last executing test programs: 2m22.227645157s ago: executing program 0 (id=245): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r0, &(0x7f0000000180)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @multicast}, 0x10) sendmmsg(r0, &(0x7f0000001380), 0x3fffffffffffeed, 0x0) connect$llc(r0, &(0x7f0000000000)={0x1a, 0x30b, 0xbc, 0xff, 0x4, 0xc, @random="f1a7c0c5abe3"}, 0x10) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000440)=ANY=[@ANYBLOB="3400e90002060500000000000000f5000000000005000400fd0000000900020073797a31000000000c0007800800174004"], 0x34}}, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280000514"], 0x528}}, 0xc000) 2m21.039540282s ago: executing program 1 (id=253): socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x0) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) socket$rds(0x15, 0x5, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 2m20.989992121s ago: executing program 0 (id=254): r0 = socket$kcm(0x29, 0x2, 0x0) r1 = socket$kcm(0x2, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000040)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-avx2\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x800) sendto$inet6(r3, &(0x7f0000000280)="625e4bc431896083fd715a3aff81dfb42f9ba756d3baf3c2929f1bb273fa59db3aed7f332b5c816216ed4310cd1ef491f527f60401b75e4905f4dc5da655fdc315", 0xffffffffffffff3c, 0x24824, 0x0, 0x0) sendmsg$inet(r1, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) unshare(0x8000400) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000400)={r1}) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r4, &(0x7f00000000c0)={0x1f, @none}, 0x8) 2m19.885297061s ago: executing program 0 (id=259): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r0}, 0x10) r1 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000000)=""/5, 0x22c000, 0x800}, 0x20) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000001c0)=0x200000, 0x4) r2 = socket$tipc(0x1e, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000380)={'team_slave_1\x00', 0x0}) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x20, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000140)=0x4000, 0x4) bind$xdp(r1, &(0x7f0000000100)={0x2c, 0x8, r3}, 0x10) setsockopt$XDP_UMEM_REG(r1, 0x11b, 0x4, &(0x7f0000000240)={0x0, 0x1228000, 0x1000, 0x2, 0x1}, 0x20) 2m19.722424541s ago: executing program 1 (id=261): unshare(0x2c060000) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000003c0)=ANY=[], 0x5c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000740), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r1, &(0x7f0000000000)=[{&(0x7f0000000400)="580000001400192340834b80040d8c560a067fbc45ff810500000000070058000b480400945f640094272d7061d328b92d0000000000008000f0fffeffe809000000fff5dd00000010000100090808004149004001040800", 0x58}], 0x1) 2m19.285242852s ago: executing program 1 (id=262): bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="030000000400000004", @ANYBLOB, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000002000000000000000064403673e855710000"], 0x48) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r1, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r2, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x5, 0x12, 0xffffffffffffffff, 0x0) setsockopt$MRT_INIT(0xffffffffffffffff, 0x0, 0xc8, 0x0, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x5, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0xd5, 0x0, 0x0) 2m18.736969329s ago: executing program 1 (id=266): r0 = epoll_create(0x7) r1 = epoll_create1(0x0) r2 = epoll_create(0x7) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000180)) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000000c0)) r3 = epoll_create1(0x0) r4 = epoll_create(0x6) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f00000000c0)) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r2, &(0x7f0000000100)) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) r6 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r0, 0x1, r6, &(0x7f0000000080)) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r5, &(0x7f0000000200)) 2m18.467661766s ago: executing program 1 (id=268): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r0, 0x0) setsockopt$sock_int(r0, 0x1, 0xf, &(0x7f00000002c0)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r1, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000180)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000140)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c) listen(r2, 0x0) shutdown(r1, 0x0) 2m18.17314884s ago: executing program 1 (id=269): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4004014) sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2, 0x7, 0xc, 0x7, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x4400c030) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) 2m17.985859096s ago: executing program 0 (id=270): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f0000000180), 0x12) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x6a) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x2) 2m17.713551108s ago: executing program 0 (id=271): recvmsg(0xffffffffffffffff, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000780)={0x8, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x42ca, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$tipc(0x1e, 0x5, 0x0) ioctl$sock_TIOCINQ(r1, 0x541b, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b80)={0x13, 0x19, &(0x7f0000000c40)=ANY=[@ANYBLOB], 0x0, 0xa, 0xbf, &(0x7f0000000a00)=""/191, 0x41100, 0x0, '\x00', 0x0, @fallback=0x27, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) socket$inet6_udp(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 2m11.995354764s ago: executing program 0 (id=277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffe, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="44010000", @ANYRES16=r1, @ANYBLOB="050000000f00000900002100ef0008000300", @ANYRES32=r6, @ANYBLOB="54002d800a00000001010101010100000a"], 0x144}}, 0x0) 2m3.042602905s ago: executing program 32 (id=269): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bind$inet6(0xffffffffffffffff, 0x0, 0x0) unshare(0x6a040000) r1 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_IP_IPSEC_POLICY(0xffffffffffffffff, 0x0, 0x10, 0x0, 0x0) sendmsg$key(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)=ANY=[@ANYBLOB="020b000102"], 0x10}}, 0x4004014) sendmsg$key(r1, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x2, 0x7, 0xc, 0x7, 0x2, 0x0, 0x70bd28, 0x25dfdbfc}, 0x10}}, 0x4400c030) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@broadcast, @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, 0x0, 0x32}, 0x2, @in, 0x0, 0x4}}, 0xe8) sendmmsg$inet6(r2, &(0x7f0000000a80)=[{{&(0x7f0000000000)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @empty}}, 0x1c, 0x0}}, {{&(0x7f0000000040)={0xa, 0x4e21, 0x0, @dev}, 0x1c, 0x0, 0x0, 0x0, 0x0, 0xe00}}], 0x2, 0x0) 1m56.574374361s ago: executing program 33 (id=277): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r2, &(0x7f0000514ff4)={0x10, 0x0, 0xfffffffe, 0x2ffffffff}, 0xc) r3 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r3, &(0x7f0000000100)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r3, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r3, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r4, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000300)={0x34, r5, 0x1, 0x0, 0x25dfdbfb, {0x25}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=ANY=[@ANYBLOB="44010000", @ANYRES16=r1, @ANYBLOB="050000000f00000900002100ef0008000300", @ANYRES32=r6, @ANYBLOB="54002d800a00000001010101010100000a"], 0x144}}, 0x0) 1m51.928080745s ago: executing program 5 (id=322): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newtaction={0x44, 0x30, 0xffff, 0x0, 0x0, {}, [{0x30, 0x1, [@m_ife={0x2c, 0x1, 0x0, 0x0, {{0x8}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x44}}, 0x0) epoll_create(0x1) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f00000003c0), 0x4) bind$xdp(0xffffffffffffffff, &(0x7f0000000340)={0x2c, 0x1}, 0x10) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000180)={0x14, 0x13, 0x1, 0x0, 0x0, "", [@typed={0x4}]}, 0x14}], 0x1}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=ANY=[@ANYBLOB="fc00000019000100000000000000000020010000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000a900000000000000000000000000000000000000000000000000000000000000ffffffffffffffff000000000000000000000020000000000000000000000000000a000000000000000000000080400000000000000000080000000000000000000000000000000044000500ac1414aa000000000000000000000000000000003c00000000000000ffffffff00000000000000000000000000000000000300"/180], 0xfc}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_type(r3, &(0x7f00000000c0), 0x9) sendfile(r3, r2, 0x0, 0x10000) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000005c0)=ANY=[@ANYBLOB="a0000000210001000000000000000000fc020000000000000000000000000000fc02000000000000000000000000000000000000000000000a00800000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000500011007f0000010000000000000000000000000a01010000fdffffffffffffff0000000a010100000000000000000000000000640101000000000000000000000000003c000000000000000a000200"], 0xa0}}, 0x0) 1m51.597646675s ago: executing program 3 (id=323): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_int(r0, 0x29, 0xb, &(0x7f0000000000)=0x7, 0x4) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendmsg$inet6(r1, &(0x7f00000003c0)={&(0x7f0000000100)={0xa, 0x4e21, 0x8, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x80000000}, 0x1c, &(0x7f0000000180)=[{0x0}], 0x1, &(0x7f0000000300)}, 0x48080) sendto$inet6(r0, &(0x7f00000000c0)="e940", 0x2, 0x20008045, &(0x7f00000001c0)={0xa, 0x2, 0x1000, @empty}, 0x1c) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='nv\x00', 0x3) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) unshare(0x40020000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) shutdown(r0, 0x1) 1m50.273404895s ago: executing program 5 (id=324): r0 = socket$kcm(0xa, 0x1, 0x106) r1 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000), 0x4) r2 = getpid() r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RELOAD(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x3c, r4, 