0x90, 0x4e25, 0xa3, 0xa, 0x0, 0x20, 0x2b}, {0x10, 0x1, 0xa174, 0x2000000000000006, 0xfffffffffffffffb, 0x7b, 0xeb, 0xb9d}, {0x8d, 0x7, 0xa4, 0x4}, 0x5, 0x6e6bbf, 0x2, 0x1, 0x2, 0x1}, {{@in6=@empty, 0x4d6, 0x32}, 0xa, @in=@loopback, 0x34ff, 0x5, 0x0, 0xc7, 0x4, 0x10000}}, 0xe8) r8 = socket(0x1d, 0x2, 0x7) getsockname$packet(r8, 0x0, 0x0) tee(r5, r7, 0x81, 0x6) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000440)=[{{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x1}}], 0x20) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) 1m32.185039733s ago: executing program 1 (id=304): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYBLOB="00927c9eb7d0428c042f", @ANYRES16=0x0, @ANYBLOB="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"], 0x678}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) r3 = socket(0x10, 0x3, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x10, 0x70bd2a, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff0b}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000005e00250e00000000000000000c00008008000000080000e307000180"], 0x24}], 0x1}, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'net_prio'}, {0x96857597627f6795, 'perf_event'}]}, 0x16) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m30.984595376s ago: executing program 3 (id=467): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000480)=0x1, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000008000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a8008"], 0x44}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xbd}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24000050) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRESHEX=r7, @ANYBLOB="08002dbd7000fcdbdf2501000000000000000141000000180017000000160000000b75647001007b7a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x891}, 0x40000c5) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4e21, 0x90, 0x4e25, 0xa3, 0xa, 0x0, 0x20, 0x2b}, {0x10, 0x1, 0xa174, 0x2000000000000006, 0xfffffffffffffffb, 0x7b, 0xeb, 0xb9d}, {0x8d, 0x7, 0xa4, 0x4}, 0x5, 0x6e6bbf, 0x2, 0x1, 0x2, 0x1}, {{@in6=@empty, 0x4d6, 0x32}, 0xa, @in=@loopback, 0x34ff, 0x5, 0x0, 0xc7, 0x4, 0x10000}}, 0xe8) r8 = socket(0x1d, 0x2, 0x7) getsockname$packet(r8, 0x0, 0x0) tee(r5, r7, 0x81, 0x6) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000440)=[{{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x1}}], 0x20) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) 1m28.125102492s ago: executing program 0 (id=774): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}]}, 0x48}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x1, 0x8, 0xfffffff8}, {0x5, 0x0, 0x8, 0x40009}, {0x0, 0x0, 0x1, 0x403}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000be17000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030024000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0x4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000180)) 1m16.47751281s ago: executing program 1 (id=304): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYBLOB="00927c9eb7d0428c042f", @ANYRES16=0x0, @ANYBLOB="00022dbd7000ffdbdf25080000000800048004000780700004801c000780080001001100000008000300bec00000080001000f0000003400078008000300050000000800020006000000080003000d0000000800030009000000080004000600000008000100020000001c00078008000400010000000800030007000000080003005ea7ffff300002800400040008000200010000000800010072000000040004000800010003000000040003800800010005000000bc0506800800060000000000ad050300271a3b40572754e80f26bc161a51c40f7bc3d089c8b64fc1cd19428bdb8ec161477faa5b91a045087a0467e5d34efcd05007a24c2aed077d2997ce6e519a4907a49819cff65773bea28fe6445c532c18bc888b2a1a6ccd3b3613a6bfd544bc53db5c2f342500e8ff6c3eb409986b2b78a5ad79ee234afe44ab416590b1f139bf7c95fe45d7668c8c598b99eb6058abe3176f8f81106a15cacb90c5668787d13bb9055f1a4603a6777e0da2c6a88b65369bed7578ea3e805eed38724a5daca3694c0461203f8b1cfff40a92cfabda7125ae4efbddf154b153414ac7c17095033bdfc98d384063b99f0a97856726c5d630779918bdad734c2e4f96e710727ce3add0a4cd8f6786a4d94182814048e7adb55189783ef37be2e4c2814234133b254c42b92d79d3274ce6ef314d8caa98fc3f1a11364206f7da08bb0efc30d195547078d70fabd7efcfdec9afe8d88295880db5dd0d1dd96a7ef53af411f712e769dc1b41e8e65c8818a5f9526f60a3e9f72444a6678c730d80c6805c39e19cfde0ad13c3c50913692a8d9c13ba87216be394dcd7419c32ac9e4806f60e835b1f8c707c0670cf2f30f222abd80f0d119f9437729427583f8cb481ea2ab09a798d8fcf6f9874e4763b3c8115453fcce6373b42b272d514786f77876ee254d3c970f6aa17be1f5a3ee88ed99f2bd6790e6def2dd93787048081e9d62c654524be879d0f8b61198d21fa24d57065685cd33f1274f46f3d84c605dbc92342a9b03dcbae3254cda8924fcbae78231291101f21f72d989f9a19fee9ef24f5f2c7aba1c779048852994a07b9a60b89cd15b6792fa7dd9da2238267ed6dc1686cf0214d6813b028f11d64452e528e1bf70a2b48d7f6e4a0ebcab09cab49e5be3bdd4aee654a3fa4ef02f92cb916facae8420d2f98cd31b4b60ff0f71be753256a810c216b73872cf5a637f3a66a40d8ec3a6bd7873849f807308a3cfc6c29355297e552cdf36f93a1c84d59288c21c09e344805a405357ce887982f7580e8c27bd6f1be1ff7b7d7b1b7ac7a04fbd11308ceb52b74530e19a73f30c554b3596a65925d01dfa9a8323951cd0726f968e4cf2cedb024be39fd01da04cca158120de2b0c60876a85f78558f7d10e205d0d4b512548baef05d8150aa99e6011ef0c3ebd402a6225cd7f625d8db7db789f9bc7a59ee7077f8f09da01046be54e7f5a271de88335ddc77816a328a090cc7ae43e9ad3808fb1d653aa12f10e0271315105d2b1d666e24399ecd659ed7e89239170cc887e2eba46550da3108f006c2d209c71913a384094508c361e6dfc6f9b1030d4304a1aa7928643a1380a2729ba534e9e44d524064538ae1ee8c1255a2657ba4b23bce4af23816fb2d3c5bd9ee0c7dfa80d045e65119f841f29a025a021dfb7d02f85ca1b4d38f194de959194d01c7228b29d4b8e4d01489766e61b7765f327973a3fd96161b3c5a919159bca8e3939469a67b40f42ed272e6504008226e584daf97fe44b95bd14e6a07ec876973b22988dbc48159081ba1abe98275dabe1b9965e26f964f360e7e29595c678eb65f019f18760e878352b72e3140e229585b0bcdb1c846d2d0e7bfeff890e4d5ebf1ec9aea04b72e7232e3337fdb8ea03628a26e4a3e5d9cbdd939e66388c60c882bdeb7694f5cef2cb8e92539c296114b9f1f7e92434a61a6e82b46c9d44c87621df42e916db55ba219829f58aff401b79c3f142d254925043f54928a385c3a60a158efa1a01989962718f45af571d4b9f5bf07b069131806cf0731eab5eaae28887d892363d029e1c83650408fc35a26ee018d63b10c01ddd84414b36bcde0acb1c95fc671f006aabd04a7eabae5dd6982c7dc6f4a80757016590a15c5c1f0e5e92e3e6db7f5fc900c88fbe50ce8597d7c80deb450189072af5bd2703d35cf4524adf667c2193e826f604b317f56cf72858cef503d354784852cbbfad398f5373a0cd1d52870a54a26763cffda95b4aaa003412599f414afc3dc7d1a81fa7e6422fca4156d9b3492e3b114631b11c0c902000000"], 0x678}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) r3 = socket(0x10, 0x3, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x10, 0x70bd2a, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff0b}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000005e00250e00000000000000000c00008008000000080000e307000180"], 0x24}], 0x1}, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'net_prio'}, {0x96857597627f6795, 'perf_event'}]}, 0x16) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1m15.254298777s ago: executing program 3 (id=467): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000480)=0x1, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000008000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a8008"], 0x44}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xbd}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24000050) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRESHEX=r7, @ANYBLOB="08002dbd7000fcdbdf2501000000000000000141000000180017000000160000000b75647001007b7a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x891}, 0x40000c5) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4e21, 0x90, 0x4e25, 0xa3, 0xa, 0x0, 0x20, 0x2b}, {0x10, 0x1, 0xa174, 0x2000000000000006, 0xfffffffffffffffb, 0x7b, 0xeb, 0xb9d}, {0x8d, 0x7, 0xa4, 0x4}, 0x5, 0x6e6bbf, 0x2, 0x1, 0x2, 0x1}, {{@in6=@empty, 0x4d6, 0x32}, 0xa, @in=@loopback, 0x34ff, 0x5, 0x0, 0xc7, 0x4, 0x10000}}, 0xe8) r8 = socket(0x1d, 0x2, 0x7) getsockname$packet(r8, 0x0, 0x0) tee(r5, r7, 0x81, 0x6) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000440)=[{{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x1}}], 0x20) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) 1m12.041852257s ago: executing program 0 (id=774): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}]}, 0x48}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x1, 0x8, 0xfffffff8}, {0x5, 0x0, 0x8, 0x40009}, {0x0, 0x0, 0x1, 0x403}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000be17000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030024000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0x4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000180)) 1m0.30147399s ago: executing program 1 (id=304): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYBLOB="00927c9eb7d0428c042f", @ANYRES16=0x0, @ANYBLOB="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"], 0x678}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) r3 = socket(0x10, 0x3, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x10, 0x70bd2a, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff0b}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000005e00250e00000000000000000c00008008000000080000e307000180"], 0x24}], 0x1}, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'net_prio'}, {0x96857597627f6795, 'perf_event'}]}, 0x16) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 58.770142432s ago: executing program 3 (id=467): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000480)=0x1, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000008000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a8008"], 0x44}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xbd}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24000050) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRESHEX=r7, @ANYBLOB="08002dbd7000fcdbdf2501000000000000000141000000180017000000160000000b75647001007b7a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x891}, 0x40000c5) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4e21, 0x90, 0x4e25, 0xa3, 0xa, 0x0, 0x20, 0x2b}, {0x10, 0x1, 0xa174, 0x2000000000000006, 0xfffffffffffffffb, 0x7b, 0xeb, 0xb9d}, {0x8d, 0x7, 0xa4, 0x4}, 0x5, 0x6e6bbf, 0x2, 0x1, 0x2, 0x1}, {{@in6=@empty, 0x4d6, 0x32}, 0xa, @in=@loopback, 0x34ff, 0x5, 0x0, 0xc7, 0x4, 0x10000}}, 0xe8) r8 = socket(0x1d, 0x2, 0x7) getsockname$packet(r8, 0x0, 0x0) tee(r5, r7, 0x81, 0x6) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000440)=[{{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x1}}], 0x20) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) 57.917164265s ago: executing program 0 (id=774): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}]}, 0x48}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x1, 0x8, 0xfffffff8}, {0x5, 0x0, 0x8, 0x40009}, {0x0, 0x0, 0x1, 0x403}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000be17000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030024000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0x4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000180)) 42.901387491s ago: executing program 1 (id=304): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYBLOB="00927c9eb7d0428c042f", @ANYRES16=0x0, @ANYBLOB="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"], 0x678}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) r3 = socket(0x10, 0x3, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x10, 0x70bd2a, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff0b}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000005e00250e00000000000000000c00008008000000080000e307000180"], 0x24}], 0x1}, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'net_prio'}, {0x96857597627f6795, 'perf_event'}]}, 0x16) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 41.385904537s ago: executing program 0 (id=774): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}]}, 0x48}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x1, 0x8, 0xfffffff8}, {0x5, 0x0, 0x8, 0x40009}, {0x0, 0x0, 0x1, 0x403}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000be17000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030024000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0x4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000180)) 39.118112686s ago: executing program 3 (id=467): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000480)=0x1, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000008000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a8008"], 0x44}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xbd}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24000050) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRESHEX=r7, @ANYBLOB="08002dbd7000fcdbdf2501000000000000000141000000180017000000160000000b75647001007b7a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x891}, 0x40000c5) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4e21, 0x90, 0x4e25, 0xa3, 0xa, 0x0, 0x20, 0x2b}, {0x10, 0x1, 0xa174, 0x2000000000000006, 0xfffffffffffffffb, 0x7b, 0xeb, 0xb9d}, {0x8d, 0x7, 0xa4, 0x4}, 0x5, 0x6e6bbf, 0x2, 0x1, 0x2, 0x1}, {{@in6=@empty, 0x4d6, 0x32}, 0xa, @in=@loopback, 0x34ff, 0x5, 0x0, 0xc7, 0x4, 0x10000}}, 0xe8) r8 = socket(0x1d, 0x2, 0x7) getsockname$packet(r8, 0x0, 0x0) tee(r5, r7, 0x81, 0x6) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000440)=[{{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x1}}], 0x20) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) 27.707470471s ago: executing program 0 (id=774): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}]}, 0x48}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x1, 0x8, 0xfffffff8}, {0x5, 0x0, 0x8, 0x40009}, {0x0, 0x0, 0x1, 0x403}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000be17000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030024000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0x4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000180)) 26.687659178s ago: executing program 1 (id=304): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYBLOB="00927c9eb7d0428c042f", @ANYRES16=0x0, @ANYBLOB="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"], 0x678}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) r3 = socket(0x10, 0x3, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x10, 0x70bd2a, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff0b}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000005e00250e00000000000000000c00008008000000080000e307000180"], 0x24}], 0x1}, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'net_prio'}, {0x96857597627f6795, 'perf_event'}]}, 0x16) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 12.121465685s ago: executing program 0 (id=774): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$phonet(0x23, 0x2, 0x1) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=@newlink={0x48, 0x10, 0xa01, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}, @IFLA_MACSEC_CIPHER_SUITE={0xc, 0x4, 0x80c20001000002}]}}}]}, 0x48}}, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000040)={0x3, &(0x7f0000000000)=[{0x0, 0x1, 0x8, 0xfffffff8}, {0x5, 0x0, 0x8, 0x40009}, {0x0, 0x0, 0x1, 0x403}]}, 0x10) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x48) socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a0b040000000000be17000200fffe4c0004802800018007000100637400001c000280080001400000000208000240000000070500030024000000200001800700010063740000140002800800024000000011080004400000000c0900010073797a30000000000900020073797a32"], 0xa0}, 0x1, 0x0, 0x0, 0x840}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f00000001c0)=0x17, 0x4) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) getsockopt$bt_BT_DEFER_SETUP(r0, 0x112, 0x7, 0x0, &(0x7f0000000180)) 6.832643321s ago: executing program 1 (id=304): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$netlink(0x10, 0x3, 0x10) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000300), 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000040)=0x1800, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_LINK_GET(r2, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2040}, 0xc, &(0x7f0000000180)={&(0x7f0000001140)=ANY=[@ANYBLOB="00927c9eb7d0428c042f", @ANYRES16=0x0, @ANYBLOB="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"], 0x678}, 0x1, 0x0, 0x0, 0x20004005}, 0x2000c800) r3 = socket(0x10, 0x3, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'morus640-generic\x00'}, 0x58) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000002d00010026bd7000fcdbdf2504"], 0x2c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20008010) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}, 0x1, 0x0, 0x0, 0x4000811}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newtaction={0x48, 0x30, 0x10, 0x70bd2a, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0xffffffffffffff0b}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}, 0x48}, 0x1, 0x0, 0x0, 0x4}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r6, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="240000005e00250e00000000000000000c00008008000000080000e307000180"], 0x24}], 0x1}, 0x0) r7 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x89e2, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)={[{0x2b, 'net_prio'}, {0x96857597627f6795, 'perf_event'}]}, 0x16) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) 6.010572791s ago: executing program 3 (id=467): r0 = socket(0x840000000002, 0x3, 0x100) connect$inet(r0, &(0x7f0000000000)={0x2, 0x4e20, @remote}, 0x10) sendmmsg$inet(r0, &(0x7f0000005240), 0x4000095, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r5 = socket(0x10, 0x80002, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000480)=0x1, 0x4) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x300000b, 0x4031, 0xffffffffffffffff, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000008000)) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x0) sendmsg$nl_route(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901800000000000000007000000", @ANYRES32=r4, @ANYBLOB="00000000000000001c001a8008"], 0x44}}, 0x0) r6 = syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="680000000206010100000000000000000000000005000100070000000900020073797a30000000001c00078005001500100000000800124000000000080008400000202113000300686173683a6e65742c696661636500000500050002000000050004"], 0x68}}, 0x0) sendmsg$TIPC_CMD_GET_LINKS(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x24, r6, 0x2, 0x70bd2d, 0x25dfdbfc, {{}, {}, {0x8, 0x11, 0xbd}}}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x24000050) getsockname$packet(r5, &(0x7f00000003c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000400)=0x14) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f0000000140)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000600)=ANY=[@ANYRES8=r0, @ANYRESHEX=r7, @ANYBLOB="08002dbd7000fcdbdf2501000000000000000141000000180017000000160000000b75647001007b7a3000000000"], 0x34}, 0x1, 0x0, 0x0, 0x891}, 0x40000c5) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000040)={'wpan4\x00'}) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@loopback, @in=@dev={0xac, 0x14, 0x14, 0x3b}, 0x4e21, 0x90, 0x4e25, 0xa3, 0xa, 0x0, 0x20, 0x2b}, {0x10, 0x1, 0xa174, 0x2000000000000006, 0xfffffffffffffffb, 0x7b, 0xeb, 0xb9d}, {0x8d, 0x7, 0xa4, 0x4}, 0x5, 0x6e6bbf, 0x2, 0x1, 0x2, 0x1}, {{@in6=@empty, 0x4d6, 0x32}, 0xa, @in=@loopback, 0x34ff, 0x5, 0x0, 0xc7, 0x4, 0x10000}}, 0xe8) r8 = socket(0x1d, 0x2, 0x7) getsockname$packet(r8, 0x0, 0x0) tee(r5, r7, 0x81, 0x6) setsockopt$CAN_RAW_FILTER(r5, 0x65, 0x1, &(0x7f0000000440)=[{{0x2, 0x1, 0x0, 0x1}, {0x3, 0x1}}, {{0x2, 0x0, 0x1}, {0x1, 0x0, 0x1}}, {{0x3, 0x0, 0x1, 0x1}, {0x0, 0x1, 0x0, 0x1}}, {{0x4, 0x1, 0x0, 0x1}, {0x2, 0x1}}], 0x20) getsockname$packet(r8, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000280)=0x14) 4.40038253s ago: executing program 4 (id=1133): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="0e00000004000000080000000b"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000002300000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='contention_end\x00', r2}, 0x18) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000240)={0xffffffffffffffff, 0x20, &(0x7f00000001c0)={&(0x7f0000000100)=""/92, 0x5c, 0x0, &(0x7f0000000340)=""/114, 0x72}}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000940)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r5, 0x0, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x44, 0x6, 0x3a8, 0x278, 0x148, 0xb0, 0x278, 0x278, 0x310, 0x310, 0x310, 0x310, 0x310, 0x6, 0x0, {[{{@ip={@local, @multicast1, 0x0, 0xff000000, 'geneve1\x00', 'ip6gre0\x00', {}, {}, 0x6, 0x0, 0x48}, 0x0, 0x70, 0xb0}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x3ff, 0xf3, @ipv6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4e21}}}, {{@uncond, 0x0, 0x70, 0x98}, @TTL={0x28, 'TTL\x00', 0x0, {0x2}}}, {{@ip={@empty, @private=0xa010102, 0xff, 0x0, 'virt_wifi0\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x89, 0x2, 0x41}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}, {{@ip={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'pim6reg0\x00', 'erspan0\x00', {}, {}, 0x62}, 0x0, 0x70, 0x98}, @ECN={0x28, 'ECN\x00', 0x0, {0x0, 0x2, 0xff}}}, {{@ip={@broadcast, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'lo\x00', 'pimreg0\x00', {}, {}, 0x0, 0x2, 0x14}, 0x0, 0x70, 0x98}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x408) close(r4) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'tunl0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001300)=@newqdisc={0x3c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xfff2}, {0xffff, 0xffff}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x5}}, @qdisc_kind_options=@q_blackhole={0xe}]}, 0x3c}}, 0x4000082) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x6, 0x5, &(0x7f00000003c0)=ANY=[@ANYBLOB="1802", @ANYRES16=r3, @ANYRES64=r6, @ANYRESDEC=r0], 0x0, 0x100000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0}, 0x94) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNGETVNETLE(r8, 0x4010744d, &(0x7f0000000180)) 3.396665074s ago: executing program 4 (id=1136): mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r0 = socket$kcm(0x29, 0x5, 0x0) bind$inet(0xffffffffffffffff, &(0x7f00008a5ff0)={0x2, 0x0, @loopback}, 0x10) write$cgroup_pressure(r0, &(0x7f0000000140)={'full'}, 0xfffffdef) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_TCP_REPAIR_WINDOW(r4, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000e40)={0x5c, r2, 0x1, 0x20000002, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x14b4}], @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_KEY_DEFAULT={0x4}], @NL80211_ATTR_AUTH_TYPE={0x8}, @NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @key_params=[@NL80211_ATTR_KEY_DEFAULT_TYPES={0x4}, @NL80211_ATTR_KEY_TYPE={0x8}, @NL80211_ATTR_KEY_IDX={0x5, 0x8, 0x2}]]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) 3.073894787s ago: executing program 5 (id=1139): r0 = socket$inet6(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=ANY=[@ANYBLOB="980000004900010027bd7000fcdbdf250a000000", @ANYRES32, @ANYBLOB="810c00000800020002000000080002000b000000140001"], 0x98}}, 0x8000) setsockopt$inet_tcp_TLS_RX(0xffffffffffffffff, 0x6, 0x2, &(0x7f0000000000)=@gcm_256={{0x304}, "81cd45704df7485f", "9524ba281ff37b53e4eb3722745e450e60210cff4e21ee95dde0c807b4395b20", "5b8c8d9a", "a6c1f63d4dfad9da"}, 0x38) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000400)={'ip6tnl0\x00', &(0x7f0000000140)={'syztnl2\x00', 0x0, 0x4, 0x1, 0x0, 0x0, 0x0, @loopback={0x4100}, @loopback={0x0, 0xffff888101827518}, 0x700, 0x0, 0x34f6}}) 2.98391531s ago: executing program 4 (id=1140): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x40000, 0x0) pwritev(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r1 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f0000000480)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x34, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r4, @ANYBLOB="08002600940900000800b70099"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000024c0)={0x68, r5, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_CSA_C_OFFSETS_TX={0x6, 0xcd, [0x0]}, @NL80211_ATTR_FRAME={0x42, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @device_b, @device_a, @initial, {0xc, 0x9}, @value=@ver_80211n={0x0, 0x62, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x0, 0x2, {}, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x2, 0x0, {0xf, 0xc, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x5}}}}]}, 0x68}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=@newsa={0x104, 0x10, 0x7, 0x0, 0x0, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in=@multicast2, 0xffff, 0x0, 0xfffe, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0xee00}, {@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x4d2, 0x2b}, @in6=@mcast1, {}, {0x0, 0x200000, 0x4}, {}, 0x0, 0xfffffffc, 0xa, 0x2, 0x0, 0x70}, [@coaddr={0x14, 0xe, @in=@multicast2}]}, 0x104}}, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r9 = socket(0x400000000010, 0x3, 0x0) r10 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r11, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x2}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x0, 0x3}}}]}, 0x38}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r15 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r15, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x28, 0x2b, 0xb, 0x0, 0x0, {0x4}, [@typed={0x8, 0x3, 0x0, 0x0, @u32=0x30004}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x10, 0x0, 0x0, @str='\x88H'}]}]}, 0x28}}, 0x8000) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller1\x00', 0x2}) ioctl$TUNSETOFFLOAD(r0, 0x400454c9, 0xba98575a95aeb71d) ioctl$TUNSETOFFLOAD(r0, 0x400454d0, 0x2) 2.850880405s ago: executing program 5 (id=1141): r0 = socket(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x6) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) syz_genetlink_get_family_id$fou(&(0x7f0000000000), r1) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000080)={'wg1\x00', &(0x7f0000000040)=@ethtool_cmd={0x28, 0x6, 0xff, 0x0, 0xfa, 0xfa, 0x1, 0x8, 0x3, 0x0, 0x7fffffff, 0xefc2, 0x24, 0x4, 0x8, 0x0, [0x6e, 0x7]}}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00'}) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000140)={{r2}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r2}, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x200}, 0x1c) listen(r4, 0x0) r5 = socket(0x840000000002, 0x3, 0xff) sendmmsg$inet(r5, &(0x7f0000000440), 0x0, 0x4004840) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) socket$inet6(0xa, 0x5, 0x0) r7 = accept(r4, 0x0, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0x6, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000003f00000000"], 0x0, 0x0, 0x0, 0x0, 0x40f00}, 0x94) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000280)=[{&(0x7f00000005c0)="580000001400192340834b80040d8c560a0603a6ff8000000000000000006302496b3a17b42e64009400050038925a01000000800000008004000000ff0109000000fff5dd0000000800030006010000418e01400004fcff", 0x58}], 0x1) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='blkio.bfq.time\x00', 0x26e1, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0xd0}, 0x0) sendmsg$NFT_BATCH(r8, 0x0, 0x40) sendmsg$TEAM_CMD_OPTIONS_SET(r7, 0x0, 0x0) connect$unix(r7, 0x0, 0x0) 1.935308244s ago: executing program 5 (id=1142): r0 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r0, 0x29, 0xc8, 0x0, 0xc000000) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMKSA(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)={0x30, r2, 0x1, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "d830c0c64f689f832d4b576947dd47df"}]}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x40000) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40841, 0x0) read$alg(r0, &(0x7f0000000500)=""/99, 0x63) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) bind$netlink(r6, &(0x7f00000001c0), 0xc) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000300)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r8 = accept4(r7, 0x0, 0x0, 0x800) sendmmsg$alg(r8, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) (async) recvmsg(r8, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000100)=""/8, 0x8}, {&(0x7f0000001400)=""/4096, 0x1000}], 0x2}, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0x12, &(0x7f0000000580)=ANY=[@ANYBLOB="1800000005000000000000000200000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000850000006d000000bf91000000000000b7020000010000008500000084000000b70000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, r9, 0x0) write(0xffffffffffffffff, 0x0, 0x0) (async) ioctl$TUNSETIFF(r5, 0x400454ca, 0x0) (async) r12 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r12, &(0x7f00000034c0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000003700)=[@prinfo={0x18, 0x84, 0x5, {0x30, 0x3}}, @sndinfo={0x20, 0x84, 0x2, {0x100, 0x820c, 0x9, 0x1}}], 0x38, 0x401d0}], 0x1, 0x800) (async) r13 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r13, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000140)='ns/ipc\x00') (async) syz_open_procfs$namespace(0x0, &(0x7f0000002180)='ns/ipc\x00') 398.012872ms ago: executing program 4 (id=1143): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb0100180000000000000040000000400000000200000000000000000000090400000000000000000000010500000008000000000000000000000300000000020000000200000012000000000000000000000a"], 0x0, 0x5a}, 0x20) 356.51587ms ago: executing program 4 (id=1144): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$inet_udp(0x2, 0x2, 0x0) (async) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r1, 0xc004743e, 0x110c230000) ioctl$TUNSETOFFLOAD(r1, 0x8008743f, 0xf0ff1f00000000) (async) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000800)={0x0, 0x0, 0x0, 0x0, 0x1, 0xffffffffffffffff, 0x4}, 0x38) (async) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) (async) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000440)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c0002000900000000000000400007800c00018008000100", @ANYRES32=r2, @ANYBLOB="0c00018908000100ab0a53db0e4cbc28a3da3b0e1c9265edfc541f9807befb45139807ef8200907ac8919023e6979c52b74e31a7b2f7670408dd64", @ANYRES32=r2], 0x60}}, 0x4000040) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4000800) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240002801400018008000100e000000108000200e00000010c00028005000100000000000800154000000000080008"], 0x48}}, 0x4000000) (async) socket$netlink(0x10, 0x3, 0x0) r7 = syz_genetlink_get_family_id$team(&(0x7f0000000780), 0xffffffffffffffff) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000b00)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_PORT_LIST_GET(0xffffffffffffffff, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000010c0)={0x218, r7, 0x1, 0x70bd2d, 0x25dfdbfe, {}, [{{0x8, 0x1, r8}, {0x1fc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x3}}, {0x8, 0x6, r8}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0xf, 0x4, 'roundrobin\x00'}}}, {0x4c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x19, 0x4, 'hash_to_port_mapping\x00'}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8}}}, {0x3c, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x218}, 0x1, 0x0, 0x0, 0x40881}, 0x4000) 297.206062ms ago: executing program 5 (id=1145): r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000200)="f9", 0x1}], 0x1, 0x0, 0x0, 0x80020}], 0x1, 0x40c0) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x406, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00"], 0x30}], 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x10, 0x1a, &(0x7f0000000100)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7f, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x0}, {}, {}, {0x85, 0x0, 0x0, 0xa0}, {0x7, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1f}}, {}, [@printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x200}}, @btf_id={0x18, 0x0, 0x3, 0x0, 0x5}, @alu={0x7, 0x0, 0x4, 0x6, 0x2, 0xffffffffffffffe0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x19}}}, &(0x7f0000000480)='GPL\x00', 0x3, 0x0, 0x0, 0x40f00, 0x48}, 0x94) 105.77245ms ago: executing program 5 (id=1146): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x0, 0x20000000ec071, 0xffffffffffffffff, 0x4000) mmap(&(0x7f0000f96000/0x4000)=nil, 0x4000, 0x0, 0x4000932, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609", 0x2}], 0x1) (async) writev(r1, &(0x7f0000000400)=[{&(0x7f00000002c0)="a609", 0x2}], 0x1) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1000002, 0x10012, r1, 0x0) pipe(&(0x7f0000000600)={0xffffffffffffffff, 0xffffffffffffffff}) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4) (async) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)={0x2c, r6, 0x1, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x400c0}, 0x4) sendmsg$NL80211_CMD_GET_MPP(r1, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x70, r0, 0x8, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x53b6, 0x5f}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}]}, 0x70}, 0x1, 0x0, 0x0, 0x800}, 0x24004040) write(r3, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r7 = socket$inet_udp(0x2, 0x2, 0x0) close(r7) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$nl_netfilter(0x10, 0x3, 0xc) splice(r2, 0x0, r7, 0x0, 0x1100000000f336, 0x0) r8 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) (async) r9 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) write$cgroup_int(r9, &(0x7f0000000040)=0x3, 0x12) accept(r8, 0x0, 0x0) 40.808316ms ago: executing program 5 (id=1147): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a73b0000c600"/28], 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r0}, 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xc, r1, 0x0, 0x500}, 0x38) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x90}}, 0x0) r4 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x2, 0x0, 0x3}]}, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, 0x94) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0x3e4, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf9e48000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xade}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5f3e}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6f7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "61bf85d488522432f3544c5bc3ef9caa618fb6266cdc9ad4c7e1391d7b4e3640b1"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x77, 0x3, "1a86b1db2fbff425137c6246e33dac77305b1a847f5db73dd6a1d3aaea4e1ab22a2df4adea44e5ef2802369317200ecc3968fc2aed8847c06150a972cb860556166d21e2bbb992d6d0265be42b22592988d675d26244250dc2c37b559ba4fd61169fff58f17085b4b7cf55dec99fbce0d06a34"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc05}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ef}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x29}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffe3f, @private1}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd80}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080c0) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a73b0000c600"/28], 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x5, 0x4, 0x7, 0x0, r0}, 0x50) (async) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, 0xc, r1, 0x0, 0x500}, 0x38) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWTABLE={0x14, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HOOK_DEV={0x14, 0x4, 'veth0\x00'}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x90}}, 0x0) (async) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000400)=@bpf_lsm={0x6, 0x4, &(0x7f00000006c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffc}, [@ldst={0x2, 0x0, 0x3}]}, 0x0, 0xd, 0x0, 0x0, 0x0, 0x7}, 0x94) (async) sendmsg$TIPC_NL_BEARER_ENABLE(r1, &(0x7f0000000180)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000700)={0x3e4, 0x0, 0x200, 0x70bd25, 0x25dfdbfd, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0xffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffffe}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xf9e48000}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xc}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xade}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x5f3e}]}, @TIPC_NLA_LINK={0x10, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}]}, @TIPC_NLA_NET={0x18, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x5}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x3ff}]}, @TIPC_NLA_NODE={0xec, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x6f7}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY={0x49, 0x4, {'gcm(aes)\x00', 0x21, "61bf85d488522432f3544c5bc3ef9caa618fb6266cdc9ad4c7e1391d7b4e3640b1"}}, @TIPC_NLA_NODE_KEY_MASTER={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x77, 0x3, "1a86b1db2fbff425137c6246e33dac77305b1a847f5db73dd6a1d3aaea4e1ab22a2df4adea44e5ef2802369317200ecc3968fc2aed8847c06150a972cb860556166d21e2bbb992d6d0265be42b22592988d675d26244250dc2c37b559ba4fd61169fff58f17085b4b7cf55dec99fbce0d06a34"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x5}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}, @TIPC_NLA_MEDIA={0x98, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x2}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x56a}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x20000}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}]}]}, @TIPC_NLA_NET={0x50, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc05}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x1ef}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}]}, @TIPC_NLA_BEARER={0xf8, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e21, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x29}}, {0x14, 0x2, @in={0x2, 0x4e22, @multicast2}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0xfffffe3f, @private1}}, {0x14, 0x2, @in={0x2, 0x4e24, @remote}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x3}, @TIPC_NLA_BEARER_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0xc}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd80}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fff}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x1}]}, @TIPC_NLA_BEARER_DOMAIN={0x8}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}]}, @TIPC_NLA_MEDIA={0x74, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_MTU={0x8}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x14}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xc}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xd}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x3}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x3}]}]}]}, 0x3e4}, 0x1, 0x0, 0x0, 0x4000000}, 0x40080c0) (async) sendmsg$NBD_CMD_CONNECT(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB='h\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) (async) 0s ago: executing program 4 (id=1148): unshare(0x24060400) bpf$BPF_PROG_DETACH(0x1c, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) (async) r1 = accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000080), 0x80800) setsockopt$bt_BT_SECURITY(r1, 0x112, 0x4, &(0x7f0000000240)={0xc, 0x4}, 0x2) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@ipv6_getrule={0x1c, 0x22, 0x20, 0x70bd2d, 0x25dfdbff, {0xa, 0x10, 0x10, 0x1, 0x8, 0x0, 0x0, 0x6, 0x4}, ["", ""]}, 0x1c}}, 0x20000001) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0xc, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000610000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000680)={r3, 0x18000000000002a0, 0x36, 0x0, &(0x7f0000000700)="b9fe030768045c8c989a14f088a8657986dda8c6e96fd9d5a77080d1016ac1eb01639fa5680155e099c8718cd7c81a759ec5d541757c", 0x0, 0x9e, 0x60000000, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) ioctl$AUTOFS_IOC_FAIL(r0, 0x9361, 