0x1, 0x70bd26, 0x0, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_NETNS_PID={0x8, 0x8b, r2}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4040010}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) sendmsg$kcm(r0, &(0x7f00000019c0)={&(0x7f0000000080)=@l2tp6={0xa, 0x0, 0x0, @dev, 0x5}, 0x80, 0x0}, 0x24004059) close(r0) 1m48.303486508s ago: executing program 4 (id=328): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) socket(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x1}) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff, 0x0, 0xff000000], [], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x29}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5, 0x0, 0x78}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 1m47.440273105s ago: executing program 4 (id=329): r0 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) 1m47.076330181s ago: executing program 4 (id=331): setsockopt$netlink_NETLINK_NO_ENOBUFS(0xffffffffffffffff, 0x10e, 0x5, 0x0, 0x0) unshare(0x42000000) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r2 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r2) pipe(&(0x7f0000000140)) setsockopt$SO_BINDTODEVICE_wg(r2, 0x1, 0x19, &(0x7f0000000080)='wg1\x00', 0x4) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) 1m46.343972799s ago: executing program 3 (id=332): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x2a8, 0xffffffff, 0x98, 0x98, 0x98, 0xffffffff, 0xffffffff, 0x2b0, 0x2b0, 0x2b0, 0xffffffff, 0x5, 0x0, {[{{@ip={@loopback, @rand_addr=0x64010100, 0xff000000, 0x0, 'rose0\x00', 'vxcan1\x00', {}, {0xff}, 0x82, 0x0, 0x19}, 0x74000002, 0x70, 0x98, 0x1ba, {0x46010000, 0x2c000000000000}}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ip={@multicast1, @loopback, 0xffffff00, 0xffffff00, 'gre0\x00', 'team_slave_1\x00', {0xff}}, 0x287, 0x70, 0xe0}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0xff, 0x6, 0x5, 0x0, 0x0, "5058ab5c2ac2a8cf16bfaa5313d1bd11ab046ce872cac869bf4cc8360467a44dc9f51ef9cb3bd9fc8b74e8876b24b5e27f10934b02be8fb15d62f0f7b920e9a2"}}}, {{@uncond, 0x0, 0x70, 0x98}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x308) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000200)=0x497a, 0x4) bind$inet(r0, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r0, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000001440)={&(0x7f00000012c0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x0, 0x0, 0x2}}, &(0x7f0000001040)=""/33, 0x1a, 0x21, 0x1, 0x958, 0x0, @void, @value}, 0x28) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) recvmmsg(r0, &(0x7f0000000040), 0x291962b, 0x45833af92e4b39ff, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e21, @multicast2}, 0x10) 1m46.331130479s ago: executing program 2 (id=342): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r4) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r5, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_qfg={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=@newtfilter={0x3c, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {0xa}, {0x0, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x4}}, @TCA_RATE={0x6, 0x5, {0x3, 0x7}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) 1m44.697215983s ago: executing program 2 (id=333): r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) setsockopt$inet_IP_XFRM_POLICY(r0, 0x0, 0x11, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) openat$ppp(0xffffffffffffff9c, 0x0, 0x109942, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b70000008178005dbfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071105100000000001d400200000000004704000001ed00000f030000000000001d440000000000006b0a02fe000000007203000000000000b50000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82004000000", @ANYRES32=r1, @ANYBLOB="000080000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00m'], 0x38}, 0x1, 0x300}, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r2, &(0x7f0000000140), 0x4924b68, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000640)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m44.696963968s ago: executing program 3 (id=334): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r0}, 0x10) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000007000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sock_rcvqueue_full\x00', r6}, 0x18) r8 = bpf$ITER_CREATE(0xb, &(0x7f00000000c0)={r7}, 0x8) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r5, 0x0, r8}, 0x10) 1m44.173503558s ago: executing program 2 (id=335): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000500)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)) ioctl$SIOCSIFHWADDR(r2, 0x8943, &(0x7f0000002280)={'syzkaller0\x00', @random="110000000002"}) socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) socket$inet6_sctp(0xa, 0x1, 0x84) 1m44.035670083s ago: executing program 5 (id=336): socket$packet(0x11, 0x3, 0x300) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200)=0x10001, 0x12) sendfile(r1, r0, 0x0, 0xf03a0005) setsockopt$inet_tcp_TCP_REPAIR(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000080)=0x1, 0x4) bind$inet(0xffffffffffffffff, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(r3, &(0x7f0000007580)={0x0, 0x0, &(0x7f0000007540)={0x0}}, 0x48040) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x66, &(0x7f0000000800)={@local, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x88a8}, {0x0, 0x0, 0x0, 0x0, 0x11}, {}, {}, {0x8, 0x22eb, 0x0, {{0x0, 0x2, 0x8}}}}}}}}, 0x0) 1m43.874242663s ago: executing program 3 (id=337): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) mkdirat$cgroup(r0, &(0x7f0000000080)='syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000001480)='./cgroup/syz1\x00', 0x200002, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = openat$cgroup(r0, &(0x7f00000002c0)='syz0\x00', 0x200002, 0x0) socket$inet_mptcp(0x2, 0x1, 0x106) mkdirat$cgroup(r3, &(0x7f0000000340)='syz0\x00', 0x1ff) mkdirat$cgroup(r1, &(0x7f00000000c0)='syz1\x00', 0x1ff) r4 = openat$cgroup_ro(r1, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r4, &(0x7f0000000200)=0x1, 0x12) 1m42.799159371s ago: executing program 5 (id=338): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, &(0x7f0000000500)=[{&(0x7f0000000700)="fbd2b9ed29d8974a6ce75f08916ac3b4dafef92c", 0xfe71}], 0x1}, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x16, 0x4, &(0x7f0000000700)=ANY=[@ANYBLOB="1800000001000000000000000000000071124e000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xa, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000000, @void, @value}, 0x94) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0x96, &(0x7f0000000000), &(0x7f0000000080)=0x4) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000063c0)=ANY=[@ANYBLOB="200000002c00010026bd7000fcdbdf2504000000080017000200000004000e"], 0x20}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) mmap(&(0x7f00002b2000/0xc00000)=nil, 0xc00000, 0x7, 0x12, r5, 0x20000000) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x88, 0x30, 0xffff, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x74, 0x1, [@m_mirred={0x70, 0x1, 0x0, 0x0, {{0xb}, {0x44, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x4, {{0xffdff7e8}}}, @TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0xc0000000}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x2}}}}]}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x0) setsockopt$inet_buf(r0, 0x0, 0x8008000000010, &(0x7f0000000480)="17000000020001000003be8c5e687a8a6a002b000a0100ecff3f0000000300dc290001000098fc5a53d3f5b7e4a96c6b06169da9c0f8d9485bbb2e2f8144243c5197b29f9368bdd6c8db0000dba67e06000000e289c46f8ab8b4028a7a63c9000000000100000000000080c457681f009cee79ac2df5bc080236e2b68c8eec25a02aff06011500000000010000000affff02dfccebf6ba00085dbda1348fe947f1da062a00"/184, 0xb8) 1m42.795877745s ago: executing program 2 (id=349): r0 = socket$tipc(0x1e, 0x5, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_sctp(0x2, 0x1, 0x84) listen(r0, 0xda90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 1m39.857021195s ago: executing program 5 (id=339): bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'bridge0\x00'}) socket(0x15, 0x5, 0x0) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0xf0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff], [], 'wg1\x00', 'gre0\x00', {}, {0xff}}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000080)={'nicvf0\x00', 0x1}) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r2, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x8, 0x3, 0x460, 0x0, 0xffffffff, 0xffffffff, 0xf0, 0xffffffff, 0x390, 0xffffffff, 0xffffffff, 0x390, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00', {}, {}, 0x2f, 0x0, 0x3}, 0x0, 0xa8, 0xf0}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv4=@local, 'nicvf0\x00', {0x3f66}}}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3d}}, [0xffffffff, 0x0, 0xff000000], [], 'wg1\x00', 'gre0\x00', {}, {0xff}, 0x29}, 0x0, 0x258, 0x2a0, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x563e4515, 0x0, 0x7, 0x3fc, 0x20}}}, @common=@inet=@hashlimit3={{0x158}, {'veth0_vlan\x00', {0x3, 0x0, 0x48, 0x0, 0x15ab, 0x1000, 0x6, 0x5, 0x0, 0x78}}}]}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz0\x00', 0x2, 0x5, {0x6}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x4c0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x8923, &(0x7f0000000040)={'bond0\x00', 0x1001}) 1m39.856702884s ago: executing program 2 (id=341): socket$nl_generic(0x10, 0x3, 0x10) close(0xffffffffffffffff) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={0xffffffffffffffff, 0x0, 0x0}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x1, 0x0, 0xffffffffffffffff, @void, @value}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0xe22, 0x0, @empty, 0x2}, 0x1c) r1 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r1, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x4, 0x0, 0x3}}, 0x2e) syz_emit_ethernet(0x50, &(0x7f0000000300)={@random="99177fa54f29", @random="ece65b5c8d9b", @val={@void, {0x8100, 0x0, 0x0, 0x3}}, {@ipv6={0x86dd, @udp={0x0, 0x6, '\x00\b\x00', 0x16, 0x11, 0x0, @remote, @local, {[], {0x0, 0xe22, 0x16, 