0x1e) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="44000068cefd8e1d0000000096c80000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000240012800b000100626174616476000014000280100001004241544d414e5f56"], 0xfd12}}, 0x0) kernel console output (not intermixed with test programs): adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 334.677661][ T9341] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 334.792554][ T61] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.846595][ T5864] Bluetooth: hci5: command tx timeout [ 334.924054][ T61] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.016746][ T9341] hsr_slave_0: entered promiscuous mode [ 335.023633][ T9341] hsr_slave_1: entered promiscuous mode [ 335.032775][ T9341] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 335.040500][ T9341] Cannot create hsr debugfs directory [ 335.472878][ T9388] chnl_net:caif_netlink_parms(): no params data found [ 335.480427][ T5864] Bluetooth: hci0: command tx timeout [ 335.596139][ T61] bridge_slave_1: left allmulticast mode [ 335.601846][ T61] bridge_slave_1: left promiscuous mode [ 335.612765][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.629074][ T61] bridge_slave_0: left allmulticast mode [ 335.634847][ T61] bridge_slave_0: left promiscuous mode [ 335.641159][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.661020][ T61] bridge_slave_1: left allmulticast mode [ 335.677557][ T61] bridge_slave_1: left promiscuous mode [ 335.695827][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.717103][ T61] bridge_slave_0: left allmulticast mode [ 335.722802][ T61] bridge_slave_0: left promiscuous mode [ 335.734407][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 336.115047][ T5864] Bluetooth: hci4: command tx timeout [ 336.561373][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.586798][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.602737][ T61] bond0 (unregistering): Released all slaves [ 336.915177][ T5864] Bluetooth: hci5: command tx timeout [ 337.075554][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 337.102492][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 337.116479][ T61] bond0 (unregistering): Released all slaves [ 337.565221][ T5864] Bluetooth: hci0: command tx timeout [ 337.669084][ T9327] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 337.768419][ T9327] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 337.801580][ T9388] bridge0: port 1(bridge_slave_0) entered blocking state [ 337.808953][ T9388] bridge0: port 1(bridge_slave_0) entered disabled state [ 337.816267][ T9388] bridge_slave_0: entered allmulticast mode [ 337.825230][ T9388] bridge_slave_0: entered promiscuous mode [ 337.841846][ T9327] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 337.870409][ T9388] bridge0: port 2(bridge_slave_1) entered blocking state [ 337.880225][ T9388] bridge0: port 2(bridge_slave_1) entered disabled state [ 337.887559][ T9388] bridge_slave_1: entered allmulticast mode [ 337.898723][ T9388] bridge_slave_1: entered promiscuous mode [ 337.919640][ T9327] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 338.090332][ T9388] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 338.159011][ T9388] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 338.197874][ T5864] Bluetooth: hci4: command tx timeout [ 338.263304][ T9388] team0: Port device team_slave_0 added [ 338.316522][ T9388] team0: Port device team_slave_1 added [ 338.338757][ T61] hsr_slave_0: left promiscuous mode [ 338.345344][ T61] hsr_slave_1: left promiscuous mode [ 338.351557][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.368929][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.381604][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.391551][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.412034][ T61] hsr_slave_0: left promiscuous mode [ 338.424073][ T61] hsr_slave_1: left promiscuous mode [ 338.432820][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 338.445616][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 338.453940][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 338.469932][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 338.538905][ T61] veth1_macvtap: left promiscuous mode [ 338.544451][ T61] veth0_macvtap: left promiscuous mode [ 338.550391][ T61] veth1_vlan: left promiscuous mode [ 338.555835][ T61] veth0_vlan: left promiscuous mode [ 338.562345][ T61] veth1_macvtap: left promiscuous mode [ 338.568031][ T61] veth0_macvtap: left promiscuous mode [ 338.573645][ T61] veth1_vlan: left promiscuous mode [ 338.579301][ T61] veth0_vlan: left promiscuous mode [ 338.617410][ T9456] block nbd1: server does not support multiple connections per device. [ 338.630461][ T9456] block nbd1: shutting down sockets [ 338.995822][ T5864] Bluetooth: hci5: command tx timeout [ 339.166425][ T9462] xt_bpf: check failed: parse error [ 339.461696][ T61] team0 (unregistering): Port device team_slave_1 removed [ 339.504277][ T61] team0 (unregistering): Port device team_slave_0 removed [ 339.637476][ T5864] Bluetooth: hci0: command tx timeout [ 340.220201][ T61] team0 (unregistering): Port device team_slave_1 removed [ 340.261168][ T61] team0 (unregistering): Port device team_slave_0 removed [ 340.760917][ T9388] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 340.784226][ T9388] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.826140][ T9388] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 340.839633][ T9388] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 340.846903][ T9388] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 340.873039][ T9388] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 340.989962][ T7967] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.002894][ T7967] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.040689][ T9388] hsr_slave_0: entered promiscuous mode [ 341.047921][ T9388] hsr_slave_1: entered promiscuous mode [ 341.054436][ T9388] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 341.068265][ T9388] Cannot create hsr debugfs directory [ 341.080453][ T7967] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.090019][ T7967] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 341.217013][ T9482] netlink: 'syz.5.841': attribute type 1 has an invalid length. [ 341.330624][ T9341] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 341.394765][ T9327] 8021q: adding VLAN 0 to HW filter on device bond0 [ 341.440306][ T9341] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 341.536206][ T9341] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 341.580755][ T9341] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 341.598091][ T9494] tipc: Started in network mode [ 341.602997][ T9494] tipc: Node identity 06061844f2c7, cluster identity 4711 [ 341.611671][ T9494] tipc: Enabled bearer , priority 0 [ 341.620179][ T9494] syzkaller0: entered promiscuous mode [ 341.625931][ T9494] syzkaller0: entered allmulticast mode [ 341.652062][ T9496] netlink: 12 bytes leftover after parsing attributes in process `syz.5.844'. [ 341.701700][ T9327] 8021q: adding VLAN 0 to HW filter on device team0 [ 341.715510][ T5864] Bluetooth: hci0: command tx timeout [ 341.755289][ T9494] netlink: 24 bytes leftover after parsing attributes in process `syz.4.843'. [ 341.788858][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 341.796078][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 341.817816][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 341.825042][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 341.832814][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.5.845'. [ 341.857513][ T9494] tipc: Resetting bearer [ 341.896441][ T9493] tipc: Resetting bearer [ 341.921171][ T9493] tipc: Disabling bearer [ 342.288130][ T9341] 8021q: adding VLAN 0 to HW filter on device bond0 [ 342.350933][ T9341] 8021q: adding VLAN 0 to HW filter on device team0 [ 342.362945][ T9520] sctp: [Deprecated]: syz.4.847 (pid 9520) Use of struct sctp_assoc_value in delayed_ack socket option. [ 342.362945][ T9520] Use struct sctp_sack_info instead [ 342.404788][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 342.412022][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 342.423359][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 342.430571][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 342.465793][ T9327] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 342.611119][ T9388] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 342.628052][ T9388] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 342.650357][ T9388] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 342.698061][ T9388] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 342.750374][ T9327] veth0_vlan: entered promiscuous mode [ 342.788107][ T9327] veth1_vlan: entered promiscuous mode [ 342.902565][ T9538] openvswitch: netlink: IP tunnel attribute has 8 unknown bytes. [ 342.926145][ T9538] netlink: 8 bytes leftover after parsing attributes in process `syz.4.849'. [ 342.952403][ T9327] veth0_macvtap: entered promiscuous mode [ 342.991070][ T9327] veth1_macvtap: entered promiscuous mode [ 343.094609][ T9327] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.114135][ T9341] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 343.149264][ T9327] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.179275][ T9388] 8021q: adding VLAN 0 to HW filter on device bond0 [ 343.211236][ T5942] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.227295][ T5942] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.262602][ T5942] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.272298][ T5942] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.320124][ T9388] 8021q: adding VLAN 0 to HW filter on device team0 [ 343.402705][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.409935][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 343.446987][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.454162][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 343.511589][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.519805][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.550333][ T9341] veth0_vlan: entered promiscuous mode [ 343.587724][ T9341] veth1_vlan: entered promiscuous mode [ 343.600961][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 343.614587][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 343.690425][ T9341] veth0_macvtap: entered promiscuous mode [ 343.723806][ T9341] veth1_macvtap: entered promiscuous mode [ 343.833247][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 343.853029][ T9341] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 343.874853][ T5942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.907387][ T5942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.931760][ T5942] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 343.942180][ T5942] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 344.078396][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.241631][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.369014][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.397918][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.417229][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.418737][ T9388] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 344.474164][ T7967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 344.484520][ T7967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 344.526636][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 344.625330][ T9388] veth0_vlan: entered promiscuous mode [ 344.646511][ T9388] veth1_vlan: entered promiscuous mode [ 344.685140][ T9388] veth0_macvtap: entered promiscuous mode [ 344.700266][ T9388] veth1_macvtap: entered promiscuous mode [ 344.751382][ T36] bridge_slave_1: left allmulticast mode [ 344.762307][ T36] bridge_slave_1: left promiscuous mode [ 344.769002][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 344.778650][ T36] bridge_slave_0: left allmulticast mode [ 344.785197][ T36] bridge_slave_0: left promiscuous mode [ 344.791006][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 345.149241][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 345.161122][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 345.171843][ T36] bond0 (unregistering): Released all slaves [ 345.203690][ T9388] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 345.220997][ T9388] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 345.280669][ T5942] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.307393][ T5942] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.342919][ T2911] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.436128][ T2911] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 345.614016][ T36] hsr_slave_0: left promiscuous mode [ 345.620491][ T36] hsr_slave_1: left promiscuous mode [ 345.627493][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 345.636545][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 345.644639][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 345.652373][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 345.677248][ T36] veth1_macvtap: left promiscuous mode [ 345.682841][ T36] veth0_macvtap: left promiscuous mode [ 345.688758][ T36] veth1_vlan: left promiscuous mode [ 345.694104][ T36] veth0_vlan: left promiscuous mode [ 345.712124][ T5851] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 345.722124][ T5851] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 345.731782][ T5851] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 345.740114][ T5851] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 345.748740][ T5851] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 346.389234][ T36] team0 (unregistering): Port device team_slave_1 removed [ 346.657346][ T36] team0 (unregistering): Port device team_slave_0 removed [ 347.057319][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 347.071295][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 347.081501][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 347.094354][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 347.106675][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 347.387644][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.396244][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.452565][ T9571] mac80211_hwsim hwsim10 wlan0: left allmulticast mode [ 347.460030][ T9571] mac80211_hwsim hwsim10 wlan0: left promiscuous mode [ 347.729867][ T1009] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 347.761530][ T1009] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 347.767002][ T9586] netlink: 16 bytes leftover after parsing attributes in process `syz.4.857'. [ 347.802149][ T5864] Bluetooth: hci4: command tx timeout [ 347.948974][ T9594] netlink: 'syz.4.859': attribute type 9 has an invalid length. [ 348.219824][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.273819][ T9581] chnl_net:caif_netlink_parms(): no params data found [ 348.477960][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.716899][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.846115][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.970964][ T9564] chnl_net:caif_netlink_parms(): no params data found [ 349.114595][ T9624] netlink: 65039 bytes leftover after parsing attributes in process `syz.5.865'. [ 349.155759][ T5864] Bluetooth: hci5: command tx timeout [ 349.166126][ T9581] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.173299][ T9581] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.180824][ T9581] bridge_slave_0: entered allmulticast mode [ 349.189679][ T9581] bridge_slave_0: entered promiscuous mode [ 349.198728][ T9581] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.206262][ T9581] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.213472][ T9581] bridge_slave_1: entered allmulticast mode [ 349.221844][ T9581] bridge_slave_1: entered promiscuous mode [ 349.430214][ T9581] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.449026][ T9632] workqueue: name exceeds WQ_NAME_LEN. Truncating to: žÀ^•>º>ùMv^µâ侦¸ÑKc'A¥»– [ 349.461801][ T9581] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.612901][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 349.622076][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 349.630928][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 349.640970][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 349.648751][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 349.674667][ T9581] team0: Port device team_slave_0 added [ 349.682231][ T9564] bridge0: port 1(bridge_slave_0) entered blocking state [ 349.691620][ T9564] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.700919][ T9564] bridge_slave_0: entered allmulticast mode [ 349.709819][ T9564] bridge_slave_0: entered promiscuous mode [ 349.720089][ T9564] bridge0: port 2(bridge_slave_1) entered blocking state [ 349.727302][ T9564] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.734548][ T9564] bridge_slave_1: entered allmulticast mode [ 349.742793][ T9564] bridge_slave_1: entered promiscuous mode [ 349.761992][ T9581] team0: Port device team_slave_1 added [ 349.848603][ T9564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 349.861539][ T9564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.875605][ T5851] Bluetooth: hci4: command tx timeout [ 349.920153][ T36] bridge_slave_1: left allmulticast mode [ 349.930779][ T36] bridge_slave_1: left promiscuous mode [ 349.941047][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.954882][ T36] bridge_slave_0: left allmulticast mode [ 349.956666][ T9647] netlink: 320 bytes leftover after parsing attributes in process `syz.4.870'. [ 349.961303][ T36] bridge_slave_0: left promiscuous mode [ 349.976949][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 350.298222][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.318405][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.330144][ T36] bond0 (unregistering): Released all slaves [ 350.379939][ T9581] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.390848][ T9581] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.424199][ T9581] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.461763][ T9581] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.469050][ T9581] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.495541][ T9581] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.510279][ T9564] team0: Port device team_slave_0 added [ 350.554900][ T9564] team0: Port device team_slave_1 added [ 350.634673][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 350.641945][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.669090][ T9564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 350.743689][ T9564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 350.750835][ T9564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 350.778529][ T9564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 350.832684][ T9581] hsr_slave_0: entered promiscuous mode [ 350.841791][ T9581] hsr_slave_1: entered promiscuous mode [ 350.879979][ T36] hsr_slave_0: left promiscuous mode [ 350.898592][ T36] hsr_slave_1: left promiscuous mode [ 350.904800][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 350.912886][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 350.921594][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 350.930063][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 350.964456][ T36] veth1_macvtap: left promiscuous mode [ 350.971681][ T36] veth0_macvtap: left promiscuous mode [ 350.981429][ T36] veth1_vlan: left promiscuous mode [ 350.988587][ T36] veth0_vlan: left promiscuous mode [ 351.238664][ T5851] Bluetooth: hci5: command tx timeout [ 351.715405][ T5851] Bluetooth: hci0: command tx timeout [ 351.816378][ T36] team0 (unregistering): Port device team_slave_1 removed [ 351.858440][ T36] team0 (unregistering): Port device team_slave_0 removed [ 351.967445][ T5851] Bluetooth: hci4: command tx timeout [ 352.289679][ T9665] dummy0: entered promiscuous mode [ 352.308988][ T9665] dummy0: left promiscuous mode [ 352.529480][ T9564] hsr_slave_0: entered promiscuous mode [ 352.538562][ T9564] hsr_slave_1: entered promiscuous mode [ 352.549031][ T9564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 352.552894][ T9673] netlink: 4 bytes leftover after parsing attributes in process `syz.5.878'. [ 352.556888][ T9564] Cannot create hsr debugfs directory [ 352.779918][ T9677] pim6reg: entered allmulticast mode [ 352.843765][ T9677] macvlan0: entered allmulticast mode [ 352.849431][ T9677] veth1_vlan: entered allmulticast mode [ 352.911072][ T9678] veth1_vlan: left allmulticast mode [ 352.931756][ T9678] macvlan0 (unregistering): left allmulticast mode [ 353.133058][ T9639] chnl_net:caif_netlink_parms(): no params data found [ 353.287390][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.315900][ T5851] Bluetooth: hci5: command tx timeout [ 353.337967][ T9696] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci0/hci0:200/input6 [ 353.373026][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.543027][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.580017][ T9639] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.592442][ T9639] bridge0: port 1(bridge_slave_0) entered disabled state [ 353.604114][ T9639] bridge_slave_0: entered allmulticast mode [ 353.607349][ T9712] netlink: 4 bytes leftover after parsing attributes in process `syz.4.887'. [ 353.621247][ T9639] bridge_slave_0: entered promiscuous mode [ 353.630280][ T9639] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.642126][ T9639] bridge0: port 2(bridge_slave_1) entered disabled state [ 353.649666][ T9639] bridge_slave_1: entered allmulticast mode [ 353.659481][ T9639] bridge_slave_1: entered promiscuous mode [ 353.668211][ T9705] veth0: entered promiscuous mode [ 353.771857][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 353.796432][ T5851] Bluetooth: hci0: command tx timeout [ 353.812429][ T9639] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 353.828429][ T9704] veth0: left promiscuous mode [ 353.877050][ T9639] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 353.950180][ T9724] netlink: zone id is out of range [ 353.956687][ T9724] netlink: zone id is out of range [ 353.969723][ T9724] netlink: zone id is out of range [ 353.979224][ T9724] netlink: 'syz.5.889': attribute type 72 has an invalid length. [ 353.987060][ T9724] netlink: 1016 bytes leftover after parsing attributes in process `syz.5.889'. [ 354.002841][ T9639] team0: Port device team_slave_0 added [ 354.035164][ T5851] Bluetooth: hci4: command tx timeout [ 354.046959][ T9639] team0: Port device team_slave_1 added [ 354.118987][ T9639] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 354.133656][ T9639] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.162065][ T9639] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 354.180942][ T9639] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 354.189923][ T9639] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 354.219216][ T9639] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 354.289894][ T9564] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 354.301977][ T9736] pim6reg: left allmulticast mode [ 354.352274][ T9564] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 354.456569][ T9564] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 354.478985][ T9564] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 354.553563][ T9639] hsr_slave_0: entered promiscuous mode [ 354.560577][ T9639] hsr_slave_1: entered promiscuous mode [ 354.568318][ T9639] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 354.576215][ T9639] Cannot create hsr debugfs directory [ 354.673420][ T36] bridge_slave_1: left allmulticast mode [ 354.681518][ T36] bridge_slave_1: left promiscuous mode [ 354.692993][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 354.723244][ T36] bridge_slave_0: left allmulticast mode [ 354.735049][ T36] bridge_slave_0: left promiscuous mode [ 354.740971][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.172874][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 355.184243][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 355.201742][ T36] bond0 (unregistering): Released all slaves [ 355.406631][ T5851] Bluetooth: hci5: command tx timeout [ 355.703773][ T36] hsr_slave_0: left promiscuous mode [ 355.715218][ T36] hsr_slave_1: left promiscuous mode [ 355.722505][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 355.730649][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 355.740480][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 355.748543][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 355.779176][ T36] veth1_macvtap: left promiscuous mode [ 355.784768][ T36] veth0_macvtap: left promiscuous mode [ 355.791737][ T36] veth1_vlan: left promiscuous mode [ 355.802560][ T36] veth0_vlan: left promiscuous mode [ 355.875970][ T5851] Bluetooth: hci0: command tx timeout [ 356.282605][ T36] team0 (unregistering): Port device team_slave_1 removed [ 356.320967][ T36] team0 (unregistering): Port device team_slave_0 removed [ 356.783328][ T9581] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 356.806748][ T9581] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 356.832497][ T9581] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 356.857509][ T9581] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 356.949636][ T5942] tipc: Subscription rejected, illegal request [ 356.950861][ T9787] netlink: 8 bytes leftover after parsing attributes in process `syz.5.907'. [ 357.105483][ T9564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.112521][ T9792] netlink: 'syz.5.908': attribute type 1 has an invalid length. [ 357.123342][ T9792] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 357.162189][ T9795] netlink: 10 bytes leftover after parsing attributes in process `syz.4.909'. [ 357.237029][ T9564] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.298092][ T2911] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.305394][ T2911] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.326414][ T2911] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.333726][ T2911] bridge0: port 2(bridge_slave_1) entered forwarding state [ 357.519178][ T9802] netlink: 'syz.4.912': attribute type 1 has an invalid length. [ 357.579478][ T9581] 8021q: adding VLAN 0 to HW filter on device bond0 [ 357.677722][ T9639] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 357.719062][ T9639] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 357.751469][ T9639] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 357.763795][ T9639] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 357.829883][ T9581] 8021q: adding VLAN 0 to HW filter on device team0 [ 357.906526][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.913690][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 357.952446][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.955425][ T5851] Bluetooth: hci0: command tx timeout [ 357.959674][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.220372][ T9639] 8021q: adding VLAN 0 to HW filter on device bond0 [ 358.271001][ T9639] 8021q: adding VLAN 0 to HW filter on device team0 [ 358.304037][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 358.311268][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 358.382323][ T5944] bridge0: port 2(bridge_slave_1) entered blocking state [ 358.389577][ T5944] bridge0: port 2(bridge_slave_1) entered forwarding state [ 358.471847][ T9564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.498409][ T9832] netlink: 348 bytes leftover after parsing attributes in process `syz.4.917'. [ 358.514370][ T9834] geneve1: entered promiscuous mode [ 358.521776][ T9834] geneve1: entered allmulticast mode [ 358.610047][ T9834] netlink: 'syz.5.918': attribute type 9 has an invalid length. [ 358.709676][ T9564] veth0_vlan: entered promiscuous mode [ 358.758267][ T9564] veth1_vlan: entered promiscuous mode [ 358.827001][ T9581] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 358.872799][ T9564] veth0_macvtap: entered promiscuous mode [ 358.936604][ T9564] veth1_macvtap: entered promiscuous mode [ 359.035773][ T9581] veth0_vlan: entered promiscuous mode [ 359.043215][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.093655][ T9564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.118152][ T9581] veth1_vlan: entered promiscuous mode [ 359.144822][ T9847] netlink: 4 bytes leftover after parsing attributes in process `syz.5.921'. [ 359.169224][ T1009] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.185992][ T1009] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.194845][ T1009] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.254117][ T1009] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.307786][ T9854] bridge0: port 3(gretap0) entered blocking state [ 359.316845][ T9854] bridge0: port 3(gretap0) entered disabled state [ 359.323871][ T9854] gretap0: entered allmulticast mode [ 359.333104][ T9854] gretap0: entered promiscuous mode [ 359.339323][ T9854] bridge0: port 3(gretap0) entered blocking state [ 359.345966][ T9854] bridge0: port 3(gretap0) entered forwarding state [ 359.362657][ T9639] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.454209][ T9581] veth0_macvtap: entered promiscuous mode [ 359.471285][ T9581] veth1_macvtap: entered promiscuous mode [ 359.501494][ T5942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.541832][ T5942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.592614][ T9581] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 359.614681][ T9581] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 359.636826][ T2911] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.670623][ T9862] netlink: 'syz.4.926': attribute type 11 has an invalid length. [ 359.714343][ T7967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 359.725735][ T2911] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.738470][ T7967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 359.746220][ T61] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.782860][ T61] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 359.858004][ T9639] veth0_vlan: entered promiscuous mode [ 359.941212][ T9639] veth1_vlan: entered promiscuous mode [ 360.047110][ T5944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.080029][ T5944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.105893][ T9872] xt_hashlimit: size too large, truncated to 1048576 [ 360.141738][ T9872] syz.5.930: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 360.164834][ T9639] veth0_macvtap: entered promiscuous mode [ 360.176273][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 360.190978][ T9872] CPU: 1 UID: 0 PID: 9872 Comm: syz.5.930 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 360.191009][ T9872] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 360.191030][ T9872] Call Trace: [ 360.191038][ T9872] [ 360.191048][ T9872] dump_stack_lvl+0x189/0x250 [ 360.191093][ T9872] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.191119][ T9872] ? __pfx__printk+0x10/0x10 [ 360.191148][ T9872] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 360.191178][ T9872] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 360.191211][ T9872] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 360.191243][ T9872] warn_alloc+0x214/0x310 [ 360.191280][ T9872] ? __pfx_warn_alloc+0x10/0x10 [ 360.191317][ T9872] ? __get_vm_area_node+0x28f/0x300 [ 360.191345][ T9872] ? htable_create+0xfc/0x7a0 [ 360.191371][ T9872] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 360.191435][ T9872] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 360.191472][ T9872] ? rcu_is_watching+0x15/0xb0 [ 360.191498][ T9872] ? htable_create+0xfc/0x7a0 [ 360.191518][ T9872] ? htable_create+0xfc/0x7a0 [ 360.191553][ T9872] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 360.191582][ T9872] ? htable_create+0xfc/0x7a0 [ 360.191600][ T9872] ? hashlimit_pernet+0x23/0x240 [ 360.191630][ T9872] htable_create+0xfc/0x7a0 [ 360.191660][ T9872] hashlimit_mt_check_common+0x719/0xa10 [ 360.191695][ T9872] xt_check_match+0x3ce/0xab0 [ 360.191741][ T9872] ? __pfx___mutex_lock+0x10/0x10 [ 360.191777][ T9872] ? __pfx_xt_check_match+0x10/0x10 [ 360.191814][ T9872] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 360.191852][ T9872] ? xt_find_match+0x1f7/0x250 [ 360.191861][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 360.191893][ T9872] translate_table+0x1553/0x2040 [ 360.191952][ T9872] ? __pfx_translate_table+0x10/0x10 [ 360.191992][ T9872] ? __might_fault+0xb0/0x130 [ 360.192049][ T9872] ? _copy_from_user+0x94/0xb0 [ 360.192086][ T9872] do_ip6t_set_ctl+0x970/0xce0 [ 360.192134][ T9872] ? rcu_is_watching+0x15/0xb0 [ 360.192162][ T9872] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 360.192225][ T9872] ? __pfx___mutex_lock+0x10/0x10 [ 360.192257][ T9872] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 360.192301][ T9872] ? __pfx_futex_wake+0x10/0x10 [ 360.192331][ T9872] nf_setsockopt+0x26c/0x290 [ 360.192377][ T9872] rawv6_setsockopt+0x23b/0x5b0 [ 360.192401][ T9872] ? __lock_acquire+0xab9/0xd20 [ 360.192429][ T9872] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 360.192455][ T9872] ? aa_sock_opt_perm+0x74/0x110 [ 360.192490][ T9872] ? sock_common_setsockopt+0x36/0xc0 [ 360.192523][ T9872] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 360.192558][ T9872] do_sock_setsockopt+0x257/0x3e0 [ 360.192598][ T9872] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 360.192660][ T9872] ? __fget_files+0x2a/0x420 [ 360.192703][ T9872] __x64_sys_setsockopt+0x18b/0x220 [ 360.192757][ T9872] do_syscall_64+0xfa/0x3b0 [ 360.192787][ T9872] ? lockdep_hardirqs_on+0x9c/0x150 [ 360.192818][ T9872] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.192841][ T9872] ? clear_bhb_loop+0x60/0xb0 [ 360.192871][ T9872] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 360.192895][ T9872] RIP: 0033:0x7f57a4d8e929 [ 360.192926][ T9872] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 360.192948][ T9872] RSP: 002b:00007f57a5b3b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 360.192975][ T9872] RAX: ffffffffffffffda RBX: 00007f57a4fb5fa0 RCX: 00007f57a4d8e929 [ 360.192992][ T9872] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 360.193005][ T9872] RBP: 00007f57a4e10b39 R08: 00000000000005c0 R09: 0000000000000000 [ 360.193022][ T9872] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 360.193038][ T9872] R13: 0000000000000000 R14: 00007f57a4fb5fa0 R15: 00007ffcbedea738 [ 360.193076][ T9872] [ 360.193090][ T9872] Mem-Info: [ 360.594391][ T9872] active_anon:5040 inactive_anon:0 isolated_anon:0 [ 360.594391][ T9872] active_file:1446 inactive_file:39957 isolated_file:0 [ 360.594391][ T9872] unevictable:768 dirty:7 writeback:0 [ 360.594391][ T9872] slab_reclaimable:11979 slab_unreclaimable:101536 [ 360.594391][ T9872] mapped:29963 shmem:1365 pagetables:873 [ 360.594391][ T9872] sec_pagetables:0 bounce:0 [ 360.594391][ T9872] kernel_misc_reclaimable:0 [ 360.594391][ T9872] free:1321570 free_pcp:12835 free_cma:0 [ 360.644685][ T9872] Node 0 active_anon:20160kB inactive_anon:0kB active_file:5784kB inactive_file:159624kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:119852kB dirty:28kB writeback:0kB shmem:3924kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12124kB pagetables:3372kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 360.684665][ T9872] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:120kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 360.720137][ T2911] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.735561][ T9872] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 360.767672][ T9872] lowmem_reserve[]: 0 2498 2499 2499 2499 [ 360.780856][ T9639] veth1_macvtap: entered promiscuous mode [ 360.788902][ T9872] Node 0 DMA32 free:1381152kB boost:0kB min:34248kB low:42808kB high:51368kB reserved_highatomic:0KB free_highatomic:0KB active_anon:20048kB inactive_anon:0kB active_file:5784kB inactive_file:158052kB unevictable:1536kB writepending:56kB present:3129332kB managed:2558316kB mlocked:0kB bounce:0kB free_pcp:38724kB local_pcp:19276kB free_cma:0kB [ 360.826435][ T9872] lowmem_reserve[]: 0 0 1 1 1 [ 360.831290][ T9872] Node 0 Normal free:12kB boost:0kB min:20kB low:24kB high:28kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1576kB unevictable:0kB writepending:0kB present:1048580kB managed:1644kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:8kB free_cma:0kB [ 360.863171][ T9872] lowmem_reserve[]: 0 0 0 0 0 [ 360.868017][ T9872] Node 1 Normal free:3902612kB boost:0kB min:55632kB low:69540kB high:83448kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:204kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:18020kB local_pcp:6560kB free_cma:0kB [ 360.900390][ T9872] lowmem_reserve[]: 0 0 0 0 0 [ 360.905282][ T9872] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 360.920110][ T9872] Node 0 DMA32: 4264*4kB (UME) 1406*8kB (UME) 130*16kB (UME) 306*32kB (UME) 118*64kB (UM) 261*128kB (UME) 176*256kB (UME) 87*512kB (UM) 42*1024kB (UM) 12*2048kB (UME) 280*4096kB (UM) = 1385200kB [ 360.941165][ T9872] Node 0 Normal: 1*4kB (M) 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 12kB [ 360.943770][ T2911] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 360.958698][ T9872] Node 1 Normal: 193*4kB (UE) 48*8kB (UME) 45*16kB (UME) 108*32kB (UME) 35*64kB (UME) 8*128kB (UME) 3*256kB (UM) 2*512kB (M) 3*1024kB (UME) 1*2048kB (E) 949*4096kB (M) = 3902612kB [ 360.985762][ T9872] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 360.996938][ T9872] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 361.015094][ T9872] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 361.024701][ T9872] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 361.035158][ T9872] 42767 total pagecache pages [ 361.039979][ T9872] 0 pages in swap cache [ 361.044150][ T9872] Free swap = 124996kB [ 361.085319][ T9639] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.090072][ T9872] Total swap = 124996kB [ 361.097113][ T9872] 2097051 pages RAM [ 361.101012][ T9872] 0 pages HighMem/MovableOnly [ 361.106105][ T9872] 425430 pages reserved [ 361.110306][ T9872] 0 pages cma reserved [ 361.124412][ T2911] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.213642][ T2911] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.233168][ T9639] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.257209][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.267574][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.295371][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.334136][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.435634][ T7967] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.451113][ T7967] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.507700][ T5942] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 361.530178][ T5942] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 361.618337][ T2911] bridge_slave_1: left allmulticast mode [ 361.624033][ T2911] bridge_slave_1: left promiscuous mode [ 361.631885][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 361.677022][ T2911] bridge_slave_0: left allmulticast mode [ 361.684064][ T2911] bridge_slave_0: left promiscuous mode [ 361.700049][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 362.089617][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 362.099360][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 362.111814][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 362.122193][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 362.130009][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 362.266669][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 362.277989][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 