0x0, @gue={{0x2, 0x0, 0x0, 0x83}, "dc94fae9f13e"}}}}}}}, 0x0) 1m39.85164263s ago: executing program 3 (id=351): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007b00000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0x2100, 0x0, &(0x7f00000002c0), 0x0, 0x2000, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="b702000004000000bfa30000000000000703000000feffff7a0af0fff8ffffff79a4f0ff00000000b7060000ffffffff1d6405000000000065040400210000000404000001e37c60b7040000000000006a0a00fe000000008500000032000000b70000000000000095000000000000000ce0de7621e5e832249c04112cf7af2b75d0d1f034b1b3fb6bd3ce8fa62c7941272ff49142d860010ab162aa2264ab67e55a00000000000000edfe0969a9ddc125b686a1e83c8790c893d713b3295dad0ea697181d1e85b64126b5d72f204754d1d4a93f24215dee354e93cfc3f50ff23f8432c72012f021c84c59a9d4c142f439d3040cfee621589fb3a2f1407c7cbed48e7026f8d52d4bca2608c79aa4a73732028f88ce07ed1075da4a2ef44e3d8b88873f0b1de87dfb6d15936ec0a27cb554def9e27396df6b7851ffa26237ea6730880f06371beb3b290b7d8629a6f0183fefa0acb60888fc14ad2b83ca03ac2aee792482ced58af4140cc4ce3efef26e00c5b2200a91cb80c6065a697d6fc8aa8b65aee0783b04cff0218ce82c9687b4474da89c474c23727555fc5e5f8ad0f2f7a261140440fce1f12cc6df312accd011d888384283092d987c40bbb46f68c2431b97906f00000000349834fa147bd5923bbd4e606708034931a8f1a89bdf77093a0000427aab8e21e1a33d3fe093547532fce6549dd648ad233e05a7b3ea178007c1c32e871ac81f287c4aabbd153390b16d1d41ee433e3aee000000000009e106d6b5289f0000000000000000000000f7bc9f46cb71f6b889d37807865e3b4e9916dd0f72c9d58ea333b90f8886dcbf5ddda0e42ca08e3303632401f2f5212b40c0e88c957fd767dbfc80b07ad668b4f6f92fb209d7c2dbac597843c8eb7bf92fe6d0bb0b72549795c2ed19e441eb69869844152ba9da0588e42cdbc5fcd245ce5e3ef0dca64931276702a312db7956f0a75eb9caa17d47a6331c7c963cbf86a845ce27c26b7136d3e7207318b1df7a6320c64f18ccd926eaeddcde8d5006d6c38db1a796eb9017fb1115221a66169172720ccca770bff37e59511b2606138377eda44b2f288b491ab8aae0e11a98303b0e407e0f9d21f4a3ebbd3fabf6da9a1a1f869a339fab465d8322b7280b0734fd115a19b33c8644fff71b3c62f2e1b827e2663e06a751182e968c8ab05fb1d0115d4b11d944f2c06acc023a02b7416a9a10218d21503cda13bb5df6c992e52e1c01793b728eac000058ab3b3900d279297dadc127e2f38fc60c23af2e1fefa5a83456647191ba1953d320f59aa261fe79613df6bf43884e9649691e32680d75a541c27ffe74f9d13340f2cf1c7dc2b7db01213216cd4ecfd30efe137641471987289b7e23482e026b26eacd1b97443e2ea2d1d6e31a01ee0ae7fa195a2152b2338b086423a3883f2ce3e2f84e04f4d52c985eac4b46336908599564b47db0e6aa97ee51a360f4382fd99745725d44c77d097f69d19fe86f71c38a0226d44ebe0ecbd959f14b540745cd03b8c9f02b825ba45ca85706c73115f70871db9d2a1bc2a517b39f9648123917a5db06ba4e27f961373767e1ea8f7cc558e483abef1a9923c5cfa2081e430680950b7d7c377726b557ad31fdee17ba7057741f39d29d8ab295222f96297a777bb235416e72c84afef2bdb08fb375147b028b89f15af45bc8976b91158c13c9876daa71e7db0f5a17376be39ea79ce1246c547c740e31c64e5d293e0e5a544dd166010061d6ccae46c173b8e11721e4bce22c16af00000021f80ac6c3971006db853e3c40a5417d6eac09eb0e01ac6bd4c6dacdcb1d6d2ef9c8bdea91c984022821e961236d08f8b9072ec6cb5d5a68833fd5b4e80a5ac2bc6ff323f5ce612b59ce8177956c1affcc8baf4c8b59ab959aff9a7bd81f7c7c1f1bb92ddbeed6bce8041c7f0c1c584e6ae027678ce3cfbfea938aecc3c5119c5875b7fb35dc20f5c7aaae1e276104f607a73fe501c1045873a2b1eb80e95c87f099d98028dc82bdc7ef08c871fb3061c3c5ebd613e6e5e8cf099bb6e8c0441a133c85138b36a02c47fbedf7ed1d3ce74c9ec2c676c0b2d4b5eca61dbf5769b483c2a9f6bec666dae4e81960e9bad7f17cfc3d5bcc7b7f437110ca8ffa908c12086b2227eb202a8d56e0925ba994b05c98c39de44d25932449ddf08e5377814a40877eab4440ca01b3f50d2014a61a7d32105254b424238122386424efa3a7041254f686a5faac120942287f75e8e3db569ce47b120059d774a37e11d013be50cd2cbb00f6d2a23af61ec7d30bb7dc33a92f900b6ff1d29dc61cc40b846040dbafd00c6bcfbcf700000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x702, 0xe, 0x0, &(0x7f0000000380)="e46033449fdd0200000000000000", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socket$igmp6(0xa, 0x3, 0x2) socket$nl_route(0x10, 0x3, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) sendmsg$NL80211_CMD_SET_PMKSA(r0, &(0x7f0000000480)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x1228108a}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x28, r3, 0x1, 0x70bd27, 0x25dfdbfb, {{}, {@void, @void}}, [@NL80211_ATTR_PMKID={0x14, 0x55, "96f09058a37f3f857dddb5d4bf7413b4"}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x2204c800) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{}, &(0x7f00000004c0), &(0x7f0000000500)=r2}, 0x20) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_FEATURES_SET(r4, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f0000000500)={0x30, 0x0, 0x1, 0x0, 0x400, {}, [@ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_BITS={0x4}]}, @ETHTOOL_A_FEATURES_HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x30}}, 0x0) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000e80)={0xffffffffffffffff, 0x20, &(0x7f0000000e40)={&(0x7f0000000700)=""/67, 0x43, 0x0, &(0x7f0000000e00)=""/25, 0x19}}, 0x10) 1m39.558487389s ago: executing program 2 (id=343): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440261, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8d0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) 1m39.330674462s ago: executing program 4 (id=344): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0xc0}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) unshare(0x400) 1m39.307751584s ago: executing program 3 (id=345): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001ffffcffffff0300000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x8000) 1m38.766742177s ago: executing program 4 (id=346): listen(0xffffffffffffffff, 0x3) syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000380)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000740)={0xffffffffffffffff, 0x0, 0x2, 0x0, &(0x7f0000000040)="f6f4", 0x0, 0x3, 0x0, 0x0, 0x0, &(0x7f0000000700), 0x0}, 0x50) connect$inet(r0, &(0x7f0000000100)={0x2, 0x200, @dev={0xac, 0x14, 0x14, 0x36}}, 0x10) 1m34.184641917s ago: executing program 5 (id=347): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x4000044) 1m16.745216245s ago: executing program 4 (id=348): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c00028005000100000000002c0001801400018008000100ac1414bb080002"], 0x88}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) 1m7.380594898s ago: executing program 34 (id=347): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a000000050000000200000004"], 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r1}, 0x0, &(0x7f0000000040)}, 0x20) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7020000010000e1850000008600000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000001800007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000180)=ANY=[], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) setsockopt$sock_attach_bpf(r3, 0x1, 0x32, &(0x7f00000000c0)=r5, 0x4) sendmsg$unix(r4, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, 0x4000044) 42.79722297s ago: executing program 35 (id=343): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x440261, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x8d0) socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}]}, 0x1c}, 0x1, 0x0, 0x0, 0x400c000}, 0x0) sendmsg$NFQNL_MSG_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x1c}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'veth0_vlan\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@getchain={0x24, 0x11, 0x43d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xe32b60fbedc7f0cc}, {0x7}, {0x0, 0xa}}}, 0x24}}, 0x0) 19.482385892s ago: executing program 36 (id=345): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001ffffcffffff0300000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800900010076657468000000000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$TIPC_NL_LINK_SET(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[], 0x50}}, 0x0) sendmmsg(r6, &(0x7f0000000000), 0x4000000000001f2, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x4c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6, 0x1, 0x3}]}}}, @IFLA_LINK={0x8, 0x5, r7}, @IFLA_MASTER={0x8, 0xa, r7}]}, 0x4c}}, 0x8000) 0s ago: executing program 37 (id=348): bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x101, 0x0, 0x0, {0xa}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0xffffffff}, @IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_TYPENAME={0x13, 0x3, 'hash:net,iface\x00'}]}, 0x60}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000180)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r5, 0x0, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="88000000000201040000000000000000020000052400028014000180080001000000000008000200ac1e00010c00028005000100000000002400038014000180080001000000000008000200ac1414000c00028005000100000000002c0001801400018008000100ac1414bb080002"], 0x88}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x58, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x90646}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0x1f, 0x1f}}, @IFLA_VLAN_ID={0x6, 0x1, 0x1}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x58}, 0x1, 0x0, 0x0, 0x600}, 0x0) getsockname$packet(r2, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.15.194' (ED25519) to the list of known hosts. [ 79.803982][ T5821] cgroup: Unknown subsys name 'net' [ 79.940365][ T5821] cgroup: Unknown subsys name 'cpuset' [ 79.949013][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 81.538810][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 83.936193][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 83.947614][ T5838] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 83.956157][ T5838] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 83.965489][ T5838] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 83.976696][ T5838] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 83.984526][ T5838] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 83.993117][ T5838] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 83.993521][ T5841] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 84.000984][ T5838] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 84.011675][ T5841] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 84.017177][ T5838] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 