362.290623][ T2911] bond0 (unregistering): Released all slaves [ 362.731017][ T9890] team0: left promiscuous mode [ 362.749656][ T9890] dummy0: left promiscuous mode [ 362.770109][ T9890] bridge1: left allmulticast mode [ 362.782399][ T9890] gretap1: left promiscuous mode [ 362.788017][ T9890] macsec1: left promiscuous mode [ 362.793093][ T9890] macsec1: left allmulticast mode [ 362.901782][ T2911] hsr_slave_0: left promiscuous mode [ 362.909578][ T2911] hsr_slave_1: left promiscuous mode [ 362.927192][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 362.934650][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 362.952481][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 362.960027][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 362.983683][ T2911] veth1_macvtap: left promiscuous mode [ 362.989537][ T2911] veth0_macvtap: left promiscuous mode [ 362.998434][ T2911] veth1_vlan: left promiscuous mode [ 362.999702][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 363.003817][ T2911] veth0_vlan: left promiscuous mode [ 363.022557][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 363.033813][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 363.042307][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 363.050362][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 363.496321][ T9900] Bluetooth: MGMT ver 1.23 [ 363.551207][ T9902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.935'. [ 363.563522][ T9902] netlink: 24 bytes leftover after parsing attributes in process `syz.4.935'. [ 363.642020][ T9904] netlink: 4 bytes leftover after parsing attributes in process `syz.5.933'. [ 363.706395][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 363.817955][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 363.912916][ T9908] netlink: 'syz.4.936': attribute type 1 has an invalid length. [ 363.932286][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 363.960681][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 363.970450][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 363.980106][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 363.991325][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 364.196878][ T5851] Bluetooth: hci0: command tx timeout [ 364.542658][ T9884] chnl_net:caif_netlink_parms(): no params data found [ 364.554428][ T9914] netlink: 'syz.5.937': attribute type 1 has an invalid length. [ 364.838210][ T9920] netlink: 'syz.5.939': attribute type 1 has an invalid length. [ 364.846890][ T9920] netlink: 180 bytes leftover after parsing attributes in process `syz.5.939'. [ 364.999924][ T9884] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.008340][ T9884] bridge0: port 1(bridge_slave_0) entered disabled state [ 365.016278][ T9884] bridge_slave_0: entered allmulticast mode [ 365.024236][ T9884] bridge_slave_0: entered promiscuous mode [ 365.044183][ T9884] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.051640][ T9884] bridge0: port 2(bridge_slave_1) entered disabled state [ 365.067242][ T9884] bridge_slave_1: entered allmulticast mode [ 365.074596][ T9884] bridge_slave_1: entered promiscuous mode [ 365.075898][ T5851] Bluetooth: hci4: command tx timeout [ 365.143103][ T2911] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.248486][ T9884] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 365.309999][ T2911] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.353577][ T9884] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 365.386946][ T2911] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.425877][ T9944] vlan0: entered allmulticast mode [ 365.431103][ T9944] bridge_slave_0: entered allmulticast mode [ 365.582883][ T2911] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 365.601775][ T9884] team0: Port device team_slave_0 added [ 365.652628][ T9884] team0: Port device team_slave_1 added [ 365.756301][ T9949] netlink: 8 bytes leftover after parsing attributes in process `syz.4.945'. [ 365.810106][ T9884] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 365.818862][ T9884] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.846401][ T9884] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 365.933797][ T9884] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 365.946586][ T9884] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 365.975755][ T9884] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 366.016787][ T9894] chnl_net:caif_netlink_parms(): no params data found [ 366.035376][ T5851] Bluetooth: hci5: command tx timeout [ 366.189005][ T9909] chnl_net:caif_netlink_parms(): no params data found [ 366.267947][ T9884] hsr_slave_0: entered promiscuous mode [ 366.275611][ T5851] Bluetooth: hci0: command tx timeout [ 366.277324][ T9884] hsr_slave_1: entered promiscuous mode [ 366.289731][ T9884] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 366.302986][ T9884] Cannot create hsr debugfs directory [ 366.415880][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 366.427387][ T9963] netlink: 8 bytes leftover after parsing attributes in process `syz.4.948'. [ 366.614390][ T2911] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.810468][ T2911] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.891968][ T9909] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.903460][ T9909] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.911427][ T9909] bridge_slave_0: entered allmulticast mode [ 366.919800][ T9909] bridge_slave_0: entered promiscuous mode [ 366.949298][ T2911] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 366.964287][ T9894] bridge0: port 1(bridge_slave_0) entered blocking state [ 366.972093][ T9894] bridge0: port 1(bridge_slave_0) entered disabled state [ 366.980036][ T9894] bridge_slave_0: entered allmulticast mode [ 366.988495][ T9894] bridge_slave_0: entered promiscuous mode [ 367.002824][ T9894] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.011870][ T9894] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.019399][ T9894] bridge_slave_1: entered allmulticast mode [ 367.028261][ T9894] bridge_slave_1: entered promiscuous mode [ 367.050505][ T9909] bridge0: port 2(bridge_slave_1) entered blocking state [ 367.057930][ T9909] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.065659][ T9909] bridge_slave_1: entered allmulticast mode [ 367.073659][ T9909] bridge_slave_1: entered promiscuous mode [ 367.119073][ T2911] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 367.155554][ T5851] Bluetooth: hci4: command tx timeout [ 367.179923][ T9894] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.233287][ T9894] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.282704][ T9909] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 367.313801][ T9909] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 367.397883][ T9894] team0: Port device team_slave_0 added [ 367.410317][ T9894] team0: Port device team_slave_1 added [ 367.471955][ T9909] team0: Port device team_slave_0 added [ 367.522405][ T9909] team0: Port device team_slave_1 added [ 367.571948][ T9894] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.579890][ T9894] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.612348][ T9894] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.640789][ T9909] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 367.649728][ T9909] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.676062][ T9909] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 367.719724][ T9894] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.728107][ T9894] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.756194][ T9894] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.768131][ T9909] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 367.779287][ T9909] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 367.805702][ T9909] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 367.862737][ T2911] bridge_slave_1: left allmulticast mode [ 367.869288][ T2911] bridge_slave_1: left promiscuous mode [ 367.883340][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 367.920968][ T2911] bridge_slave_0: left allmulticast mode [ 367.935143][ T2911] bridge_slave_0: left promiscuous mode [ 367.941652][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 367.986311][ T2911] bridge_slave_1: left allmulticast mode [ 367.992007][ T2911] bridge_slave_1: left promiscuous mode [ 368.001167][ T2911] bridge0: port 2(bridge_slave_1) entered disabled state [ 368.016144][ T2911] bridge_slave_0: left allmulticast mode [ 368.022184][ T2911] bridge_slave_0: left promiscuous mode [ 368.031920][ T2911] bridge0: port 1(bridge_slave_0) entered disabled state [ 368.040017][ T9980] netlink: 8 bytes leftover after parsing attributes in process `syz.5.950'. [ 368.115455][ T5851] Bluetooth: hci5: command tx timeout [ 368.274532][ T9987] set match dimension is over the limit! [ 368.314085][ T9987] xt_hashlimit: size too large, truncated to 1048576 [ 368.357097][ T5851] Bluetooth: hci0: command tx timeout [ 368.561904][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.574746][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.598691][ T2911] bond0 (unregistering): Released all slaves [ 368.896347][ T2911] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 368.907774][ T2911] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 368.926180][ T2911] bond0 (unregistering): Released all slaves [ 368.988561][ T9985] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 369.004155][ T9991] C: renamed from team_slave_0 [ 369.022563][ T9985] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 369.034079][ T9991] netlink: 'syz.4.954': attribute type 1 has an invalid length. [ 369.075749][ T9991] netlink: 152 bytes leftover after parsing attributes in process `syz.4.954'. [ 369.092184][ T9991] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 369.193427][ T9894] hsr_slave_0: entered promiscuous mode [ 369.200347][ T9894] hsr_slave_1: entered promiscuous mode [ 369.206843][ T9894] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.214434][ T9894] Cannot create hsr debugfs directory [ 369.238045][ T5851] Bluetooth: hci4: command tx timeout [ 369.262438][ T9909] hsr_slave_0: entered promiscuous mode [ 369.269547][ T9909] hsr_slave_1: entered promiscuous mode [ 369.278606][ T9909] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 369.286410][ T9909] Cannot create hsr debugfs directory [ 369.419988][ T9996] netlink: 'syz.4.955': attribute type 46 has an invalid length. [ 369.918866][ T2911] hsr_slave_0: left promiscuous mode [ 369.931843][ T2911] hsr_slave_1: left promiscuous mode [ 369.939978][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 369.950714][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 369.966259][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 369.973972][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 369.990229][ T2911] hsr_slave_0: left promiscuous mode [ 369.998464][ T2911] hsr_slave_1: left promiscuous mode [ 370.004339][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 370.012144][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 370.022482][ T2911] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 370.030705][ T2911] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 370.067774][ T2911] veth1_macvtap: left promiscuous mode [ 370.073378][ T2911] veth0_macvtap: left promiscuous mode [ 370.090474][ T2911] veth1_vlan: left promiscuous mode [ 370.095955][ T2911] veth0_vlan: left promiscuous mode [ 370.119302][ T2911] veth1_macvtap: left promiscuous mode [ 370.124943][ T2911] veth0_macvtap: left promiscuous mode [ 370.130961][ T2911] veth1_vlan: left promiscuous mode [ 370.136468][ T2911] veth0_vlan: left promiscuous mode [ 370.196125][ T5851] Bluetooth: hci5: command tx timeout [ 370.435436][ T5851] Bluetooth: hci0: command tx timeout [ 370.847668][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 370.884070][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 371.315745][ T5851] Bluetooth: hci4: command tx timeout [ 371.626854][ T2911] team0 (unregistering): Port device team_slave_1 removed [ 371.671055][ T2911] team0 (unregistering): Port device team_slave_0 removed [ 372.026478][ T9884] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 372.095097][ T9884] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 372.143800][ T9884] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 372.233819][ T9884] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 372.275483][ T5851] Bluetooth: hci5: command tx timeout [ 372.388145][T10029] netlink: 8 bytes leftover after parsing attributes in process `syz.5.963'. [ 372.407576][T10031] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input7 [ 372.565734][ T9884] 8021q: adding VLAN 0 to HW filter on device bond0 [ 372.713809][T10045] block nbd4: not configured, cannot reconfigure [ 372.773699][ T9884] 8021q: adding VLAN 0 to HW filter on device team0 [ 372.798776][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.805982][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 372.841546][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.848784][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 374.875609][ T9909] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 374.899355][ T9884] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 374.969409][ T9909] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 374.991047][ T9909] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 375.021105][ T9909] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 375.040488][T10078] netlink: 8 bytes leftover after parsing attributes in process `syz.4.975'. [ 375.173947][ T9894] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 375.198363][ T9894] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 375.243981][ T9894] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 375.281893][ T9894] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 375.366370][T10100] netlink: 8 bytes leftover after parsing attributes in process `syz.4.979'. [ 375.444955][ T9884] veth0_vlan: entered promiscuous mode [ 375.589382][ T9909] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.632942][ T9884] veth1_vlan: entered promiscuous mode [ 375.682350][ T9909] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.711400][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.718620][ T5942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.792128][ T5942] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.799379][ T5942] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.315956][ T9909] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 376.346304][ T9884] veth0_macvtap: entered promiscuous mode [ 376.363954][ T9884] veth1_macvtap: entered promiscuous mode [ 376.389854][ T9894] 8021q: adding VLAN 0 to HW filter on device bond0 [ 376.478115][ T9894] 8021q: adding VLAN 0 to HW filter on device team0 [ 376.511640][T10130] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 376.533594][ T9884] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 376.560109][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 376.567387][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 376.613578][ T9884] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 376.648366][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 376.655619][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 376.726393][ T36] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.767494][ T36] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.768602][T10141] netlink: 8 bytes leftover after parsing attributes in process `syz.5.988'. [ 376.790557][T10137] netlink: 8 bytes leftover after parsing attributes in process `syz.5.988'. [ 376.796178][ T36] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.809251][T10137] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0 [ 376.823830][T10141] openvswitch: netlink: nsh attr 0 has unexpected len 7 expected 0 [ 376.840751][T10137] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.855205][ T36] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 376.865326][T10141] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 377.013253][ T9909] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.042511][ T5944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.052458][ T5944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.113270][ T5944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 377.139704][ T9909] veth0_vlan: entered promiscuous mode [ 377.148098][ T5944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 377.184676][ T9909] veth1_vlan: entered promiscuous mode [ 377.317453][ T9909] veth0_macvtap: entered promiscuous mode [ 377.348912][ T9909] veth1_macvtap: entered promiscuous mode [ 377.508407][ T9909] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.520685][T10155] netlink: 2 bytes leftover after parsing attributes in process `syz.4.990'. [ 377.534664][ T9909] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.571738][ T9894] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 377.698069][ T13] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.756349][T10157] netlink: 4 bytes leftover after parsing attributes in process `syz.4.991'. [ 377.811409][ T49] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.832172][ T49] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.912808][ T13] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.953151][ T49] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.979533][ T49] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 378.052526][ T13] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.123068][ T13] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.193003][ T9894] veth0_vlan: entered promiscuous mode [ 378.202973][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.211557][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.230034][ T9894] veth1_vlan: entered promiscuous mode [ 378.292092][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.302856][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.350721][ T9894] veth0_macvtap: entered promiscuous mode [ 378.399187][ T9894] veth1_macvtap: entered promiscuous mode [ 378.444658][ T13] bridge_slave_1: left allmulticast mode [ 378.451639][ T13] bridge_slave_1: left promiscuous mode [ 378.457614][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 378.467590][ T13] bridge_slave_0: left allmulticast mode [ 378.473603][ T13] bridge_slave_0: left promiscuous mode [ 378.480951][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 378.529731][ T1301] ieee802154 phy1 wpan1: encryption failed: -22 [ 378.829479][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 378.848534][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 378.862129][ T13] bond0 (unregistering): Released all slaves [ 378.911124][ T9894] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 378.941743][ T9894] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.008348][ T2911] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.027033][ T2911] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.119050][ T2911] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.161940][ T2911] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.338650][ T13] hsr_slave_0: left promiscuous mode [ 379.344809][ T13] hsr_slave_1: left promiscuous mode [ 379.360519][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 379.371327][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 379.383084][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 379.394484][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 379.427817][ T13] veth1_macvtap: left promiscuous mode [ 379.433410][ T13] veth0_macvtap: left promiscuous mode [ 379.439468][ T13] veth1_vlan: left promiscuous mode [ 379.444816][ T13] veth0_vlan: left promiscuous mode [ 379.506399][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 379.514854][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 379.525884][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 379.535160][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 379.543037][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 379.796450][T10170] netlink: 'syz.4.994': attribute type 22 has an invalid length. [ 379.806338][T10170] netlink: 560 bytes leftover after parsing attributes in process `syz.4.994'. [ 380.222579][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 380.244146][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 380.263798][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 380.281681][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 380.292020][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 380.371331][ T13] team0 (unregistering): Port device team_slave_1 removed [ 380.409833][ T13] team0 (unregistering): Port device team_slave_0 removed [ 380.811189][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.839543][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.969587][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.984116][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 381.589336][ T13] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.655050][ T5851] Bluetooth: hci0: command tx timeout [ 381.756441][ T13] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.777277][T10183] chnl_net:caif_netlink_parms(): no params data found [ 381.810863][T10162] chnl_net:caif_netlink_parms(): no params data found [ 381.871356][ T13] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 381.953650][T10183] bridge0: port 1(bridge_slave_0) entered blocking state [ 381.963872][T10183] bridge0: port 1(bridge_slave_0) entered disabled state [ 381.972916][T10183] bridge_slave_0: entered allmulticast mode [ 381.980804][T10183] bridge_slave_0: entered promiscuous mode [ 382.007130][ T13] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.021994][T10183] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.029596][T10183] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.038000][T10183] bridge_slave_1: entered allmulticast mode [ 382.046142][T10183] bridge_slave_1: entered promiscuous mode [ 382.110607][T10183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.138159][T10162] bridge0: port 1(bridge_slave_0) entered blocking state [ 382.145874][T10162] bridge0: port 1(bridge_slave_0) entered disabled state [ 382.153133][T10162] bridge_slave_0: entered allmulticast mode [ 382.163615][T10162] bridge_slave_0: entered promiscuous mode [ 382.173828][T10183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.201351][T10162] bridge0: port 2(bridge_slave_1) entered blocking state [ 382.209179][T10162] bridge0: port 2(bridge_slave_1) entered disabled state [ 382.216586][T10162] bridge_slave_1: entered allmulticast mode [ 382.223843][T10162] bridge_slave_1: entered promiscuous mode [ 382.283685][T10183] team0: Port device team_slave_0 added [ 382.292994][T10162] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 382.305352][T10183] team0: Port device team_slave_1 added [ 382.330240][T10162] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 382.355220][ T5851] Bluetooth: hci5: command tx timeout [ 382.400797][T10183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.408244][T10183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.440918][T10183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.454085][T10162] team0: Port device team_slave_0 added [ 382.469453][T10162] team0: Port device team_slave_1 added [ 382.476463][T10183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.483433][T10183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.509820][T10183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 382.561430][T10162] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 382.570589][T10162] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.609845][T10162] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 382.657593][T10162] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 382.664588][T10162] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 382.737787][T10212] netlink: 36 bytes leftover after parsing attributes in process `syz.4.999'. [ 382.747110][T10162] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 383.119787][T10183] hsr_slave_0: entered promiscuous mode [ 383.140004][T10183] hsr_slave_1: entered promiscuous mode [ 383.162554][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 383.171559][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 383.179956][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 383.189617][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 383.197509][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 383.203553][T10162] hsr_slave_0: entered promiscuous mode [ 383.212346][T10162] hsr_slave_1: entered promiscuous mode [ 383.224112][T10162] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 383.232420][T10162] Cannot create hsr debugfs directory [ 383.424809][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.651710][T10228] team0 (unregistering): Port device team_slave_0 removed [ 383.692406][T10228] team0 (unregistering): Port device team_slave_1 removed [ 383.715493][ T5851] Bluetooth: hci0: command tx timeout [ 383.768180][T10240] netlink: 248 bytes leftover after parsing attributes in process `syz.4.1005'. [ 383.878354][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.105999][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.197290][T10249] bond0: entered promiscuous mode [ 384.202411][T10249] bond_slave_0: entered promiscuous mode [ 384.215389][T10249] bond_slave_1: entered promiscuous mode [ 384.223208][T10249] macvlan1: entered promiscuous mode [ 384.230882][T10249] hsr1: entered promiscuous mode [ 384.294147][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.308704][T10253] netlink: 'syz.4.1008': attribute type 13 has an invalid length. [ 384.336779][T10253] netlink: 'syz.4.1008': attribute type 17 has an invalid length. [ 384.435446][ T5851] Bluetooth: hci5: command tx timeout [ 384.507736][T10260] netlink: 9275 bytes leftover after parsing attributes in process `syz.5.1009'. [ 384.555705][T10262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1008'. [ 384.658985][T10253] 8021q: adding VLAN 0 to HW filter on device team0 [ 384.695784][T10258] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.721422][T10253] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 384.831050][T10252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.903745][T10252] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 384.974022][ T13] bridge_slave_1: left allmulticast mode [ 384.980069][ T13] bridge_slave_1: left promiscuous mode [ 384.986463][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.002575][ T13] bridge_slave_0: left allmulticast mode [ 385.009657][ T13] bridge_slave_0: left promiscuous mode [ 385.021421][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.036916][ T13] bridge_slave_1: left allmulticast mode [ 385.042680][ T13] bridge_slave_1: left promiscuous mode [ 385.048912][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 385.071240][ T13] bridge_slave_0: left allmulticast mode [ 385.081304][ T13] bridge_slave_0: left promiscuous mode [ 385.087378][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.237007][ T5851] Bluetooth: hci4: command tx timeout [ 385.445991][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.457360][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.467779][ T13] bond0 (unregistering): Released all slaves [ 385.754061][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 385.769338][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 385.779524][ T13] bond0 (unregistering): Released all slaves [ 385.795528][ T5851] Bluetooth: hci0: command tx timeout [ 385.971586][T10223] chnl_net:caif_netlink_parms(): no params data found [ 386.166589][T10223] bridge0: port 1(bridge_slave_0) entered blocking state [ 386.173795][T10223] bridge0: port 1(bridge_slave_0) entered disabled state [ 386.183586][T10223] bridge_slave_0: entered allmulticast mode [ 386.191649][T10223] bridge_slave_0: entered promiscuous mode [ 386.232466][T10223] bridge0: port 2(bridge_slave_1) entered blocking state [ 386.243811][T10223] bridge0: port 2(bridge_slave_1) entered disabled state [ 386.251408][T10223] bridge_slave_1: entered allmulticast mode [ 386.260064][T10223] bridge_slave_1: entered promiscuous mode [ 386.370516][T10223] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 386.394760][T10223] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 386.430792][ T13] hsr_slave_0: left promiscuous mode [ 386.440497][ T13] hsr_slave_1: left promiscuous mode [ 386.446626][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.454168][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.462893][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.470860][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.491236][ T13] hsr_slave_0: left promiscuous mode [ 386.503189][ T13] hsr_slave_1: left promiscuous mode [ 386.514006][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.521892][ T5851] Bluetooth: hci5: command tx timeout [ 386.528441][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 386.539311][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 386.546850][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 386.585434][ T13] veth1_macvtap: left promiscuous mode [ 386.591032][ T13] veth0_macvtap: left promiscuous mode [ 386.603356][ T13] veth1_vlan: left promiscuous mode [ 386.609478][ T13] veth0_vlan: left promiscuous mode [ 386.618316][T10281] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1011'. [ 386.628548][ T13] veth1_macvtap: left promiscuous mode [ 386.634137][ T13] veth0_macvtap: left promiscuous mode [ 386.640781][ T13] veth1_vlan: left promiscuous mode [ 386.647310][ T13] veth0_vlan: left promiscuous mode [ 387.225074][ T13] team0 (unregistering): Port device team_slave_1 removed [ 387.268513][ T13] team0 (unregistering): Port device team_slave_0 removed [ 387.315310][ T5851] Bluetooth: hci4: command tx timeout [ 387.875666][ T5851] Bluetooth: hci0: command tx timeout [ 388.043025][ T13] team0 (unregistering): Port device team_slave_1 removed [ 388.079048][ T13] team0 (unregistering): Port device team_slave_0 removed [ 388.496340][T10286] bridge4: entered promiscuous mode [ 388.501612][T10286] bridge4: entered allmulticast mode [ 388.595099][ T5851] Bluetooth: hci5: command tx timeout [ 388.626830][T10223] team0: Port device team_slave_0 added [ 388.631419][T10292] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1013'. [ 388.656717][T10223] team0: Port device team_slave_1 added [ 388.808284][T10223] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 388.815897][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.843192][T10223] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 388.864732][T10223] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 388.872017][T10223] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 388.898303][T10223] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 388.972230][T10302] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1016'. [ 389.024812][T10304] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1017'. [ 389.037158][T10302] netlink: 1 bytes leftover after parsing attributes in process `syz.4.1016'. [ 389.038072][T10305] netlink: 'syz.5.1017': attribute type 10 has an invalid length. [ 389.054172][T10302] netlink: 56 bytes leftover after parsing attributes in process `syz.4.1016'. [ 389.064311][T10304] netlink: 'syz.5.1017': attribute type 10 has an invalid length. [ 389.130921][T10223] hsr_slave_0: entered promiscuous mode [ 389.143902][T10223] hsr_slave_1: entered promiscuous mode [ 389.163631][T10223] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 389.171624][T10223] Cannot create hsr debugfs directory [ 389.179974][T10304] dummy0: entered promiscuous mode [ 389.186951][T10304] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 389.198250][T10307] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1017'. [ 389.252420][T10183] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 389.282180][T10183] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 389.314515][T10183] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 389.349369][T10312] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1019'. [ 389.374255][T10183] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 389.397168][ T5851] Bluetooth: hci4: command tx timeout [ 389.421185][T10313] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1019'. [ 389.703919][T10162] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 389.750540][T10325] netlink: 136 bytes leftover after parsing attributes in process `syz.5.1021'. [ 389.766498][T10162] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 389.769617][T10325] netlink: 'syz.5.1021': attribute type 15 has an invalid length. [ 389.799587][T10162] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 389.841460][T10327] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 389.850417][T10162] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 389.896716][T10327] openvswitch: netlink: VXLAN extension 0 has unexpected len 4 expected 0 [ 389.983721][T10183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.053757][T10183] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.097104][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.104323][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.114207][T10341] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1023'. [ 390.142011][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.149251][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.366514][T10223] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 390.383233][T10223] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 390.423056][T10223] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 390.439529][T10223] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 390.539723][T10162] 8021q: adding VLAN 0 to HW filter on device bond0 [ 390.604600][T10162] 8021q: adding VLAN 0 to HW filter on device team0 [ 390.722438][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.729666][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 390.760905][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.768209][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 390.937772][T10183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 390.954586][T10223] 8021q: adding VLAN 0 to HW filter on device bond0 [ 391.043376][T10223] 8021q: adding VLAN 0 to HW filter on device team0 [ 391.108264][ T5944] bridge0: port 1(bridge_slave_0) entered blocking state [ 391.115493][ T5944] bridge0: port 1(bridge_slave_0) entered forwarding state [ 391.159067][ T1009] bridge0: port 2(bridge_slave_1) entered blocking state [ 391.166277][ T1009] bridge0: port 2(bridge_slave_1) entered forwarding state [ 391.220564][T10183] veth0_vlan: entered promiscuous mode [ 391.283671][T10183] veth1_vlan: entered promiscuous mode [ 391.424788][T10183] veth0_macvtap: entered promiscuous mode [ 391.439204][T10162] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.453101][T10183] veth1_macvtap: entered promiscuous mode [ 391.475623][ T5851] Bluetooth: hci4: command tx timeout [ 391.536561][T10378] pim6reg1: entered promiscuous mode [ 391.550621][T10378] pim6reg1: entered allmulticast mode [ 391.564390][T10183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.649663][T10183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 391.734731][T10162] veth0_vlan: entered promiscuous mode [ 391.765918][ T5944] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.816882][T10385] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 391.817305][ T5944] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.840200][ T5944] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.849263][T10385] netlink: 'syz.4.1031': attribute type 23 has an invalid length. [ 391.872248][ T5944] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 391.892155][T10223] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.936626][T10162] veth1_vlan: entered promiscuous mode [ 392.112546][ T1009] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.126770][ T1009] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.181004][T10162] veth0_macvtap: entered promiscuous mode [ 392.214074][T10162] veth1_macvtap: entered promiscuous mode [ 392.229048][T10223] veth0_vlan: entered promiscuous mode [ 392.251807][ T5944] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.263797][ T5944] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.297395][T10223] veth1_vlan: entered promiscuous mode [ 392.354225][T10162] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.410415][T10162] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.493187][ T13] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.509053][ T13] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.535760][ T13] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.549331][ T13] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.574685][T10223] veth0_macvtap: entered promiscuous mode [ 392.600996][T10223] veth1_macvtap: entered promiscuous mode [ 392.689905][T10223] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 392.754461][T10223] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.758453][T10402] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 392.783403][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.804760][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.886242][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.957167][ T1009] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.020404][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.055941][ T1009] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.064749][ T1009] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.107393][ T1009] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 393.139352][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.196679][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.204570][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.231987][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.343209][ T5942] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.360754][ T5942] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.433761][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 393.443913][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 393.563337][ T36] bridge_slave_1: left allmulticast mode [ 393.569296][ T36] bridge_slave_1: left promiscuous mode [ 393.575416][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 393.586488][ T36] bridge_slave_0: left allmulticast mode [ 393.592157][ T36] bridge_slave_0: left promiscuous mode [ 393.599254][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 394.351349][ T5864] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 394.366174][ T5864] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 394.375239][ T5864] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 394.384037][ T5864] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 394.392693][ T5864] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 394.513917][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 394.559117][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 394.615965][ T36] bond0 (unregistering): Released all slaves [ 395.068101][ T36] hsr_slave_0: left promiscuous mode [ 395.074315][ T36] hsr_slave_1: left promiscuous mode [ 395.088772][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 395.097563][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 395.106909][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 395.112445][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 395.114330][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 