84.034419][ T5838] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 84.038399][ T5841] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 84.042631][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 84.056519][ T5838] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 84.058530][ T5841] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 84.069186][ T5148] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 84.082138][ T5148] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 84.088337][ T5841] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 84.090037][ T5148] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 84.097271][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.117261][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 84.118176][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.134744][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.168558][ T56] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 84.177434][ T56] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 84.185563][ T56] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 84.194343][ T56] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 84.202506][ T56] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 84.210274][ T56] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 84.643147][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 84.706390][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 84.779056][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 84.801871][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 84.822032][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 84.904345][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.912567][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.920512][ T5848] bridge_slave_0: entered allmulticast mode [ 84.928155][ T5848] bridge_slave_0: entered promiscuous mode [ 84.937032][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.944460][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 84.952543][ T5832] bridge_slave_0: entered allmulticast mode [ 84.960399][ T5832] bridge_slave_0: entered promiscuous mode [ 84.994136][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.001502][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.008972][ T5848] bridge_slave_1: entered allmulticast mode [ 85.015986][ T5848] bridge_slave_1: entered promiscuous mode [ 85.024040][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.031724][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.039233][ T5832] bridge_slave_1: entered allmulticast mode [ 85.046035][ T5832] bridge_slave_1: entered promiscuous mode [ 85.149549][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.161416][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.175867][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.221559][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.240951][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.248681][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.256072][ T5839] bridge_slave_0: entered allmulticast mode [ 85.263484][ T5839] bridge_slave_0: entered promiscuous mode [ 85.271973][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.279688][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.286938][ T5839] bridge_slave_1: entered allmulticast mode [ 85.295694][ T5839] bridge_slave_1: entered promiscuous mode [ 85.313256][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.322908][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.330503][ T5831] bridge_slave_0: entered allmulticast mode [ 85.338825][ T5831] bridge_slave_0: entered promiscuous mode [ 85.347301][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.354463][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.362630][ T5843] bridge_slave_0: entered allmulticast mode [ 85.370320][ T5843] bridge_slave_0: entered promiscuous mode [ 85.378531][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.386349][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.393938][ T5843] bridge_slave_1: entered allmulticast mode [ 85.401519][ T5843] bridge_slave_1: entered promiscuous mode [ 85.433477][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.443393][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.451527][ T5831] bridge_slave_1: entered allmulticast mode [ 85.459166][ T5831] bridge_slave_1: entered promiscuous mode [ 85.490229][ T5832] team0: Port device team_slave_0 added [ 85.528324][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.541975][ T5848] team0: Port device team_slave_0 added [ 85.554934][ T5832] team0: Port device team_slave_1 added [ 85.574889][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.596618][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.608844][ T5848] team0: Port device team_slave_1 added [ 85.626683][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.649138][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 85.662281][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 85.693285][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.700929][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.728417][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.741781][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.749008][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.775361][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.821213][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 85.828674][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.855688][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 85.874252][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 85.881412][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 85.908552][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 85.922844][ T5839] team0: Port device team_slave_0 added [ 85.942521][ T5843] team0: Port device team_slave_0 added [ 85.967704][ T5839] team0: Port device team_slave_1 added [ 85.976350][ T5831] team0: Port device team_slave_0 added [ 85.985108][ T5843] team0: Port device team_slave_1 added [ 86.031089][ T5831] team0: Port device team_slave_1 added [ 86.059200][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.066381][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.092928][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.110135][ T5832] hsr_slave_0: entered promiscuous mode [ 86.116626][ T5832] hsr_slave_1: entered promiscuous mode [ 86.124462][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.131808][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.160376][ T56] Bluetooth: hci0: command tx timeout [ 86.167083][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.180226][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.187680][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.213943][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.221905][ T56] Bluetooth: hci1: command tx timeout [ 86.224900][ T5841] Bluetooth: hci3: command tx timeout [ 86.230894][ T56] Bluetooth: hci2: command tx timeout [ 86.259282][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.266653][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.293747][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.307130][ T56] Bluetooth: hci4: command tx timeout [ 86.320971][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 86.328437][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.355947][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 86.369228][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 86.376235][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 86.404140][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 86.429115][ T5848] hsr_slave_0: entered promiscuous mode [ 86.435982][ T5848] hsr_slave_1: entered promiscuous mode [ 86.442667][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.450753][ T5848] Cannot create hsr debugfs directory [ 86.523342][ T5843] hsr_slave_0: entered promiscuous mode [ 86.529706][ T5843] hsr_slave_1: entered promiscuous mode [ 86.536163][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.545043][ T5843] Cannot create hsr debugfs directory [ 86.575349][ T5839] hsr_slave_0: entered promiscuous mode [ 86.583327][ T5839] hsr_slave_1: entered promiscuous mode [ 86.589690][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.597384][ T5839] Cannot create hsr debugfs directory [ 86.630127][ T5831] hsr_slave_0: entered promiscuous mode [ 86.636596][ T5831] hsr_slave_1: entered promiscuous mode [ 86.643065][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 86.651283][ T5831] Cannot create hsr debugfs directory [ 87.052025][ T5831] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 87.064884][ T5831] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 87.075627][ T5831] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 87.094471][ T5831] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 87.139020][ T5848] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 87.162264][ T5848] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 87.173522][ T5848] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 87.198748][ T5848] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 87.241403][ T5843] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 87.285748][ T5843] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 87.299434][ T5843] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 87.312808][ T5843] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 87.424850][ T5839] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 87.478516][ T5839] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 87.523134][ T5839] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 87.549231][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.570130][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.577555][ T5839] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 87.701472][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 87.709833][ T5832] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 87.725391][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.740191][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.758967][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.766177][ T5832] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 87.778880][ T5832] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 87.811270][ T5832] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 87.831656][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.839262][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.856261][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.863744][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.879494][ T3514] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.887010][ T3514] bridge0: port 1(bridge_slave_0) entered forwarding state [ 87.952304][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.959592][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 87.976775][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 87.983996][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.044990][ T3514] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.052192][ T3514] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.196164][ T5848] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 88.220939][ T56] Bluetooth: hci0: command tx timeout [ 88.264773][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.297192][ T56] Bluetooth: hci2: command tx timeout [ 88.297281][ T5847] Bluetooth: hci1: command tx timeout [ 88.310123][ T5841] Bluetooth: hci3: command tx timeout [ 88.329594][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.377521][ T5841] Bluetooth: hci4: command tx timeout [ 88.382441][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 88.422535][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.429823][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.466111][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 88.508461][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.516485][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.571183][ T3490] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.579087][ T3490] bridge0: port 1(bridge_slave_0) entered forwarding state [ 88.599610][ T3490] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.607087][ T3490] bridge0: port 2(bridge_slave_1) entered forwarding state [ 88.639568][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.753646][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.834305][ T5831] veth0_vlan: entered promiscuous mode [ 88.866032][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.911905][ T5831] veth1_vlan: entered promiscuous mode [ 89.075499][ T5831] veth0_macvtap: entered promiscuous mode [ 89.121923][ T5831] veth1_macvtap: entered promiscuous mode [ 89.179769][ T5843] veth0_vlan: entered promiscuous mode [ 89.213037][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.244888][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 89.254139][ T5843] veth1_vlan: entered promiscuous mode [ 89.274328][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.310077][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.331936][ T5831] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.345461][ T5831] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.355371][ T5831] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.365021][ T5831] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.453483][ T5843] veth0_macvtap: entered promiscuous mode [ 89.473632][ T5848] veth0_vlan: entered promiscuous mode [ 89.490883][ T5848] veth1_vlan: entered promiscuous mode [ 89.537643][ T5843] veth1_macvtap: entered promiscuous mode [ 89.544913][ T5832] veth0_vlan: entered promiscuous mode [ 89.566035][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.588029][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.599545][ T5832] veth1_vlan: entered promiscuous mode [ 89.632006][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.644120][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.656390][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.665630][ T5839] veth0_vlan: entered promiscuous mode [ 89.708074][ T5843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.720826][ T5843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.732234][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.745677][ T5843] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.754876][ T5843] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.763952][ T5843] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.772964][ T5843] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.795281][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.813005][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.816344][ T5839] veth1_vlan: entered promiscuous mode [ 89.860850][ T5848] veth0_macvtap: entered promiscuous mode [ 89.926484][ T5848] veth1_macvtap: entered promiscuous mode [ 89.940425][ T5832] veth0_macvtap: entered promiscuous mode [ 89.969048][ T5832] veth1_macvtap: entered promiscuous mode [ 89.972677][ T5831] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 90.004293][ T5839] veth0_macvtap: entered promiscuous mode [ 90.032942][ T5839] veth1_macvtap: entered promiscuous mode [ 90.066470][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.111861][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.137369][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.150084][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.174472][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.216379][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.234892][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.246558][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.267783][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.297143][ T5841] Bluetooth: hci0: command tx timeout [ 90.303331][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.314795][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.327312][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.341328][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.352755][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.364713][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.375777][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.386659][ T5841] Bluetooth: hci3: command tx timeout [ 90.387764][ T56] Bluetooth: hci2: command tx timeout [ 90.395635][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.398738][ T5847] Bluetooth: hci1: command tx timeout [ 90.409222][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.422596][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.434347][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.445536][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.455686][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.461266][ T5847] Bluetooth: hci4: command tx timeout [ 90.468125][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.485830][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.506175][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.517838][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.525711][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.535620][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.547955][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.558943][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.569419][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.580754][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.592568][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 90.603333][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.614906][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 90.631739][ T5848] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.646912][ T5848] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.655998][ T5848] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.665430][ T5848] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.678728][ T5839] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.688709][ T5839] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.701001][ T5839] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.710213][ T5839] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.755289][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.768878][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.780160][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.793405][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.804468][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.815505][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.825788][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 90.838622][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 90.850920][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 90.876540][ T5832] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.901862][ T5832] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.916073][ T5832] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.937202][ T5832] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.984788][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.995398][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.064409][ T1154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.089559][ T1154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.206286][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.244424][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.253708][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.295525][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.454845][ T34] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.487148][ T34] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.561251][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.594476][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 91.706659][ T3490] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 91.723867][ T3490] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 92.353778][ T5951] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 92.396956][ T5847] Bluetooth: hci0: command tx timeout [ 92.406287][ T9] cfg80211: failed to load regulatory.db [ 92.408804][ T5951] netlink: 4 bytes leftover after parsing attributes in process `syz.2.15'. [ 92.452441][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.464272][ T5847] Bluetooth: hci3: command