395.131098][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 395.139543][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 395.150707][ T36] veth1_macvtap: left promiscuous mode [ 395.153382][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 395.158411][ T36] veth0_macvtap: left promiscuous mode [ 395.171083][ T36] veth1_vlan: left promiscuous mode [ 395.176511][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 395.185902][ T36] veth0_vlan: left promiscuous mode [ 395.650668][ T36] team0 (unregistering): Port device team_slave_1 removed [ 395.774763][ T36] team0 (unregistering): Port device team_slave_0 removed [ 396.020796][ T5864] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 396.030269][ T5864] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 396.041493][ T5864] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 396.050375][ T5864] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 396.061852][ T5864] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 396.442373][ T5864] Bluetooth: hci0: command tx timeout [ 396.465510][T10431] tipc: Enabling of bearer rejected, failed to enable media [ 396.532524][T10432] netlink: 'syz.4.1043': attribute type 1 has an invalid length. [ 396.552072][T10434] __nla_validate_parse: 2 callbacks suppressed [ 396.552093][T10434] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1044'. [ 396.557160][T10435] Bluetooth: MGMT ver 1.23 [ 396.575113][T10431] netlink: 'syz.4.1043': attribute type 1 has an invalid length. [ 396.591167][T10406] chnl_net:caif_netlink_parms(): no params data found [ 396.604119][T10436] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1044'. [ 396.626023][T10436] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1044'. [ 397.032909][T10448] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1047'. [ 397.121792][T10451] netlink: 'syz.5.1048': attribute type 6 has an invalid length. [ 397.133936][T10406] bridge0: port 1(bridge_slave_0) entered blocking state [ 397.142411][T10406] bridge0: port 1(bridge_slave_0) entered disabled state [ 397.155743][T10406] bridge_slave_0: entered allmulticast mode [ 397.163383][T10406] bridge_slave_0: entered promiscuous mode [ 397.231578][T10406] bridge0: port 2(bridge_slave_1) entered blocking state [ 397.243395][ T5864] Bluetooth: hci4: command tx timeout [ 397.252611][T10406] bridge0: port 2(bridge_slave_1) entered disabled state [ 397.265479][T10406] bridge_slave_1: entered allmulticast mode [ 397.273422][T10406] bridge_slave_1: entered promiscuous mode [ 397.321957][T10457] netlink: 'syz.4.1049': attribute type 1 has an invalid length. [ 397.330135][T10456] netlink: 'syz.4.1049': attribute type 1 has an invalid length. [ 397.400619][T10406] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 397.419857][T10406] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 397.461319][T10417] chnl_net:caif_netlink_parms(): no params data found [ 397.653403][T10406] team0: Port device team_slave_0 added [ 397.731424][ T36] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 397.772150][T10427] chnl_net:caif_netlink_parms(): no params data found [ 397.814608][T10406] team0: Port device team_slave_1 added [ 397.886210][T10489] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 397.916571][ T36] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.069067][T10499] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1060'. [ 398.100909][ T36] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.115741][ T5864] Bluetooth: hci5: command tx timeout [ 398.130217][T10500] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1060'. [ 398.140780][T10406] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 398.152552][T10406] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.180958][T10406] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 398.250000][ T36] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 398.286558][T10406] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 398.302284][T10406] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 398.329936][T10406] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 398.372795][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 398.381020][ T13] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 398.405925][ T5935] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 398.480426][ T5935] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 398.516322][ T5864] Bluetooth: hci0: command tx timeout [ 398.615341][T10417] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.622578][T10417] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.630546][T10417] bridge_slave_0: entered allmulticast mode [ 398.641819][T10417] bridge_slave_0: entered promiscuous mode [ 398.654847][T10427] bridge0: port 1(bridge_slave_0) entered blocking state [ 398.662525][T10427] bridge0: port 1(bridge_slave_0) entered disabled state [ 398.669977][T10427] bridge_slave_0: entered allmulticast mode [ 398.678188][T10427] bridge_slave_0: entered promiscuous mode [ 398.692855][T10406] hsr_slave_0: entered promiscuous mode [ 398.701553][T10406] hsr_slave_1: entered promiscuous mode [ 398.750434][T10417] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.765193][T10417] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.782686][T10417] bridge_slave_1: entered allmulticast mode [ 398.790938][T10417] bridge_slave_1: entered promiscuous mode [ 398.866650][T10427] bridge0: port 2(bridge_slave_1) entered blocking state [ 398.873857][T10427] bridge0: port 2(bridge_slave_1) entered disabled state [ 398.892077][T10427] bridge_slave_1: entered allmulticast mode [ 398.900656][T10427] bridge_slave_1: entered promiscuous mode [ 398.973778][T10516] bridge4: entered promiscuous mode [ 399.001079][T10516] bridge4: entered allmulticast mode [ 399.151915][T10427] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.237557][ T9] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 399.317279][ T5864] Bluetooth: hci4: command tx timeout [ 399.389963][T10417] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 399.423936][T10417] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.444817][T10427] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 399.577324][T10529] netlink: 28 bytes leftover after parsing attributes in process `syz.5.1068'. [ 399.612500][T10417] team0: Port device team_slave_0 added [ 399.681291][T10417] team0: Port device team_slave_1 added [ 399.893669][T10427] team0: Port device team_slave_0 added [ 400.019963][ T36] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.074014][T10417] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.082618][T10417] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.112202][T10417] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.132163][T10427] team0: Port device team_slave_1 added [ 400.147714][T10537] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1070'. [ 400.186751][ T36] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.204030][T10417] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.215353][T10417] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.217202][ T5864] Bluetooth: hci5: command tx timeout [ 400.241897][T10417] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.341440][ T36] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.360185][T10427] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 400.367806][T10427] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.396127][T10427] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 400.472960][ T36] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.499889][T10427] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 400.516719][T10427] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 400.555281][T10427] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 400.595127][ T5864] Bluetooth: hci0: command tx timeout [ 400.710443][T10417] hsr_slave_0: entered promiscuous mode [ 400.731518][T10417] hsr_slave_1: entered promiscuous mode [ 400.740236][T10417] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.759454][T10417] Cannot create hsr debugfs directory [ 400.844738][T10427] hsr_slave_0: entered promiscuous mode [ 400.858798][T10427] hsr_slave_1: entered promiscuous mode [ 400.865337][T10427] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 400.872937][T10427] Cannot create hsr debugfs directory [ 401.214556][T10562] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1078'. [ 401.242261][ T36] bridge_slave_1: left allmulticast mode [ 401.257561][ T36] bridge_slave_1: left promiscuous mode [ 401.263502][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.287435][ T36] bridge_slave_0: left allmulticast mode [ 401.305636][ T36] bridge_slave_0: left promiscuous mode [ 401.312580][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.334179][ T36] bridge_slave_1: left allmulticast mode [ 401.342151][ T36] bridge_slave_1: left promiscuous mode [ 401.349309][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 401.359761][ T36] bridge_slave_0: left allmulticast mode [ 401.365865][ T36] bridge_slave_0: left promiscuous mode [ 401.371638][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 401.405407][ T5864] Bluetooth: hci4: command tx timeout [ 401.428274][T10571] netlink: 'syz.5.1080': attribute type 1 has an invalid length. [ 401.445103][T10571] netlink: 208 bytes leftover after parsing attributes in process `syz.5.1080'. [ 401.778928][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 401.791492][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 401.801869][ T36] bond0 (unregistering): Released all slaves [ 402.079727][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 402.090952][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 402.101289][ T36] bond0 (unregistering): Released all slaves [ 402.275714][ T5864] Bluetooth: hci5: command tx timeout [ 402.435166][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 402.620759][T10580] netlink: 148 bytes leftover after parsing attributes in process `syz.5.1085'. [ 402.676003][ T5864] Bluetooth: hci0: command tx timeout [ 402.817226][T10406] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 402.884118][T10406] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 402.930829][T10406] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 402.960211][T10406] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 403.003443][ T36] hsr_slave_0: left promiscuous mode [ 403.009817][ T36] hsr_slave_1: left promiscuous mode [ 403.021792][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.032126][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.042358][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.050375][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.069007][ T36] hsr_slave_0: left promiscuous mode [ 403.077919][ T36] hsr_slave_1: left promiscuous mode [ 403.084121][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 403.091773][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 403.100789][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 403.113774][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 403.152863][ T36] veth1_macvtap: left promiscuous mode [ 403.158975][ T36] veth0_macvtap: left promiscuous mode [ 403.164591][ T36] veth1_vlan: left promiscuous mode [ 403.170478][ T36] veth0_vlan: left promiscuous mode [ 403.181481][ T36] veth1_macvtap: left promiscuous mode [ 403.187157][ T36] veth0_macvtap: left promiscuous mode [ 403.192804][ T36] veth1_vlan: left promiscuous mode [ 403.198152][ T36] veth0_vlan: left promiscuous mode [ 403.490627][ T5864] Bluetooth: hci4: command tx timeout [ 403.788841][ T36] team0 (unregistering): Port device team_slave_1 removed [ 403.834650][ T36] team0 (unregistering): Port device team_slave_0 removed [ 403.944736][T10604] openvswitch: netlink: Unexpected mask (mask=1040, allowed=10048) [ 404.355476][ T5864] Bluetooth: hci5: command tx timeout [ 404.537594][ T36] team0 (unregistering): Port device team_slave_1 removed [ 404.577741][ T36] team0 (unregistering): Port device team_slave_0 removed [ 405.037589][T10603] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1092'. [ 405.387157][T10406] 8021q: adding VLAN 0 to HW filter on device bond0 [ 405.442438][T10406] 8021q: adding VLAN 0 to HW filter on device team0 [ 405.606606][ T5942] bridge0: port 1(bridge_slave_0) entered blocking state [ 405.613919][ T5942] bridge0: port 1(bridge_slave_0) entered forwarding state [ 405.814216][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 405.821441][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 405.951623][T10629] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 406.535310][T10406] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 406.695689][T10406] veth0_vlan: entered promiscuous mode [ 406.768524][T10406] veth1_vlan: entered promiscuous mode [ 406.787196][T10427] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 406.808024][T10427] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 406.865134][T10427] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 406.877139][T10427] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 406.970494][T10406] veth0_macvtap: entered promiscuous mode [ 406.993010][T10417] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 407.031159][T10406] veth1_macvtap: entered promiscuous mode [ 407.040455][T10417] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 407.053064][T10417] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 407.071520][T10417] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 407.152609][T10406] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 407.193233][T10406] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 407.231406][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.243981][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.284327][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.311601][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 407.394848][T10427] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.449662][ T5944] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.474013][ T5944] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.474316][T10427] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.602644][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.609877][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.661836][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 407.692738][T10417] 8021q: adding VLAN 0 to HW filter on device bond0 [ 407.706217][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 407.732469][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.739701][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.794789][T10417] 8021q: adding VLAN 0 to HW filter on device team0 [ 407.903165][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 407.910416][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 407.921934][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 407.929128][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 407.991244][T10673] openvswitch: netlink: VXLAN extension message has 1 unknown bytes. [ 408.294281][T10684] netlink: 'syz.5.1108': attribute type 322 has an invalid length. [ 408.409095][T10687] netlink: 'syz.5.1108': attribute type 322 has an invalid length. [ 408.467487][ T5944] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.720023][T10417] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.780338][T10427] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 408.805703][ T5944] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.867413][T10417] veth0_vlan: entered promiscuous mode [ 408.897459][T10417] veth1_vlan: entered promiscuous mode [ 408.911171][T10427] veth0_vlan: entered promiscuous mode [ 408.936299][ T5944] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 408.964140][T10427] veth1_vlan: entered promiscuous mode [ 409.000155][ T5944] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 409.035846][T10417] veth0_macvtap: entered promiscuous mode [ 409.048191][T10417] veth1_macvtap: entered promiscuous mode [ 409.076586][T10417] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 409.110242][T10417] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 409.122585][T10427] veth0_macvtap: entered promiscuous mode [ 409.195301][ T2911] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.204791][ T2911] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.218993][T10427] veth1_macvtap: entered promiscuous mode [ 409.248830][ T2911] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.258282][ T2911] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 409.945282][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 409.962935][ T5851] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 409.971770][ T5851] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 409.990560][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 410.002702][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 410.516706][ C0] ip6_tunnel: ip6gre1 xmit: Local address not yet configured! [ 410.839184][ T5944] bridge_slave_1: left allmulticast mode [ 410.844876][ T5944] bridge_slave_1: left promiscuous mode [ 410.850797][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 410.861066][ T5944] bridge_slave_0: left allmulticast mode [ 410.867130][ T5944] bridge_slave_0: left promiscuous mode [ 410.872836][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 410.953850][T10712] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1114'. [ 411.230597][ T5944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 411.243056][ T5944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 411.254192][ T5944] bond0 (unregistering): Released all slaves [ 411.319463][T10427] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.446872][T10717] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1116'. [ 411.492292][T10427] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 411.602358][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 411.617552][ T5942] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.642459][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 411.705019][ T5942] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.725705][ T2911] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.747882][T10728] x_tables: duplicate underflow at hook 2 [ 411.821581][ T2911] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 411.902344][ T5944] hsr_slave_0: left promiscuous mode [ 411.929338][ T5944] hsr_slave_1: left promiscuous mode [ 411.945554][ T5944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 411.953024][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 411.964499][ T5944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 411.972312][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 412.002483][ T5944] veth1_macvtap: left promiscuous mode [ 412.019993][ T5944] veth0_macvtap: left promiscuous mode [ 412.030652][ T5944] veth1_vlan: left promiscuous mode [ 412.038536][ T5944] veth0_vlan: left promiscuous mode [ 412.045146][ T5851] Bluetooth: hci0: command tx timeout [ 412.544393][T10745] netlink: 'syz.5.1123': attribute type 39 has an invalid length. [ 412.665696][ T5944] team0 (unregistering): Port device team_slave_1 removed [ 412.704423][ T5944] team0 (unregistering): Port device team_slave_0 removed [ 413.102251][ T2911] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.120442][ T2911] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.580302][ T2911] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.588789][ T2911] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.617993][T10761] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.1126'. [ 413.679874][ T7967] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 413.688457][ T7967] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 413.928034][T10708] chnl_net:caif_netlink_parms(): no params data found [ 414.115804][ T5851] Bluetooth: hci0: command tx timeout [ 414.388633][ T5944] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.458711][T10708] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.488054][T10708] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.507494][T10708] bridge_slave_0: entered allmulticast mode [ 414.521126][T10708] bridge_slave_0: entered promiscuous mode [ 414.554553][ T5944] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.577508][T10708] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.584690][T10708] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.598290][T10708] bridge_slave_1: entered allmulticast mode [ 414.616506][T10708] bridge_slave_1: entered promiscuous mode [ 414.677611][ T5944] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.797358][ T5944] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.828189][T10708] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.852644][T10708] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.860839][ T5864] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 414.870854][ T5864] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 414.878884][ T5864] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 414.887227][ T5864] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 414.895795][ T5864] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 414.952672][T10708] team0: Port device team_slave_0 added [ 414.963607][T10708] team0: Port device team_slave_1 added [ 415.034128][T10708] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.041724][T10708] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.068349][T10708] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.094270][T10708] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.101376][T10708] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.128195][T10708] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.199081][ T5944] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.260151][ T5944] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.293080][T10708] hsr_slave_0: entered promiscuous mode [ 415.300143][T10708] hsr_slave_1: entered promiscuous mode [ 415.356775][ T5944] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.432851][ T5944] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.008903][ T5944] bridge_slave_1: left allmulticast mode [ 416.018304][ T5944] bridge_slave_1: left promiscuous mode [ 416.024136][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.059128][ T5944] bridge_slave_0: left allmulticast mode [ 416.064867][ T5944] bridge_slave_0: left promiscuous mode [ 416.091386][ T5851] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 416.100382][ T5851] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 416.105782][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.115592][ T5851] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 416.124810][ T5851] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 416.135840][ T5851] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 416.141384][ T5944] bridge_slave_1: left allmulticast mode [ 416.151555][ T5944] bridge_slave_1: left promiscuous mode [ 416.161284][T10794] xt_TPROXY: Can be used only with -p tcp or -p udp [ 416.163408][ T5944] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.187064][ T5944] bridge_slave_0: left allmulticast mode [ 416.192736][ T5944] bridge_slave_0: left promiscuous mode [ 416.198514][ T5864] Bluetooth: hci0: command tx timeout [ 416.204481][ T5944] bridge0: port 1(bridge_slave_0) entered disabled state [ 416.610518][ T5944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.622988][ T5944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.633611][ T5944] bond0 (unregistering): Released all slaves [ 416.904470][ T5944] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 416.915412][ T5864] Bluetooth: hci4: command tx timeout [ 416.922059][ T5944] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 416.932480][ T5944] bond0 (unregistering): Released all slaves [ 416.947529][T10773] chnl_net:caif_netlink_parms(): no params data found [ 417.234180][T10811] netlink: 'syz.5.1137': attribute type 3 has an invalid length. [ 417.419178][T10773] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.434422][T10773] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.441947][T10773] bridge_slave_0: entered allmulticast mode [ 417.450225][T10773] bridge_slave_0: entered promiscuous mode [ 417.459539][T10773] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.467494][T10773] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.474934][T10773] bridge_slave_1: entered allmulticast mode [ 417.482988][T10773] bridge_slave_1: entered promiscuous mode [ 417.483803][T10817] netlink: 88 bytes leftover after parsing attributes in process `syz.5.1139'. [ 417.609228][T10708] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 417.624702][T10708] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 417.724187][T10708] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 417.745970][T10773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.760037][T10773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 417.780440][T10708] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 417.791493][T10819] netlink: 'syz.4.1140': attribute type 1 has an invalid length. [ 417.920591][T10773] team0: Port device team_slave_0 added [ 417.929049][T10819] syzkaller1: tun_chr_ioctl cmd 1074025680 [ 417.953006][T10773] team0: Port device team_slave_1 added [ 417.982739][ T5944] hsr_slave_0: left promiscuous mode [ 417.990024][ T5944] hsr_slave_1: left promiscuous mode [ 418.002278][ T5944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.010271][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.018879][ T5944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.026722][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.043340][ T5944] hsr_slave_0: left promiscuous mode [ 418.049560][ T5944] hsr_slave_1: left promiscuous mode [ 418.056848][ T5944] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 418.064458][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 418.076358][ T5944] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 418.083797][ T5944] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 418.124163][ T5944] veth1_macvtap: left promiscuous mode [ 418.129823][ T5944] veth0_macvtap: left promiscuous mode [ 418.136322][ T5944] veth1_vlan: left promiscuous mode [ 418.141653][ T5944] veth0_vlan: left promiscuous mode [ 418.148199][ T5944] veth1_macvtap: left promiscuous mode [ 418.153987][ T5944] veth0_macvtap: left promiscuous mode [ 418.159670][ T5944] veth1_vlan: left promiscuous mode [ 418.165266][ T5944] veth0_vlan: left promiscuous mode [ 418.195297][ T5864] Bluetooth: hci5: command tx timeout [ 418.276762][ T5864] Bluetooth: hci0: command tx timeout [ 418.746003][ T5944] team0 (unregistering): Port device team_slave_1 removed [ 418.789465][ T5944] team0 (unregistering): Port device team_slave_0 removed [ 418.999235][ T5864] Bluetooth: hci4: command tx timeout [ 419.521733][ T5944] team0 (unregistering): Port device team_slave_1 removed [ 419.562560][ T5944] team0 (unregistering): Port device team_slave_0 removed [ 420.073113][T10773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 420.086475][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.116665][T10773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 420.130183][T10773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 420.137471][T10773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 420.164044][T10773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 420.275229][ T5864] Bluetooth: hci5: command tx timeout [ 420.382345][T10773] hsr_slave_0: entered promiscuous mode [ 420.396543][T10773] hsr_slave_1: entered promiscuous mode [ 420.403136][T10773] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 420.417250][T10773] Cannot create hsr debugfs directory [ 420.434756][T10791] chnl_net:caif_netlink_parms(): no params data found [ 420.494630][T10851] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1147'. [ 420.621535][T10851] nbd: socks must be embedded in a SOCK_ITEM attr [ 420.653413][ T2911] [ 420.655790][ T2911] ====================================================== [ 420.662991][ T2911] WARNING: possible circular locking dependency detected [ 420.670035][ T2911] 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 Not tainted [ 420.677160][ T2911] ------------------------------------------------------ [ 420.684196][ T2911] kworker/u8:6/2911 is trying to acquire lock: [ 420.690368][ T2911] ffff888051bec358 (&disk->open_mutex){+.+.}-{4:4}, at: __del_gendisk+0x129/0x9e0 [ 420.699625][ T2911] [ 420.699625][ T2911] but task is already holding lock: [ 420.706990][ T2911] ffff88804c469988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 420.716571][ T2911] [ 420.716571][ T2911] which lock already depends on the new lock. [ 420.716571][ T2911] [ 420.727060][ T2911] [ 420.727060][ T2911] the existing dependency chain (in reverse order) is: [ 420.736072][ T2911] [ 420.736072][ T2911] -> #2 (&set->update_nr_hwq_lock){++++}-{4:4}: [ 420.744502][ T2911] lock_acquire+0x120/0x360 [ 420.749531][ T2911] down_write+0x96/0x1f0 [ 420.754308][ T2911] blk_mq_update_nr_hw_queues+0x3b/0x14c0 [ 420.760556][ T2911] nbd_start_device+0x16c/0xac0 [ 420.765934][ T2911] nbd_genl_connect+0x1250/0x1930 [ 420.771484][ T2911] genl_family_rcv_msg_doit+0x212/0x300 [ 420.777553][ T2911] genl_rcv_msg+0x60e/0x790 [ 420.782576][ T2911] netlink_rcv_skb+0x205/0x470 [ 420.787865][ T2911] genl_rcv+0x28/0x40 [ 420.792383][ T2911] netlink_unicast+0x758/0x8d0 [ 420.797675][ T2911] netlink_sendmsg+0x805/0xb30 [ 420.802968][ T2911] __sock_sendmsg+0x219/0x270 [ 420.808178][ T2911] ____sys_sendmsg+0x505/0x830 [ 420.813499][ T2911] ___sys_sendmsg+0x21f/0x2a0 [ 420.818719][ T2911] __x64_sys_sendmsg+0x19b/0x260 [ 420.824191][ T2911] do_syscall_64+0xfa/0x3b0 [ 420.829232][ T2911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.835742][ T2911] [ 420.835742][ T2911] -> #1 (&nbd->config_lock){+.+.}-{4:4}: [ 420.843770][ T2911] lock_acquire+0x120/0x360 [ 420.848811][ T2911] __mutex_lock+0x182/0xe80 [ 420.853850][ T2911] refcount_dec_and_mutex_lock+0x30/0xa0 [ 420.860022][ T2911] nbd_config_put+0x2c/0x790 [ 420.865139][ T2911] nbd_release+0xfe/0x140 [ 420.870002][ T2911] bdev_release+0x536/0x650 [ 420.875035][ T2911] blkdev_release+0x15/0x20 [ 420.880247][ T2911] __fput+0x449/0xa70 [ 420.884750][ T2911] fput_close_sync+0x119/0x200 [ 420.890126][ T2911] __x64_sys_close+0x7f/0x110 [ 420.895328][ T2911] do_syscall_64+0xfa/0x3b0 [ 420.900358][ T2911] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 420.906774][ T2911] [ 420.906774][ T2911] -> #0 (&disk->open_mutex){+.+.}-{4:4}: [ 420.914609][ T2911] validate_chain+0xb9b/0x2140 [ 420.919912][ T2911] __lock_acquire+0xab9/0xd20 [ 420.925111][ T2911] lock_acquire+0x120/0x360 [ 420.930151][ T2911] __mutex_lock+0x182/0xe80 [ 420.935189][ T2911] __del_gendisk+0x129/0x9e0 [ 420.940308][ T2911] del_gendisk+0xe8/0x160 [ 420.945162][ T2911] nbd_dev_remove_work+0x47/0xe0 [ 420.950638][ T2911] process_scheduled_works+0xade/0x17b0 [ 420.956930][ T2911] worker_thread+0x8a0/0xda0 [ 420.962052][ T2911] kthread+0x70e/0x8a0 [ 420.966651][ T2911] ret_from_fork+0x3fc/0x770 [ 420.971857][ T2911] ret_from_fork_asm+0x1a/0x30 [ 420.977249][ T2911] [ 420.977249][ T2911] other info that might help us debug this: [ 420.977249][ T2911] [ 420.987478][ T2911] Chain exists of: [ 420.987478][ T2911] &disk->open_mutex --> &nbd->config_lock --> &set->update_nr_hwq_lock [ 420.987478][ T2911] [ 421.001666][ T2911] Possible unsafe locking scenario: [ 421.001666][ T2911] [ 421.009119][ T2911] CPU0 CPU1 [ 421.014484][ T2911] ---- ---- [ 421.019878][ T2911] rlock(&set->update_nr_hwq_lock); [ 421.025257][ T2911] lock(&nbd->config_lock); [ 421.032370][ T2911] lock(&set->update_nr_hwq_lock); [ 421.040182][ T2911] lock(&disk->open_mutex); [ 421.044785][ T2911] [ 421.044785][ T2911] *** DEADLOCK *** [ 421.044785][ T2911] [ 421.052926][ T2911] 3 locks held by kworker/u8:6/2911: [ 421.058207][ T2911] #0: ffff888143b00148 ((wq_completion)nbd-del){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 421.069266][ T2911] #1: ffffc9000b397bc0 ((work_completion)(&nbd->remove_work)){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 421.081793][ T2911] #2: ffff88804c469988 (&set->update_nr_hwq_lock){++++}-{4:4}, at: del_gendisk+0xe0/0x160 [ 421.091899][ T2911] [ 421.091899][ T2911] stack backtrace: [ 421.097795][ T2911] CPU: 1 UID: 0 PID: 2911 Comm: kworker/u8:6 Not tainted 6.16.0-rc4-syzkaller-00991-g6b9fd8857b9f #0 PREEMPT(full) [ 421.097818][ T2911] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 421.097831][ T2911] Workqueue: nbd-del nbd_dev_remove_work [ 421.097876][ T2911] Call Trace: [ 421.097884][ T2911] [ 421.097891][ T2911] dump_stack_lvl+0x189/0x250 [ 421.097929][ T2911] ? __pfx_dump_stack_lvl+0x10/0x10 [ 421.097948][ T2911] ? __pfx__printk+0x10/0x10 [ 421.097972][ T2911] ? print_lock_name+0xde/0x100 [ 421.097995][ T2911] print_circular_bug+0x2ee/0x310 [ 421.098018][ T2911] check_noncircular+0x134/0x160 [ 421.098042][ T2911] validate_chain+0xb9b/0x2140 [ 421.098066][ T2911] ? __pfx_stack_trace_consume_entry+0x10/0x10 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 421.098090][ T2911] ? look_up_lock_class+0x74/0x170 [ 421.098111][ T2911] ? register_lock_class+0x51/0x320 [ 421.098130][ T2911] __lock_acquire+0xab9/0xd20 [ 421.098149][ T2911] ? __del_gendisk+0x129/0x9e0 [ 421.098165][ T2911] lock_acquire+0x120/0x360 [ 421.098180][ T2911] ? __del_gendisk+0x129/0x9e0 [ 421.098200][ T2911] ? check_path+0x21/0x40 [ 421.098221][ T2911] __mutex_lock+0x182/0xe80 [ 421.098242][ T2911] ? __del_gendisk+0x129/0x9e0 [ 421.098263][ T2911] ? __del_gendisk+0x129/0x9e0 [ 421.098281][ T2911] ? __pfx___mutex_lock+0x10/0x10 [ 421.098302][ T2911] ? __pfx___might_resched+0x10/0x10 [ 421.098324][ T2911] ? __lock_acquire+0xab9/0xd20 [ 421.098340][ T2911] ? disk_del_events+0xb5/0x210 [ 421.098358][ T2911] ? __del_gendisk+0xc1/0x9e0 [ 421.098376][ T2911] __del_gendisk+0x129/0x9e0 [ 421.098393][ T2911] ? del_gendisk+0xe0/0x160 [ 421.098412][ T2911] ? __pfx___del_gendisk+0x10/0x10 [ 421.098430][ T2911] ? down_read+0x1ad/0x2e0 [ 421.098453][ T2911] del_gendisk+0xe8/0x160 [ 421.098471][ T2911] nbd_dev_remove_work+0x47/0xe0 [ 421.098487][ T2911] ? process_scheduled_works+0x9ef/0x17b0 [ 421.098506][ T2911] process_scheduled_works+0xade/0x17b0 [ 421.098537][ T2911] ? __pfx_process_scheduled_works+0x10/0x10 [ 421.098563][ T2911] worker_thread+0x8a0/0xda0 [ 421.098583][ T2911] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 421.098611][ T2911] ? __kthread_parkme+0x7b/0x200 [ 421.098635][ T2911] kthread+0x70e/0x8a0 [ 421.098658][ T2911] ? __pfx_worker_thread+0x10/0x10 [ 421.098677][ T2911] ? __pfx_kthread+0x10/0x10 [ 421.098699][ T2911] ? _raw_spin_unlock_irq+0x23/0x50 [ 421.098717][ T2911] ? lockdep_hardirqs_on+0x9c/0x150 [ 421.098735][ T2911] ? __pfx_kthread+0x10/0x10 [ 421.098758][ T2911] ret_from_fork+0x3fc/0x770 [ 421.098776][ T2911] ? __pfx_ret_from_fork+0x10/0x10 [ 421.098795][ T2911] ? __switch_to_asm+0x39/0x70 [ 421.098816][ T2911] ? __switch_to_asm+0x33/0x70 [ 421.098836][ T2911] ? __pfx_kthread+0x10/0x10 [ 421.098860][ T2911] ret_from_fork_asm+0x1a/0x30 [ 421.098889][ T2911] [ 421.115069][ T5864] Bluetooth: hci4: command tx timeout [ 421.139012][T10863] netlink: 52 bytes leftover after parsing attributes in process `syz.5.1149'. [ 421.206509][T10708] 8021q: adding VLAN 0 to HW filter on device bond0 [ 422.347748][ T61] netdevsim netdevsim5 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.358112][ T61] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.409832][ T61] netdevsim netdevsim5 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.420201][ T61] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.489279][ T61] netdevsim netdevsim5 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.499797][ T61] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.559550][ T61] netdevsim netdevsim5 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 422.570342][ T61] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 422.684873][ T61] bridge_slave_1: left allmulticast mode [ 422.691446][ T61] bridge_slave_1: left promiscuous mode [ 422.698469][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.706888][ T61] bridge_slave_0: left allmulticast mode [ 422.712766][ T61] bridge_slave_0: left promiscuous mode [ 422.718549][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.728015][ T61] bridge_slave_1: left allmulticast mode [ 422.733658][ T61] bridge_slave_1: left promiscuous mode [ 422.739356][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.747962][ T61] bridge_slave_0: left allmulticast mode [ 422.753610][ T61] bridge_slave_0: left promiscuous mode [ 422.759558][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.768442][ T61] gretap0: left allmulticast mode [ 422.773480][ T61] gretap0: left promiscuous mode [ 422.778955][ T61] bridge0: port 3(gretap0) entered disabled state [ 422.787186][ T61] bridge_slave_1: left allmulticast mode [ 422.792861][ T61] bridge_slave_1: left promiscuous mode [ 422.798707][ T61] bridge0: port 2(bridge_slave_1) entered disabled state [ 422.807229][ T61] bridge_slave_0: left allmulticast mode [ 422.813048][ T61] bridge_slave_0: left promiscuous mode [ 422.819061][ T61] bridge0: port 1(bridge_slave_0) entered disabled state [ 422.912186][ T61] bond0 (unregistering): Released all slaves [ 422.977497][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 422.987609][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 422.998859][ T61] bond0 (unregistering): Released all slaves [ 423.058671][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.068911][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.080463][ T61] bond0 (unregistering): Released all slaves [ 423.371023][ T61] bond0 (unregistering): left promiscuous mode [ 423.377411][ T61] bond_slave_0: left promiscuous mode [ 423.382921][ T61] bond_slave_1: left promiscuous mode [ 423.388505][ T61] dummy0: left promiscuous mode [ 423.394353][ T61] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 423.404596][ T61] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 423.416180][ T61] bond0 (unregistering): (slave dummy0): Releasing backup interface [ 423.425657][ T61] bond0 (unregistering): Released all slaves [ 423.436077][ T61] bond1 (unregistering): Released all slaves [ 423.445815][ T61] bond2 (unregistering): Released all slaves [ 423.641373][ T61] hsr_slave_0: left promiscuous mode [ 423.647375][ T61] hsr_slave_1: left promiscuous mode [ 423.653032][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.660776][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.669542][ T61] hsr_slave_0: left promiscuous mode [ 423.677890][ T61] hsr_slave_1: left promiscuous mode [ 423.683568][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.691168][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.699209][ T61] macvlan1: left promiscuous mode [ 423.707050][ T61] hsr_slave_0: left promiscuous mode [ 423.712722][ T61] hsr_slave_1: left promiscuous mode [ 423.718563][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 423.726091][ T61] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 423.733967][ T61] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 423.741868][ T61] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 423.751602][ T61] veth1_macvtap: left promiscuous mode [ 423.757177][ T61] veth0_macvtap: left promiscuous mode [ 423.762701][ T61] veth1_vlan: left promiscuous mode [ 423.930584][ T61] team0 (unregistering): Port device team_slave_1 removed [ 423.959665][ T61] team0 (unregistering): Port device team_slave_0 removed [ 424.073312][ T61] team0 (unregistering): Port device team_slave_1 removed [ 424.099022][ T61] team0 (unregistering): Port device team_slave_0 removed