tx timeout [ 92.472207][ T5847] Bluetooth: hci1: command tx timeout [ 92.474772][ T56] Bluetooth: hci2: command tx timeout [ 92.537253][ T56] Bluetooth: hci4: command tx timeout [ 92.608824][ T5951] bridge_slave_1 (unregistering): left allmulticast mode [ 92.654880][ T5951] bridge_slave_1 (unregistering): left promiscuous mode [ 92.687824][ T5951] bridge0: port 2(bridge_slave_1) entered disabled state [ 92.983383][ T5967] syz.0.16 (5967) used greatest stack depth: 19152 bytes left [ 93.385449][ T5965] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.393781][ T5965] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.745279][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.769391][ T5965] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.957228][ T5965] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.966575][ T5965] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.976646][ T5965] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.994639][ T5965] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.535296][ T5990] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 94.571580][ T5990] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 94.597821][ T5990] bond0 (unregistering): Released all slaves [ 94.924642][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.2.34'. [ 95.370730][ T6022] bond_slave_0: entered allmulticast mode [ 95.601345][ T6026] bridge_slave_0: left allmulticast mode [ 95.648455][ T6026] bridge_slave_0: left promiscuous mode [ 95.686191][ T6026] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.815629][ T6026] team0: Port device team_slave_0 removed [ 95.852751][ T6026] team0: Port device team_slave_1 removed [ 95.877989][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 95.885668][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 95.929364][ T6026] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 95.954478][ T6026] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 96.027057][ T6028] team0: Mode changed to "loadbalance" [ 96.044661][ T6040] syz.0.46 uses obsolete (PF_INET,SOCK_PACKET) [ 96.126653][ T6042] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.047976][ T6066] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 97.114297][ T6062] netlink: 'syz.2.54': attribute type 4 has an invalid length. [ 97.444912][ T6075] netlink: 4 bytes leftover after parsing attributes in process `syz.4.58'. [ 97.471933][ T6075] ipvlan2: entered promiscuous mode [ 97.496523][ T6075] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 97.515495][ T6075] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 97.578297][ T6077] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 97.705957][ T6081] netlink: 'syz.3.61': attribute type 1 has an invalid length. [ 97.913915][ T6088] netlink: 4 bytes leftover after parsing attributes in process `syz.1.62'. [ 97.948687][ T6084] veth3: entered promiscuous mode [ 98.217840][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 98.620830][ T34] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.636050][ T34] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 99.383084][ T6125] netlink: 8 bytes leftover after parsing attributes in process `syz.2.78'. [ 99.411949][ T6127] Bluetooth: MGMT ver 1.23 [ 100.123043][ T6138] netlink: 'syz.1.83': attribute type 1 has an invalid length. [ 100.148489][ T6138] netlink: 3 bytes leftover after parsing attributes in process `syz.1.83'. [ 100.205104][ T6143] netlink: 3 bytes leftover after parsing attributes in process `syz.1.83'. [ 100.251835][ T6138] batadv1: entered promiscuous mode [ 100.277749][ T6138] batadv1: entered allmulticast mode [ 100.308620][ T6147] netlink: 4 bytes leftover after parsing attributes in process `syz.3.86'. [ 100.460918][ T6143] batadv1: entered promiscuous mode [ 100.479035][ T6143] batadv1: entered allmulticast mode [ 100.628286][ T6143] Zero length message leads to an empty skb [ 100.953904][ T6156] warning: `syz.2.91' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 100.969889][ T6155] netlink: 8 bytes leftover after parsing attributes in process `syz.3.89'. [ 100.999176][ T6155] netlink: 4 bytes leftover after parsing attributes in process `syz.3.89'. [ 101.064349][ T6155] netlink: 'syz.3.89': attribute type 1 has an invalid length. [ 101.076503][ T6160] bridge_slave_0: left allmulticast mode [ 101.092286][ T6155] netlink: 10 bytes leftover after parsing attributes in process `syz.3.89'. [ 101.101585][ T6160] bridge_slave_0: left promiscuous mode [ 101.111151][ T6160] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.169524][ T6160] bridge_slave_1: left allmulticast mode [ 101.187512][ T56] block nbd0: Receive control failed (result -107) [ 101.205848][ T6160] bridge_slave_1: left promiscuous mode [ 101.259896][ T6160] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.308393][ T6160] bond0: (slave bond_slave_0): Releasing backup interface [ 101.437434][ T6160] bond0: (slave bond_slave_1): Releasing backup interface [ 101.530721][ T6160] team0: Failed to send options change via netlink (err -105) [ 101.548310][ T6160] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 101.577482][ T6160] team0: Port device team_slave_0 removed [ 101.607304][ T6160] team0: Failed to send options change via netlink (err -105) [ 101.627151][ T6160] team0: Failed to send port change of device team_slave_1 via netlink (err -105) [ 101.645877][ T6160] team0: Port device team_slave_1 removed [ 101.667062][ T6160] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.674911][ T6160] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.711272][ T6160] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.727040][ T6160] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.782729][ T6171] sit0: entered promiscuous mode [ 101.799660][ T6171] netlink: 'syz.2.96': attribute type 1 has an invalid length. [ 101.822273][ T6171] syz.2.96 (6171) used greatest stack depth: 19088 bytes left [ 102.073524][ T6176] netlink: 'syz.2.97': attribute type 1 has an invalid length. [ 102.119259][ T56] block nbd1: Receive control failed (result -107) [ 102.179192][ T6178] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.189014][ T6178] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.197898][ T6178] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.207469][ T6178] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.248817][ T6178] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 103.265061][ T6205] syzkaller0: entered promiscuous mode [ 103.310371][ T6205] syzkaller0: entered allmulticast mode [ 103.522604][ T6215] __nla_validate_parse: 4 callbacks suppressed [ 103.522638][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 103.545884][ T6218] netlink: 12 bytes leftover after parsing attributes in process `syz.4.114'. [ 103.841272][ T6228] sctp: [Deprecated]: syz.1.115 (pid 6228) Use of struct sctp_assoc_value in delayed_ack socket option. [ 103.841272][ T6228] Use struct sctp_sack_info instead [ 103.942001][ T6234] ieee802154 phy0 wpan0: encryption failed: -22 [ 103.968225][ T6233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.120'. [ 104.435450][ T6241] macsec1: entered promiscuous mode [ 104.466874][ T6241] team0: entered promiscuous mode [ 104.493746][ T6241] team0: left promiscuous mode [ 104.850433][ T6252] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 104.875295][ T6252] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.089235][ T6252] bridge_slave_1 (unregistering): left allmulticast mode [ 105.163840][ T6252] bridge_slave_1 (unregistering): left promiscuous mode [ 105.204986][ T6252] bridge0: port 2(bridge_slave_1) entered disabled state [ 106.153210][ T6273] netlink: 'syz.2.136': attribute type 1 has an invalid length. [ 106.197127][ T6273] netlink: 104 bytes leftover after parsing attributes in process `syz.2.136'. [ 106.556075][ T6289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.141'. [ 107.068509][ T6306] netlink: 4 bytes leftover after parsing attributes in process `syz.2.146'. [ 108.216887][ T56] Bluetooth: hci4: command 0x0405 tx timeout [ 108.559926][ T6336] gtp0: entered promiscuous mode [ 108.565020][ T6336] gtp0: entered allmulticast mode [ 108.684587][ T6343] netlink: 8 bytes leftover after parsing attributes in process `syz.4.161'. [ 108.698844][ T6343] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 108.713714][ T6343] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 109.199212][ T6358] netlink: 'syz.1.166': attribute type 1 has an invalid length. [ 109.285652][ T6358] ip6erspan0: entered promiscuous mode [ 109.466205][ T6369] IPVS: Error connecting to the multicast addr [ 109.757136][ T6377] netlink: 156 bytes leftover after parsing attributes in process `syz.0.172'. [ 109.845813][ T6373] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.942180][ T6373] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.059855][ T6384] syzkaller0: entered promiscuous mode [ 110.076389][ T6386] netlink: 8 bytes leftover after parsing attributes in process `syz.1.177'. [ 110.093690][ T6384] syzkaller0: entered allmulticast mode [ 110.194174][ T6373] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.625670][ T6406] netlink: 'syz.2.182': attribute type 7 has an invalid length. [ 110.646987][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.2.182'. [ 111.417652][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 112.702156][ T6373] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.934718][ T6373] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.009796][ T6373] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.053466][ T6373] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.111939][ T6373] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 113.499277][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 113.921517][ T6460] netlink: 12 bytes leftover after parsing attributes in process `syz.2.202'. [ 115.316401][ T6496] bond_slave_0: left allmulticast mode [ 115.378216][ T6496] gtp0: left promiscuous mode [ 115.383788][ T6496] gtp0: left allmulticast mode [ 116.302689][ T56] Bluetooth: hci4: command 0x0405 tx timeout [ 117.013354][ T6534] sctp: [Deprecated]: syz.3.219 (pid 6534) Use of int in max_burst socket option deprecated. [ 117.013354][ T6534] Use struct sctp_assoc_value instead [ 117.096060][ T6545] netlink: 'syz.2.222': attribute type 4 has an invalid length. [ 117.605499][ T1214] hid-generic 0005:0B57:0009.0001: item fetching failed at offset 0/1 [ 117.704348][ T1214] hid-generic 0005:0B57:0009.0001: probe with driver hid-generic failed with error -22 [ 118.269566][ T6599] netlink: 12 bytes leftover after parsing attributes in process `syz.3.235'. [ 118.929217][ T6632] openvswitch: netlink: Duplicate or invalid key (type 0). [ 118.955016][ T6632] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 120.843955][ T6675] netlink: 'syz.4.257': attribute type 10 has an invalid length. [ 120.910616][ T6675] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.920523][ T6675] bond0: (slave team0): Enslaving as an active interface with an up link [ 122.176739][ T6722] tipc: Started in network mode [ 122.182274][ T6722] tipc: Node identity 5a6d523aa246, cluster identity 4711 [ 122.190120][ T6722] tipc: Enabled bearer , priority 0 [ 122.377083][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 122.434584][ T6714] tipc: Resetting bearer [ 122.531599][ T6734] netlink: 36 bytes leftover after parsing attributes in process `syz.4.265'. [ 122.575160][ T6734] netlink: 16 bytes leftover after parsing attributes in process `syz.4.265'. [ 122.631644][ T6734] netlink: 36 bytes leftover after parsing attributes in process `syz.4.265'. [ 122.710925][ T6734] netlink: 36 bytes leftover after parsing attributes in process `syz.4.265'. [ 123.294436][ T1214] tipc: Node number set to 4163588666 [ 123.443965][ T6751] netlink: 8 bytes leftover after parsing attributes in process `syz.4.272'. [ 123.480892][ T6751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.272'. [ 123.535145][ T6751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.272'. [ 123.584964][ T6751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.272'. [ 123.614982][ T6751] netlink: 24 bytes leftover after parsing attributes in process `syz.4.272'. [ 124.721135][ T6800] netlink: 4 bytes leftover after parsing attributes in process `syz.4.275'. [ 128.688022][ T6714] tipc: Disabling bearer [ 128.847636][ T6796] veth0_to_bond: entered promiscuous mode [ 128.860858][ T6796] veth0_to_bond: left promiscuous mode [ 129.065050][ T6810] netlink: 212 bytes leftover after parsing attributes in process `syz.0.277'. [ 129.103491][ T6802] syzkaller0: entered promiscuous mode [ 129.113371][ T6802] syzkaller0: entered allmulticast mode [ 129.176472][ T6809] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.930950][ T56] Bluetooth: hci4: link tx timeout [ 129.937092][ T56] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 131.982410][ T56] Bluetooth: hci4: command 0x0405 tx timeout [ 133.344374][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.351259][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.419148][ T6841] netlink: 28 bytes leftover after parsing attributes in process `syz.4.289'. [ 134.446230][ T6841] netlink: 'syz.4.289': attribute type 7 has an invalid length. [ 134.470802][ T6841] netlink: 'syz.4.289': attribute type 8 has an invalid length. [ 134.495273][ T6841] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 134.939523][ T6809] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.029802][ T6841] syz_tun: entered promiscuous mode [ 135.049697][ T6841] erspan0: entered promiscuous mode [ 135.069759][ T6841] gretap0: entered promiscuous mode [ 135.299025][ T6845] netlink: 'syz.2.290': attribute type 10 has an invalid length. [ 135.354888][ T6845] bridge1: port 1(netdevsim0) entered blocking state [ 135.384057][ T6845] bridge1: port 1(netdevsim0) entered disabled state [ 135.404669][ T6845] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 135.428650][ T6845] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 135.701510][ T6851] netlink: 24 bytes leftover after parsing attributes in process `syz.2.293'. [ 135.770413][ T6852] bridge0: entered promiscuous mode [ 135.776305][ T6852] vlan2: entered promiscuous mode [ 135.978417][ T6855] sit0: left promiscuous mode [ 136.467467][ T6855] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.496194][ T6855] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.534467][ T6855] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.556466][ T6855] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 137.711626][ T6809] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.019110][ T6873] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 138.054348][ T6873] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.728047][ T56] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 138.746372][ T56] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 138.755370][ T56] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 138.782968][ T56] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 138.796318][ T56] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 138.808533][ T56] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 139.022174][ T6881] chnl_net:caif_netlink_parms(): no params data found [ 139.294933][ T6881] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.315319][ T6881] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.335728][ T6881] bridge_slave_0: entered allmulticast mode [ 139.361938][ T6881] bridge_slave_0: entered promiscuous mode [ 139.377945][ T6881] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.398963][ T6881] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.414176][ T6881] bridge_slave_1: entered allmulticast mode [ 139.422407][ T6881] bridge_slave_1: entered promiscuous mode [ 139.507834][ T6881] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.530112][ T6881] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.649819][ T6881] team0: Port device team_slave_0 added [ 139.682731][ T6881] team0: Port device team_slave_1 added [ 139.771805][ T6894] netlink: 24 bytes leftover after parsing attributes in process `syz.2.306'. [ 139.790619][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.805009][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.840148][ T6881] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.860583][ T6881] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.875564][ T6881] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.913724][ T6881] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 140.129371][ T6881] hsr_slave_0: entered promiscuous mode [ 140.146039][ T6881] hsr_slave_1: entered promiscuous mode [ 140.152700][ T6881] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 140.168596][ T6881] Cannot create hsr debugfs directory [ 140.677845][ T6809] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.814040][ T6873] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 140.847760][ T6873] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 140.860454][ T56] Bluetooth: hci5: command tx timeout [ 141.260736][ T6881] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 141.312040][ T6881] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 141.376839][ T6881] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 141.449768][ T6881] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 141.749782][ T6881] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.883538][ T6881] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.979132][ T6776] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.986386][ T6776] bridge0: port 1(bridge_slave_0) entered forwarding state [ 142.036825][ T6788] bridge0: port 2(bridge_slave_1) entered blocking state [ 142.044226][ T6788] bridge0: port 2(bridge_slave_1) entered forwarding state [ 142.945252][ T56] Bluetooth: hci5: command tx timeout [ 143.013707][ T6881] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 143.384148][ T6788] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.080510][ T6960] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci5/hci5:200/input5 [ 144.573741][ T6873] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 144.601227][ T6873] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.897685][ T6881] veth0_vlan: entered promiscuous mode [ 144.979390][ T6881] veth1_vlan: entered promiscuous mode [ 145.017169][ T56] Bluetooth: hci5: command tx timeout [ 145.148090][ T6881] veth0_macvtap: entered promiscuous mode [ 145.167395][ T6968] xt_hashlimit: size too large, truncated to 1048576 [ 145.206113][ T6881] veth1_macvtap: entered promiscuous mode [ 145.296069][ T6969] xt_hashlimit: size too large, truncated to 1048576 [ 145.326127][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.386833][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.449051][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 145.507175][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 145.518039][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 145.527433][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 145.536303][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 145.553356][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 145.562720][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 145.597716][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.660239][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.986439][ T6788] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 146.056149][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.096824][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.124670][ T6881] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.173798][ T6881] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.212789][ T6881] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.256627][ T6881] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.266122][ T6881] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.276070][ T6881] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.292369][ T6881] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.374128][ T6809] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.448383][ T6978] netlink: 'syz.3.317': attribute type 1 has an invalid length. [ 146.472658][ T6809] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.516168][ T6809] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.560423][ T6980] netlink: 12 bytes leftover after parsing attributes in process `syz.3.317'. [ 146.593553][ T6809] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.718674][ T6980] 8021q: adding VLAN 0 to HW filter on device bond1 [ 146.780445][ T6979] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 20000 - 0 [ 146.815047][ T6979] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 20000 - 0 [ 146.832879][ T6979] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 20000 - 0 [ 146.887157][ T6979] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 20000 - 0 [ 146.928479][ T6979] bond1: (slave geneve2): making interface the new active one [ 146.956018][ T6979] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 147.050347][ T6979] syz.3.317 (6979) used greatest stack depth: 19032 bytes left [ 147.097278][ T56] Bluetooth: hci5: command tx timeout [ 147.249548][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.280962][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.438286][ T6873] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 147.495746][ T6873] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.570462][ T6987] netlink: 24 bytes leftover after parsing attributes in process `syz.3.318'. [ 147.657340][ T56] Bluetooth: hci1: command tx timeout [ 147.807185][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.837818][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 148.147914][ T6972] chnl_net:caif_netlink_parms(): no params data found [ 148.767116][ T6972] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.774351][ T6972] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.864277][ T6972] bridge_slave_0: entered allmulticast mode [ 148.912053][ T6972] bridge_slave_0: entered promiscuous mode [ 148.988979][ T6972] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.040216][ T6972] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.067489][ T6972] bridge_slave_1: entered allmulticast mode [ 149.127184][ T6972] bridge_slave_1: entered promiscuous mode [ 149.736953][ T56] Bluetooth: hci1: command tx timeout [ 150.394575][ T6788] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.615887][ T7022] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.678767][ T6972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 151.755739][ T6972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 151.820731][ T56] Bluetooth: hci1: command tx timeout [ 151.848155][ T6788] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.028114][ T6873] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.045612][ T6873] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.078071][ T6972] team0: Port device team_slave_0 added [ 152.206076][ T6873] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.220402][ T6873] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.244659][ T6972] team0: Port device team_slave_1 added [ 152.355276][ T7022] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.397697][ T6873] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.411069][ T6873] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.436055][ T6873] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 152.455844][ T6873] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.681694][ T7030] xt_hashlimit: size too large, truncated to 1048576 [ 152.751987][ T7031] xt_hashlimit: size too large, truncated to 1048576 [ 152.816635][ T7022] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.901842][ T6972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 152.933586][ T6972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.075081][ T6972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.108707][ T6972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.121269][ T6972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.198735][ T6972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.271196][ T7032] : renamed from bond0 (while UP) [ 153.454530][ T7022] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.714529][ T6972] hsr_slave_0: entered promiscuous mode [ 153.753696][ T6972] hsr_slave_1: entered promiscuous mode [ 153.775572][ T6972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 153.811761][ T6972] Cannot create hsr debugfs directory [ 153.899430][ T56] Bluetooth: hci1: command tx timeout [ 154.283333][ T6788] bridge_slave_1: left allmulticast mode [ 154.301723][ T6788] bridge_slave_1: left promiscuous mode [ 154.335562][ T6788] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.479942][ T6788] bridge_slave_0: left allmulticast mode [ 154.504594][ T6788] bridge_slave_0: left promiscuous mode [ 154.525886][ T6788] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.678291][ T7046] netlink: 12 bytes leftover after parsing attributes in process `syz.2.342'. [ 155.747092][ T6788] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 155.779831][ T6788] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 155.804292][ T6788] bond0 (unregistering): Released all slaves [ 155.854513][ T7022] netdevsim netdevsim5 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.922186][ T7022] netdevsim netdevsim5 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.176059][ T7022] netdevsim netdevsim5 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 156.591830][ T7022] netdevsim netdevsim5 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 157.431604][ T6788] hsr_slave_0: left promiscuous mode [ 157.487077][ T6788] hsr_slave_1: left promiscuous mode [ 157.508322][ T6788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.564449][ T6788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.611914][ T6788] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.644559][ T6788] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.798997][ T6788] veth1_macvtap: left promiscuous mode [ 157.817693][ T6788] veth0_macvtap: left promiscuous mode [ 157.831138][ T6788] veth1_vlan: left promiscuous mode [ 157.847490][ T6788] veth0_vlan: left promiscuous mode [ 159.669736][ T6788] team0 (unregistering): Port device team_slave_1 removed [ 159.762804][ T6788] team0 (unregistering): Port device team_slave_0 removed [ 160.820123][ T7079] netlink: 'syz.5.338': attribute type 4 has an invalid length. [ 161.183549][ T7085] xt_hashlimit: size too large, truncated to 1048576 [ 161.248137][ T7087] xt_hashlimit: size too large, truncated to 1048576 [ 161.311436][ T7089] : renamed from bond0 (while UP) [ 161.424581][ T6972] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 161.485835][ T7091] netlink: 4 bytes leftover after parsing attributes in process `syz.2.343'. [ 161.785674][ T7095] netlink: 'syz.3.345': attribute type 1 has an invalid length. [ 168.866792][ C0] sched: DL replenish lagged too much [ 195.729896][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.744759][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 207.376031][ T56] Bluetooth: hci3: command 0x0406 tx timeout [ 207.527170][ T56] Bluetooth: hci2: command 0x0406 tx timeout [ 209.259734][ T6972] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 212.887769][ T5847] Bluetooth: hci4: link tx timeout [ 212.893046][ T5847] Bluetooth: hci4: killing stalled connection 10:aa:aa:aa:aa:aa [ 215.164509][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 217.847687][ T7095] 8021q: adding VLAN 0 to HW filter on device bond2 [ 256.694848][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.709998][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 258.465549][ T7098] bond2: (slave veth5): Enslaving as an active interface with a down link [ 269.020021][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 279.496198][ T7099] bond2: (slave veth7): Enslaving as an active interface with a down link [ 290.063716][ T7100] bond2: (slave vlan0): the slave hw address is in use by the bond; couldn't find a slave with a free hw address to give it (this should not have happened) [ 318.145903][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 318.164161][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 325.485501][ T56] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 325.991050][ T31] INFO: task kworker/u8:1:13 blocked for more than 143 seconds. [ 326.098346][ T56] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 326.146368][ T31] Not tainted 6.14.0-rc7-syzkaller-01433-g6bb0dcb3d321 #0 [ 326.163149][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 328.393641][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 329.165166][ T31] task:kworker/u8:1 state:D stack:20104 pid:13 tgid:13 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 329.645738][ T56] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 330.732189][ T31] Workqueue: ipv6_addrconf addrconf_dad_work [ 330.748026][ T31] Call Trace: [ 330.751369][ T31] [ 330.754523][ T31] __schedule+0x190e/0x4c90 [ 330.793594][ T56] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 330.816659][ T5841] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 331.383886][ T56] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 331.453549][ T31] ? __pfx___schedule+0x10/0x10 [ 331.468553][ T31] ? __pfx_lock_release+0x10/0x10 [ 331.473968][ T31] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 332.243009][ T56] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 332.349243][ T7126] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 333.311545][ T31] ? kthread_data+0x52/0xd0 [ 333.327081][ T31] ? schedule+0x90/0x320 [ 333.332022][ T31] ? wq_worker_sleeping+0x66/0x240 [ 333.485623][ T31] ? schedule+0x90/0x320 [ 333.500446][ T31] schedule+0x14b/0x320 [ 333.504723][ T31] schedule_preempt_disabled+0x13/0x30 [ 334.124140][ T31] __mutex_lock+0x817/0x1010 [ 334.298078][ T31] ? __mutex_lock+0x602/0x1010 [ 334.303071][ T31] ? addrconf_dad_work+0x10e/0x16a0 [ 334.562493][ T31] ? __pfx___mutex_lock+0x10/0x10 [ 334.866503][ T31] ? do_raw_spin_unlock+0x13c/0x8b0 [ 334.881945][ T31] addrconf_dad_work+0x10e/0x16a0 [ 335.220468][ T31] ? __pfx_addrconf_dad_work+0x10/0x10 [ 335.226208][ T31] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 335.558079][ T31] ? process_scheduled_works+0x9c6/0x18e0 [ 335.564266][ T31] process_scheduled_works+0xabe/0x18e0